Masquerade as the Orange S.A. Livebox 7 with the WAS-110 or X-ONU-SFPP¶

Determine if you're an XGS-PON subscriber¶
5 Gbps or higher packages
If you're subscribed to Livebox Max Fibre or a similar 5 Gbps or higher package, skip past to Purchase a WAS-110 or X-ONU-SFPP.
-
Within a web browser, navigate to https://livebox/ and, if asked, input your Administrator password (1) and click the Connect button.
- The default Administrator password is the first 12 digits of the WiFi key located on the bottom label of the Livebox 7.
-
From the configuration interface, click the cog () icon at the bottom of the page for Advanced Parameters or move forward twice using the right arrow.
-
From the Advanced Parameters page, click the System Information card.
-
From the System Information page, click the ONT tab.
-
From the ONT tab, verify the Max Bit Rate Supported is 10000Mbps for XGS-PON.
Take note of the Serial Number and ONT Software Versions for the WAS-110 configuration
Purchase a WAS-110 or X-ONU-SFPP¶
The WAS-110 and X-ONU-SFPP are available from select resellers worldwide. To streamline the process, some resellers are pre-flashing the 8311 community firmware and highly recommended for the X-ONU-SFPP. Purchase at your discretion; we take no responsibility or liability for the listed resellers.
X-ONU-SFPP Value-Added Resellers
Common misconceptions and answers
- Do the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK ONT's support GPON wavelengths (1490 nm downstream and 1310 nm upstream)?
-
No, the BOSA in these ONTs are calibrated exclusively for XGS-PON wavelengths: 1577 nm downstream and 1270 nm upstream. They use the Macom M02180 (WAS-110), Macom M02181 (X-ONU-SFPP), and Semtech GN28L96 (HLX-SFPX) laser drivers, which are designed specifically for 10G-PON applications.
- Are the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK a gateway/router?
-
No. These are SFU ONTs (not HGUs) that convert Ethernet to PON; they do not provide Layer 7 gateway functions (NAT, DHCP, etc.) A separate gateway/router is required for internet access.
Install the 8311 community firmware¶
As a prerequisite to masquerading as the Livebox 7, the 8311 community firmware is recommended and required for the remainder of this guide. If you purchased a pre-flashed WAS-110 or X-ONU-SFPP, skip past to the masquerade setup.
There are two methods to install the 8311 community firmware onto the WAS-110, outlined in the following guides:
- Method 1: recommended
- Method 2:
The X-ONU-SFPP 8311 community firmware installation requires a two-step process and is more prone to failure and bricking.
This process is not thoroughly documented and can lead to a bricked device
- Step 1: Install the Azores bootloader
-
Skip past to the solution in the following issue tracker on how to install the Azores bootloader.
- Step 2: Multicast upgrade
-
Follow through the WAS-110 multicast upgrade and community firmware recovery
Masquerade setup¶
To successfully masquerade on XGS-PON, the original ONT serial number is mandatory. It, along with other key identifiers are available from the web UI or the bottom label of the Livebox 7.
from the web UI recommended¶
As of version 2.4.0 https:// is supported and enabled by default
All http:// URLs will redirect to https:// unless the 8311_https_redirect environment variable is set to 0 or false.
-
Within a web browser, navigate to https://192.168.11.1/cgi-bin/luci/admin/8311/config and, if asked, input your root password.
-
From the 8311 Configuration page, on the PON tab, fill in the configuration with the following values:
Reminder
Replace the mandatory PON serial number and optional Software Versions with the providioned values from the Livebox 7 web UI.
Attribute Value Mandatory Remarks PON Serial Number (ONT ID) SMBS0... Equipment ID SagemcomFast5694OFR Hardware Version SMBSXLB7400 Livebox 7 v1 SMBSXLB7270200 Livebox 7 v2 Sync Circuit Pack Version Software Version A SAHEOFR010117 Version listing Software Version B SAHEOFR919117 Version listing MIB File /etc/mibs/prx300_1U.ini PPTP i.e. default value -
From the 8311 Configuration page, on the ISP Fixes tab, disable Fix VLANs from the drop-down.
Identify VLANs
Once configuration is complete and the fiber is connected, wait for successful authentication (O5 state). You can then use the VLAN Table Analyser to identify service VLANs by copying the table from the VLANs page (https://192.168.11.1/cgi-bin/luci/admin/8311/vlans) and pasting it into the tool.
-
Save changes and reboot from the System menu.
from the shell¶
-
Login over secure shell (SSH).
ssh root@192.168.11.1 -
Configure the 8311 U-Boot environment.
Highlighted lines are mandatory
Replace the mandatory PON serial number and optional Software Versions with the providioned values from the Livebox 7 web UI.
fwenv_set -8 gpon_sn SMBS... fwenv_set -8 equipment_id SagemcomFast5694OFR fwenv_set -8 hw_ver SMBSXLB7400 fwenv_set -8 cp_hw_ver_sync 1 fwenv_set -8 sw_verA SAHEOFR010117 # (1)! fwenv_set -8 sw_verB SAHEOFR919117 fwenv_set -8 fix_vlans 0Additional details and variables are described at the original repository 1
/usr/sbin/fwenv_setis a helper script that executes/usr/sbin/fw_setenvtwice consecutively.The WAS-110 functions as an A/B system, requiring the U-Boot environment variables to be set twice, once for each environment.
The
-8option prefixes the U-Boot environment variable with8311_. -
Verify the 8311 U-boot environment and reboot.
fw_printenv | grep ^8311 reboot
After rebooting the WAS-110, safely remove the SC/APC cable from the Livebox 7 and connect it to the WAS-110. If all previous steps were followed correctly, the WAS-110 should operate with O5.1 PLOAM status. For troubleshooting, please read the Troubleshoot connectivity issues with the WAS-110 guide before seeking help on the 8311 Discord community server.
Finally, continue with your bypass by consulting the routing guide(s) below.
Livebox 7 software versions¶
The software version can be utilized as a provisioning attribute by the OLT, but this is not the case for the Livebox 7, which uses CWMP2. However, it is recommended to keep somewhat up-to-date with the following listing.
| Software Version 0 | Software Version 1 |
|---|---|
| SAHEOFR030502 | SAHEOFR030602 |
| SAHEOFR070202 | SAHEOFR919117 |
| SAHEOFR010117 | SAHEOFR070101 |
| SAHEOFR010113 | SAHEOFR030602 |
| SAHEOFR010112 | |
| SAHEOFR030102 |
Please help us by contributing new versions via the 8311 Discord community server or submitting a Pull Request on GitHub.



