终于搞定了DB120-B1

电信的DB120-B1，终于破解了。

 

1. 找到ctce8.cfg/ctce.cfg

2. 下到U盘，重启路由器无效

3.  接有线自动获取IP，从网页上传配置 http://192.168.1.1/updatesettings.cgi

4.  新用户名admin, 口令admin即可登录

5.  界面为英语。

 

我的DB120版本如下：

 

 

说明：

1. 超级用户telecomadmin，默认密码为nE7jA%5m  无效

2. 无法从U盘刷配置

3. 刷固件的地址为http://192.168.1.1/upload.cgi  未验证

 

参考：

1.  http://www.vdisk.cn/down/index/4924445A5494    v3.1-128k DB120-B1官网固件.bin

2.  http://d.download.csdn.net/down/3200102/lichuan0213  电信原版db120-b1固件

3. http://afeifish.blog.163.com/blog/static/1978204200973182618599/  电信商务领航定制终端大亚DB120-B1(DB120-WG)破解和刷官网固件

4. http://hi.baidu.com/yicad/blog/item/59d9add3746f713e960a1626.html  大亚DB120-B1无线路由猫破解全过程（原创）

5. http://bbs.jysq.net/thread-5228518-1-1.html  大亚科技DB120-WG/B1破解固件、设置全过程，超详细图片教程

 

 

ctce.cfg内容如下：

<psitree>
<WirelessCfg>
<vars state="enabled" ssIdIndex="0" country="CN" apMode="ap"  bridgeRestrict="disabled"  wdsMAC_0=""  wdsMAC_1=""  wdsMAC_2=""  wdsMAC_3=""  band="b" channel="0" rate="auto" multicastRate="auto" basicRate="default" fragThreshold="2346" RTSThreshold="2347" DTIM="1" beacon="100" XPress="off" gMode="auto" gProtection="auto" preamble="long" AfterBurner="off" TxPowerPercent="100" WME="off" WMENoAck="off" WMEApsd="on"  RegulatoryMode="off" PreNetRadarDectTime="60" InNetRadarDectTime="60" TpcMitigation="0" AutoChannelTimer="0" />
<wlMssidVars tableSize="4">
<wlMssidEntry enblSsId="1" ssId="ChinaQos.Com" hide="0" apIsolation="off" fltMacMode="disabled" disableWme="off" MaxAssoc = "128"  shownForTr069="1"  authMode="open" radiusServerIP="0.0.0.0" radiusServerPort="1812" radiusServerKey="" wep="disabled" auth="0" keyBit="128-bit" key64_1="" key64_2="" key64_3="" key64_4="" key64Index="1" key128_1=""  key128_2=""  key128_3=""  key128_4=""  key128Index="1" wpaRekey="0" wpakey="rnq5imip"  Preauthentication="off" ReauthTimeout="36000" wpa="tkip" tr69cBeaconType="Basic" tr69cBasicEncryptionModes="None" tr69cBasicAuthenticationMode="None" tr69cWPAEncryptionModes="TKIPEncryption" tr69cWPAAuthenticationMode="PSKAuthentication" tr69cIEEE11iEncryptionModes="AESEncryption" tr69cIEEE11iAuthenticationMode="EAPAuthentication"/>
<wlMssidEntry enblSsId="0" ssId="Guest" hide="0" apIsolation="off" fltMacMode="disabled" disableWme="off" MaxAssoc = "128"  shownForTr069="0"  authMode="open" radiusServerIP="0.0.0.0" radiusServerPort="1812" radiusServerKey="" wep="disabled" auth="0" keyBit="128-bit" key64_1="" key64_2="" key64_3="" key64_4="" key64Index="1" key128_1=""  key128_2=""  key128_3=""  key128_4=""  key128Index="1" wpaRekey="0" wpakey=""  Preauthentication="off" ReauthTimeout="36000" wpa="tkip" tr69cBeaconType="Basic" tr69cBasicEncryptionModes="None" tr69cBasicAuthenticationMode="None" tr69cWPAEncryptionModes="TKIPEncryption" tr69cWPAAuthenticationMode="PSKAuthentication" tr69cIEEE11iEncryptionModes="AESEncryption" tr69cIEEE11iAuthenticationMode="EAPAuthentication"/>
<wlMssidEntry enblSsId="0" ssId="Guest1" hide="0" apIsolation="off" fltMacMode="disabled" disableWme="off" MaxAssoc = "128"  shownForTr069="0"  authMode="open" radiusServerIP="0.0.0.0" radiusServerPort="1812" radiusServerKey="" wep="disabled" auth="0" keyBit="128-bit" key64_1="" key64_2="" key64_3="" key64_4="" key64Index="1" key128_1=""  key128_2=""  key128_3=""  key128_4=""  key128Index="1" wpaRekey="0" wpakey=""  Preauthentication="off" ReauthTimeout="36000" wpa="tkip" tr69cBeaconType="Basic" tr69cBasicEncryptionModes="None" tr69cBasicAuthenticationMode="None" tr69cWPAEncryptionModes="TKIPEncryption" tr69cWPAAuthenticationMode="PSKAuthentication" tr69cIEEE11iEncryptionModes="AESEncryption" tr69cIEEE11iAuthenticationMode="EAPAuthentication"/>
<wlMssidEntry enblSsId="0" ssId="Guest2" hide="0" apIsolation="off" fltMacMode="disabled" disableWme="off" MaxAssoc = "128"  shownForTr069="0"  authMode="open" radiusServerIP="0.0.0.0" radiusServerPort="1812" radiusServerKey="" wep="disabled" auth="0" keyBit="128-bit" key64_1="" key64_2="" key64_3="" key64_4="" key64Index="1" key128_1=""  key128_2=""  key128_3=""  key128_4=""  key128Index="1" wpaRekey="0" wpakey=""  Preauthentication="off" ReauthTimeout="36000" wpa="tkip" tr69cBeaconType="Basic" tr69cBasicEncryptionModes="None" tr69cBasicAuthenticationMode="None" tr69cWPAEncryptionModes="TKIPEncryption" tr69cWPAAuthenticationMode="PSKAuthentication" tr69cIEEE11iEncryptionModes="AESEncryption" tr69cIEEE11iAuthenticationMode="EAPAuthentication"/>
</wlMssidVars>
</WirelessCfg>
<SystemInfo>
<algset H323="enable" Sip="enable" Rtsp="enable" L2tp="enable" Ipsec="enable" URL="disable" FTP="enable" FIREWALL="0" MACFLT="disable" MACFLTTYPE="enable" DDNS="disable"/>
<sysUserName value="admin"/>
<ctUserName value="admin"/>
