search

latonita / tenda-reverse

Reverse engineering, getting root access to Tenda MW6 wifi mesh router
125 stars 18 forks source link

Ability to change channels? #8

Open davidfergo opened 3 years ago

davidfergo commented 3 years ago

Do you think its possible to change wifi channels (6 for 2.4ghz and 40 for 5ghz)? Thanks!

adri360 commented 3 years ago

Yes, It's possible. First of all, connect all your nodes with your current configuration, it's necessary change at the same time all the nodes. (This is because, I don't know what is the node secundary's (MW5s in my case) IP default addresses). First, you have to hold Reset button three seconds for enabling Telnet (I tested this with MW5 and MW5s), Then, connect through Telnet (For example by PuTTY):

Then, you will have access to yours nodes. If you want to check you current settings, enter this command: cfm get ^ It will show you all avalaibles settings. Otherwise, you should be interested about settings which they start by:

This settings are:

wl2g.bss.wps.basic_have_config=0 wl2g.enable=1 wl2g.extra.ssid_encode=gb2312 wl2g.lock.bandwidth=20 wl2g.lock.channel=1 wl2g.lock.enable=1 wl2g.lock.sidebandflag=none wl2g.mesh.enable=1 wl2g.mesh.encrypt=4 wl2g.mesh.id=(private) wl2g.mesh.keys=(private)_ wl2g.public.bandwidth=40 wl2g.public.beacon=100 wl2g.public.bss_maxassoc=128 wl2g.public.channel=6 wl2g.public.country_code=US wl2g.public.country_rev=9 wl2g.public.current_power=23 wl2g.public.default_power=23 wl2g.public.dot11k=0 wl2g.public.dot11r=0 wl2g.public.dot11v=0 wl2g.public.dtim=3 wl2g.public.enable=1 wl2g.public.frag=2346 wl2g.public.ifname=wlan1 wl2g.public.interference=1 wl2g.public.lock_channel=1 wl2g.public.lock_power=1 wl2g.public.max_power=23 wl2g.public.maxclients=128 wl2g.public.min_power=8 wl2g.public.mode=ap wl2g.public.nettype=bgn wl2g.public.power=high wl2g.public.pretype=long wl2g.public.rssi_max=-80 wl2g.public.rts=2347 wl2g.public.sideband_flag=lower wl2g.public.sig_tx=-1 wl2g.public.ssid_isolate=0 wl2g.public.ssid_max=3 wl2g.public.ssidnum=4 wl2g.public.tx_power=17 wl2g.public.web_max_power=23 wl2g.public.wmm=on wl2g.public.wmm_apsd=off wl2g.public.wps_appin=(private)_ wl2g.ssid0.bss_auto_hide_ssid=1 wl2g.ssid0.bss_maxassoc=48 wl2g.ssid0.enable=1 wl2g.ssid0.guest_enable=0 wl2g.ssid0.hide=0 wl2g.ssid0.key_uptime=0 wl2g.ssid0.maclist1= wl2g.ssid0.maclist_num=0 wl2g.ssid0.macmode=deny wl2g.ssid0.pretype=long wl2g.ssid0.radius_ip= wl2g.ssid0.radius_key= wl2g.ssid0.radius_port=1812 wl2g.ssid0.radius_time=0 wl2g.ssid0.security=wpapsk wl2g.ssid0.ssid=NOVA_C4E0 wl2g.ssid0.ssid_encode=utf-8 wl2g.ssid0.sta_isolate=0 wl2g.ssid0.wep_key=1 wl2g.ssid0.wep_key1=12345 wl2g.ssid0.wep_key2=12345 wl2g.ssid0.wep_key3=12345 wl2g.ssid0.wep_key4=12345 wl2g.ssid0.wep_type=open wl2g.ssid0.wmm=on wl2g.ssid0.wmm_apsd=off wl2g.ssid0.wpa_crypto=aes wl2g.ssid0.wpa_type=wpa wl2g.ssid0.wpapsk_crypto=aes wl2g.ssid0.wpapskpsk=(private)_ wl2g.ssid0.wpapsk_type=psk psk2 wl2g.ssid0.wps_enable=1 wl2g.ssid1.bss_auto_hide_ssid=1 wl2g.ssid1.bss_maxassoc=48 wl2g.ssid1.enable=0 wl2g.ssid1.hide=0 