Masquerade as the Orange Polska S.A. Funbox 10 with the WAS-110 or X-ONU-SFPP¶

Bypass Pickle

Determine if you're an XGS-PON subscriber¶

Within a web browser, navigate to https://funbox/ or https://192.168.1.1/ and, if asked, input your Administrator password and click the Connect button.
From the configuration interface, click the cog () icon at the bottom of the page for Advanced Parameters or move forward twice using the right arrow.
From the Advanced Parameters page, click the System Information card.
From the System Information page, click the ONT tab.
From the ONT tab, verify the Max Bit Rate Supported is 10000Mbps for XGS-PON.

Take note of the Serial Number, Hardware Version, and ONT Software Versions for the WAS-110 configuration

Purchase a WAS-110 or X-ONU-SFPP¶

The WAS-110 and X-ONU-SFPP are available from select resellers worldwide. To streamline the process, some resellers are pre-flashing the 8311 community firmware and highly recommended for the X-ONU-SFPP. Purchase at your discretion; we take no responsibility or liability for the listed resellers.

WAS-110 Value-Added Resellers

X-ONU-SFPP Value-Added Resellers

Common misconceptions and answers

Do the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK ONT's support GPON wavelengths (1490 nm downstream and 1310 nm upstream)?: No, the BOSA in these ONTs are calibrated exclusively for XGS-PON wavelengths: 1577 nm downstream and 1270 nm upstream. They use the Macom M02180 (WAS-110), Macom M02181 (X-ONU-SFPP), and Semtech GN28L96 (HLX-SFPX) laser drivers, which are designed specifically for 10G-PON applications.
Are the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK a gateway/router?: No. These are SFU ONTs (not HGUs) that convert Ethernet to PON; they do not provide Layer 7 gateway functions (NAT, DHCP, etc.) A separate gateway/router is required for internet access.

Install the 8311 community firmware¶

As a prerequisite to masquerading as the Funbox 10, the 8311 community firmware is recommended and required for the remainder of this guide. If you purchased a pre-flashed WAS-110 or X-ONU-SFPP, skip past to the masquerade setup.

WAS-110X-ONU-SFPP

There are two methods to install the 8311 community firmware onto the WAS-110, outlined in the following guides:

Method 1: recommended: Install the 8311 community firmware on the WAS-110
Method 2:: WAS-110 multicast upgrade and community firmware recovery

The X-ONU-SFPP 8311 community firmware installation requires a two-step process and is more prone to failure and bricking.

This process is not thoroughly documented and can lead to a bricked device

Step 1: Install the Azores bootloader: Skip past to the solution in the following issue tracker on how to install the Azores bootloader.
Step 2: Multicast upgrade: Follow through the WAS-110 multicast upgrade and community firmware recovery

Masquerade setup¶

To successfully masquerade on XGS-PON, the original ONT serial number is mandatory. It, along with other key identifiers are available from the web UI or the bottom label of the Livebox 7.

from the web UI recommended¶

As of version 2.4.0 https:// is supported and enabled by default

All http:// URLs will redirect to https:// unless the 8311_https_redirect environment variable is set to 0 or false.

Within a web browser, navigate to https://192.168.11.1/cgi-bin/luci/admin/8311/config and, if asked, input your root password.

From the 8311 Configuration page, on the PON tab, fill in the configuration with the following values:

Reminder

Replace the mandatory PON serial number and optional Software Versions with the providioned values from the Livebox 7 web UI.

Attribute	Value	Remarks
PON Serial Number (ONT ID)	SMBS0...
Equipment ID	SagemcomFast5698OPL
Hardware Version	SGFunbox10201
Sync Circuit Pack Version
Software Version A	SAHEOPL020105	[Version listing]
Software Version B	SAHEOPL020105	[Version listing]
MIB File	/etc/mibs/prx300_1U.ini	PPTP i.e. default value

From the 8311 Configuration page, on the ISP Fixes tab, disable Fix VLANs from the drop-down.

Identify VLANs

Once configuration is complete and the fiber is connected, wait for successful authentication (O5 state). You can then use the VLAN Table Analyser to identify service VLANs by copying the table from the VLANs page (https://192.168.11.1/cgi-bin/luci/admin/8311/vlans) and pasting it into the tool.
Save changes and reboot from the System menu.

from the shell¶

Login over secure shell (SSH).
```
ssh root@192.168.11.1
```
Configure the 8311 U-Boot environment.

Highlighted lines are mandatory

Replace the mandatory PON serial number and optional Software Versions with the providioned values from the Livebox 7 web UI.
```
fwenv_set -8 gpon_sn SMBS...
fwenv_set -8 equipment_id SagemcomFast5698OPL
fwenv_set -8 hw_ver SGFunbox10201
fwenv_set -8 cp_hw_ver_sync 1
fwenv_set -8 sw_verA SAHEOPL020105 # (1)!
fwenv_set -8 sw_verB SAHEOPL020105
fwenv_set -8 fix_vlans 0
```
1. [Version listing]
Additional details and variables are described at the original repository ¹

/usr/sbin/fwenv_set is a helper script that executes /usr/sbin/fw_setenv twice consecutively.

The WAS-110 functions as an A/B system, requiring the U-Boot environment variables to be set twice, once for each environment.

The -8 option prefixes the U-Boot environment variable with 8311_.
Verify the 8311 U-boot environment and reboot.
```
fw_printenv | grep ^8311
reboot
```

After rebooting the WAS-110, safely remove the SC/APC cable from the Funbox 10 and connect it to the WAS-110. If all previous steps were followed correctly, the WAS-110 should operate with O5.1 PLOAM status. For troubleshooting, please read the Troubleshoot connectivity issues with the WAS-110 guide before seeking help on the 8311 Discord community server.

Finally, continue with your bypass by consulting the routing tips below.

Funbox 10 software versions¶

The software version can be utilized as a provisioning attribute by the OLT, but this is not the case for the Funbox 10, which uses CWMP². However, it is recommended to keep somewhat up-to-date with the following listing.

Software Version
SAHEOPL010103
SAHEOPL010106
SAHEOPL020105

Please help us by contributing new versions via the 8311 Discord community server or submitting a Pull Request on GitHub.

Routing tips¶

PPPoE Credentials¶

Within a web browser, navigate to https://funbox/ or https://192.168.1.1/ and, if asked, input your Administrator password and click the Connect button.
From the configuration interface, click the cog () icon at the bottom of the page for Advanced Parameters or move forward twice using the right arrow.
From the Advanced Parameters page, click the Internet Connection card.
From the Internet Connection page, click on the Settings tab.
From the Settings tab, copy the Username and click on Change Password in the Password section.

IPTV (UniFi OS)¶

https://github.com/slavickox/orange-polska-iptv-unifi