Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
| toh:zte:mf286r [2022/09/09 13:28] – oops pcislocked | toh:zte:mf286r [2024/11/04 10:22] (current) – [Basic configuration] andrewz | ||
|---|---|---|---|
| Line 5: | Line 5: | ||
| /* USE https:// | /* USE https:// | ||
| - | ZTE MF286 is a wireless LTE router, capable of connecting to LTE networks at speeds up to 300Mbps using carrier aggegation. It has tri-band | + | ZTE MF286R |
| - | {{media: | + | {{media:zte:mf286r: |
| ===== Supported Versions ===== | ===== Supported Versions ===== | ||
| - | ---- datatable ---- | + | <!-- ToH: { |
| - | cols | + | " |
| - | headers | + | " |
| - | align : c,c,c,c,c,c,c | + | " |
| - | filter | + | " |
| - | filter | + | " |
| - | ---- | + | |
| + | } --> | ||
| /* If no unsupported functions known, comment out the following datatable or delete it. */ | /* If no unsupported functions known, comment out the following datatable or delete it. */ | ||
| - | ---- datatable ---- | + | <!-- ToH: { |
| - | cols | + | " |
| - | filter | + | |
| - | filter | + | |
| - | ---- | + | " |
| + | " | ||
| + | } --> | ||
| ===== Experimental Versions ===== | ===== Experimental Versions ===== | ||
| Line 30: | Line 33: | ||
| ===== Hardware Highlights ===== | ===== Hardware Highlights ===== | ||
| - | ---- datatable ---- | + | <!-- ToH: { |
| - | cols | + | " |
| - | header | + | " |
| - | align : c,c, | + | " |
| - | filter | + | " |
| - | filter | + | |
| - | ---- | + | |
| + | } --> | ||
| ===== Installation ===== | ===== Installation ===== | ||
| - | ---- datatable ---- | + | <!-- ToH: { |
| - | cols | + | " |
| - | headers | + | " |
| - | align : c,c,c | + | " |
| - | filter | + | " |
| - | filter | + | " |
| - | ---- | + | |
| + | } --> | ||
| -> [[docs: | -> [[docs: | ||
| TL:DR; Get a serial adapter and connect to the serial(see [[: | TL:DR; Get a serial adapter and connect to the serial(see [[: | ||
| - | If you don't have a serial adapter, you can use the known exploiot | + | If you don't have a serial adapter, you can use the known exploit |
| Line 73: | Line 78: | ||
| - Set IP of your computer to 192.168.0.22/ | - Set IP of your computer to 192.168.0.22/ | ||
| - Have a TFTP server running at that address | - Have a TFTP server running at that address | ||
| - | - Download MIPS build of busybox including telnetd, for example from [[https:// | + | - Download MIPS build of busybox including telnetd, for example from [[https:// |
| - As previously, login to router' | - As previously, login to router' | ||
| - Using " | - Using " | ||
| Line 92: | Line 97: | ||
| ===Method 2 - using stock firmware=== | ===Method 2 - using stock firmware=== | ||
| - | - Connect an external USB drive formatted with FAT or ext4 to the USB port. | + | - After booting into the stock frimware and connecting to the console either via serial or telnet, |
| - The drive will be auto-mounted to / | - The drive will be auto-mounted to / | ||
| - Check the flash layout of the device: | - Check the flash layout of the device: | ||
| + | <WRAP BOX> | ||
| cat /proc/mtd | cat /proc/mtd | ||
| + | </ | ||
| It should show the following: | It should show the following: | ||
| + | |||
| mtd0: 000a0000 00010000 " | mtd0: 000a0000 00010000 " | ||
| mtd1: 00020000 00010000 " | mtd1: 00020000 00010000 " | ||
| Line 116: | Line 124: | ||
| mtd15: 03200000 00020000 " | mtd15: 03200000 00020000 " | ||
| mtd16: 01d00000 00020000 " | mtd16: 01d00000 00020000 " | ||
| + | |||
| // | // | ||
| Line 130: | Line 139: | ||
| umount / | umount / | ||
| | | ||
| - | - Store the files in safe place if you ever plan to return to stock firmware. This is especially important, because stock firmware for this device is not available officially, and is usually customized by the mobile providers. | + | - Store the files in safe place if you ever plan to return to stock firmware. |
| + | |||
| + | |||
| + | Alternatively, | ||
| + | |||
| + | tftp -l /dev/mtd0ro -r mtd0ro_uboot.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd1ro -r mtd1ro_uenv.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd2ro -r mtd2ro_reseved1.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd3ro -r mtd3ro_foto-flag.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd4ro -r mtd4ro_art.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd5ro -r mtd5ro_mac.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd6ro -r mtd6ro_reserved2.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd7ro -r mtd7ro_cfg-param.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd8ro -r mtd8ro_log.img -p 192.168.1.144 | ||
| + | tftp -l /dev/mtd9ro -r mtd9ro_oops.img -p 192.168.1.144 | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | tftp -l / | ||
| + | |||
| + | Change the IP accordingly, | ||
| ====STEP 3: Booting initramfs image==== | ====STEP 3: Booting initramfs image==== | ||
| ===Method 1: using serial console (RECOMMENDED): | ===Method 1: using serial console (RECOMMENDED): | ||
| - | - Have TFTP server running, exposing the OpenWrt initramfs image, and set your computer' | + | - Have TFTP server running, exposing the OpenWrt initramfs image, and set your computer' |
| - Connect the serial console if you haven' | - Connect the serial console if you haven' | ||
| - | - Interrupt boot sequence by pressing any key in U-boot when prompted "Hit any key to stop autoboot" | + | - Interrupt boot sequence by pressing any key in U-boot when prompted "Hit any key to stop autoboot" |
| - Use the following commands to boot OpenWrt initramfs through TFTP: | - Use the following commands to boot OpenWrt initramfs through TFTP: | ||
| setenv serverip 192.168.0.22 | setenv serverip 192.168.0.22 | ||
| setenv ipaddr 192.168.0.1 | setenv ipaddr 192.168.0.1 | ||
| - | tftpboot | + | tftpboot |
| - | bootm 0x81000000 | + | bootm 0x82000000 |
| (Replace server IP and router IP as needed). | (Replace server IP and router IP as needed). | ||
| Line 157: | Line 189: | ||
| / | / | ||
| - | - If write is OK, reboot the device, it will reboot to OpenWrt | + | - If the write fails with " |
| - | | + | |
| + | cat / | ||
| + | |||
| + | Retry the write afterwards. | ||
| + | |||
| + | - If write is OK, reboot the device, it will reboot to OpenWrt initramfs: | ||
| reboot -f | reboot -f | ||
| - | - After rebooting, SSH into the device and use sysupgrade to perform | + | - After rebooting, SSH into the device and use sysupgrade to perform proper installation. |
| - | | + | |
| ===Method 3: using built-in TFTP recovery (LAST RESORT)=== | ===Method 3: using built-in TFTP recovery (LAST RESORT)=== | ||
| Line 180: | Line 216: | ||
| | | ||
| flash_erase /dev/mtd12 | flash_erase /dev/mtd12 | ||
| + | | ||
| + | - If the erase fails with " | ||
| + | |||
| + | cat / | ||
| + | |||
| + | Retry erasing afterwards. | ||
| | | ||
| Replace mtd12 with kernel partition if differrent. **THIS IS POINT OF NO RETURN.** | Replace mtd12 with kernel partition if differrent. **THIS IS POINT OF NO RETURN.** | ||
| Line 201: | Line 243: | ||
| ==== Flash Layout ==== | ==== Flash Layout ==== | ||
| <WRAP BOX> | <WRAP BOX> | ||
| - | FIXME // | ||
| - | |||
| - | Please check out the article [[docs: | ||
| mtd0: 000a0000 00010000 " | mtd0: 000a0000 00010000 " | ||
| mtd1: 00020000 00010000 " | mtd1: 00020000 00010000 " | ||
| Line 253: | Line 292: | ||
| ===== Basic configuration ===== | ===== Basic configuration ===== | ||
| - | Since the router is equipped with LTE modem as its main WAN interface, it might be useful to connect to the Internet right away after installation. To do so, you first need to install NCM protocol. To do that, you need to connect | + | Since the router is equipped with LTE modem as its main WAN interface, it might be useful to connect to the Internet right away after installation. To do so over Luci, you' |
| - | /* Offine | + | You can also add the necessary packages when building a new image with [[https:// |
| + | As of this writing, | ||
| + | * https:// | ||