wl2g.ssid1.key_uptime=0 wl2g.ssid1.maclist1= wl2g.ssid1.maclist_num=0 wl2g.ssid1.macmode=disabled wl2g.ssid1.radius_ip= wl2g.ssid1.radius_key= wl2g.ssid1.radius_port=1812 wl2g.ssid1.radius_time=0 wl2g.ssid1.security=wpapsk wl2g.ssid1.ssid=NOVA_VIP wl2g.ssid1.ssid_encode=utf-8 wl2g.ssid1.wep_key=1 wl2g.ssid1.wep_key1=12345 wl2g.ssid1.wep_key2=12345 wl2g.ssid1.wep_key3=12345 wl2g.ssid1.wep_key4=12345 wl2g.ssid1.wep_type=open wl2g.ssid1.wmm=on wl2g.ssid1.wmm_apsd=off wl2g.ssid1.wpa_crypto=aes wl2g.ssid1.wpa_type=wpa wl2g.ssid1.wpapsk_crypto=aes wl2g.ssid1.wpapsk_psk=12345678 wl2g.ssid1.wpapsk_type=psk2 wl2g.ssid1.wps_enable=0 wl2g.ssid2.bss_auto_hide_ssid=1 wl2g.ssid2.bss_maxassoc=48 wl2g.ssid2.hide=0 wl2g.ssid2.key_uptime=0 wl2g.ssid2.maclist1= wl2g.ssid2.maclist_num=0 wl2g.ssid2.macmode=disabled wl2g.ssid2.radius_ip= wl2g.ssid2.radius_key= wl2g.ssid2.radius_port=1812 wl2g.ssid2.radius_time=0 wl2g.ssid2.security=none wl2g.ssid2.ssid=NOVA wl2g.ssid2.ssid_encode=utf-8 wl2g.ssid2.wep_key=1 wl2g.ssid2.wep_key1=12345 wl2g.ssid2.wep_key2=12345 wl2g.ssid2.wep_key3=12345 wl2g.ssid2.wep_key4=12345 wl2g.ssid2.wep_type=open wl2g.ssid2.wmm=on wl2g.ssid2.wmm_apsd=off wl2g.ssid2.wpa_crypto=aes wl2g.ssid2.wpa_type=wpa wl2g.ssid2.wpapsk_crypto=aes wl2g.ssid2.wpapsk_psk=12345678 wl2g.ssid2.wpapsk_type=psk2 wl2g.ssid2.wps_enable=0 wl2g.ssid3.bss_auto_hide_ssid=1 wl2g.ssid3.bss_maxassoc=48 wl2g.ssid3.hide=0 wl2g.ssid3.key_uptime=0 wl2g.ssid3.maclist1= wl2g.ssid3.maclist_num=0 wl2g.ssid3.macmode=disabled wl2g.ssid3.radius_ip= wl2g.ssid3.radius_key= wl2g.ssid3.radius_port=1812 wl2g.ssid3.radius_time=0 wl2g.ssid3.security=wpapsk wl2g.ssid3.ssid=NOVA wl2g.ssid3.ssid_encode=utf-8 wl2g.ssid3.wep_key=1 wl2g.ssid3.wep_key1=12345 wl2g.ssid3.wep_key2=12345 wl2g.ssid3.wep_key3=12345 wl2g.ssid3.wep_key4=12345 wl2g.ssid3.wep_type=open wl2g.ssid3.wmm=on wl2g.ssid3.wmm_apsd=off wl2g.ssid3.wpa_crypto=aes wl2g.ssid3.wpa_type=wpa wl2g.ssid3.wpapsk_crypto=aes wl2g.ssid3.wpapsk_psk=12345678 wl2g.ssid3.wpapsk_type=psk2 wl2g.ssid3.wps_enable=0 wl5g.bss.wps.basic_have_config=0 wl5g.enable=1 wl5g.extra.ssid_encode=gb2312 wl5g.lock.bandwidth=80 wl5g.lock.channel=40 wl5g.lock.enable=1 wl5g.lock.sidebandflag=none wl5g.mesh.enable=1 wl5g.mesh.encrypt=4 wl5g.mesh.id=(private) wl5g.mesh.keys=(private)_ wl5g.public.bandwidth=80 wl5g.public.beacon=100 wl5g.public.beamformin=1 wl5g.public.channel=40 wl5g.public.country_code=US wl5g.public.country_rev=9 wl5g.public.current_power=17 wl5g.public.default_power=17 wl5g.public.dfs1.enable=0 wl5g.public.dfs2.enable=0 wl5g.public.dot11k=0 wl5g.public.dot11r=0 wl5g.public.dot11v=0 wl5g.public.dtim=3 wl5g.public.enable=1 wl5g.public.frag=2346 wl5g.public.ifname=wlan0 wl5g.public.lock_channel=1 wl5g.public.lock_power=1 wl5g.public.max_power=17 wl5g.public.maxclients=128 wl5g.public.min_power=8 wl5g.public.mode=ap wl5g.public.nettype=ac wl5g.public.power=high wl5g.public.pretype=long wl5g.public.rssi_max=-90 wl5g.public.rts=2347 wl5g.public.sideband_flag=none wl5g.public.sig_tx=-1 wl5g.public.ssid_isolate=0 wl5g.public.ssid_max=3 wl5g.public.ssid_prio=0 