tag:blogger.com,1999:blog-7709588442395618662.post2436882985272447584..comments2024-01-27T09:14:11.322+01:00Comments on Networking at home: Changes in Ericsson W25 11B firmwareLacóhttp://www.blogger.com/profile/05829076237347507076noreply@blogger.comBlogger14125tag:blogger.com,1999:blog-7709588442395618662.post-4433354184503821862011-02-26T08:29:50.693+01:002011-02-26T08:29:50.693+01:00Photo and pinout on W25 console port
http://i52.ti...Photo and pinout on W25 console port<br />http://i52.tinypic.com/29dtun4.jpg<br />J4 connector, unpopulated<br />5 - TP5: Txd (output)<br />4 - : GND<br />1 - TP6: RxD (input)<br />For accessing the console you need <br />- to solder pins onto connector pads<br />- 3.3V TTL logic/ RS232 converter, like MAX232, or<br />- USB/serial TTL level converter, e.g. FTDI Ft232RAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-76269212464521558852010-04-21T07:44:56.706+02:002010-04-21T07:44:56.706+02:00Hi Laco!
I've managed to get into the Redboot...Hi Laco!<br /><br />I've managed to get into the Redboot menu on my W21 over telnet. The trick was just to use standard windows telnet. None of the others like SecureCRT, Terraterm or Putty did work for me. It's this CTRL-C combo that seems to be the problem in all these terminals.<br /><br />Anyhow, I've got some difficulties to execute this whole thing. One of the posts describes how to mount the image over the serial port, over telnet, this should look a bit different, I think. Plus, whenever I exec something in Redboot, the box just freezes.<br /><br />Can you tell me what to use instead of 'exec -c "console=ttyS0,115200 root=/dev/mtdblock2 init=/bin/sh" 0x00040000' when I'm connected over telnet?<br /><br />Would be cool!<br /><br />Thanks in advance, cheers<br />alexalexnoreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-88245277723812638292009-09-16T22:45:03.974+02:002009-09-16T22:45:03.974+02:00Hi.. Hope someone can Help me. I just bought the W...Hi.. Hope someone can Help me. I just bought the W25 and I want to Play Online With Xbox 360. The xbox is giving me an error that I need to change the MTU setting on my modem to 1394. I don't have any idea how to change it... Any ideas?Marienoreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-6605522515780106952009-09-14T09:13:41.437+02:002009-09-14T09:13:41.437+02:00I have not tried it, because I have no access to t...I have not tried it, because I have no access to the serial port. (I think that you have to do some soldering to get it work on the W25).<br /><br />I could get access to the boot loader over the newtork (I have described how in a previous post), and probably it is possible to do some simmilar magic from there as well.Lacóhttps://www.blogger.com/profile/05829076237347507076noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-62862199499646047472009-09-13T18:31:02.646+02:002009-09-13T18:31:02.646+02:00is there anyone who got it working?if yes how???is there anyone who got it working?if yes how???Unknownhttps://www.blogger.com/profile/10774847046007353768noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-57770451927574639742009-05-24T11:14:37.743+02:002009-05-24T11:14:37.743+02:00How to get root access to W25:
1) Get RedBoot pro...How to get root access to W25:<br /><br />1) Get RedBoot prompt via serial console (I have not tried the <br />2) Load and execute kernel with one extra parameter. After the boot process you will get a root prompt.<br />RedBoot>fis load kernel_A<br />RedBoot>exec -c "console=ttyS0,115200 root=/dev/mtdblock2 init=/bin/sh" 0x00040000<br />3)At the root prompt run the init script. You will get back the root prompt.<br />/ # /etc/init.d/rc.sysinit<br />4) Now you can do whatever you want, e.g. clear the root pwd:<br />vi /etc/passwd<br />delete the encrypted password.<br />5)/ # exit; reboot<br /><br />Enjoy!Ferinoreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-15501908477623009092009-02-06T11:13:00.000+01:002009-02-06T11:13:00.000+01:00I do not know exactly, how the Network Lock is imp...I do not know exactly, how the Network Lock is implemented. IF it is implemented in the router part, then probably after gatting a root access you can hack it out. <BR/><BR/>If it is in the UMTS modem part, then the root password may not help you.Lacóhttps://www.blogger.com/profile/05829076237347507076noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-74725585487964607332009-02-05T23:51:00.000+01:002009-02-05T23:51:00.000+01:00Hello LacóI've just bought a W25 but I have a prob...Hello Lacó<BR/><BR/>I've just bought a W25 but I have a problem: it is locked - the SIM card has to be of a particular mobile telecom. Do you have any tips to unlock the W25 ? Or do I need to get the root password as you have shown in your previous comment ?