MF286D - Install and Unlock

you have to open the device, in order to install OpenWrt on it, so any warranty is gone anyway.

And even if the original ZTE-firmware is based on OpenWrt too and it might be quite comfortable for the end-user, but it lacks a lot of functionality.

So I recommend using OpenWrt, test the device for some days with the original firmware, then forget the warranty and install OpenWrt - I think the device was not that expensive, that this should be a real problem.

Current (means 04/2024) installation-procedures, problems etc. are described in the threads I opened.

Kind regards, thg

1 Like

thanks for the link!

Don't have Windows, but it might be good to have it anyway, as 4G-device, the router is a quite nice and cheap hardware.

Kind regards, thg

I have nordic B11, how can I go to B12? I guess that I cannot use the framework to go to openwrt if it is on B11/B12 but only via serial? I think I will keep it to B12 for a while and test.

Technically - you can, but it will downgrade the modem back to B02 and you'll have to update the modem by hand from OpenWrt about 7 times, which is doable but painful.

I recommend going to B12 while still on stock FW and doing the serial port method instead - unless you don't have an access to a 3.3V USB-serial adapter - this one is less involved despite need for disassembly.

2 Likes

First of all, thanks for the extra help via PM, I appreciate it.
I used the Nordic to Nordic Framework + OpenWRT to boot the initramfs with OpenWRT. Upgraded to the latest stable and upgraded the modem to B12:

ATI
Manufacturer: ZTE CORPORATION
Model: MF286DMODULE
Revision: BD_TELIAMF286DV1.0.0B12
SVN: 12
IMEI: 866754XXXXXXX
+GCAP: +CGSM

I have a strange issue while the cabled WAN interface doesn't seems to work (tried DHCP / Static address but I can't even ping it). Using a WWAN client interface to provide Internet at this time instead.
The 5Ghz WLAN interface doesn't seem to work well with channels over 56 (I am not sure if this expected, but I couldn't see the AP's SSID until I configured it as a client.
I will look for a guide to set up LTE but I wanted to thank you all for the help. I am glad I didn't have to use the serial to reach this point and void the warranty.

Without config I can't really tell anything about the cause, but it seems oddly similar to what recently happened on MR33's. A bug in switch driver or default config?

Or a broken physical interface? I had one of such units where I replaced the penta-PHY chip and had to tinker with the connection between Ethernet transformers and the sockets, because the previous owner plugged a DSL or phone line into that port, frying it together with traces inside the PCB. 'twas fun. So check if the link actually physically establishes by the status LED.

You just stumbled at usual DFS behaviour, AP will scan for weather radars for 1 minute on this channels before actually starting to transmit. Please be sure to set the regulatory domain correctly, too.

I think I posted a simple uqmi setup example recently in another MF286D thread, you can look over there.

1 Like

I was busy with work and I couldn't update earlier but I resolved the WAN mystery (at least for the ZTE).
The cable was connected to the LAN/WAN port of another Openwrt router and that explains a lot.
However, I don't recall that I have changed the port on my Openwrt router recently and I used it to configure a Pi zero just few days ago, so I can't explain it but let's say "user error". All working on a normal LAN port.

It seems to take well over a minute before I can actually see the network on my laptop or phone but it does eventually show up. I am using a DFS channel for testing, I will see if I can use a standard channel where I am going to position it.

LTE is all configured and working, followed this guide here: https://openwrt.org/docs/guide-user/network/wan/wwan/ltedongle
and added band, status and sms management from https://github.com/4IceG.
I will do final tests soon but looks good.

One last question. Using the framework, I didn't have the opportunity to backup the original firmware. Do you know a repository where I can retrieve the Nordic B12 firmware, before I look for one?

