Zte Mf10 Firmware Update

0 views
Skip to first unread message

Vaniria Setser

unread,
Jun 29, 2024, 10:51:06 AM6/29/24
to thropselroalou

I don't understand what you want to do.
You made a backup of the mtd3 and mtd4 partitions of a first router, and you want to flash the backup files in the mtd3 and mtd4 partitions of another router ?

I don't know if the instructions can be adapted to Windows.
I have to made some tests and when they're done i will try to help you.
The idea is still the same : transfer busybox with expect program, then use busybox to transfer backup files on the router and then use the command mtd_write to flash mtd3 and mtd4.
Of course you have to be sure that mtd3 and mtd4 partitions are the same size on both router, else you have to concat mtd3 and mtd4 backup files in a single file and split it in two files whose size correspond to mtd3 and mtd4 size of the destination router.

On windows you must install cygwin with optional packages inetutils and expect.
That way you will have utilities dd, expect and telnet used in the tutorial.
If you want i can send you the 'expect' script (used at step 4 of the tutorial) i generate to send busybox on the router.
And when busybox is on the router you will be able to transfer your files on the router and flash them on the mtd3 and mtd4 partitions.
Once again i warn you about the size of the files, that must match the size of the partitions you intend to write

(beware of the case and the space character between zte-mf10 and the quote) and type CTRL-C to exit interactive mode.
Wait a few minutes for the transfer to complete.
- Finally verifiy the md5sum : on the router type

Note that the previous commands can't harm your router. busybox is written in tmpfs (which is a filesystem in memory) and will be erased as soon as you reboot the router.
The only dangerous commands are the two final mtd_write of the tutorial.
That why i insist that you must check after each file transfer the md5sum and that the flash partitions and the backup files are the same size.

Maybe the two routers don't run the same version of firmware.
Are you sure the backup files are ok ?
If they are, so you should adapt to the size of the partitions.
First check that mtd3 and mtd4 are contiguous and does not overlap
Then you must concat the backup files of mtd3 and mtd4 with command

Por defecto, la interfaz de administracin est disponible en con usuario y clave admin.Igualmente tienen disponible una interfaz shell a travs del puerto 4719, accesible desde Internet, con la misma combinacin de usuario y contrasea anteriormente citadas.

Para soportar los modems 3G no listados oficialmente, se debe actualizar el firmware de la base MF10. La MF10 espaola viene con una firmware espaola de 2009 diseada para Vodafone. Sin embargo, existe la posibilidad de actualizarla una firmware bilinge, ingls y checo, de 2011. La firmware de 2011 acepta modems ms modernos. (Ref: www.dd-wrt.com)

El Huawei K4504 de Vodafone puede ser actualizado con una firmware de Vodafone, para pasar en 3G de 21Kb de bajada a 28Kb. sta es la velocidad mxima conocida que puede alcanzar la base ZTE MF10. La MF10 no es compatible con la 4G.

Sthněte si ovladače, software a přručkyChcete-li zskat přstup k dalšmu obsahu, včetně toho, kter je uveden vše, jako je firmware a často kladen dotazy, vyhledejte nže svůj produkt nebo vyberte jednu z našich oblbench skupin produktů.

LinkedIn and 3rd parties use essential and non-essential cookies to provide, secure, analyze and improve our Services, and to show you relevant ads (including professional and job ads) on and off LinkedIn. Learn more in our Cookie Policy.

Many instruments have an external reference on the rear panel. I'm thinking of RF generators here. Electronics enthusiasts always are looking for better and better 10MHz reference oscillators. My best in house is a Rubidium, and I want to lock it to GPS soon. There is another neat use for the 10 MHz ref in jack. That is what this note is about.

My IFR 1200S and other RF generators sometimes don't have enough resolution for my taste. The IFR is 146.5200 MHz, so there's 100 Hz of resolution. The trick is to use the HP 3325A as the 10 MHz reference. Now its 12-digit resolution is transferred to the RF generator.

I set mine to 10.000000000 MHz 2 V RMS. I pipe its output to my IFR's 10 MHz external reference in. Now I can control the IFR RF frequency with greater accuracy -- 146.52000001, for instance. The HP 3325A does need an oven or better local reference. I also needed my HP 5370B Time Interval Counter to read that small of a change. This unit reads 12 digits in one second. Very fine indeed.

This technique allows narrow filter eval and GPIB control of very fine frequency corrections, and fine control when multiplying a carrier up to 20 GHz etc. In this case, very small frequency changes are multiplied by the same factor, so fine frequency control is needed.

In the 1980s, I joined a seven-person startup with the idea to design a compact disk recorder. The leader had a background in optical media -- we obtained half a million in venture capital and proceeded to ramp up. I bought some lab benches and set up an electronics lab. We bought 20 or so CD players and dissected them. We were doing reverse engineering.

About a month after conception, we observed the EFM signal, which is an RF waveform correlated to the bit patterns on the disk. This was a milestone. At the time, Phillips had a Red Book of CD design, but it was very expensive. We avoided buying it and went our own way.

I was given the task of designing the R/W laser tracking system. We had scanty information that a digital pulse train would drive a stepper motor and then a gear reduction to a screw drive. A very low frequency error signal could be derived from the tracking optics.

I was like a kid in a candy store. All kinds of awesome data books and tons of sample chips were stacked neatly. I grabbed some linear data books and a couple of each kind of IC. I looked through my haul and found some switched capacitor ICs -- MF10. I used one of these as a low pass filter whose output went to an absolute value circuit. I used this to drive a VCO. I took the VCO output and drove a three-decade divide by n. I mounted BCD switches on the front panel. The divide by n drove the stepper pulse in. I used the three decades, since I had no idea of the gear ratio I would encounter.

The last few days before we flew to England we all worked around the clock to get our subsystems done. We got to England and went to work. I was happy when my design closed loop and phase locked the write servo. We actually were able to copy a disc after a bit. But one big problem came up.

One of us had bypassed the limit switches on the optical sled drive. It had a fast slew switch that sent the sled cruising to the end of travel and then mangled the brass flexible coupling used to correct slight shaft misalignment. We all sat around for a couple of weeks before we could get a replacement. It was very discouraging.

Over the years, I have heard and read about mishaps incurred by defeat of limit or lockout switches. When you see one of these, do not dismiss it lightly. To do so may threaten your life, your job, or your happiness. Steve Lindberg has loved electronics since he received his first Weller soldering gun when he was 12. He has 35 years of experience in test, debug, and design.

The Digital Multimeter (DMM) is the first instrument one buys in this trade. I started out with a 20000 ohms per volt analog meter that was only so accurate. As you get more enthused, better and better test equipment starts to find its way onto your bench. So, right now, I have about 10 DMMs that sport the nifty 4 wire ohms connection. This feature lets you measure low resistance and not have to worry about the resistance of your probe leads.

When you read the manuals for the meters, they talk about 4 wire measurements, but have little info on how to do it practically. I have only seen a few vendors who make 4 wire alligator clips and they are usually priced in the less than $100 range. Fluke has a trick 4 in 2 connection for their latest DMMs, but I didn't get one for my 8845A yet. I used to take standard probes and solder extra "sense" wires to the tips. Then I plug those into the sense inputs on the meter. This works well, but I always wanted some gold-plated, two halves connected by a rubber band type 4 wire alligator clips.

Recently, I ran into an issue using a TDR to measure a solder down differential probe cable. We were getting reproducibility issues. I thought of other methodologies to electrically measure the length of a cable. The wonderful HP (AKA Agilent) Time Interval Counter came to mind. That is the HP 5370B. This speedy machine measures 20 pS time intervals in a single shot. I thought I might be able to resolve under 1 mm cable length variations. One end of the cables has coaxial RF connections, the other a tiny circuit board with two vias at the very end. The TDR was used I think because we couldn't disturb the PCB or the UUT would be ruined.

I put a medium file in the jaw opening and filed two flat surfaces. Then I installed copper foil on each half. For the cable experiment, I also glued an SMA connector to the clothespin. I was able to measure about 8 nS for electron transit time from one end to the other. We ended up sticking with the TDR test method. But the little clothespin looked like a nifty, cheap, 4 wire alligator. Just add a wire to each halve of the jaw, and the connection is made through the component lead. Cost is very low.

A few years after I bought it, I went to power my scope up, but there was no sweep. I was in despair. When your lab is only one scope, one meter, and one homebrew function generator and power supply, the scope is stage center. After playing with the controls, I discovered I could get a sweep if I put the time/division optical encoder in between detents. So I knew the high voltage, vertical and horizontal amps, and sweep, were OK.

I decided to open up my scope. I had an idea that maybe something was wrong with the front panel. I laid the front panel down in front of the scope, with cables still connected. I had a service manual so I looked at the rows and columns of the keyboard scan. One of the signals was goofy. I narrowed it down only to find a green LED that signified AC coupling on Channel 1 was shorted. This is the only LED I have ever seen with this fault -- except the ones I purposely ran at 200 mA just to see how bright they got.

b1e95dc632
Reply all
Reply to author
Forward
0 new messages