Skip to content

Masquerade as the Play SDMC NP6089XGS with the WAS-110 or X-ONU-SFPP

Tested footprint

This was tested only on PŚO network. Play also uses other wholesale networks and OLT configurations, so VLANs or OMCI requirements may differ elsewhere.

Purchase a WAS-110 or X-ONU-SFPP

The WAS-110 and X-ONU-SFPP are available from select resellers worldwide. To streamline the process, some resellers are pre-flashing the 8311 community firmware and highly recommended for the X-ONU-SFPP. Purchase at your discretion; we take no responsibility or liability for the listed resellers.

WAS-110 Value-Added Resellers

X-ONU-SFPP Value-Added Resellers

Common misconceptions and answers
Do the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK ONT's support GPON wavelengths (1490 nm downstream and 1310 nm upstream)?

No, the BOSA in these ONTs are calibrated exclusively for XGS-PON wavelengths: 1577 nm downstream and 1270 nm upstream. They use the Macom M02180 (WAS-110), Macom M02181 (X-ONU-SFPP), and Semtech GN28L96 (HLX-SFPX) laser drivers, which are designed specifically for 10G-PON applications.

Are the WAS-110, X-ONU-SFPP, HLX-SFPX, or WT-ONU-STICK a gateway/router?

No. These are SFU ONTs (not HGUs) that convert Ethernet to PON; they do not provide Layer 7 gateway functions (NAT, DHCP, etc.) A separate gateway/router is required for internet access.

Requirements

In addition to a WAS-110 or X-ONU-SFPP, you will need:

  • the PON serial number of the original SDMC gateway;
  • the original gateway base MAC address and, preferably, its Internet WAN service MAC;
  • a router capable of DHCP/IPoE on VLAN 35 and WAN MAC cloning;
  • a way to reach the ONT management address, normally 192.168.11.1/24.

Follow the Accessing the ONT guide before continuing.

Record the subscriber-specific values

SDMC NP6089XGS Device Information

SDMC NP6089XGS WAN Information

  1. Within a web browser, navigate to http://192.168.0.1 and sign in to the original SDMC gateway. Then, from Status, select Device Information and record the Equipment ID (Device Type), Software Version, and GPON S/N (SN).

  2. From Status, select WAN Information and record the VLAN ID shown in the VLAN column. Play uses VLAN 35.

PON serial number

Record the PON serial shown by the original SDMC web interface or label. It has the form:

SDMCXXXXXXXX

The first four characters are the vendor ID. The final eight characters are hexadecimal and must be copied exactly.

MAC addresses

Record the base MAC printed on the gateway label or shown in its web interface.

Optional: verify the original SDMC from its shell

Root shell access is not required for the replacement because the fixed model attributes are documented below. If shell access is already available, these read-only commands are useful for verification:

gponctl getState
gponctl getSnPwd
gponctl getOnuId
gponctl getAllocIds
gponctl getOmciPort

To observe the original DHCP client and its actual service MAC:

tcpdump -eni veip0.1 -s0 -vvv -c 8 'udp port 67 or 68'

Install the 8311 community firmware

As a prerequisite to masquerading as the SDMC NP6089XGS, the 8311 community firmware is recommended and required for the remainder of this guide. If you purchased a pre-flashed WAS-110 or X-ONU-SFPP, skip past to the masquerade setup.

There are two methods to install the 8311 community firmware onto the WAS-110, outlined in the following guides:

Method 1: recommended

Install the 8311 community firmware on the WAS-110

Method 2:

WAS-110 multicast upgrade and community firmware recovery

The X-ONU-SFPP 8311 community firmware installation requires a two-step process and is more prone to failure and bricking.

This process is not thoroughly documented and can lead to a bricked device

Step 1: Install the Azores bootloader

Skip past to the solution in the following issue tracker on how to install the Azores bootloader.

Step 2: Multicast upgrade

Follow through the WAS-110 multicast upgrade and community firmware recovery

Masquerade setup

To successfully masquerade on XGS-PON, the original ONT serial number is mandatory. It, along with other key identifiers, is available from the web UI or label of the SDMC NP6089XGS.

from the web UI recommended

As of version 2.4.0 https:// is supported and enabled by default

All http:// URLs will redirect to https:// unless the 8311_https_redirect environment variable is set to 0 or false.

WAS-110 login

WAS-110 8311 configuration

WAS-110 8311 configuration ISP fixes

WAS-110 8311 reboot

  1. Within a web browser, navigate to https://192.168.11.1/cgi-bin/luci/admin/8311/config and, if asked, input your root password.

  2. From the 8311 Configuration page, on the PON tab, fill in the configuration with the following values:

    Reminder

    Replace the mandatory PON serial number, Software Versions, and IP Host MAC Address.

    Attribute Value Mandatory Remarks
    PON Serial Number (ONT ID) SDMCXXXXXXXX ✔ Use the subscriber-specific value
    Equipment ID NP6089XGS ✔
    Hardware Version NP6089-V1.1 ✔ ONU-G version
    Sync Circuit Pack Version Disabled ✔ Circuit Packs report HWTC
    Software Version A S07.32.03.021 Inactive image
    Software Version B S07.32.03.055 Active image
    Firmware Version Match ^(S07\.32\.03\.[0-9]{3})$
    Override active firmware bank B
    Override committed firmware bank B
    OMCC Version 0xA0 ✔
    OMCI Interoperability Mask 18 Leave at the normal default unless troubleshooting
    Registration ID (HEX) 20202020202020202020 ✔
    MIB File /etc/mibs/prx300_1U.ini ✔ PPTP i.e. default value
    PON Slot 1 ✔ Produces Ethernet UNI instance 0x0101
    IP Host MAC Address <BASE-MAC> ✔
  3. From the 8311 Configuration page, on the ISP Fixes tab, disable Fix VLANs from the drop-down.