<BR/><BR/>Thanks<BR/><BR/>Andreas - BrazilAndreas Schützhttps://www.blogger.com/profile/07565576160583189375noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-11947780100437814052009-02-04T11:34:00.000+01:002009-02-04T11:34:00.000+01:00If you send me a disposable email address I will s...If you send me a disposable email address I will send you what you need.Lacóhttps://www.blogger.com/profile/05829076237347507076noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-23514861566358420602009-02-02T17:32:00.000+01:002009-02-02T17:32:00.000+01:00Thanks Laco..I saw commands, it's interesting..I m...Thanks Laco..<BR/><BR/>I saw commands, it's interesting..<BR/>I m a bit familiar with gsm modem.<BR/><BR/>What version of firmware you have ?<BR/><BR/>The ericssonw25 use msm6280 qualcomm chipset and they bought this from Sierra Wireless. <BR/>Sometimes vendors give gsm Trace serial device.. <BR/><BR/>Filesystem :<BR/><BR/>Due to difficulties to unsquashfs rootfs.squashfs, maybe we can extract rootfs filesystem directly from the ericsson command line :<BR/><BR/>+ we need to know how the nand memory is structured, like : "cat /proc/mtd" <BR/><BR/>+ try to use dd utility to dump the rootfilesystem and saving it on usb disk. after we can reconstruct rootfs.squashfs using our version.<BR/><BR/>dmesg could be appreciate ;) of course don't forget to remove your personal parameters.<BR/><BR/>;)<BR/>Thanks.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-5085294997904315312009-02-02T16:37:00.000+01:002009-02-02T16:37:00.000+01:00Here is a list of available commands on the Ericss...Here is a list of available commands on the Ericsson W25: http://networkingathome.blogspot.com/2008/05/available-linux-commands-in-ericsson.html<BR/><BR/>It is valid for version 9 (if I remember correctly), in version 11 they have removed some commands (e.g. wget and ssh) and added some new ones.<BR/><BR/>I am not familiar with the gsm modem SW at all, what I saw in earlier versions of the W25, that they had 3 USB serial connections to the GSM module these were used to send commands to the modem and a ppp connection is used for the internet traffic.<BR/><BR/>In the gsm firmware there can be an IP stack implemented, because it may be needed for the communication over the radio network or because it is needed for handling the ppp connection.Lacóhttps://www.blogger.com/profile/05829076237347507076noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-7241709523591362062009-02-02T14:33:00.000+01:002009-02-02T14:33:00.000+01:00hello, i also tried to unsquash the filesystem wit...hello,<BR/><BR/> i also tried to unsquash the filesystem with friend.. but it 's special unsquash-lzma Version 3.0, that need modifications..<BR/><BR/>Before to get one of them.. can you post all command line the ericsson have ?<BR/><BR/>another strange thing..<BR/>i greped wanfw (gsm stack firmware)<BR/>there is strings like :<BR/><BR/>ps_tcptimer.c<BR/>ps_tcpshell.c<BR/><BR/>is there an ip to access to the gsm stack shell..<BR/>normally there is only Serial /dev/modem ...<BR/><BR/>Can you verify it ?<BR/><BR/>Thanks ;)<BR/>Fred.Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-34917237673351476342009-01-24T09:11:00.000+01:002009-01-24T09:11:00.000+01:00There are at least two ways to get root access to ...There are at least two ways to get root access to the W25 and none of them is easy.<BR/><BR/>The first one is if you manage to convince your operator that you need this password and they give it to you. <BR/><BR/>The second one is more technical and I have not tried to do it, but I think that it can work.<BR/><BR/>You need to do the following steps:<BR/>1) Get access to the RedBoot boot loader of the device. This is easy on one and and very difficult on the other. When the device boots up, the bootloader gets the address 192.168.1.1 and you can connect to the boot loader with a simple telnet session on port 9000 (if I remember well). There you have one second the press ctrl C to skip booting and get to the RedBoot menu. (This is very challenging I have never managed to reach this) <BR/>2) When you are at the RedBoot prompt you should dump the rw filesystem from the flash. <BR/>3) The rwfs is a jffs2 type filesystem, from here you should extract the running.cdb file and in the file you can find the password.Lacóhttps://www.blogger.com/profile/05829076237347507076noreply@blogger.comtag:blogger.com,1999:blog-7709588442395618662.post-6380007529989985322009-01-09T15:32:00.000+01:002009-01-09T15:32:00.000+01:00Hello Laco,I have an W25, but it is operator locke...Hello Laco,<BR/>I have an W25, but it is operator locked so I cannot access it via telnet. My only access is "user" through the web interface. Do you know of any way to unlock this box?Anonymousnoreply@blogger.com