Need help for config china fiber router with stock firmware

dmab · September 8, 2024, 12:10pm

Hello.
I have China fiber ONU and want to use it as a standard main WiFi router connected to an ISP through a LAN Ethernet port by PPPoE. But its web interface has no such feature. It can be connected to ISP only by xPON fiber.
I know login/pass for SSH/Telnet and trying to configure this device for my purposes in ONU OS directly.
Thanks for any help.

What I earn for now:

it has limited commands and tools;
standard config files and any changes of existing files are gone after the device reboot, only files created in folder /userconfig/config are not gone after the reboot; so no need to make device configurations by creating and using config files, at least for now I want to create some script file in /userconfig/config dir that will make all config and run PPPoE connection;
I made some positive test steps: remove eth0.0 from br0 and run pppd with my parameters to make a PPPoE connection to ISP and it established but in this case, other WiFi and LAN ports client has no access to this connection..

Information about devise OS:

Info about OS and file system:

cat /proc/version
Linux version 4.14.222 (zhuliwen@ubuntu) (gcc version 8.3.0 (crosstool-NG 1.24.0)) #3 SMP PREEMPT Thu Aug 8 10:30:21 CST 2024

cat /proc/mtd
dev: size erasesize name
mtd0: 00060000 00020000 "uboot"
mtd1: 00020000 00020000 "hwconfig"
mtd2: 03a20000 00020000 "rootfs-1"
mtd3: 00800000 00020000 "userconfig"
mtd4: 03a20000 00020000 "rootfs-2"
mtd5: 00040000 00020000 "backup-config"

ls -Ax /
bin dev etc home lib libexec linuxrc mnt opt proc root run sbin scripts
sys tmp userconfig usr var

ls -Ax /etc

GN25L95                            MfgMode                            all.policy                         bindresvport.blacklist
board.conf                         board.conf.lock                    config                             cups
default_sys_info                   dnsmasq                            dnsmasq.conf                       dnsmasq.hosts
dnsmasq.leases                     dnsmasq.leases.lock                dnsmasq.pid                        emesh
environment                        ethertypes                         galachip_default_bob.bin           galachip_default_bob_gn25l95d.bin
galachip_default_bob_ux3320s.bin   gc_default_bob_gn25l95.bin         gc_fw_info                         gc_svn_version
gc_sys_info                        gponOmciConfig                     group                              group-
igmpproxy.conf                     init.d                             inittab                            iproute2
ipsec.conf                         ipsec.d                            ipsec.secrets                      issue.net
linuxigd                           localtime                          macAddr                            macAddrBase
mdev.conf                          mini_httpd.pem                     minidlna.conf                      motd
netconfig                          ntp.conf                           pam.d                              passwd
passwd-                            ppp                                profile                            profile_telnet
rc0.d                              rc2.d                              rc3.d                              rc5.d
reslov.dnsmasq.conf                resolv.conf                        security                           security.policy
shadow                             shadow-                            strongswan.conf                    strongswan.d
swanctl                            trust-anchors.conf                 udhcpc                             upnpd.conf
vsftpd                             vsftpd.conf                        vsftpd.pem                         vsftpd_ipv6.conf
wireless

ls -Ax /etc/config
lanConfig wanConfig

ls /etc/config/wanConfig
interface-ppp_1_1_1 ppp.conf-ppp_1_1_1

ls -Ax /userconfig/config
config.current.enc configCRC ethwan galachip_backup_bob.bin
gcsUtilEnc.bin messages ssh syslogheader

List some commands/tools:

/bin/busybox --help
BusyBox v1.31.1 (2024-08-07 14:44:34 CST) multi-call binary.
BusyBox is copyrighted by many authors between 1998-2015.
Licensed under GPLv2. See source distribution for detailed
copyright notices.
Currently defined functions:
[, [[, addgroup, adduser, arp, ash, awk, base64, basename, cat, chmod, chown, chpasswd, clear, cp, crond, crontab, cut, date, dd, delgroup, deluser, devmem, df,
dmesg, echo, egrep, expr, false, fdisk, find, free, ftpd, fuser, getty, grep, head, hexdump, hostid, hostname, id, ifconfig, ifdown, ifup, init, insmod, ipcrm, ipcs,
kill, killall, killall5, klogd, linuxrc, ln, logger, login, logread, ls, lsmod, lsof, lspci, lzma, md5sum, mdev, mkdir, mknod, mktemp, mount, mpstat, mv, netstat,
nice, nslookup, ntpd, passwd, pgrep, ping, ping6, pipe_progress, ps, pwd, reboot, reset, resize, rm, rmdir, rmmod, route, run-parts, runlevel, sed, sh, sleep,
start-stop-daemon, su, swapon, sync, syslogd, tail, taskset, tcpsvd, telnet, telnetd, test, tftp, top, touch, traceroute, traceroute6, true, ts, udhcpc, umount,
unlzma, unzip, usleep, vconfig, vi, watchdog, wc, wget, xargs

ls -Ax /bin
abxtest ash base64 blkid busybox c_rehash cat chmod chown cjpeg
compile_et cp curl curl-config date db_archive db_checkpoint db_deadlock db_dump db_load
db_printlog db_recover db_stat db_upgrade db_verify dbclient dd df djpeg dmesg
dropbearconvert dropbearkey dropbearmulti echo egrep event_rpcgen.py false flac grep hostname
iconv iptables-xml jpegtran kill ln login lowntfs-3g ls madplay metaflac
mk_cmds mkdir mknod mktemp mount mpstat mv netstat nice ntfs-3g
openssl pcap-config pfc ping ping6 pipe_progress pki ps pwd rdjpgcom
rm rmdir rsync run-parts sed sh sleep sqlite3 su sync
touch true umount unzstd usleep vi wdel wput wrjpgcom xmlwf
zip zipcloak zipnote zipsplit zstd zstdcat zstdgrep zstdless zstdmt

ls -Ax /sbin/
.gitignore arp conntrackd devmem dnsmasq doc_loadbios ebtables-legacy ecmh fdisk flash_erase flash_otp_lock flash_otp_write ftl_check ftl_format gcs_core gcs_db ifdown ifup ip6tables ip6tables-legacy ipsec ipset iptables-restore iptables-save iwpriv iwspy lsmod lsmtd mkexfatfs mkfs.exfat mkhomedir_helper mount.exfat mtdinfo mtdpart nftl_format nftldump pam_timestamp_check phddns pppstats radvd ripd rmmod rtpr runlevel swanctl swapon ubiblock ubicrc32 ubinize ubirename unix_chkpwd unix_update xl2tpd xl2tpd-control band_steering brctl chat conntrack
dhcp6c dhcp6ctl dhcp6relay dhcp6s
docfdisk dropbear dumpexfat ebtables
emesh_start exfatfsck exfatlabel fatlabel
flash_eraseall flash_lock flash_otp_dump flash_otp_info
flash_unlock flashcp fsck.exfat fsck.fat
gc_event_agent gc_timer_event gc_usb_event gcsUtil
gcs_task getty ifcfg ifconfig
igmpproxy init insmod ip
ip6tables-legacy-restore ip6tables-legacy-save ip6tables-restore ip6tables-save
iptables iptables-legacy iptables-legacy-restore iptables-legacy-save
iwconfig iwevent iwgetid iwlist
jffs2dump jffs2reader klogd logread
map_cli mdev mini_httpd minidlnad
mkfs.fat mkfs.jffs2 mkfs.ntfs mkfs.ubifs
mount.exfat-fuse mount.lowntfs-3g mount.ntfs-3g mtd_debug
nanddump nandtest nandwrite nfct
ntpclient odhcp6c pam_tally pam_tally2
pppd pppdproxy pppdump pppoe-discovery
reboot recv_image rfddump rfdformat
route routef routel rtmon
serve_image slic_test start-stop-daemon sumtool
syslogd tc tcpdump ubiattach
ubidetach ubiformat ubimkvol ubinfo
ubirmvol ubirsvol ubiupdatevol udhcpc
upnpd vconfig watchdog wlan_event_agent
xtables-legacy-multi zebra

