MONKey
Inactive User
Right, here goes. You will find all the files you need at the bottom of this post. You undertake this at your own risk and I am not responsible if you brick your modem doing this. You cannot use this guide for bricked modems.
STEP 1:
If your modem is stealth you will need to restore the bootloader first. If you already have a bootloader then you can skip to STEP 2.
To restore the bootloader, download the bootloader from the bottom of this post then use one of the SoftJTAG applications to connect to your modem via Com 1. I have included both as I found that some modems will only work with one or the other depending on what firmware you have on the modem so if one doesn't work the other will.
NOTE - If you get an error when trying to open SoftJTAG then you'll need to install these first:
.NET Framework 2.0
Visual J# Version 2.0
Once connected to the modem click on 'WRITE BOOTLOADER' and select the bootloader included with this guide.
Once it's flashed your now ready to go to STEP 2.
STEP 2:
Install Solarwinds TFTP Server
Copy 250.bin to C:\
Set network adapter to 192.168.100.10
Run Solarwinds
Goto 'FILE' > 'CONFIGURE' and make sure the root of your C:\ drive is selected and that you can see the 250.bin file
Next select the 'SECURITY' tab and click the radio button next to 'TRANSMIT & RECEIVE FILES' followed by the 'OK' button
Now connect your MAX Cable to the modem and double click on the 'AMBIT' Hyperterminal file included
Power up the modem and press 'P' within 2 seconds
Change the board IP to 192.168.100.1 and press 'ENTER'
Press 'ENTER' 4 more times
Select option 'D'
Set your TFTP server as 192.168.100.10 and press 'ENTER'
Type 250.bin and press 'ENTER'
The modem should now read the firmware image. You will be informed that the image does not have a standard header and asked if you still want to store it. Type 'yes' and press 'ENTER'
You will then be asked the sector at which to start the store. Type '0' (Zero not the letter, and press 'ENTER'
It will then start to flash the chip with the origional firmware. When it’s finished, it will ask you to store parameters to flash, enter 'no and press 'ENTER'
Reboot the modem, you now have an origional 250 modem
Follow adam's tutorial here to clone your MAC. But after you enter the following command to change your serial number:
type docsDevSerialNumber (followed by your mac, but in capitals and without the ':' (enter)
Enter this command which 'should' stop your modem updating to the latest locked FW
max_dload_tries 0
Then continue with adam's guide as usual.
Big thanks to Benchould as without his help this would not of been possible
And thanks to adam for the hack to do the origional firmware
MONKey @ DW
STEP 1:
If your modem is stealth you will need to restore the bootloader first. If you already have a bootloader then you can skip to STEP 2.
To restore the bootloader, download the bootloader from the bottom of this post then use one of the SoftJTAG applications to connect to your modem via Com 1. I have included both as I found that some modems will only work with one or the other depending on what firmware you have on the modem so if one doesn't work the other will.
NOTE - If you get an error when trying to open SoftJTAG then you'll need to install these first:
.NET Framework 2.0
Visual J# Version 2.0
Once connected to the modem click on 'WRITE BOOTLOADER' and select the bootloader included with this guide.
Once it's flashed your now ready to go to STEP 2.
STEP 2:
Install Solarwinds TFTP Server
Copy 250.bin to C:\
Set network adapter to 192.168.100.10
Run Solarwinds
Goto 'FILE' > 'CONFIGURE' and make sure the root of your C:\ drive is selected and that you can see the 250.bin file
Next select the 'SECURITY' tab and click the radio button next to 'TRANSMIT & RECEIVE FILES' followed by the 'OK' button
Now connect your MAX Cable to the modem and double click on the 'AMBIT' Hyperterminal file included
Power up the modem and press 'P' within 2 seconds
Change the board IP to 192.168.100.1 and press 'ENTER'
Press 'ENTER' 4 more times
Select option 'D'
Set your TFTP server as 192.168.100.10 and press 'ENTER'
Type 250.bin and press 'ENTER'
The modem should now read the firmware image. You will be informed that the image does not have a standard header and asked if you still want to store it. Type 'yes' and press 'ENTER'
You will then be asked the sector at which to start the store. Type '0' (Zero not the letter, and press 'ENTER'
It will then start to flash the chip with the origional firmware. When it’s finished, it will ask you to store parameters to flash, enter 'no and press 'ENTER'
Reboot the modem, you now have an origional 250 modem
Follow adam's tutorial here to clone your MAC. But after you enter the following command to change your serial number:
type docsDevSerialNumber (followed by your mac, but in capitals and without the ':' (enter)
Enter this command which 'should' stop your modem updating to the latest locked FW
max_dload_tries 0
Then continue with adam's guide as usual.
Big thanks to Benchould as without his help this would not of been possible
And thanks to adam for the hack to do the origional firmware
MONKey @ DW
Last edited by a moderator: