The stuff on this page can brick your modem if you don't follow it exactly.
You might even brick it if you do follow it exactly.
I am not responsible for what you do to your modem.
NOTE: The VN007+ firmware starts with X21G. The VN007 firmware starts with X21
Do not put VN007+ fw on a 007 and vice versa.
The VN007 has a 'superuser' password (different from admin/admin) which enables extra features (IP Passthrough etc)
First you need to enable ADB on the modem. Log into the web admin GUI (usually http://192.168.0.1) and press F12 in chrome to open up the developer console.
Click on Console;
In Console type Page.level=1
Press Enter.
Now go to Management > System Settings
In here, you will be able to change the root password (not Superadmin) and enable ADB.
✍️ NOTE! This only works in old firmware 1.9.x -> 10.10.x
Be careful with this user! this is some kind of engineering/test account that gives access to things that can break your modem! This user unlocks many options not visible to any other user, such as VLANs, VPNs, test menus, more WiFi options etc.
You have to set this password. As above in the ADB console type :
mdlcfg -f SYS_WEB_SUPER_PWD_RULE="1"
mdlcfg -a SYS_WEB_SUPER_PWD_RULE="1"
mdlcfg -f SYS_SUPER_LOGIN_PWD="NEW_PASSWORD_HERE"
mdlcfg -a SYS_SUPER_LOGIN_PWD="NEW_PASSWORD_HERE"
mdlcfg -c
You can now login as superadmin with the password you just set.
Want to remove the logo ?
mount -o rw,remount / && rm /tzwww/images/logo_unicom_5g.png && touch /tzwww/images/logo_unicom_5g.png
Note this permanently deletes it.
You can also replace the image, it has to be 166x65 pixels. Once you have saved it (as a PNG) use ADB push to upload.
First, set the filesystem to read/write:
mount -o rw,remount /
then in ADB:
adb push c:\myfile.png /tzwww/images/logo_unicom_5g.png
The PCB Antennas are labelled from 1 to 8. Some PCB antennas actually have two antennas on the PCB, so you will notice that there are more ports on the board than there are PCB antennas, but some antennas have more than 1 wire going to them.
The PCB antennas functions are as follows:
PCB Antenna Number | Function | Antenna port on main board |
---|---|---|
1 | 4G LTE Diversity | ANT 2 |
2 | 5G Div (and 5.8GHz WiFi) | ANT 4 & 5G 2 |
3 | 2.4 GHz WiFi | 2.4G 2 |
4 | 5G Main (5G NSA?) | ANT 6 |
5 | 4G Main | ANT 1 |
6 | 5G Div (and 5.8GHz WiFi) | ANT 5 & 5G 1 |
7 | 2.4 GHz WiFi | 2.4G 1 |
8 | 5G Main (5G SA?) | ANT 3 |
PCB Antenna Number | Function | Antenna port on main board |
---|---|---|
1 | ? | ANT 7 |
2 | 2.4GHz WiFi | 2.4G-2 |
3 | 4G Div | ANT 1 |
4 | 5G (Main?) & 5GHz WiFi | 5G-2 & ANT 3 & ANT 6 |
5 | 5G (Div?) | ANT 5 |
6 | 4G Main / 2.4G WiFi | ANT 2 & 2.4G-1 |
7 | 5G (Div?) | ANT 4 |
8 | 5GHz WiFi | 5G-1 |
Antenna (external) Hack: Use ANT1, ANT6, ANT2, ANT3. Leave all the others connected to PCB antennas.
Or, you can also just connect up all of them....
Required parts:
- 2.5mm drill bit
- 6.5mm drill bit
- Masking tape
- A template (I just drew circles in mspaint and printed it out)
- Drill
- 9 x U.FL to SMA cable (1.13mm IPEX connector) like this
Technique:
I put masking tape over everything, to stop scratches.
Print out a template, or at least mark where you want to drill. Don't go too far up because of the length of the cable, and the fact that unless you want to stick these connectors on the front of the device, you'll need to stretch the cables from front to back as well. Removing the internal PCB antennas will make this super easy, but then you cannot easily swap back to them. You could also decide to go fully external and buy some rabbit ears antennas if you wanted?
Once you've marked your holes to drill, using the 2.5mm drill bit drill a pilot hole in the centre of your circles.
Swap to the 6.5mm drill bit and enlarge the hole.
Then you just need to lift off the original cables. Put a plastic probe or a small screwdriver under the tail of the connector and gently lift it up. You can remove the entire PCB antenna assembly by removing the 4 retaining crosshead screws.
Attach the cables, put the SMA connectors through the holes, tighten up.