ls -Ax /usr/bin/
.gitignore 1905ctrl [ [[ ated ated_cli awk basename call
cancel clear cmd crontab cups-config cupstestdsc cupstestppd cut expr
find fp free fuser gcFrameworkMount gcImageSwitch gcUtil gcVoice gc_dhcp_option82
gc_omcicli gc_omcid gccheckheader gccli gcconsole gccwmp gcloopdetect gcnetctl gcoamcli
gcoamd gcponctl gcponmapctl gcqosctl gcspeedctl gcswctl gcupgrade gcwatchdog head
hexdump hostid id ipcrm ipcs ipptool killall logger lp
lpoptions lpq lpr lprm lpstat lsof lspci lzma mapd
mapd_cli md5sum mount_ubifs.sh nslookup nvram_get nvram_set p1905_managerd passwd pgrep
ppdc ppdhtml ppdi ppdmerge ppdpo reset resize scli tail
taskset tcpsvd telnet test tftp top traceroute traceroute6 ts
unlzma unzip vpnctl wapp wappctrl wc wget xargs

ls -Ax /usr/sbin/
CHINA.bin R600B.BIN accept add_remove_udisk.sh add_remove_usb_cdc.sh add_remove_usb_hid.sh add_remove_usb_lp.sh
add_remove_usb_tty.sh addgroup adduser alg_flush chpasswd create_wan_connection crond
cupsaccept cupsaddsmb cupsctl cupsd cupsdisable cupsenable cupsfilter
cupsreject delgroup deluser ftpd fw_dxs.bin killall5 lpadmin
lpc lpinfo lpmove ntpd odhcp6c-update pcmg pppoe
pppoe-connect pppoe-relay pppoe-server pppoe-setup pppoe-sniff pppoe-start pppoe-status
pppoe-stop pptp pptpsetup redir reject start_osgi_cgroup.sh stop_osgi_cgroup.sh
telnetd testdevmem tmtst voip vsftpd wifi_test_mode.sh

Interfaces:

ifconfig
br0 Link encap:Ethernet HWaddr F4:70:0C:-
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::1/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:61605 errors:0 dropped:57727 overruns:0 frame:0
TX packets:6592 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3013020 (2.8 MiB) TX bytes:2960281 (2.8 MiB)

eth0 Link encap:Ethernet HWaddr F4:70:-
inet6 addr: fe80::f670:cff:fe84:3e4f/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:2000 Metric:1
RX packets:78693 errors:0 dropped:0 overruns:0 frame:0
TX packets:16210 errors:0 dropped:4 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:5519919 (5.2 MiB) TX bytes:2487925 (2.3 MiB)

eth0.0 Link encap:Ethernet HWaddr F4:70:0C-
inet6 addr: fe80::f670:cff:fe84:3e4f/64 Scope:Link
UP BROADCAST RUNNING MTU:2000 Metric:1
RX packets:69265 errors:0 dropped:3756 overruns:0 frame:0
TX packets:6773 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3213901 (3.0 MiB) TX bytes:1639413 (1.5 MiB)

eth1 Link encap:Ethernet HWaddr F4:70:0C-
UP BROADCAST PROMISC MULTICAST MTU:2000 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

eth1.0 Link encap:Ethernet HWaddr F4:70:0C:-
UP BROADCAST MTU:2000 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

eth2 Link encap:Ethernet HWaddr F4:70-
UP BROADCAST PROMISC MULTICAST MTU:2000 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

eth2.0 Link encap:Ethernet HWaddr F4:70:-
UP BROADCAST MTU:2000 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

eth3 Link encap:Ethernet HWaddr F4:70:-
inet6 addr: fe80::f670:cff:fe84:3e4f/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:2000 Metric:1
RX packets:17081 errors:0 dropped:0 overruns:0 frame:0
TX packets:56197 errors:0 dropped:1 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1495117 (1.4 MiB) TX bytes:6238850 (5.9 MiB)

eth3.0 Link encap:Ethernet HWaddr F4:70:0-
inet6 addr: fe80::f670:cff:fe84:3e4f/64 Scope:Link
UP BROADCAST RUNNING MTU:2000 Metric:1
RX packets:7647 errors:0 dropped:45 overruns:0 frame:0
TX packets:46761 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:539873 (527.2 KiB) TX bytes:4901476 (4.6 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:24 errors:0 dropped:0 overruns:0 frame:0
TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8834 (8.6 KiB) TX bytes:8834 (8.6 KiB)

