apilosov
join:2002-12-27
Forest Hills, NY
| NYC/DirecTV Broadband Gateway reprogramming
I'm trying to develop instructions for reprogramming Telocity/DirecTV modem for "any provider". I already have a few ideas, but need access to more modems to confirm that it works.
If you are in NYC area, and don't mind donating your modem to science (I will pick it up but I won't issue you a receipt  ), get back to alex@pilosoft.com
Also, if there are any DTV DSL customers with still-working service, I'd like to test a few things on your working modem, preferably on Sunday.
Please get back to me if you'd like to help, and let me know what kind of modem do you have ("brick"/X1/X2), and whether do you still have DTV DSL service.
I promise to share results here, if successful.
Thanks,
-alex (alex@pilosoft.com) |
|
NutBucket
join:2002-07-26
Los Angeles, CA | I noticed some nice connectors on the brick's board that would appear to let one reprogram the FPGA that's in there. That could make something happen:-P |
|
apilosov
join:2002-12-27
Forest Hills, NY
| Much simpler.
When you boot it up with a serial port attached to it and a paper clip in a "reboot" position, it dumps all configuration traffic in/out, which should make it possible to create a new "configuration server" to imitate DTV.
-alex |
|
SilentTech
join:2002-12-08
USA
| When you paperclip to erase the configuration, the gateway will wait for you to enter your DSL phone number at »10.5.1.2/ and this is used to look up your account in Telocity's database (over HTTP), which redirects the gateway to a cache server, from which the gateway downloads its configuration (also over HTTP). Unless you're in VerizonEast (formerly BellAtlantic, not GTE) or Ameritech territory (and not going through WorldCom), the gateway will actually send out a DHCP request the first time it is powered up with no configuration, and get its IP (the IP for the WAN interface, which we call the "DSLIP", pronounced "D-slip"). It also gets the LAN subnet information, via a vendor-specific option in the DHCP protocol. Apparently the Nortel Shasta router figures out where the DHCP request is coming from (based on VPI/VCI/slot/port) and adds that information to the DHCP query before passing the query on to the DHCP server. The DHCP server is able to use that information to find your account and assign the gateway the correct IP information, but the gateway won't use this for routing until the configuration is downloaded.
Ameritech uses PPPoE which works completely differently, and VerizonEast uses aggregate routing so the Shasta can't figure out who you are until you enter your phone number (that's why you get a blinking red status light - that indicates a DHCP failure). When you enter the DSL#, that is added to the DHCP request, and the request is sent again. Once the gateway has the DSL# and IP information (from DHCP), it does the HTTP download to get its configuration, and never does a DHCP request again.
The tricky part about what you're thinking of is, the DHCP request and HTTP download happen on the WAN interface, meaning the DHCP and HTTP servers have to be on the other side of a DSL connection. I've heard it's possible to get two DSL modems to sync to each other on a dry copper pair, meaning you could get a standard DSL modem acting as an Ethernet bridge, and connect it to the DirecTV DSL gateway via a phone line, but I don't know if this actually works.
I hope this information is helpful! |
|
apilosov
join:2002-12-27
Forest Hills, NY
| You are absolutely correct as far as protocols, but I just want to make sure that the protocols are not different between "brick"/X1/X2.
Also, it is not possible to get sync on dry copper, DMT can't do that.
Again, I want to make a user-friendly way to reprogram the modems, for which I'd like to have access to all different modems... |
|
apilosov
join:2002-12-27
Forest Hills, NY
| reply to apilosov
30$ for the modem, if you are in NYC!
Well, seeing less than enthusiastic response, how about a bounty?
I'll pay 30$ cash to first 10 people in NYC with DTV DSL Broadband Gateway who get back to me today or tomorrow, and agree for modem pickup.
(Sorry, no mail, since the I need the modems by tomorrow)
Please get back to alex@pilosoft.com, and state what kind of modem do you have, and how you can be reached.
Thanks. |
|
ass_kicker_9
Carmen Electra, Damn She's Hot
join:2002-03-12
San Jose, CA | reply to apilosov
Re: NYC/DirecTV Broadband Gateway reprogramming
do you have enough yet, i would donate mine, but i am in cali, please post back with the results and if we can reprogram them or not. |
|
mudgie
join:2002-10-28
North Aurora, IL | reply to apilosov
I'll follow this thread, seems like there might be a science project here.
I have an SDSL brick, vintage 1/2000. |
|
apilosov
join:2002-12-27
Forest Hills, NY | reply to apilosov
Strangely enough, so far, I only got one, an old "brick".
So, if you are in NYC and want to make quick 30$, let me know.
-alex |
|
SMCinAZ
Premium
join:2000-11-29
Glendale, AZ
clubs: | reply to apilosov
I'd pay good money to know how to reprogram one to work on regular ADSL. I have 3! |
|
apilosov
join:2002-12-27
Forest Hills, NY
| reply to apilosov
Well, here's the thing:
You can't program the modem from CPE side. You can only program it from service provider side of the line.
I know enough about modem-gateway protocol to be able to program the modems. Since I run an ISP, I am able to do that (by running certain services on my side).
Unfortunately, at home you can't duplicate this, you need a cooperating provider... |
|
fastasican
join:2001-07-08
Atlanta, GA
| r you sure you can not reprogram the modem on the CPE (sorry, don't know what CPE stands for but I have deduced that you are talking about the end-user side of the modem) any way at one time I had found a hack that allowed one to change the modem config so that I could move from USB to Ethernet after several calls to DTVDSL customer Dis-service produced little result. I appeared that all the modem's parameters could be changed from the web interface. Would you like me to dig up the output and information on my modem or would I be wasting your time?
|
|
graysonf
Premium,MVM
join:1999-07-16
Fort Lauderdale, FL
| said by fastasican  :
.... any way at one time I had found a hack that allowed one to change the modem config so that I could move from USB to Ethernet after several calls to DTVDSL customer Dis-service produced little result. I appeared that all the modem's parameters could be changed from the web interface. Would you like me to dig up the output and information on my modem or would I be wasting your time?
All you got was the admin password for your modem, and the URL to the Admin functions page.
That allows you do do a few things such as switch the routed interface back and forth between USB, ethernet, or parallel (if your modem has that port), reboot the modem, and clear and re-download the configuration.
There is nothing in the available Admin function pages that allows arbitrary reprogramming of the modem.
And the password for your modem will not work with someone else's modem. |
|
djrobx
join:2000-05-31
Valencia, CA | reply to apilosov
CPE = Customer Premesis Equipment |
|
Dammit2
@attbi.com
| This is just another former DTV tech posting his 10 cents on this subject. I am pretty sure without totally erasing and rebuilding the firmware/Software from nothing. You are wasting your time. I will give you a little hints. The X2 has 2 images of the firmware in the modem. Make sure you get them both erased otherwise the modem is programed to copy the second back to the first after it is erased.
Dammit |
|
bhan261
join:2001-02-12
New York, NY | sneaky bastards! |
|
wmcbrine
Touched by His Noodly Appendage
join:2002-12-30
Laurel, MD
| reply to apilosov
I could see loaning them, but not donating them. This is how I look at it: The reason someone might want to give you one is so that you can learn to reprogram the modems in general, thus giving them value after DirecTV folds. A fine goal. But if you succeed, then everyone who kept their modems gets the benefit, while those who donated lose it! Meanwhile, those who don't care whether the project succeeds or not -- and thus don't care if they get their modems back -- won't bother donating, because it's too much effort.
I think you'd get a better response if you promised to return the modems after testing. You probably can't guarantee you'll return them in working order, but that's OK. You can even ask people to include return postage when they send the modem if they want it back. I suspect that would work better than the $30 bounty. (After all, if this does work, then the modem is worth more than that.) |
|
SMCinAZ
Premium
join:2000-11-29
Glendale, AZ
clubs: | reply to apilosov
Like I said, I have 3. I would gladly donate an X-1 to the cause if shipping was paid for and if I was kept in the loop of info. |
|
apilosov
join:2002-12-27
Forest Hills, NY
| reply to Dammit2
You missed the point. I'm not reprogramming new firmware into the modem. I'm creating a replica of DTV configuration server for ISP to run, so unaltered modems can pick up configuration.
If you can contribute more precise protocol description for HTTP-based config protocol, or a dump of HTTP traffic session from modem to gateway, it would be appreciated |
|
apilosov
join:2002-12-27
Forest Hills, NY
| reply to wmcbrine
OK, how about this:
a) I will return the modem after reprogramming it to your favorite ISP's settings.
b) Alternatively, I'll 3 give months of free DSL service to first 5 people with X1 modem who contact me (if you are in NYC/LongIsland/North Jersey). Note, ONLY X1, I have X2 modems and they lack serial port needed to debug things... |
|