Thank you all for the great assistance :slight_smile:

This is only to close the loop on the wireless channels, I tested again the DFS channel 120 and I couldn't understand why I couldn't see it. I haven't noticed the 1 minute delay before for other DFS channels but I certainly didn't know the following:

In Europe, DFS channels 120, 124 and 128 are allowed. However, these channels perform a 10 minute radar scanning before becoming an operating channel
(source: https://www.clearcom.com/DownloadCenter/manuals/FreeSpeakEdge_Eclipse_Online_Manual/Content/Edge_for_Eclipse/Topics/Using_Dynamic_Frrequency_Selection__DFS__channels.htm#:~:text=In%20Europe%2C%20DFS%20channels%20120,you%20wish%20to%20use%20them.)

I didn't wait 10 minutes but those will be my last choice now :slight_smile:

2 Likes

Testing the router for over 48 hours now and I see the LTE connection dropping roughly after 4 hours (I will grab the logs, if there is a further event). If I restart the QMI interface, the connection comes back in just few seconds. Could that be the provider cutting down the connection? Or do I need to tweak something on the modem itself? Thanks

Probably the provider...

Probably the provider indeed. If using QMI protocol directly and you have only IPv4, then option autoconnect '1' can probably help - the connection always remains active in the background, because LTE uses that for control plane, too - it is just the modem which drops user session if that restarts.
No idea about an analogue of that option for ModemManager, though.

thanks all, I put in place some cron rules to restart the connection a bit less than 4 hours and that seems to work so far.

I also added autoconnect now, my QMI configuration looks like the following:

	option proto 'qmi'
	option device '/dev/cdc-wdm0'
	option apn 'internet.it'
	option auth 'none'
	option pdptype 'ipv4'
	option peerdns '0'
	list dns '76.76.2.41'
	list dns '76.76.10.41'
	list dns_search 'lan'
	option autoconnect '1'

Reporting that I switched the cron job with Connection Monitor (https://github.com/4IceG/luci-app-lite-watchdog) and, while I still see the connection going down every 4 hours, I don't have to worry about it.

I wanted to thank you again for all your help :slight_smile:

1 Like

Hello, am new to this, if you don't mind I can't get the usb to ttl converter in order to continue flashing the router in windows.

I have been following your topic for a while and you said you didn't void the warranty.

How did you connect it (material needed) please help

I have the mf286A.

Thank you.

Hi, I don't know differences between your router and my router. I used the ZTE framework available here: MF286D - Install and Unlock - #12 by hecatae to install Openwrt. However, my router already had a Nordic firmware when I started the process.
All I needed was a cabled connection between the router and a windows PC to flash it.

I think the difference is that D/A at the end which represents carrier or country

Can tell the cable used only. Was there any additional cable / tool needed.

I followed this post here: https://www.ispreview.co.uk/talk/threads/zte-framework-that-converts-a-three-uk-branded-mf286d-to-nordic-b11.38732/post-283727

A normal ethernet cable worked for me.

Be aware that mf286a seems to be diverse from mf286d, so the whole process may be diverse and require a different framework/firmware.

MF286A is a different architecture indeed. Please refer to its device page on the wiki for installation. it follows more-or-less the same template of booting an initramfs via TFTP and then running sysupgrade to install the image permanently. Detailed instructions here:
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=7ac8da00609f42b8aba74b7efc6b0d055b7cef3e

1 Like

If its worth checking the voltage of the power adapter. My 4G was constantly dropping out until I used a more reliable 12v source. The power adapter provided with the router showed 11.2v
Its been ok since.

1 Like

I forgot to update here that it turned out that I had a diverse APN here:

It is worth checking the list of PDP Contexts (and APNs) configured on the modem. Use a terminal program to query the modem with AT+CGDCONT? and observe the output. Example:

AT+CGDCONT? +CGDCONT: 1,"IPV4V6","internet",... +CGDCONT: 2,"IPV4V6","ims",... +CGDCONT: 3,"IPV4V6","sos",...

Typically, but not always, context #1 is used for Internet connection. If it is not configured with the correct information (IP type and APN), it is recommended to set the desired parameters. Example:

AT+CGDCONT=1,"IP","internet"

Replace IP with IPV4V6 or IPV6 if necessary and use your APN instead of internet.

https://openwrt.org/docs/guide-user/network/wan/wwan/ltedongle

Now it doesn't drop anymore.

2 Likes