Friday, September 25, 2015

ZTE MF823 4G - change IP of Modem and get Public IP forwarded to the Router...

The ZTE MF823 4G Modem is a kind of Modem which you Plug in to the Router or Computer and it should just work. Yes it does.... You Plug it in and the connection is already established.

This makes since a bit more difficulty as the Modem has its own DHCP and IP Range which it uses. The Modem has also its own Firewall which blocks all incoming traffic. As I have a public IP and use the Modem with my Router, I would like to get the WAN traffic forwarded to my Router.

I couldn't manage (yet) to get the real "Port Forwarding" working, but as after the modification I could use the DMZ where I entered the IP of my Router. So this means that all the traffic coming to the public IP will be forwarded to the Router where the Router Firewall will block stuff if needed.

For the connection to the Modem we just need to do a telnet which can be done from Windows or Putty which I prefer. The IP for the ZTE MF823 4G is standard 192.168.0.1 what I didn't change yet.


The Login and Password are the below:
Username: root
Password: zte9x15

After successfully login to the modem it should look like this:

 OpenEmbedded Linux 9615-cdp  
 msm 20130829 9615-cdp  
 9615-cdp login: root  
 Password:  
 root@9615-cdp:~#  



There is the ZTE Web application which is located in the following folder in the modem: /usr/zte_web/web and the categories are located in the folder: /usr/zte_web/web/js/ which looks like this:


There we can see that there are all kind of different categories which could be added to the Web Interface menu. Well you probably know but the Web Interface you just open in the web browser with the IP of the Modem (default 192.168.0.1). As I want to have the WAN traffic forwarded to my Router, I mostly interested in the stuff under firewall where we get the following:


Now the best part is making all this stuff visibility in the web interface so we can finally change those settings. All this what should be displayed in the web interface is locate in 1 file: /usr/zte_web/web/js/config/datacard/mf823/menu.js . This file we need to modify with the editor which we got on the modem "vi" But wait.... always better to have a Backup so if some goes wrong we can recover the the file. 

 cd /usr/zte_web/web/js/config/datacard/mf823/  
 cp menu.js menu.js_org  

This command will go to the folder and copy the original file to menu.js_org so we still got a Backup for recovering purpose. So now we can open the file with the command:

 vi menu.js

I will not go to explain on how to use vi because I believe Google knows how to use it....
Almost at the end of the file you will find something like this:

  {^M  
       hash:'#pin_management',^M  
       path:'adm/pin',^M  
       level:'3',^M  
       parent:'#device_setting',^M  
       requireLogin:needLogin,^M  
             checkSIMStatus:true^M  
     },^M  

Not sure why it shows up by me like this: "},^M" .... but it should be for the stuff we paste just like this "},"
That is probably because of the coding I use in Putty or whatever other reason. So after this we can just paste the following text to enable all this Feature on the ZTE MF823 Modem:

 {  
     hash:'#port_forward',  
     path:'firewall/port_forward',  
     level:'3',  
     parent:'#device_setting',  
     requireLogin:false,  
     checkSIMStatus:false  
     },  
     {  
      hash:'#router_setting',  
      path:'adm/lan',  
      level:'3',  
      parent:'#device_setting',  
      requireLogin:false,  
      checkSIMStatus:false  
      },  
     {  
     hash:'#dmz_setting',  
     path:'firewall/dmz_setting',  
     level:'3',  
     parent:'#device_setting',  
     requireLogin:false,  
     checkSIMStatus:false  
     },  
     {  
     hash:'#upnp_setting',  
     path:'firewall/upnp_setting',  
     level:'3',  
     parent:'#device_setting',  
     requireLogin:false,  
     checkSIMStatus:false  
                             },  
     {  
     hash:'#port_filter',  
     path:'firewall/port_filter',  
     level:'3',  
     parent:'#device_setting',  
     requireLogin:false,  
     checkSIMStatus:false  
     },  

As I mentioned above, it is without the ^M  And the end of the file there will be still the menu for the update and this should stay there. Not even sure if this works, as I never received any Updates :-) After this changes are made you can save the file and refresh you web interface and you will get new cool stuff in there which is for sure helpful:


All the new Entries you can find under Device settings as you can see on the above screenshot. As I mentioned on my device I get an FAILED when I try to enable the Port Forwarding, but all the other stuff works fine for me and I can access now my router from the public IP. Be careful with changing the IP Address of the modem, as it could fail to boot when you enter some wrong settings there.

So use it on your own Risk. My first Modem ZTE needed to exchange as it didn't work anymore after trying to make this Modem to a dial up modem :-) But ZTE just exchange the modem.... Thanks!

Also thanks to http://www.elevendroids.com/ and https://wiki.archlinux.org for the information usernames and password.

16 comments:

  1. are u sure that we want to open vi menu.js_org ? why we dont open original file menu.js

    ReplyDelete
  2. sorry... sure its the vi menu.js .... I just changed this above. Thanks for pointing this out.

    ReplyDelete
  3. how can i check if DMZ is really working? i'm using the zte attached to a raspberry, and i want to DMZ the rasp so i can access it from outside, but i cannot understand if made some mistake in my network config or my mobile operator (Telecom Italia) is natting the connection..

    ReplyDelete
  4. Yes, TIM is natting, but on an unnatted TIM SIM ;) is impossible to ping the device or to connect.
    How i can disable the firewall from the telnet ?

    ReplyDelete
  5. unable to telnet or putty to the device. can you offer any advice?

    ReplyDelete
  6. Good day! I try repeat this on Beeline (Russia), but don't get any result in web gui and no errors. Can u help me, how you can forward public IP to router from modem?

    ReplyDelete
  7. so did you modify the menu.js file and you can not see the results in Device Settings ? Can you sent you current menu.js ? You can use pastebin.com so its more clear. I will check it when its there.

    ReplyDelete
  8. Hello everyone,
    if anyone have also issue with not working web panel after change IP (to be more precise m.home is working but if you type new IP it wont succesfuly loaded a web panel), please go to:

    cd /usr/zte_web/web

    Make backup of index file:
    cp index.html index.html.org

    Edit index file
    vi index.html

    Find a java scritp located in HEAD section of document, at the bottom of script you need to modify hardcoded IP from 192.168.0.1 to 192.168.XXX.1, where XXX is yours new subnet.

    ReplyDelete
  9. i followed this and managed to get the updated menu. however, when i try to enable port forwarding and hit 'apply', it fails. any idea what else i would need to configure?

    ReplyDelete
  10. Hello, is it possible to add 2100 lte band to MF286 from Orange? Device from T-Mobile have it.

    ReplyDelete
  11. Hello, is it possible to add 2100 lte band to MF286 from Orange? Device from T-Mobile have it.

    ReplyDelete

  12. Router Number Support is a top-notch company which offers the best router support services in the USA. We promise to deliver 100% satisfactory solution for all your router issues so just call our experts at +1-888-846-5560 Router Support Number.

    ReplyDelete
  13. If you are having problem with your PayPal account then you can get online help from the experts who are available 24/7 at +(1)-877-207-4415 PayPal support number.

    ReplyDelete
  14. i tried to telnet into MF831 with MTN software but it says Connection Refused. Any advice? Thanks.

    ReplyDelete
  15. Avail 24*7 of aid from our Quickbooks Payroll Support Phone Number 800-986-4607. Anytime, whenever you are in need of assistance regarding queries or issues facing, dial on our Quickbooks Support number to counter the issue.

    ReplyDelete