Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | |||
projects:zte_mf28x [2024/03/10 20:04] – Andreas Böhler | projects:zte_mf28x [2024/03/10 20:19] (current) – Andreas Böhler | ||
---|---|---|---|
Line 8: | Line 8: | ||
</ | </ | ||
- | The following models | + | The following models |
* MF282 | * MF282 | ||
Line 19: | Line 19: | ||
===== ZTE MF282 ===== | ===== ZTE MF282 ===== | ||
- | The MF282 is supported by OpenWrt 23.x onwards. In order to install it, you need to disassemble the device, attach serial console and perform a few commands in the UART shell. | + | The MF282 is supported by OpenWrt 23.05 onwards. In order to install it, you need to disassemble the device, attach serial console and perform a few commands in the UART shell. |
<WRAP round important 80%> | <WRAP round important 80%> | ||
Line 29: | Line 29: | ||
===== ZTE MF282+ ===== | ===== ZTE MF282+ ===== | ||
- | This device has a completely different hardware. An OpenWrt port is work in progress. The modem is not Qualcomm-based but uses a Marvell PXA1827 module. | + | This device has a completely different hardware. An OpenWrt port is available, but this device is not supported by OpenWrt 23.05. The modem is not Qualcomm-based but uses a Marvell PXA1827 module. |
The MF282+ can be identified by the model type " | The MF282+ can be identified by the model type " | ||
Line 36: | Line 36: | ||
The newer MF287 series is more powerful than the MF282 and features four Gigabit-ports, | The newer MF287 series is more powerful than the MF282 and features four Gigabit-ports, | ||
- | OpenWrt supports all models from 23.x onwards. | + | OpenWrt supports all models from 23.05 onwards. |
==== Option 1: Install from OEM firmware ==== | ==== Option 1: Install from OEM firmware ==== | ||
You need an exploit to get access to the stock firmware. Prepare the following: | You need an exploit to get access to the stock firmware. Prepare the following: | ||
- | * TFTP server - tftpd-hpa on Linux is tested, | + | * TFTP server - tftpd-hpa on Linux is tested, |
* Static build of busybox for ARM, e.g. from https:// | * Static build of busybox for ARM, e.g. from https:// | ||
* Rename busybox to " | * Rename busybox to " | ||
Line 137: | Line 137: | ||
<WRAP round important 80%> | <WRAP round important 80%> | ||
- | Unlocking does not work on the MF282+ aka DreiTube! The LTE module uses a compltely | + | Unlocking does not work on the MF282+ aka DreiTube! The LTE module uses a completely |
</ | </ | ||
Line 156: | Line 156: | ||
setenv serverip 192.168.1.100 | setenv serverip 192.168.1.100 | ||
setenv ipaddr 192.168.1.1 | setenv ipaddr 192.168.1.1 | ||
- | tftpboot | + | tftpboot openwrt.bin |
- | bootm 0x82000000 | + | bootm |
</ | </ | ||
* After a few minutes, OpenWrt has started | * After a few minutes, OpenWrt has started | ||
Line 204: | Line 204: | ||
Should you require more details for any of the steps provided, please have a look at the excellent documentation in the OpenWrt Wiki at https:// | Should you require more details for any of the steps provided, please have a look at the excellent documentation in the OpenWrt Wiki at https:// | ||
- | ===== Exploit MF287+ in detail ===== | + | ===== Exploit MF287 in detail ===== |
- | The settings file of the MF287+ is obfuscated and encrypted. Fortunately, | + | The settings file of the MF287 is obfuscated and encrypted. Fortunately, |
<code python [enable_line_numbers=" | <code python [enable_line_numbers=" |