Syrotech ONU Security Settings

Hello Today we are going to add ONU to OLT using MAC Authentication. With MAC authentication, ONU PON port will only come green if you have passed its MAC in OLT. If the MAC is not passed in OLT and ONU is attached to OLT PON port then the ONU will show no light on PON port. If there is no power received at ONU end then the LOS port will glow red. For changing the Authentication mode to MAC, login the OLT and move to ONU configuration then Authentication. Select Authentication Mode the change Auth Mode to MAC for all PON ports. Now move to Authentication then MAC List then select PON port on which you want to add new ONU. After that type the MAC of the new ONU in the MAC Address and add. Once you have powerd ON the ONU now this ONU will come Online. Now in the OPM Diag you can check the Distance of the ONU from PON port, ONU Transmit power and Received power at ONU end. Now create the VLAN provided by BSNL for new customer                                   and

Today we are going to configure some initial configurations  in Syrotech OLT and make it reachable to BSNL NIB. Connect the OLT to your PC's Ethernet port and put the OLT default IP 192.168.8.100 in Browser. You can write the Name / installed location of the OLT. you can also check the software version of the OLT and also uptime. For security reasons kindly change the default password for the OLT. Disable the telnet access for OLT as telnet is not safe protocol instead you can use SSH. Now create 119 VLAN in OLT. BSNL is using VLAN 119 as Management VLAN for TIP OLTs. Apply IP to VLAN 119. Add static route Now pass this VLAN to Uplink port to which you have attached BSNL Transmission system. You can check the connectivity by pinging the BSNL provided gateway. Finally save the configuration so that if OLT reboots due to power issue it comes up with same configuration as of before reboot.

Syrotech ONT upgrade procedure MODEL : SY-GPON-1110-WDONT It has been observed that those ONTs which are not properly configured for security settings can be remotely accessed and a bug is sent in ONTs so that these ONTs start uploading random dummy data choking the uplink of OLT and choking ISP backbone. Now Syrotech Networks have provided a security patch restricting remote access of this ONT model. Below is the path for upgradation of Syrotech ONT and procedure to upgrade. Download the latest security patch firmware from below link : https://www.dropbox.com/s/nwx2onckro5txeg/Syrotech_UPGRADE_Syrotech_BSNL_2_1.0.24-200228.tar?dl=0 Power ON the ONT on UPS supply if possible. Login the ONT using address http://192.168.1.1 Username admin Password  stdONU101                        or changed password if already changed. Then move to Management then Device Management then upgrade and then choose the downloaded file and click start.                        

ONT Security procedure to restrict remote access and avoiding modem hack issues.  MODEL : SY-GPON-1110-WDONT It has been observed that those ONTs which are not properly configured for security settings can be remotely accessed and a bug is sent in ONTs so that these ONTs start uploading random dummy data choking the uplink of OLT and choking ISP backbone. Now Syrotech Networks have provided a security patch restricting remote access of this ONT model. I will share patch and procedure in next blog. Till then you can restrict remote access by following below procedure. Top View of ONT. Backview of modem showing Model name Login on web browser http://192.168.1.1 and press Enter Default Username is admin and Password is stdONU101 Then go to security, port filter and uncheck all ticks from WAN column. Then change the default password to some new password Then move to Network, Internet     Delete TR069 connection Finally reb