Cable Modem 4200i with 0.4.9.6 Firmware help

thejackal

Inactive User
Joined
Jul 31, 2007
Messages
5
Reaction score
0
Hi, looking for a method to change the firmware on this modem, I already have the firmware etc, it will not netboot because of the firmware currently installed.
 
u can use bit file method or max232 in to change the firmware
 
Cant be bothered with jtag unless absolutely no choice, whould rather use bit file method, I have the bit file but cant seem to find the snmpset utility, is there a download for that on this site ?

Also could do with a tutorial on how to use the bit file, have read about 10,000 articles on loads of different forums but cant seem to find a tutorial at all.

Help
 
here u go m8
1. download and install net-snmp-5.4.0-1.win32 from http://www.net-snmp.org/download.html
2. set the ip of your pc to 192.168.100.10, netmask 255.255.255.0 and def.gateway to 192.168.100.1

3. look up the hfc mac of your cable modem usually @ the back of the modem or by going to http://192.168.100.1/address.html and convert it to integer as follows: for example if your mac is 00:11:1A:02:CD:14 take the last 4 values and remove the colons resulting in 1A02CD14

4. start windows calculator (calc.exe) and select scientific from the view menu

5 select Hex and enter the value 1A02CD14, now select Dec and note down the integer value (436391188 )

6. start your tftp server or use tftpd32.exe located in the in the folder as well.also make sure the .bit file eg:(sb4100.bit, sb4200.bit..) of your modem it located in the tftp root directory of your TFTP client.

7. open a dos cmd window 8. issue following command:
snmpset -v2c -c public 192.168.100.1 1.3.6.1.4.1.1166.1.19.3.1.18.0 i (add the numbers u got from windows calculator here )-so it looks like this

snmpset -v2c -c public 192.168.100.1 1.3.6.1.4.1.1166.1.19.3.1.18.0 i (436391188)
9. observe which file the modem tries to tftp if should get sb4100.bit if u doing a 4100 …and if write your modem should reboot.
10.once modem has rebooted keep ip the same and close tftpd32.exe
11.open cmfirm3.exe and make sure in the
cm address is set to 192.168.100.1
community is set to plublic
fireware server is set to 192.168.100.10
firmware file select the firmware u want to put on the modem eg: SB4100-0.4.4.5-SCM01-NOSH-2.03.hex.bin
and the base directory point it to where the SB4100-0.4.4.5-SCM01-NOSH-2.03.hex.bin is located
then press start then wait till the modem as rebooted then goto 192.168.100.1 you should see the hack tab that it ur done
 
done everything you say above. The bit files get loaded by tfpt and then the modem reboots. I then close tftp and try and use cmfirm3.exe but is say

Pinging Cable Modem.....Please Wait
Reply from 192.168.100.1 took 0 milliseconds
Setting TFTP IP Address 192.168.100.10 on Cable Modem.
Error: No Such Name

What do you think is wrong? I'm currently on firmware SB4100-0.4.9.6-SCM01-NOSH. Also used this command line at DOS prompt

snmpset -v2c -c public 192.168.100.1 1.3.6.1.4.1.1166.1.19.3.1.18.0 i 1079138078

Any know the answer to this because I've spent 6 hours trying this out only to become stuck and have no idea and I think I'm going to give up soon.
 
Last edited:
make sure the community is set to public and the addresses r correctly and the port is set to 161 eg;
cm adress = 192.168.100.100.1
firmware server =192.168.100.10

also make sure in the firmware file box is SB4100-0.4.4.5-SCM01-NOSH-2.03.hex.bin and the base directory is pointing to the cmfirm folder and the SB4100-0.4.4.5-SCM01-NOSH-2.03.hex.bin file is jn the cmfirm3 folder
 
Last edited:
checked all that and still getting

Pinging Cable Modem.....Please Wait
Reply from 192.168.100.1 took 0 milliseconds
Setting TFTP IP Address 192.168.100.10 on Cable Modem.
Error: No Such Name
 
after the dos command I get

SNMPv2-SMI::enterprises.1166.1.19.3.1.18.0 = INTEGER: 1079138078

appear and this from tftp

Read request for file <SB4100.bit>. Mode octet [18/09 09:01:22.234]
Using local port 1207 [18/09 09:01:22.234]
<SB4100.bit>: sent 0 blk, 0 bytes in 1 s. 0 blk resent [18/09 09:01:23.234]
Read request for file <SB4100.bit>. Mode octet [18/09 09:01:23.250]
Using local port 1208 [18/09 09:01:23.250]
<SB4100.bit>: sent 1 blk, 124 bytes in 0 s. 0 blk resent [18/09 09:01:23.765]

is this correct?
 
