Hacking RTL960x

• Hacking V2801F, TWCGPON657 & DFP-34X-2C2 to suite your ISP Fiber
• GPON market is a mess, plus explicit OMCI cause ONU Stick did not work
• 4-port ONU Emulation Table

Warning

This guide is intended for advanced users who are willing to accept associated risks. If you are unsure, it is strongly advised not to proceed. Incorrect settings may result in your OLT (Optical Line Terminal) banning you from accessing their network and the internet.

xPON SFP ONU

Join us in enhancing this RTL960x documentation repository to support the xPON community. Every piece of information, no matter how small, can make a significant impact on others. Got spare knowledge about ONU Box functionalities? Share it by dumping the information here! Together, let's make xPON more accessible and straightforward!

RTL960x Family

Stick	SoC	NAND	Mode	4-port EthUni	2.5Gb
VSOL V2801F	RTL9601CI	8MiB (64Mb)	VEIP, PPTP	YES	MOD
T&W TWCGPON657	RTL9601CI	16MiB (128Mb)	VEIP, PPTP	V1.9.0-240204	MOD
Ubiquiti UFiber Instant	RTL9601CI	8MiB (64Mb)	VEIP, PPTP	NO	NO
ODI DFP-34X-2C2	RTL9601D	8MiB (64Mb)	VEIP, PPTP	YES	YES
ODI DFP-34X-2C3 (APC)	RTL9601D	8MiB (64Mb)	VEIP, PPTP	YES	YES
Nokia G-010S-Q	RTL9601CI	16MiB (128Mb)	PPTP	NO	NO

Other

Stick	Mode	SoC	NAND	Mode	4-port EthUni
ODI DFP-34X-2C2	E/GPON	ZTE	?	PPTP, VEIP	NO, NO OMCI EDIT
Huawei MA5671a	E/GPON	Intel	?	PPTP, VEIP	NO
Nokia G-010S-P	E/GPON	Intel	?	PPTP, VEIP	NO
Nokia G-010S-A	E/GPON	Intel	?	PPTP, VEIP	NO

10G xPON ONU

Stick	Mode	SoC	NAND	Mode	4-port EthUni
Hisense LTF7263-BH+	10G-EPON/Multi Mode	Realtek	?	?	?
Hisense LTF7267-BH+	XGSPON Multi Mode	Realtek	?	?	?

Tip

Hisense 10G xPON was checked by @YuukiJapanTech, frimware 'might' that support multiple PON mode...

For XG/XGS/10G-E PON Hacking, checkout @YuukiJapanTech on Hacking CA8271x XGS-PON Stick

VEIP vs PPTP

Code	Full name	Meaning
PPTP	Physical Path Termination Point	OLT is responsible to provision of VLAN and LAN Port
VEIP	Virtual Ethernet Interface Point	Allows multiple Ethernet services to be carried over a single PON link

Guide, Links, Info

1. Backup env, env2 & config partition ^{Guide by @tdmadam}
2. Setup XPON ONU SFP Stick
   • Clone Stock ONU OMCI Info
     • Fiberhome ^{for who using Fiberhome ONT, high chance under Fiberhome OLT Standard, not Fiberhome OLT Universal}
   • ISP specific configuration
   • Troubleshoot
3. flash get, flash set
   • xPON Model Id
   • LAN SDS Mode
   • 2.5GbE Compatibility
4. Health Reporting
   • Telegram ^{Mikrotik script by @smnrock, sending health report via Telegram Bot}
   • Telegram via #!/bin/bash ^{Linux Bash script by @chiragkrishna, sending health report via Telegram Bot}
   • Grafana ^{Grafana script by @Strykar, display PON Stats neatly! Project Repo}
5. Diagnostic
   • Factory Reset
   • Switch/Roll back Firmware
   • O5 no Internet ^{fake ONU Status cause by some OLT}
   • OMCI_TM_OPT ^{stick cause internet speed slow? this look at this, found by @ccy}
   • OMCI MIB INFO ^{check various OMCI, VLAN, OLT}
     • Forward Operation FwdOp ^{discussion about special VLAN (vlan 1) to force bridge}
     • Forward Operation FwdOp ^{fix_vlan.sh script for special ISP}
   • OMCI VLAN ^{list available VLAN that provided by OLT}
   • SFU/HGU feature bits ^{RE done by @rajkosto also define 4-port emulation ignore_conn_uniNode_check UniG on SFU firmware}
   • Wireshark ^{OMCI decoding for Wireshark by @tdmadam}
   • UART
6. TWCGPON657 × V2801F Firmware
7. V2801F Auto Reboot
8. Firmware Emulator
9. Keygen
   • V2801F
   • DFP-34X-2C2
10. SPI/EEPROM Programming
    • SPI Flash & EEPROM
    • SFP EEPROM for 2.5G AutoNeg ^{Linux host need this for 2.5G mode if not hacking kernel}
11. Contributors
12. Hack-Gpon.org - Worldwide wiki on how to access, change and edit ONTs ^{⚠️ Advanced user only, study how xPON work}