| + | * https:// | ||
| + | | ||
| - | After installing NCM, you can either | + | If you can't access the Internet via other means or you want to set it up via console or SSH, you can put the following entries in '' |
| < | < | ||
| - | config interface 'lte' | + | config interface 'wwan' |
| option proto ' | option proto ' | ||
| option device '/ | option device '/ | ||
| - | option pdptype 'IPV4V6' | + | option pdptype 'IP' |
| option apn ' | option apn ' | ||
| - | option ipv6 ' | ||
| - | option pincode ' | ||
| </ | </ | ||
| - | * If you don't know your APN, you can either consult with your operator, or delete the line " | + | Please refer to [[: |
| - | * If your SIM card doesn' | + | |
| - | * If your operator doesn' | + | |
| After configuring your LTE modem, you can follow [[docs: | After configuring your LTE modem, you can follow [[docs: | ||
| Line 277: | Line 316: | ||
| ===== Specific Configuration ===== | ===== Specific Configuration ===== | ||
| - | Other than LTE modem configuration mentioned above, no specific configuration is required. You might want to install luci-app-smstool, | + | Other than LTE modem configuration mentioned above, no specific configuration is required. You might want to install |
| ==== Switch Ports (for VLANs) ==== | ==== Switch Ports (for VLANs) ==== | ||
| + | <WRAP BOX> | ||
| FIXME **Please click EDIT to see note about this section, I need help.** | FIXME **Please click EDIT to see note about this section, I need help.** | ||
| /*I didn't understand the format, but I have this: media: | /*I didn't understand the format, but I have this: media: | ||
| /*Also, I just discovered how to make subfolders on the media manager. If you want to move all the images to the corresponding folder, I can fix the old photos on this wiki after that. */ | /*Also, I just discovered how to make subfolders on the media manager. If you want to move all the images to the corresponding folder, I can fix the old photos on this wiki after that. */ | ||
| /*I'll upload new images to the right folder. */ | /*I'll upload new images to the right folder. */ | ||
| + | </ | ||
| Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on. | Numbers 0-3 are Ports 1-4 as labeled on the unit, number 4 is the Internet (WAN) on the unit, 5 is the internal connection to the router itself. Don't be fooled: Port 1 on the unit is number 3 when configuring VLANs. vlan0 = eth0.0, vlan1 = eth0.1 and so on. | ||
| Line 293: | Line 334: | ||
| | LAN 4 | EXAMPLE 0 | | | LAN 4 | EXAMPLE 0 | | ||
| + | </ | ||
| ==== Buttons ==== | ==== Buttons ==== | ||
| Line 308: | Line 350: | ||
| ===== Hardware ===== | ===== Hardware ===== | ||
| ==== Info ==== | ==== Info ==== | ||
| - | ---- datatemplatelist dttpllist ---- | + | <!-- ToH: { |
| - | template: meta:template_datatemplatelist | + | " |
| - | cols | + | " |
| - | filter | + | " |
| - | filter | + | " |
| - | ---- | + | " |
| + | | ||
| + | } --> | ||
| ==== Photos ==== | ==== Photos ==== | ||
| - | //Hardware is mostly identical with the [[toh: | ||
| // | // | ||
| - | + | {{media:zte:mf286r: | |
| - | {{:media: | + | {{: |
| //Back://\\ | //Back://\\ | ||
| - | + | {{media:zte:mf286r: | |
| - | {{:media: | + | {{: |
| //Top://\\ | //Top://\\ | ||
| - | |||
| {{: | {{: | ||
| // | // | ||
| - | |||
| {{: | {{: | ||
| //Under device label://\\ | //Under device label://\\ | ||
| - | |||
| {{: | {{: | ||
| // | // | ||
| - | |||
| {{: | {{: | ||
| {{: | {{: | ||
| Line 358: | Line 397: | ||
| - Extract board from blue chassis. | - Extract board from blue chassis. | ||
| - | //Main PCB(from MF286D, it's same except PCB color)//\\ | + | //Main PCB://\\ |
| {{: | {{: | ||
| {{: | {{: | ||
| - | //PCB Board Details and modem photo(from MF286D)//\\ | + | //PCB Board Details and modem photo://\\ |
| {{: | {{: | ||
| {{: | {{: | ||
| Line 376: | Line 413: | ||
| {{: | {{: | ||
| {{: | {{: | ||
| - | |||
| - | |||
| ==== Serial ==== | ==== Serial ==== | ||
| - | |||
| -> [[docs: | -> [[docs: | ||