Wimax CPE BM635 Blank WAN MAC

2,707 views
Skip to first unread message

ultraGM

unread,
Sep 13, 2011, 5:39:37 AM9/13/11
to wimax hacking
As stated in the subject pls can you help me with the procedure on how
to Fix this problem, I have follow normal step to change the MAC and
is successful on first attempt but the MAC i use cant connect so i
Change it back to the Original one, and everything goes successful
although not connected but in the third attempt i got Blank WAN MAC
after device reboot, Please Help

kh@r3c

unread,
Sep 13, 2011, 12:18:51 PM9/13/11
to wimax hacking
connect via telnet to your router
login;wimax
pass:wimax820

setallmacaddr (your wan mac)
it will automatically assign LAN and WLAN mac

or just restore the firmware you'll it will solve your problem

ultraGM

unread,
Sep 13, 2011, 1:26:37 PM9/13/11
to wimax hacking
This post is not span my Mouse did the wrong clicking

kh@r3c

unread,
Sep 13, 2011, 1:33:51 PM9/13/11
to wimax hacking
have you tried ?

ultraGM

unread,
Sep 13, 2011, 1:50:10 PM9/13/11
to wimax hacking
I hve tried to change the MAC all over again but does'nt work
But i don't know how to restore the firmware, and i don't want to use
the i download casue i don't think it will work properly. The reason
am looking for firmware donwload procedure is that i still have a
working same BM635, so i can use it firmware instead of using BM622
firmware

Spectroplasm

unread,
Sep 14, 2011, 4:37:47 AM9/14/11
to wimax hacking
The blank WAN problem is due to two reasons:

- invalid MAC address: le last 4 numbers should only be the ones you
change when you are inputing a MAC address since the begining 8 are
for model number and region code. An invalid MAC will render the board
useless unless corrected.

- corrupt nand: there is no easy solution to this problem, you will
need a nand programer or a mint firmware of the original box. When the
WAN is blank it means that the eth0 got disabled, it is in USB mode,
hence if you check the name in the ifconfig shell command will be
named as USB1 or USB0

will post a way on how to revert the USB0/1 back to eth0/1 later on,
maybe on my blogsite so stay tuned

ultraGM

unread,
Sep 14, 2011, 5:21:55 AM9/14/11
to wimax hacking

@Spectroplasm you are right and I've never read on the need to change
the last 4 only character.
I have a device of its same type I thinking if i can Backup that one
and restore to this Faulty one that should work, but i don't know how
to backup that one, Please Give me the Procedure if you know it.
Thanks

ultraGM

unread,
Sep 14, 2011, 5:58:43 AM9/14/11
to wimax hacking
The below is the ifconfig dump


Welcome Visiting Huawei WiMAX CPE
Copyright by Huawei Technologies Co., Ltd.
Login:wimax
Password:
ATP>shell
# ifconfig
ath0 Link encap:Ethernet HWaddr 4C:54:99:1D:FF:A0
UP BROADCAST RUNNING MULTICAST MTU:2290 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:222 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:22822 (22.2 KiB)

br0 Link encap:Ethernet HWaddr 4C:54:99:1D:FF:9F
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:
255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1095 errors:0 dropped:0 overruns:0 frame:0
TX packets:954 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:133209 (130.0 KiB) TX bytes:309447 (302.1 KiB)

eth0 Link encap:Ethernet HWaddr 4C:54:99:1D:FF:9F
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1095 errors:0 dropped:0 overruns:0 frame:0
TX packets:1029 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:155109 (151.4 KiB) TX bytes:325514 (317.8 KiB)

eth0.5 Link encap:Ethernet HWaddr 4C:54:99:1D:FF:9F
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1095 errors:0 dropped:0 overruns:0 frame:0
TX packets:954 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:155109 (151.4 KiB) TX bytes:316748 (309.3 KiB)


lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2 errors:0 dropped:0 overruns:0 frame:0
TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:94 (94.0 B) TX bytes:94 (94.0 B)

wifi0 Link encap:Ethernet HWaddr 4C:54:99:1D:FF:A0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:63 errors:0 dropped:0 overruns:0 frame:1
TX packets:290 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:499
RX bytes:8592 (8.3 KiB) TX bytes:39882 (38.9 KiB)
Interrupt:22 Memory:b8000000-b8010000