Success Story

List of users has successfully ditch stock ONU!

1. @stich86 2.5GbE Internet
2. My journey connecting fiber internet to my router
3. Hinet users in TW
4. @izhamsatria: ~2.5Gbps on TM Unifi ^{before TIME announce 2Gbps plan in Malaysia}
5. Orange Fiber at 2Gbps (MikroTik 10Gbps CCR2004 router & ONT SFP+) ^{In French}
6. MagtiCom Fiber in Georgia
7. T-Mobile Netherlands replacing Huawei ONT ^{English version}
8. SilkNet Fiber in Georgia
9. Bangladesh: Dot-Internet Dhaka

xPON ONU SFP

DFP-34X-2C2 ^Recommended!

Feature

• Much cheaper than VSOL V2801F & CarlitoxxPro CPGOS03-0490 v2.0!
• Using latest SoC RTL9601D!
• Support HEX PLOAM Password! ^{Using 220304 Firmware}
• Support 2.5GbE via HiSGMII or 2500Base-X! ^{See Compatibility, SpeedTest}
• Using newer SFP Body with intergrated heatsink ^{See Picture}
• Very efficient, just 45°C without fan!
• Automatic/Transparent bridge like VSOL V2801F! ^{Using 220304 Firmware}
• Support 4-port ONU Emulation

V2801F

Feature

• Limited 2.5GbE Support ^{wrong LAN_SDS_MODE can lock you out, no auto switch}
• HEX PLOAM Password require modification from @zry98
• Automatic/Full Transparent
• Support 4-port ONU Emulation
• Modern WebGUI

Triple Play Multiple ISP Problem, 4-port ONU Emulation

• Majority fiber vendor support multiple ISP
• ISP provide Triple Play service (Internet, VoIP & IPTV)
• Vendor supply 4-port ONU for each service or ISP

4-port ONU Emulation

Based on ru-board, xPON Stick with 4-Port Emulation support is limited!

ONU LAN Port Binding example

If you using 4-port ONU like Huawei HG8240H5, Nokia G-240G-E and Router connected to ONU LAN 2/3/4, you have limited option, I recommend ODI DFP-34X-2C2 with 220304 or newer firmware.

Table 4-port ONU Emulation

Here list of xPON Stick on the market that support 4-port ONU Emulation:

xPON Stick	Huawei HG8240H LAN Port						Firmware
	Root	1️⃣	2️⃣	3️⃣	4️⃣	PVID
Huawei MA5671a	✔️	✔️	❌	❌	❌	✔️	OpenWRT
Nokia G-010S-P	✔️	✔️	❌	❌	❌	✔️	OpenWRT
ODI DFP-34X-2C2	✔️	✔️	❌	❌	❌	❌	210702, 220527
ODI DFP-34X-2C2	✔️	✔️	✔️	✔️	✔️	❓	220304, 220414
TWCGPON657	✔️	✔️	✔️	✔️	✔️	❌	C00R657V2801F_V1.9.0-220404.tar
V-SOL V2801F	✔️	✔️	✔️	✔️	✔️	❌	Stock Firmware

Good Luck!