after the dos command I get

SNMPv2-SMI::enterprises.1166.1.19.3.1.18.0 = INTEGER: 1079138078

appear and this from tftp

Read request for file <SB4100.bit>. Mode octet [18/09 09:01:22.234]
Using local port 1207 [18/09 09:01:22.234]
<SB4100.bit>: sent 0 blk, 0 bytes in 1 s. 0 blk resent [18/09 09:01:23.234]
Read request for file <SB4100.bit>. Mode octet [18/09 09:01:23.250]
Using local port 1208 [18/09 09:01:23.250]
<SB4100.bit>: sent 1 blk, 124 bytes in 0 s. 0 blk resent [18/09 09:01:23.765]

is this correct?
that correct, that means factory mode is enable u should now be able to use cmfirm3 with the correct settings i posted above but make sure u close the tftpd32 server 1st if ur having problem getting it to work just change the by doing this

snmpset -v2c -c public 192.168.100.1 1.3.6.1.4.1.1166.1.19.4.4.0 x
0123456789ab

replace the digits in red with mac u want to put on the modem but make sure its a 20mb mac as u cant alter the the config file so what ever the speed is of the mac that the speed u will get, then run the cmd and copy the above and paste it into the dos window and press enter and it should say something about hex = and ur mac then just reboot the modem and connect the feed if the mac is good u should be online
 
Chapter21(New)

--------------------------------------------------------------------------------

A DOCSIS 1.1 to DOCSIS 1.0 Changer
Build 104


Features:
* Embedded SNMP client
* Supports 5 Firmware versions
* Patches CVC to allow for non-signed firmware
* Automatically downgrades to Open Sesame compatible firmware

Instructions:
----------------------------------------------------------------------
1: Change the IP address of your Ethernet card to 192.168.100.10
2: Connect your cable modem directly to your Ethernet card
3: Start this application
4: Click "Let's go!"
5: Wait then manually unplug the power and plug it back in
6: Click "Let's go!" again

What Will Happen:
----------------------------------------------------------------------
The software will connect to your cable modem and put it into
Surfboard Factory mode using the Bit File scheme. Then it will use
the Factory Mode to install shell code that will execute the ChangeFirmware
function. At this point, you need to hard boot your cable modem, then start
the process over again. The second (or third) time around, the modem will
downgrade its firmware to DOCSIS 1.0. Then, just use Open Sesame to isntall
any firmware version you want!


Firmware versions supported:
----------------------------------------------------------------------
SB4200-1.4.9.0-SCM00-NOSH
SB4200-1.4.9.2-SCM01-NOSH
SB4100-1.4.9.0-SCM00-NOSH
SB4100-1.4.9.2-SCM01-NOSH
SB4100-0.4.5.0-SCM00-NOSH

Thx to DerEngel
 
@ jumpinjo I did put can you email me this file but I've downloaded it from somewhere but is does support my firmware.
 
Last edited:
@gentlex do I need to enter the mac in hex? OR shall I convert it to integer?
 
getting error

Error in packet.
Reason: noAccess
Failed object: SNMPv2-SMI::enterprises.1166.1.19.4.4.0
 
@gentlex do I need to enter the mac in hex? OR shall I convert it to integer?
enter ur mac as normal like 0020456a632 if ur getting erro run the snmp program again then open dos and paste in again
 
Just getting No access everytime I think this firmware can not be done via BIT mehtod. Any one got a guide to the queens method?
 
Just getting No access everytime I think this firmware can not be done via BIT mehtod. Any one got a guide to the queens method?
hi m8 that firmware is the ezs to do with bit file some think along the line must wrong, redo the enable factory mode part then try it
 
tried everything again and again. This is the fifth time now and guess what no access every time.

Should it reboot when entering factory mode? because mine does.
 
tried everything again and again. This is the fifth time now and guess what no access every time.

Should it reboot when entering factory mode? because mine does.
yea it does once factory mode is enable do u have any firewall or anti virus running once u see interger = and the conversion of ur mac digits then factory is enable
 
well,ive just tryed chapter 21 on my sb4200 with 1.4.9.0-SCM00-NOSH and it worked a treat.never thought 2 try chapter 21 after koevoet said it was a piece of crap, but give der angel a bit of credit ,it certainly worked on my modem.
 
well,ive just tryed chapter 21 on my sb4200 with 1.4.9.0-SCM00-NOSH and it worked a treat.never thought 2 try chapter 21 after koevoet said it was a piece of crap, but give der angel a bit of credit ,it certainly worked on my modem.
i think jumpijo said its a new version the other 1 was a piece of crap well not really crap but very limited... i've got a lock sb 4xxx try it on as it seems sb r becoming antique these day
 
Back
Top