#
ATP>

ultraGM

unread,
Sep 20, 2011, 1:48:54 PM9/20/11
to wimax hacking
Please which one is the WAN Interface ?

kh@r3c

unread,
Sep 20, 2011, 7:28:57 PM9/20/11
to wimax hacking
look at the back of your router it's written there

that mac address is your wan mac address

kh@r3c

unread,
Sep 20, 2011, 7:32:37 PM9/20/11
to wimax hacking
eth0.5 is your WAN MAC

On 20 sep, 17:48, ultraGM <mr.goodmu...@gmail.com> wrote:

ultraGM

unread,
Sep 21, 2011, 11:54:52 AM9/21/11
to wimax hacking
But the eth0.5 suppose to be for LAN
Because in the process of changing the MAC i use setallmacaddr 4C:
54:99:1D:FF:9E which should be the MAC for WAN. And the problem am
having is Blank WAN and i was inform that;

"When the WAN is blank it means that the eth0 got disabled, it is in
USB mode,
hence if you check the name in the ifconfig shell command will be
named as USB1 or USB0 "

But now i don't see any USB interface, Please Friend Help i really
need your Help on this issue

kh@r3c

unread,
Sep 24, 2011, 5:40:22 AM9/24/11
to wimax hacking
have you checked the back of your router ?? there is a mac address
there

ultraGM

unread,
Sep 24, 2011, 12:27:30 PM9/24/11
to wimax hacking
I know the MAC for Sure but the problem is how to solve the Blank WAN
MAC problem

Ahmad Sabry El Gendi

unread,
Nov 6, 2011, 7:54:43 PM11/6/11
to wimax hacking
I know it maybe little late , but I was suffering to get the admin
Password as well

if you have Wimax BM635
and you have only the restricted user, you can do the following to get
the admin apssword:

Telnet or ssh your router IP
telnet 192.168.1.1
username: wimax
password: wimax820

when you are in the ATP> prompt type
shell

ATP>shell
# cd /etc/
/etc/VINETIC_FW/ /etc/countrysettings/ /etc/init.d/
# cd /etc/
# ls
t_tree.xml psk.txt init.d dhcps.leases
sysmsg profile helpUser.pdf dhcps.conf
services pppmsg handy_rsa_key defaultcfg.xml
serverkey.pem passwd handy_dss_key countrysettings
servercert.pem mdev.conf group bootfile.txt
root.pem ipsec.conf gateway.conf VINETIC_FW
resolv.conf inittab ethertypes
racoon.conf initbun dhcps2.leases

just
# cat defaultcfg.xml


and you search by word admin till you get the password, Pls dont
forget to pray for me :D


Regards

Ahmad Sabry

Good Muyis

unread,
Nov 10, 2011, 3:26:43 PM11/10/11
to wimax-...@googlegroups.com
Thanks for the Reply I know the Admin User and Password, what i need
is to solve the problem of Blank WAN, and i learn the Uploading
another firmware will work. Please if you have any firmware pls send
it to me

--


Abubakar

nael awad

unread,
Nov 30, 2011, 9:25:41 AM11/30/11
to wimax hacking
i have the same issue blank wan mac address Wimax device Huawei BM632
can any one send a firmware for BM632 Wimax, and how can i backup the
firmware tried all commands with wimax and wimax820 as user and
password for my device i get the admin right no matter how many time i
try to run the command
setallmacaddr

ATP>setallmacaddr 00:25:9E:DE:CC:78
setallmacaddr 00:25:9E:DE:D2:15
Set WAN mac address success.
LAN Mac address updated: 00:25:9E:DE:CC:78

