The ZTE ZXHN H368N is supplied to customers in The Netherlands using ADSL2+ or VDSL2 (optionally with bonding) from the KPN ISP. Their marketing-friendly name is “Experia Box V9”, as is printed on the front of the device. It seems to be a generic hardware design by ZTE with minor modifications and a unique series (In this case it's H368N V1.0 as printed on the PCB), as to make it look like it was purposely made for one customer. It's much like the F660 and H201L models.

Further research indicates that ZTE internally sees the H368N as the H168M, or simply have one model with two names.

Not supported.

Describe if there are any ongoing activities that might lead to OpenWrt support.

• OpenWrt forum thread: (add link)
• OpenWrt development mailing list thread: (add link)
• PR on github: (add link)
• other ways of letting people know who is working on this device and what steps have already been taken: (add link)

This device contains support for VoIP, POTS failover, ADSL2+, VDSL2 and pair bonding. Chips involved:

• 2x FXS ports with SI32176 drivers
• POTS line in, via a SI32919 chip, not sure if that is fed into the SoC or DSP, or just used for landline calls via a relay
• 2x 128Mbit SPI flash chips (so 64MB flash in total)
• 1x 1Gbit DDR2-800 RAM (Micron D9LHT)
• Realtek switch (gigabit, 4 ports, RT8367RB)
• A 3-chip broadcom VDSL2 and ADSL2+ modem with dual lines, supports pair bonding (2x BCM6302 + 1x BCM6306)
• 15x LED's (a few are stacked to pretend to be multicoloured LED's)
• 4x hardware buttons
• 1x USB type A port
• Soc is a BCM63168

→ generic.sysupgrade

This device has a HTTP server built in to the CFE. Press and hold the reset button on the back and power on. Once the power LED goes from green to red, you are in recovery mode. At this point, no serial console for CFE is known to work, so if you mess up the CFE as well, you'll have to desolder the flash chips and program the chips using a SPI interface. JTAG is not possible on this device, no pads or traces for JTAG can be found on the PCB.

→ generic.debrick

→ failsafe_and_factory_reset

→ Basic configuration After flashing, proceed with this.
Set up your Internet connection, configure wireless, configure USB port, etc.

→ hardware.button on howto use and configure the hardware button(s).

Front:
Insert photo of front of the casing

Back:
Insert photo of back of the casing

Backside label:
Insert photo of backside label

Note: This will void your warranty!

Main PCB:
Insert photo of PCB

→ port.serial general information about the serial port, serial port cable, etc.

How to connect to the Serial Port of this specific device:
Insert photo of PCB with markings for serial port

The serial port is located between the DRAM and the 802.11 antenna next to the main SoC. The pin closest to the CPU is +3v3, the two pins closest to the edge are ground. Pin one is marked on the PCB with a nice “1”.

1. 1 = 3.3V
2. 2 = TX
3. 3 = RX? - no console past the POST has been available to test this, but a trace is going to the SoC from this pin, next to the TX trace.
4. 4 = GND
5. 5 = GND

This device has no JTAG exposed!