OpenWrt Based TalkTalk Sagemcom FAST 5364 Tinkering

Livebox beat me to it! The undefined is just the JavaScript function returning nothing, the commands still run. You can always check with $.xmo.getValuesTree("Device") to confirm the current settings.

Re. logging in as root, you may be able to add root to the XMO managed UserAccounts list. The SSH server gets spun up to allow sessions per user so it will reject without root being granted access in the config. To be honest I didn't want to risk fiddling with it further!

Interestingly, I've seen a screenshot showing a bridge mode in the business firmware edition but I haven't got a copy to analyse further. TalkTalk may be finally getting the hint!

I'm trying to make the router to use specific wifi channels, but I've noticed that every hour the settings get reset.
If I disable "Device/WiFi/Radios/Radio/AutoChannelEnable" or set "Device/WiFi/Radios/Radio/AutoChannelRefreshPeriod" to a very large number the "Device/WiFi/Radios/Radio/Channel" gets changed after 60 minutes to a different number (mostly the channel for 5Ghz).

Also, everytime I enable "Device/WiFi/Radios/Radio/AutoChannelEnable" and the change gets triggered the AutoChannelEnable setting gets disabled.

It's like there's some script running in the background that cycles wifi channels.

Does anyone know how can I stop it (or troubleshoot it)?

Thanks in advance.

Sounds like you are on the right lines! Have you tried setting AutoChannelSupported to false as well?

Have you also disabled the TR69 service completely? TalkTalk typically like to control this from their end so might periodically set it back. The proper logging in /var/log is pretty useful at correlating other events and may give a few clues too.

I've tried to disable AutoChannelSupported, but it didn't work. There was no error, but the command just doesn't seem to have any effect.
The same happened when I tried to edit ChannelsInUse.

Yes, I've disabled TR69 using the commands in the first post.

I've also tried editing PossibleChannels to one value, but it didn't help either.

It's quite trickly using the full log because it holds history only for a few minutes (3-5 mins in my case) and then it gets reset.

Anyway, I think I've found the relevant entires in the log (see below).
It seems that some script activates channel hopping because of "channel switch is not radar".

Any clues what does it means and how it can be disabled?

Sep 13 09:45:02 (none) local7:info hg6d[854]: [XMO-SERVER][SERVER] onReceiveData(171): Receive a XMO request from ''
Sep 13 09:45:02 (none) user:err eapd[20676]: [EAPD] WLC_E_CSA_COMPLETE_IND
Sep 13 09:45:02 (none) local7:info hg6d[854]: [HAL-WIFI] getAcsSelectedChannel(1744): Chanspec [e22a] center channel: 42, primary channel: 44, bandwidth: 80
Sep 13 09:45:02 (none) local7:info hg6d[854]: [HAL-WIFI] BCM_cbReadRadioEvent(1838): Switch event to channel 44has been received
Sep 13 09:45:02 (none) local7:notice hg6d[854]: [WIFI-RADIO-SMU]RADIO5G GetChannelEvent(2538): Current Channel modified from 100 to 44
Sep 13 09:45:02 (none) local7:info hg6d[854]: WIFI 0 Channel: (100/44) Channel Hopping initiated/Manually initiated
Sep 13 09:45:02 (none) local7:notice hg6d[854]: [WIFI-RADIO-SMU]RADIO5G GetChannelEvent(2540):
Sep 13 09:45:02 (none) local7:notice hg6d[854]: [WIFI-RADIO-SMU]RADIO5G GetChannelEvent(2544): Current Channel 44
Sep 13 09:45:02 (none) local7:info hg6d[854]: [HAL-WIFI] BCM_cbReadRadioEvent(1849): Channel switch reason is not radar
Sep 13 09:45:02 (none) daemon:debug smartid[1112]: [XMO-CLIENT] processReply(2317): Reply received
Sep 13 09:45:02 (none) daemon:debug smartid[1112]: [XMO-CLIENT] processEvent(2388): Event received: value change
Sep 13 09:45:02 (none) local7:info hg6d[854]: [XMO-SERVER][SERVER] sendData(252): XMO response sent to ''
Sep 13 09:45:02 (none) local7:info hg6d[854]: [XMO-SERVER][SERVER] onReceiveData(171): Receive a XMO request from ''
Sep 13 09:45:02 (none) local7:info hg6d[854]: [XMO-SERVER][SERVER] sendData(252): XMO response sent to ''
Sep 13 09:45:02 (none) daemon:debug smartid[1112]: [XMO-CLIENT] processReply(2317): Reply received
Sep 13 09:45:02 (none) daemon:debug smartid[1112]: [XMO-CLIENT] processEvent(2388): Event received: value change
Sep 13 09:45:02 (none) local7:info hg6d[854]: [XMO-SERVER][SERVER] onReceiveData(171): Receive a XMO request from ''
Sep 13 09:45:03 (none) local7:info hg6d[854]: [HAL-WIFI] getAcsSelectedChannel(1744): Chanspec [e22a] center channel: 42, primary channel: 44, bandwidth: 80
Sep 13 09:45:05 (none) local7:info hg6d[854]: [HAL-WIFI] getAcsSelectedChannel(1744): Chanspec [1006] center channel: 6, primary channel: 6, bandwidth: 20

Can anyone please reupload the firmware 2600t as the links are down. Thanks

http://cpe.ttcdn.uk/cpe/Sagemcom/SG4K10001E00t/SG4K10001E00t-sagemcom-5364-talktalk-6.72.38_Prod-combined-squashfs.img.gsdf
http://cpe.ttcdn.uk/cpe/Sagemcom/SG4K10002600t/SG4K10002600t-sagemcom-5364-talktalk-6.72.40_Prod-combined-squashfs.img.gsdf
http://cpe.ttcdn.uk/cpe/Sagemcom/SG4K10002808t/SG4K10002808t-sagemcom-5364-talktalk-6.72.44_Prod-combined-squashfs.img.gsdf
http://cpe.ttcdn.uk/cpe/Sagemcom/SG4K10002810t/SG4K10002810t-sagemcom-5364-talktalk-6.72.44.11_Prod-combined-squashfs.img.gsdf
http://cpe.ttcdn.uk/cpe/Sagemcom/SG4K10002816t/SG4K10002816t-sagemcom-5364-talktalk-6.72.44.14_Prod-combined-squashfs.img.gsdf

1 Like

Thank you very much for the download links

Hi,

I've successfully flashed 2600t and enabled ssh. I've been able to ssh into the router and then login as root. I've disabled updates and run the following, verbatim, with no errors, from a PC connected to the 4th ethernet port.

xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=1]/Ports/Port[@uid=2]/Enable" -s "false"
xmo-client -p "Device/Bridging/Bridges" -a
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports" -a
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports" -a
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports" -a
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Enable" -s "true"
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports/Port[@uid=1]/Enable" -s "true"
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports/Port[@uid=1]/ManagementPort" -s "true"
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports/Port[@uid=2]/Enable" -s "true"
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports/Port[@uid=3]/Enable" -s "true"
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports/Port[@uid=2]/LowerLayers" -s "Device/Ethernet/Interfaces/Interface[PHY1]"
xmo-client -p "Device/Bridging/Bridges/Bridge[@uid=3]/Ports/Port[@uid=3]/LowerLayers" -s "Device/Ethernet/VLANTerminations/VLANTermination[VLAN_DATA]"
xmo-client -p "Device/IP/Interfaces/Interface[@uid=2]/IPv4Addresses/IPv4Address[@uid=1]/Enable" -s "false"

I can then restart the router but plugging an ethernet from my main router into the 1st ethernet port does not work, the router says it is not connected to the internet and none of the devices connected to it can reach the internet. Do I need to upgrade to a more recent firmware before running the xmo-client commands? Am I missing a step or any other ideas as to why this wouldn't be working?