pon0 Link encap:Ethernet HWaddr F4:70:0C-
inet6 addr: fe80::f670:cff:fe84:3e4f/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:9600 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:8 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

pon0.0 Link encap:Ethernet HWaddr F4:70:0C:-
UP BROADCAST RUNNING MTU:1492 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

ip link | grep master
15: eth0.0: <BROADCAST,UP,LOWER_UP> mtu 2000 qdisc pfifo_fast master br0 state UP mode DEFAULT group default qlen 1000
16: eth1.0: <NO-CARRIER,BROADCAST,UP> mtu 2000 qdisc pfifo_fast master br0 state DOWN mode DEFAULT group default qlen 1000
17: eth2.0: <NO-CARRIER,BROADCAST,UP> mtu 2000 qdisc pfifo_fast master br0 state DOWN mode DEFAULT group default qlen 1000
18: eth3.0: <BROADCAST,UP,LOWER_UP> mtu 2000 qdisc pfifo_fast master br0 state UP mode DEFAULT group default qlen 1000

brctl show
bridge name bridge id STP enabled interfaces
br0 8000.f4700c843e4f no
eth0.0
eth1.0
eth2.0
eth3.0

Some traffic rules and route:

ip route
192.168.1.0/24 dev br0 proto kernel scope link src 192.168.1.1

iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
PARENTAL_CTL___INPUT all -- anywhere anywhere
STORAGE_ACCESS tcp -- anywhere anywhere multiport dports 445,139,8200
MF_INPUT all -- anywhere anywhere
SERCONTROL_ICMP icmp -- anywhere anywhere icmp echo-request
SERCONTROL_SAMBA tcp -- anywhere anywhere tcp dpt:445
SERCONTROL_FTP tcp -- anywhere anywhere tcp dpt:21
SERCONTROL_SSH tcp -- anywhere anywhere tcp dpt:22
SERCONTROL_TELNET tcp -- anywhere anywhere tcp dpt:23
SERCONTROL_HTTPS tcp -- anywhere anywhere tcp dpt:443
SERCONTROL_HTTP tcp -- anywhere anywhere tcp dpt:80
TR069_INPUT tcp -- anywhere anywhere
FW_INPUT all -- anywhere anywhere

Chain FORWARD (policy ACCEPT)
target prot opt source destination
INTERNET_ACCESS all -- anywhere anywhere
DMZ_MAP all -- anywhere anywhere
PARENTAL_CTL_FORWARD all -- anywhere anywhere
EF_FORWARD all -- anywhere anywhere
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
MF_FORWARD all -- anywhere anywhere
FW_FORWARD all -- anywhere anywhere

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
TR069_ACL_OUTPUT tcp -- anywhere anywhere
TCPMSS tcp -- anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
FW_OUTPUT all -- anywhere anywhere

Chain DMZ_MAP (1 references)
target prot opt source destination

Chain DOS_FLOOD (8 references)
target prot opt source destination
RETURN icmp -- anywhere anywhere icmp echo-request limit: avg 100/min burst 5
LOG icmp -- anywhere anywhere icmp echo-request recent: UPDATE seconds: 10 hit_count: 200 name: PINGPOOL side: source mask: 255.255.255.255 limit: avg 1/min burst 5 LOG level warning prefix "DOS Attack"
DROP icmp -- anywhere anywhere icmp echo-request recent: UPDATE seconds: 10 hit_count: 200 name: PINGPOOL side: source mask: 255.255.255.255
ACCEPT icmp -- anywhere anywhere icmp echo-request recent: SET name: PINGPOOL side: source mask: 255.255.255.255
RETURN tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 100/min burst 5
LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN recent: UPDATE seconds: 10 hit_count: 200 name: SYNPOOL side: source mask: 255.255.255.255 limit: avg 1/min burst 5 LOG level warning prefix "DOS Attack"
DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN recent: UPDATE seconds: 10 hit_count: 200 name: SYNPOOL side: source mask: 255.255.255.255
ACCEPT tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN recent: SET name: SYNPOOL side: source mask: 255.255.255.255

Chain DOS_OTHER (8 references)
target prot opt source destination
DROP icmp -- anywhere anywhere icmp redirect

Chain EF_FORWARD (1 references)
target prot opt source destination

Chain FW_FORWARD (1 references)
target prot opt source destination
FW_FORWARD_ACCESS all -- anywhere anywhere
FW_FORWARD_DROP all -- anywhere anywhere

Chain FW_FORWARD_ACCESS (1 references)
target prot opt source destination

Chain FW_FORWARD_DROP (1 references)
target prot opt source destination

Chain FW_INPUT (1 references)
target prot opt source destination
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
FW_INPUT_ACCESS all -- anywhere anywhere
FW_INPUT_DROP all -- anywhere anywhere
DROP all -- anywhere anywhere match bpf 48 0 0 9,21 0 11 6,40 0 0 6,69 9 0 8191,177 0 0 0,80 0 0 12,84 0 0 240,116 0 0 2,12 0 0 0,7 0 0 0,64 0 0 0,21 0 1 1414676803,6 0 0 1,6 0 0 0

Chain FW_INPUT_ACCESS (1 references)
target prot opt source destination

Chain FW_INPUT_DROP (1 references)
target prot opt source destination

Chain FW_OUTPUT (1 references)
target prot opt source destination

Chain INTERNET_ACCESS (1 references)
target prot opt source destination

Chain MF_FORWARD (1 references)
target prot opt source destination

Chain MF_INPUT (1 references)
target prot opt source destination

Chain PARENTAL_CTL_FORWARD (1 references)
target prot opt source destination

Chain PARENTAL_CTL___INPUT (1 references)
target prot opt source destination

Chain SERCONTROL_FTP (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:21 mark match 0x80000000
ACCEPT tcp -- anywhere anywhere tcp dpt:21
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain SERCONTROL_HTTP (1 references)
target prot opt source destination
URLREDIRECT tcp -- anywhere anywhere tcp dpt:80 mark match 0x80000000redirect http to https!
ACCEPT tcp -- anywhere anywhere tcp dpt:80
URLREDIRECT tcp -- anywhere anywhere tcp dpt:80redirect http to https!
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain SERCONTROL_HTTPS (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:443 mark match 0x80000000
ACCEPT tcp -- anywhere anywhere tcp dpt:443
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain SERCONTROL_ICMP (1 references)
target prot opt source destination
ACCEPT icmp -- anywhere anywhere icmp echo-request mark match 0x80000000
ACCEPT icmp -- anywhere anywhere icmp echo-request
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain SERCONTROL_SAMBA (1 references)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:445 mark match 0x80000000
ACCEPT tcp -- anywhere anywhere tcp dpt:445
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain SERCONTROL_SSH (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:22 mark match 0x80000000
ACCEPT tcp -- anywhere anywhere tcp dpt:22
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:22
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain SERCONTROL_TELNET (1 references)
target prot opt source destination
DROP tcp -- anywhere anywhere tcp dpt:23 mark match 0x80000000
ACCEPT tcp -- anywhere anywhere tcp dpt:23
DOS_OTHER all -- anywhere anywhere
DOS_FLOOD all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
DROP all -- anywhere anywhere

Chain STORAGE_ACCESS (1 references)
target prot opt source destination

Chain TR069_ACL_OUTPUT (1 references)
target prot opt source destination

Chain TR069_INPUT (1 references)
target prot opt source destination

iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
TR069_PREROUTING tcp -- anywhere anywhere
DMZ_MAP all -- anywhere anywhere

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
POST_MULTINAT all -- anywhere anywhere

Chain DMZ_MAP (1 references)
target prot opt source destination

Chain POST_MULTINAT (1 references)
target prot opt source destination

Chain TR069_PREROUTING (1 references)
target prot opt source destination

brada4 · September 8, 2024, 12:29pm

Check if it can be supported by openwrt.

ubus call system board
cat /proc/mtd
ubinfo -a
free
dmesg # mem size and soc type at te beginning, ubi/mtd in the middle , wifi somewhere.
ethool -i pon* # rarely they use in-tree netcard driver to connect ont via mii
iw list
cat /proc/modules

You can try recovering telnet uid/password from shadow file.

eduperez · September 8, 2024, 12:59pm

You can try to add support for that device on OpenWrt, then configure it to meet your needs. But you will not get much support here about ONU OS.