<ctPassword value="YWRtaW4="/>
<tr69c state="enable" upgradesManaged="0" upgradeAvailable="0" informEnbl="0" informTime="0" informInterval="43200" noneConnReqAuth="1" acsURL="http://www.chinadsl.net/ACS-server/ACS" acsUser="hgw" acsPwd="hgw" parameterKey="12345" connReqURL="" connReqUser="itms" connReqPwd="itms" kickURL="" provisioningCode="12345" MWSURL="0.0.0.0:" ctMDW="disable"/>
<ctCfg mwBandStatus="0" terminalNumber="0" iptvStatus="disable" stbNumber="0" restrictSTB= "disable" restrictComputer= "disable" computerNumber="0" restrictCamera="disable" cameraNumber="0" restrictPhone="disable" phoneNumber="0" pppreconnect="enable"/>
<protocol autoScan="enable" upnp="enable" alg="enable" igmpSnp ="disable" igmpMode ="disable" macFilterPolicy="forward" encodePassword="enable" siproxd="enable" enetwan="disable" numberOfConn1="0" numberOfConn2="0"/>
<sysLog state="disable" displayLevel="ERR" logLevel="DEBUG" option="local" serverIP="0.0.0.0" serverPort="514"/>
</SystemInfo>
<PMapCfg>
<pmap tableSize="3">
<pmapEntry id="1" groupName="Default" groupKey="1" groupStatus="1" ifList="nas_0_0_35:9|nas_0_1_33:10|nas_0_0_100:11|nas_0_8_81:12|nas_0_0_32:13|nas_0_8_32:14|nas_0_8_35:18|eth1.2:15|eth1.3:16|eth1.4:17|eth0:2|wl0:4" vendorid0="" vendorid1="" vendorid2="" vendorid3="" vendorid4=""/>
<pmapEntry id="2" groupName="STB" groupKey="2" groupStatus="1" ifList="" vendorid0="" vendorid1="" vendorid2="" vendorid3="" vendorid4=""/>
<pmapEntry id="3" groupName="Garbage" groupKey="3" groupStatus="1" ifList="usb0:1" vendorid0="" vendorid1="" vendorid2="" vendorid3="" vendorid4=""/>
</pmap>
<pmapFlt tableSize="14">
<pmapFltEntry id="1" instance="1" status="enable" bridgeRef="3" interfaceRef="usb0"/>
<pmapFltEntry id="2" instance="2" status="enable" bridgeRef="1" interfaceRef="eth0"/>
<pmapFltEntry id="3" instance="3" status="enable" bridgeRef="-1" interfaceRef="eth1"/>
<pmapFltEntry id="4" instance="4" status="enable" bridgeRef="1" interfaceRef="wl0"/>
<pmapFltEntry id="5" instance="15" status="enable" bridgeRef="1" interfaceRef="eth1.2"/>
<pmapFltEntry id="6" instance="16" status="enable" bridgeRef="1" interfaceRef="eth1.3"/>
<pmapFltEntry id="7" instance="17" status="enable" bridgeRef="1" interfaceRef="eth1.4"/>
<pmapFltEntry id="8" instance="18" status="enable" bridgeRef="1" interfaceRef="nas_0_8_35"/>
<pmapFltEntry id="9" instance="9" status="enable" bridgeRef="1" interfaceRef="nas_0_0_35"/>
<pmapFltEntry id="10" instance="10" status="enable" bridgeRef="1" interfaceRef="nas_0_1_33"/>
<pmapFltEntry id="11" instance="11" status="enable" bridgeRef="1" interfaceRef="nas_0_0_100"/>
<pmapFltEntry id="12" instance="12" status="enable" bridgeRef="1" interfaceRef="nas_0_8_81"/>
<pmapFltEntry id="13" instance="13" status="enable" bridgeRef="1" interfaceRef="nas_0_0_32"/>
<pmapFltEntry id="14" instance="14" status="enable" bridgeRef="1" interfaceRef="nas_0_8_32"/>
</pmapFlt>
<pmapIfcCfg pmapIfName="eth1" pmapIfcStatus="enable"/>
</PMapCfg>
<AtmCfg>
<initCfg structureId="2" threadPriority="25" freeCellQSize="10" freePktQSize="200" freePktQBufSize="1600" freePktQBufOffset="32" rxCellQSize="10" rxPktQSize="200" txFifoPriority="64" aal5MaxSduLen="64" aal2MaxSduLen="1132"/>
</AtmCfg>
<AtmCfgTd>
<td1 cat="UBR" PCR="0" SCR="0" MBS="0"/>
</AtmCfgTd>
<AtmCfgVcc>
<vccId9999 portId="0" vpi="0" vci="65534" tdId="0" aalType="AAL2" adminStatus="down" encap="unknown" qos="disable" instanceId="1509949455"/>
<vccId2 portId="0" vpi="0" vci="35" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949450"/>
<vccId3 portId="0" vpi="1" vci="33" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949451"/>
<vccId4 portId="0" vpi="0" vci="100" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949452"/>
<vccId5 portId="0" vpi="8" vci="81" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949453"/>
<vccId6 portId="0" vpi="0" vci="32" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949454"/>