Set LAN mac address success.
LAN Mac address updated: 00:25:9E:DE:CC:79

Set WiMAX mac address success.
WiMAX Mac address updated:
ATP>
when i reboot the device the wan mac still blank
any one can help

ultraGM

unread,
Jan 15, 2013, 7:13:24 PM1/15/13
to wimax-...@googlegroups.com
Hello long time Spectroplasm. Any Progress on Blank WAN

tanweer talukder

unread,
Jan 23, 2013, 7:16:09 AM1/23/13
to wimax-...@googlegroups.com
Hi


On Wed, Jan 16, 2013 at 6:13 AM, ultraGM <mr.goo...@gmail.com> wrote:
Hello long time Spectroplasm. Any Progress on Blank WAN

--
You received this message because you are subscribed to the Google Groups "wimax hacking" group.
To view this discussion on the web visit https://groups.google.com/d/msg/wimax-hacking/-/0hjStXCe18EJ.
To post to this group, send email to wimax-...@googlegroups.com.
To unsubscribe from this group, send email to wimax-hackin...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/wimax-hacking?hl=en.

mack ignacio

unread,
Jan 27, 2013, 10:48:09 AM1/27/13
to wimax-...@googlegroups.com
you need to reflash it and upload the bm632 dump file

Good Muyis

unread,
Jan 30, 2013, 12:42:47 PM1/30/13
to wimax-...@googlegroups.com
Yea thats what i need but how do i pull down thw dump file. I have
another that working well.
Thanks, mack ignacio

Good Muyis

unread,
Jan 30, 2013, 12:44:30 PM1/30/13
to wimax-...@googlegroups.com
@omoteekey whats that AAA password and it seems you can help, and i
hope you dont mind private email

On 1/28/13, TK <omot...@gmail.com> wrote:
> you need to confirm your AAA password.........thats why you are getting
> connecting status.
> --
> You received this message because you are subscribed to the Google Groups
> "wimax hacking" group.
> To post to this group, send email to wimax-...@googlegroups.com.
> To unsubscribe from this group, send email to
> wimax-hackin...@googlegroups.com.
> Visit this group at http://groups.google.com/group/wimax-hacking?hl=en.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>

tune...@gmail.com

unread,
Jan 30, 2013, 5:20:45 PM1/30/13
to wimax-...@googlegroups.com
If u wanna by-pass AAA authentication, simple change from ttls to tls. As for ur AAA , ur isp won't give that to u.

Sent from my HTC
To unsubscribe from this group and stop receiving emails from it, send an email to wimax-hackin...@googlegroups.com.

To post to this group, send email to wimax-...@googlegroups.com.

omot...@gmail.com

unread,
Jan 30, 2013, 5:35:09 PM1/30/13
to wimax-...@googlegroups.com
You can't use others firmware except that for ur network. Firmware parameters varies network wise. Some firmwares av their cert. Imbedded in them and frequency too. So u can't use a firmware for my country in ur country


Sent from my HTC

----- Reply message -----
From: "Good Muyis" <mr.goo...@gmail.com>
To: <wimax-...@googlegroups.com>
Subject: Wimax CPE BM635 Blank WAN MAC

Good Muyis

unread,
Feb 1, 2013, 5:08:40 PM2/1/13
to wimax-...@googlegroups.com
Thanks @omoteekay
What so how can i download the firmware from a working device of its same type
i have use Solarwind TFTP to download some files from the devise via
telnet, but the whole ware. how can i dump it.
Thanks

Jason Osakabe

unread,
Oct 27, 2013, 11:23:00 PM10/27/13
to wimax-...@googlegroups.com
Maybe this blog site will help you guys.
You just need a basic electronics skill.
Good luck!

Mehran

unread,
Oct 28, 2013, 9:46:05 AM10/28/13
to wimax-...@googlegroups.com
How can i make script and put run it every time modem reboot ?
Reply all
Reply to author
Forward
0 new messages