Many thanks - Duck

Has anyone got the TalkTalk Business firmware for this router (Fast 5364)? SG4K1100014

Thanks in advance (with fingers tightly crossed)

1 Like

I've ended up with a couple of these and it would be great to see OpenWRT on them as it's a step up from the BT HH5/Plusnet Hub, it's beyond me to develop it but do OpenWRT take hardware donations and I'll send one to a Dev (please don't message me if you're just want one, I'll only send it to a dev)?

Due to the Broadcom SOC, this isn't going to happen, no drivers for the xDSL modem nor the wireless part (yes, you could support it to the extent of becoming a wired-only ethernet router, but that's it).

i creat this topic i hope to help communty

Hi David,
did you try to add root to the XMO user. Will this reset the root passwd in the internal busybox?

Hi,

Desperately seeking a firmware downgrade to allow me to setting set static routes on this questionable device, but the GoFile links previously published in this thread say the "upload does not exist".

Is it just me?

Many thanks.

Sorry, ignore that: just seen David Brent's very helpful compendium of links from last September.

Fingers crossed.

1 Like

Thank you for the links. They look like original links provided by Talk Talk servers to update router firmware!

Would it be possible to somehow list the directory contents, or some other way to try and obtain the firmware for the Business hubs from this site? Firmware verison is SG4K1100014 which would hopefully provide the additional features that the business hubs provide.

Thank you

Sadly there's no directory listing but if someone can provide the full version number, you could probably guess the URL as they all seem to follow the same naming convention.

Doing some googleing yielded the following results:

Hardware Version - FAST5364 3.00, Software Version - SG4K1100014, GUI Version – 4.58.2

firmware version SG4K1100014 GUI version 3.7.8 Hardware ver FAST5364 3.00

I noticed in the TT links, part of the version number is 6.72.xx.xx do you know where this number can be obtained from? I can try and ask on the TT forums to see if someone with the businedd router can find out their version number if I know where it can be found. Thank you.

What you really need is the value of the DeviceInfo/InternalFirmwareVersion property. If you could get someone who owns one to login to the admin interface and then use Developer Tools (usually F12) and run the command $.xmo.getValuesTree("Device/DeviceInfo") in a debug console, it will return an object with more details. This should give a few more clues if you can get it!

Details from the business hub (some info omitted from output):

AdditionalHardwareVersion: "3.00"
BackupSoftwareVersion: "SG4K1100015"
ConfigBackupRestoreEnable: false
Country: "UK"
DeploymentName: "TalkTalk"
Description: "F5364"
ExternalFirmwareVersion: "SG4K1100014"
GUIAPIVersion: "GUI v1.10.1"
GUIFirmwareVersion: ""
HardwareVersion: "FAST5364 3.00"
InternalFirmwareVersion: "6.72.44.7_Prod"
Mode: "GW"
ModelName: "F@ST 5364"
ModelNumber: "SagemcomFAST5364"
ProductClass: "F@ST 5364"
SoftwareVersion: "SG4K1100014"
SpecVersion: "1.0"

I did try and guess the link unsuccessfully using variations on SG4K1100014 and 6.72.44.7_Prod

While I don't have a residential version to compare, I can see that you can change DNS on the business hub, but not a lot else. I cant even add a static route, which is how I have ended up here "XMO_ACCESS_DENIED_ERR".

No ssh, so I tried to load a residential firmware to enable it via the Web UI from the above links and it no longer boots.

So regrettably I have managed to brick my TT business hub, when I power it on it responds to ping on 192.168.1.1 (bootloader) for about 3 seconds and disappears. If I could find the business firmware, I might be able to reload the firmware via TFTP/serial cable connected onboard, but thats about all I can think to do with it.

Why they restrict the firmwares so much is really annoying, a router that wont static route is like going back 2 decades.

Anyway, be warned trying to flash firmware's manually !

1 Like