<vccId7 portId="0" vpi="8" vci="32" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949455"/>
<vccId1 portId="0" vpi="8" vci="35" tdId="1" aalType="AAL5" adminStatus="up" encap="llc" qos="disable" instanceId="1509949449"/>
</AtmCfgVcc>
<SecCfg>
<qosMgmtCfg enableQos="enable" defaultDSCPMark="-1" defaultQueue="-1" enForceWeight="0" enDSCPMark="0" en802_1_P="0" Mode="OTHER" Plan="priority"/>
<srvCtrlList ftp="lan" http="lan" icmp="lan" ssh="disable" telnet="lan" tftp="lan"/>
</SecCfg>
<Lan>
<entry9999 address="1.1.1.1" mask="255.255.255.0" dhcpServer="disable" portalenable="disable" confDhcpSrv="disable" leasedTime="0" startAddr="0.0.0.0" endAddr="0.0.0.0" subnetMask="0.0.0.0" dhcpwebredirect="" CameraDhcpSrv="1" Cameraoptlist="1" Cameraopt="Camera" CamerastartAddr="0.0.0.0" CameraendAddr="0.0.0.0" Camerawebredirect="" STBDhcpSrv="1" STBdhcpoptlist="1" STBopt="STB" STBstartAddr="0.0.0.0" STBendAddr="0.0.0.0" STBwebredirect="" BTPhoneDhcpSrv="0" BTPhonedhcpoptlist="1" BTPhoneopt="BPhone" BTPhonestartAddr="0.0.0.0" BTPhoneendAddr="0.0.0.0" BTPhonewebredirect="" SIPPhoneDhcpSrv="1" SIPPhonedhcpoptlist="1" SIPPhoneopt="Phone" SIPPhonestartAddr="0.0.0.0" SIPPhoneendAddr="0.0.0.0" SIPPhonewebredirect="" instanceId="1509949458"/>
<entry1 address="192.168.1.1" mask="255.255.255.0" dhcpServer="enable" portalenable="disable" confDhcpSrv="enable" leasedTime="24" startAddr="192.168.1.2" endAddr="192.168.1.249" subnetMask="255.255.255.0" dhcpwebredirect="" CameraDhcpSrv="1" Cameraoptlist="1" Cameraopt="Camera" CamerastartAddr="0.0.0.0" CameraendAddr="0.0.0.0" Camerawebredirect="" STBDhcpSrv="1" STBdhcpoptlist="1" STBopt="STB" STBstartAddr="0.0.0.0" STBendAddr="0.0.0.0" STBwebredirect="" BTPhoneDhcpSrv="0" BTPhonedhcpoptlist="1" BTPhoneopt="BPhone" BTPhonestartAddr="0.0.0.0" BTPhoneendAddr="0.0.0.0" BTPhonewebredirect="" SIPPhoneDhcpSrv="1" SIPPhonedhcpoptlist="1" SIPPhoneopt="Phone" SIPPhonestartAddr="0.0.0.0" SIPPhoneendAddr="0.0.0.0" SIPPhonewebredirect="" instanceId="1509949442"/>
</Lan>
<RouteCfg>
<ripGlobal state="disable" ripIfcTableSize="1"/>
<ripIfc tableSize="1">
<ripIfcEntry id="1" name="br0" state="disable" version="2" operation="active"/>
</ripIfc>
</RouteCfg>
<ADSL>
<settings G.Dmt="enable" G.lite="enable" T1.413="enable" ADSL2="disable" AnnexL="disable" ADSL2plus="enable" AnnexM="disable" pair="inner" bitswap="enable" SRA="disable"/>
</ADSL>
<SNTPCfg>
<cfg state="enable" server1="time.windows.com" server2="" timezone="Beijing, Chongquing, Hong Kong, Urumqi"/>
</SNTPCfg>
<wan_0_0_35>
<entry1 vccId="2" vlanMuxId="-1" conId="1" name="12_INTERNET_B_0_35" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949453" lanIntfList=""/>
</wan_0_0_35>
<wan_0_1_33>
<entry1 vccId="3" vlanMuxId="-1" conId="1" name="13_INTERNET_B_1_33" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949454" lanIntfList=""/>
</wan_0_1_33>
<wan_0_0_100>
<entry1 vccId="4" vlanMuxId="-1" conId="1" name="14_INTERNET_B_0_100" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949455" lanIntfList=""/>
</wan_0_0_100>
<wan_0_8_81>
<entry1 vccId="5" vlanMuxId="-1" conId="1" name="15_INTERNET_B_8_81" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949456" lanIntfList=""/>
</wan_0_8_81>
<wan_0_0_32>
<entry1 vccId="6" vlanMuxId="-1" conId="1" name="16_INTERNET_B_0_32" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949457" lanIntfList=""/>
</wan_0_0_32>
<wan_0_8_32>
<entry1 vccId="7" vlanMuxId="-1" conId="1" name="17_INTERNET_B_8_32" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949458" lanIntfList=""/>
</wan_0_8_32>
<wan_0_8_35>
<entry1 vccId="1" vlanMuxId="-1" conId="1" name="11_INTERNET_B_8_35" protocol="BRIDGE" encap="LLC" firewall="disable" nat="disable" fullcone="disable" igmp="disable" svcmode="INTERNET" vlanId="-1" service="enable" instanceId="1509949452" lanIntfList=""/>
</wan_0_8_35>
</psitree>