TFTP RECOVERY ON DASAN H660GM-A , econet: en7528

IS THERE ANY WAY TO PUSH firmware USING TFTP , via ethernet or http METHOD IN THIS ROUTER , EVERTHING IS LOCKED including uart ,i wanna push openwrt in this
tftp port is open , but it need the device to go into recovery mode to accept package , I dont know how to put it in


Your device does not appear to be supported by OpenWrt. Therefore, there is no way to load OpenWrt onto that system.

EDIT: I was partially correct. It seems that it is possible to use OpenWrt on this device, but there are a lot of caveats. Information here:

yes its wip , but ye thats what i meant @naseef may help with this matter

Please share the UART logs. Also see the warning section in the installation section in wiki

UART is locked as firmware blocked it , its stock firmware

NVM I unlocked it , kheekeh

@naseef where can i get openwrt imgs for this router

@neoochii How did you unlocked it, I also have H660GM-A Router, Please Help me about it

The target econet is now source only. I am afraid you need to build it yourself

Please share the unlocking method so that other's in the community can also benefit

I tried building it ,but it got bricked my router ,both generic bin and airtel trx file ,i dont know what to do after this , and about the unlock method that i can share in dm ,but not in public i am sure they will patch it eventually tbh i am confused here

I have Dasan H646GM-V (a variant of H660GM-A) and unlocked it by using CH341A to read the encryption key from nand, then used it to decrypt the config file and get the SSH/Telnet password.

send dm on tg , i dont use insta

here the unlock method

No offense, but giving a link to a repo with a windows exe and instruction to turn off antivirus does not look good to me

well thats for basic people , for you shorting tx rx gets it to recovery mode
then tftp method work , and you know the rest

if you all guys doesn wanna use exe file then do it manully as i said here , google it but dont ping or text me regarding this cause i cant spoon feed yall

Step 1: Enter Recovery Mode

  1. Power OFF the router.
  2. Short the RX and TX test pads on the PCB.
  3. Power ON or reboot the router while keeping RX and TX shorted.
  4. Wait a few seconds for the device to enter recovery mode.
  5. Remove the short.

Step 2: Configure Static IP

Set your PC's Ethernet adapter to:

IP Address : 192.168.1.100
Subnet Mask: 255.255.255.0
Gateway    : 192.168.1.1

Step 3: Verify Recovery Mode

Open Command Prompt:

ping 192.168.1.1

If the replies show:

TTL=20

the router is in the correct recovery state and you can proceed.


Step 4: Upload tclinux.bin

Open Command Prompt in the directory containing tclinux.bin and run:

tftp -i 192.168.1.1 PUT tclinux.bin

Wait for the upload to finish.

The router should automatically reboot after processing the file.


Step 5: Telnet Login

After the router reboots, connect using Telnet:

telnet 192.168.1.1

Login credentials:

Username: admin
Password: A!rTe7c

Step 6: Execute Commands

After logging in, run:

bootcfg customer DASAN

Then:

prolinecmd restore default

Step 7: Reboot

Reboot the router:

reboot

or power cycle the device.

After reboot, the device should be initialized with the updated customer profile and default configuration.


Troubleshooting

Ping Does Not Show TTL=20

  • Repeat the RX/TX shorting procedure.
  • Verify the static IP configuration.
  • Disable other network adapters.
  • Try another Ethernet cable.

TFTP Transfer Fails

  • Ensure tclinux.bin is in the current directory.
  • Verify the router responds at 192.168.1.1.
  • Temporarily disable the firewall if necessary.

Telnet Login Fails

  • Wait several minutes after reboot.
  • Verify the device has completed booting.
  • Repeat the procedure from recovery mode if required.

AI is good btw

Username: admin
Password: 1234 //try this if default doesnt work

The mesh router used with the GPON H646GM-V modem is called the Dasan W520CE (both use the same firmware), and it uses the EN7561HU SoC. Does anyone know if it is a stripped-down version of the EN7528HU without PON support?