Masquerade as the Bouygues S.A Bbox with the WAS-110 or X-ONU-SFPP¶

Determine if you're an XGS-PON subscriber¶
Debit+ option
To subscribe to XGS-PON, you must enable and/or purchase the Debit+ option, which is necessary to receive the Bbox Ultym along with an XGS-PON SFP+ transceiver.
-
Within a web browser, navigate to https://mabbox.bytel.fr/ or https://192.168.1.254 and, if asked, input your Administrator password and click the Connect button.
-
From the Main page, click on the Administration interface to revert to the old interface.
-
From the Administration page, click on the Fiber section inside the Internet panel on the left-hand side.
-
From the Fiber page, verify that the PON Mode is XGS-PON.
Take note of the Serial Number beginning with SMBS and Software Versions for the WAS-110 configuration
Extract required attributes¶
PON serial number¶
with the web UI¶
The PON Serial Number has been removed from the Fiber status page to thwart masquerading.
-
Within a web browser, navigate to https://mabbox.bytel.fr/ or https://192.168.1.254 and, if asked, input your Administrator password and click the Connect button.
-
From the Main page, click on the Administration interface to revert to the old interface.
-
From the Administration page, click on the Fiber section inside the Internet panel on the left-hand side.
-
From the Fiber page, copy the Serial Number beginning with
SMBS.
with the web API¶
-
Within a web browser, navigate to https://mabbox.bytel.fr/api/v1/wan/sfp or https://mabbox.bytel.fr/api/v1/wan/sff, whichever works.
-
From the JSON output, search and copy the Serial Number beginning with
SMBSor0x534d4253. If the Serial Number begins with the hexadecimal notation copy the characters after0x534d4253and append toSMBSor use the form below.
The above steps can be summarized into a single-line terminal command:
(Invoke-RestMethod -Uri "https://mabbox.bytel.fr/api/v1/wan/sff").wan.serial_number -replace "0x534d4253", "SMBS"
curl -s https://mabbox.bytel.fr/api/v1/wan/sff | plutil -extract 0.wan.serial_number raw - | sed 's/0x534d4253/SMBS/'
curl -s https://mabbox.bytel.fr/api/v1/wan/sff | jq -r '.[] | select(.wan.serial_number != null) | .wan.serial_number | sub("0x534d4253"; "SMBS")'
PLOAM registration ID¶
The registration ID is composed of a seventy-two (72) octets from the fifteen (15) octet IMEI prefixed with five (5) 0's and suffixed with fifty-two (52) 1's.
00000XXXXXXXXXXXXXXX1111111111111111111111111111111111111111111111111111 The IMEI can be obtained from the back label of the Bbox or from the web UI.
-
Within a web browser, navigate to https://mabbox.bytel.fr/ or https://192.168.1.254 and, if asked, input your Administrator password and click the Connect button.
-
From the Main page, click on the Administration interface to revert to the old interface.
-
From the Administration page, click on the Model section inside the Bbox panel on the right-hand side.
-
From the Bbox page, copy the IMEI number.
Purchase a WAS-110 or X-ONU-SFPP¶
The WAS-110 and X-ONU-SFPP are available from select resellers worldwide. To streamline the process, some resellers are pre-flashing the 8311 community firmware and highly recommended for the X-ONU-SFPP. Purchase at your discretion; we take no responsibility or liability for the listed resellers.
X-ONU-SFPP Value-Added Resellers
Common misconceptions and answers
- Do the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK ONT's support GPON wavelengths (1490 nm downstream and 1310 nm upstream)?
-
No, the BOSA in these ONTs are calibrated exclusively for XGS-PON wavelengths: 1577 nm downstream and 1270 nm upstream. They use the Macom M02180 (WAS-110), Macom M02181 (X-ONU-SFPP), and Semtech GN28L96 (HLX-SFPX) laser drivers, which are designed specifically for 10G-PON applications.
- Are the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK a gateway/router?
-
No. These are SFU ONTs (not HGUs) that convert Ethernet to PON; they do not provide Layer 7 gateway functions (NAT, DHCP, etc.) A separate gateway/router is required for internet access.
Install the 8311 community firmware¶
As a prerequisite to masquerading as the Bbox, the 8311 community firmware is recommended and required for the remainder of this guide. If you purchased a pre-flashed WAS-110 or X-ONU-SFPP, skip past to the masquerade setup.
There are two methods to install the 8311 community firmware onto the WAS-110, outlined in the following guides:
- Method 1: recommended
- Method 2:
The X-ONU-SFPP 8311 community firmware installation requires a two-step process and is more prone to failure and bricking.
This process is not thoroughly documented and can lead to a bricked device
- Step 1: Install the Azores bootloader
-
Skip past to the solution in the following issue tracker on how to install the Azores bootloader.
- Step 2: Multicast upgrade
-
Follow through the WAS-110 multicast upgrade and community firmware recovery
Masquerade setup¶
from the web UI recommended¶
As of version 2.4.0 https:// is supported and enabled by default
All http:// URLs will redirect to https:// unless the 8311_https_redirect environment variable is set to 0 or false.
-
Within a web browser, navigate to https://192.168.11.1/cgi-bin/luci/admin/8311/config and, if asked, input your root password.
-
From the 8311 Configuration page, on the PON tab, fill in the configuration with the following values:
All attributes below are mandatory to achieve O5 operation state
Attribute Value Remarks PON Serial Number (ONT ID) SMBS... PON serial number Registration ID 00000... PLOAM registration ID MIB File /etc/mibs/prx300_1U.ini -
From the 8311 Configuration page, on the ISP Fixes tab, disable Fix VLANs from the drop-down.
Identify VLANs
Once configuration is complete and the fiber is connected, wait for successful authentication (O5 state). You can then use the VLAN Table Analyser to identify service VLANs by copying the table from the VLANs page (https://192.168.11.1/cgi-bin/luci/admin/8311/vlans) and pasting it into the tool.
-
Save changes and reboot from the System menu.
from the shell¶
-
Login over secure shell (SSH).
ssh root@192.168.11.1 -
Configure the 8311 U-Boot environment.
All attributes below are mandatory to achieve O5 operation state
fwenv_set -8 gpon_sn SMBS... # (1)! fwenv_set -8 reg_id_hex 00000... # (2)! fwenv_set -8 fix_vlans 0Additional details and variables are described at the original repository 1
/usr/sbin/fwenv_setis a helper script that executes/usr/sbin/fw_setenvtwice consecutively.The WAS-110 functions as an A/B system, requiring the U-Boot environment variables to be set twice, once for each environment.
The
-8option prefixes the U-Boot environment variable with8311_. -
Verify the 8311 U-boot environment and reboot.
fw_printenv | grep ^8311 reboot
After rebooting the WAS-110, safely remove the SC/APC cable from the Bbox and connect it to the WAS-110. If all previous steps were followed correctly, the WAS-110 should operate with O5.1 PLOAM status. For troubleshooting, please read the Troubleshoot connectivity issues with the WAS-110 guide before seeking help on the 8311 Discord community server.
Tag the router's DHCP WAN interface and/or anything in-between the WAS-110 with VLAN 100
Finally, continue with your bypass by consulting the routing guide(s).