wl5g.public.ssidnum=4 wl5g.public.txbf=0 wl5g.public.web_max_power=17 wl5g.public.wmm=on wl5g.public.wmm_apsd=off wl5g.public.wps_appin=(private)_ wl5g.ssid0.bss_auto_hide_ssid=1 wl5g.ssid0.bss_maxassoc=48 wl5g.ssid0.enable=1 wl5g.ssid0.hide=0 wl5g.ssid0.key_uptime=0 wl5g.ssid0.maclist1= wl5g.ssid0.maclist_num=0 wl5g.ssid0.macmode=deny wl5g.ssid0.radius_ip= wl5g.ssid0.radius_key= wl5g.ssid0.radius_port=1812 wl5g.ssid0.radius_time=0 wl5g.ssid0.security=wpapsk wl5g.ssid0.ssid=NOVA_C4E0 wl5g.ssid0.ssid_encode=utf-8 wl5g.ssid0.wep_key=1 wl5g.ssid0.wep_key1=12345 wl5g.ssid0.wep_key2=12345 wl5g.ssid0.wep_key3=12345 wl5g.ssid0.wep_key4=12345 wl5g.ssid0.wep_type=open wl5g.ssid0.wpa_crypto=aes wl5g.ssid0.wpa_type=wpa wl5g.ssid0.wpapsk_crypto=aes wl5g.ssid0.wpapskpsk=(private)_ wl5g.ssid0.wpapsk_type=psk psk2 wl5g.ssid0.wps_enable=1 wl5g.ssid1.bss_auto_hide_ssid=1 wl5g.ssid1.bss_maxassoc=48 wl5g.ssid1.enable=0 wl5g.ssid1.hide=0 wl5g.ssid1.key_uptime=0 wl5g.ssid1.maclist1= wl5g.ssid1.maclist_num=0 wl5g.ssid1.macmode=disabled wl5g.ssid1.radius_ip= wl5g.ssid1.radius_key= wl5g.ssid1.radius_port=1812 wl5g.ssid1.radius_time=0 wl5g.ssid1.security=wpapsk wl5g.ssid1.ssid=NOVA_VIP wl5g.ssid1.ssid_encode=utf-8 wl5g.ssid1.wep_key=1 wl5g.ssid1.wep_key1=12345 wl5g.ssid1.wep_key2=12345 wl5g.ssid1.wep_key3=12345 wl5g.ssid1.wep_key4=12345 wl5g.ssid1.wep_type=open wl5g.ssid1.wpa_crypto=aes wl5g.ssid1.wpa_type=wpa wl5g.ssid1.wpapsk_crypto=aes wl5g.ssid1.wpapsk_psk=12345678 wl5g.ssid1.wpapsk_type=psk2 wl5g.ssid1.wps_enable=0 wl5g.ssid2.bss_auto_hide_ssid=1 wl5g.ssid2.bss_maxassoc=48 wl5g.ssid2.hide=0 wl5g.ssid2.key_uptime=0 wl5g.ssid2.maclist1= wl5g.ssid2.maclist_num=0 wl5g.ssid2.macmode=disabled wl5g.ssid2.radius_ip= wl5g.ssid2.radius_key= wl5g.ssid2.radius_port=1812 wl5g.ssid2.radius_time=0 wl5g.ssid2.security=none wl5g.ssid2.ssid=NOVA wl5g.ssid2.ssid_encode=gb2312 wl5g.ssid2.wep_key=1 wl5g.ssid2.wep_key1=12345 wl5g.ssid2.wep_key2=12345 wl5g.ssid2.wep_key3=12345 wl5g.ssid2.wep_key4=12345 wl5g.ssid2.wep_type=open wl5g.ssid2.wpa_crypto=aes wl5g.ssid2.wpa_type=wpa wl5g.ssid2.wpapsk_crypto=aes wl5g.ssid2.wpapsk_psk=12345678 wl5g.ssid2.wpapsk_type=psk2 wl5g.ssid2.wps_enable=0 wl5g.ssid3.bss_auto_hide_ssid=1 wl5g.ssid3.bss_maxassoc=48 wl5g.ssid3.hide=0 wl5g.ssid3.key_uptime=0 wl5g.ssid3.maclist1= wl5g.ssid3.maclist_num=0 wl5g.ssid3.macmode=disabled wl5g.ssid3.radius_ip= wl5g.ssid3.radius_key= wl5g.ssid3.radius_port=1812 wl5g.ssid3.radius_time=0 wl5g.ssid3.security=wpapsk wl5g.ssid3.ssid=NOVA wl5g.ssid3.ssid_encode=gb2312 wl5g.ssid3.wep_key=1 wl5g.ssid3.wep_key1=12345 wl5g.ssid3.wep_key2=12345 wl5g.ssid3.wep_key3=12345 wl5g.ssid3.wep_key4=12345 wl5g.ssid3.wep_type=open wl5g.ssid3.wpa_crypto=aes wl5g.ssid3.wpa_type=wpa wl5g.ssid3.wpapsk_crypto=aes wl5g.ssid3.wpapsk_psk=12345678 wl5g.ssid3.wpapsk_type=psk2 wl5g.ssid3.wps_enable=0

The settings marked above they are the ones that I tried.

The way for changing the settings is: cfm set _settingname value For example: cfm set wl5g.public.channel 44

Try them and good luck! Thanks for all your work latonita!