dmab · September 8, 2024, 1:34pm

@brada4 @eduperez
I just need help configuring the Linux OS inside this device for connecting to the ISP by PPPoE through LAN1 and sharing this connection with other LAN2-4 and WiFi clients. I think it is easier than making an OpenWrt build for this device and quicker than waiting for it.

dmab · September 8, 2024, 1:48pm

root@FC3104X:~ # ubus call system board
sh: ubus: not found

root@FC3104X:~ # cat /proc/mtd
dev: size erasesize name
mtd0: 00060000 00020000 "uboot"
mtd1: 00020000 00020000 "hwconfig"
mtd2: 03a20000 00020000 "rootfs-1"
mtd3: 00800000 00020000 "userconfig"
mtd4: 03a20000 00020000 "rootfs-2"
mtd5: 00040000 00020000 "backup-config"

root@FC3104X:~ # ubinfo -a
UBI version: 1
Count of UBI devices: 0
UBI control device major/minor: 10:59

root@FC3104X:~ # free
total used free shared buff/cache available
Mem: 477612 102924 315396 6852 59292 347176
Swap: 0 0 0

root@FC3104X:~ # ethool -i pon*
sh: ethool: not found

root@FC3104X:~ # iw list
sh: iw: not found

root@FC3104X:~ # cat /proc/modules

mt7916_ap 9387265 0 - Live 0xbf289000 (O)
http_UserAgent_check 2894 1 - Live 0xbf27b000 (O)
dxs_irq 3033 1 - Live 0xbf277000 (O)
gcpcm_voip 238940 2 - Live 0xbf238000 (O)
nf_ipv6_link_filter 2130 0 - Live 0xbf234000 (O)
gcspeed_main 62345 0 - Live 0xbf21e000 (O)
nf_mac_filter 5264 0 - Live 0xbf219000 (O)
nf_traffic_monitor 8891 0 - Live 0xbf212000 (O)
nf_traffic_mirror 16461 0 - Live 0xbf209000 (O)
nf_traffic_detail 17718 0 - Live 0xbf200000 (O)
gcqos 323035 0 - Live 0xbf1ac000 (O)
gcnat 375227 0 - Live 0xbf147000 (O)
gcponmap 5557 0 - Live 0xbf142000 (O)
gcnet 96257 1 gcponmap, Live 0xbf123000 (O)
galachip_sdk 978793 11 mt7916_ap,gcqos,gcnat,gcnet, Live 0xbf016000 (O)
gcemesh 63218 1 mt7916_ap, Live 0xbf000000 (O)

root@FC3104X:~ # lsmod

Module                  Size  Used by    Tainted: G
mt7916_ap            9387265  0
http_UserAgent_check     2894  1
dxs_irq                 3033  1
gcpcm_voip            238940  2
nf_ipv6_link_filter     2130  0
gcspeed_main           62345  0
nf_mac_filter           5264  0
nf_traffic_monitor      8891  0
nf_traffic_mirror      16461  0
nf_traffic_detail      17718  0
gcqos                 323035  0
gcnat                 375227  0
gcponmap                5557  0
gcnet                  96257  1 gcponmap
galachip_sdk          978793 11 mt7916_ap,gcqos,gcnat,gcnet
gcemesh                63218  1 mt7916_ap

dmesg: https://pastebin.com/TsjrM1F6

I know the Telnet/SSH login and pass and can use root privileges.

frollic · September 8, 2024, 1:49pm

It appears you are using firmware that is not from the official OpenWrt project.

When using forks/offshoots/vendor-specific builds that are "based on OpenWrt", there may be many differences compared to the official versions (hosted by OpenWrt.org). Some of these customizations may fundamentally change the way that OpenWrt works. You might need help from people with specific/specialized knowledge about the firmware you are using, so it is possible that advice you get here may not be useful.

You may find that the best options are:

Install an official version of OpenWrt, if your device is supported (see https://firmware-selector.openwrt.org).
Ask for help from the maintainer(s) or user community of the specific firmware that you are using.
Provide the source code for the firmware so that users on this forum can understand how your firmware works (OpenWrt forum users are volunteers, so somebody might look at the code if they have time and are interested in your issue).

If you believe that this specific issue is common to generic/official OpenWrt and/or the maintainers of your build have indicated as such, please feel free to clarify.