  4. Save changes and reboot from the System menu.

from the shell

  1. Login over secure shell (SSH).

    ssh root@192.168.11.1
    
  2. Configure the 8311 U-Boot environment.

    Highlighted lines are mandatory

    Replace the mandatory PON serial number, Software Versions, and IP Host MAC Address.

    PON_SERIAL='SDMCXXXXXXXX'
    BASE_MAC='AA:BB:CC:DD:EE:FF'
    
    fwenv_set -8 gpon_sn "$PON_SERIAL"
    fwenv_set -8 equipment_id NP6089XGS
    fwenv_set -8 hw_ver NP6089-V1.1
    fwenv_set -8 cp_hw_ver_sync 0
    
    fwenv_set -8 iphost_mac "$BASE_MAC"
    
    fwenv_set -8 sw_verA S07.32.03.021
    fwenv_set -8 sw_verB S07.32.03.055
    fwenv_set -8 -b fw_match '^(S07\.32\.03\.[0-9]{3})$'
    
    fwenv_set -8 omcc_ver 0xa0
    fwenv_set -8 reg_id_hex 20202020202020202020
    fwenv_set -8 mib_file /etc/mibs/prx300_1U.ini
    fwenv_set -8 pon_slot 1
    fwenv_set -8 fix_vlans 0
    
  3. Verify the 8311 U-Boot environment and reboot.

    fw_printenv | grep '^8311_'
    reboot
    

O5.1 can be a false positive

If the ONT reports O5.1 but the VLAN page says No Extended VLAN Tables Detected, the OLT has not accepted the full OMCI profile. Do not proceed to router troubleshooting until the service objects exist.

Verify OLT provisioning

After rebooting the WAS-110 or X-ONU-SFPP, safely remove the SC/APC cable from the SDMC gateway and connect it to the replacement ONT.

Check PLOAM status

Open the 8311 overview page and confirm:

PON PLOAM Status: O5.1, Associated state

Check the cloned OMCI identity

From SSH:

omci_pipe.sh meg 256 0
omci_pipe.sh meg 257 0
omci_pipe.sh meg 7 0
omci_pipe.sh meg 7 1
omci_pipe.sh meg 11 257

Expected highlights:

ONU-G vendor:                 SDMC
ONU-G version:                NP6089-V1.1
ONU2-G equipment ID:          NP6089XGS
ONU2-G OMCC version:          0xa0
Software image 0:             S07.32.03.021, valid only
Software image 1:             S07.32.03.055, active + committed + valid
PPTP Ethernet UNI instance:   257 / 0x0101

Configure the router WAN

Configure the router connected to the replacement ONT as follows:

Connection type: DHCP / IPoE
WAN VLAN:        35
WAN MAC clone:   <WAN-MAC> (base + 1)

The IP Host MAC Address configured on the 8311 does not clone the router's Ethernet MAC. The router must apply its own WAN MAC clone.

Suppress DHCP Option 61

DHCP Option 61 must be removed from DHCP requests to receive an ACK from the Play DHCP server.

The UniFi Network UI does not currently provide a reliable way to express "do not send Option 61". Entering a blank or a space is not equivalent and may prevent the client from sending a valid request.

A small wrapper can add BusyBox udhcpc -C only for the selected Play WAN interface while leaving all other DHCP clients untouched.

git clone https://github.com/rxri/ubiquiti-dhcp-clientid-removal.git /data/dhcp-clientid-removal
cd /data/dhcp-clientid-removal
chmod 755 dhcp-clientid-removal.sh udhcpc-wrapper.sh
sudo ./dhcp-clientid-removal.sh install

The installer creates its user-editable configuration at:

/data/local/etc/dhcp-clientid-removal.conf

Set TARGET_INTERFACE to the VLAN interface used by the Play WAN, for example:

TARGET_INTERFACE="eth6.35"

The effective MAC address continues to come from the MAC Clone setting in the UniFi UI; it is not stored in the helper configuration.

Reapply after every UniFi OS update

A UniFi OS firmware update may restore the original /usr/bin/busybox-legacy/udhcpc symlink. After every gateway firmware update, rerun the installation:

cd /data/dhcp-clientid-removal
git pull --ff-only
sudo ./dhcp-clientid-removal.sh install

If the repository directory no longer exists, clone it to /data/dhcp-clientid-removal again and repeat the installation.

Verify the DHCP exchange

On the UniFi OS gateway:

tcpdump -eni <WAN-VLAN-INTERFACE> -s0 -vvv 'udp and (port 67 or 68)'

The successful exchange should end with:

Discover -> Offer -> Request -> ACK

Option 61 must be absent from the Discover and Request packets.

RouterOS includes clientid (Option 61) in its default DHCP client options. Replace <WAN-INTERFACE> with the interface used by the Play WAN, then run:

/ip dhcp-client set [find where interface="<WAN-INTERFACE>"] dhcp-options=hostname
/ip dhcp-client renew [find where interface="<WAN-INTERFACE>"]

If the DHCP client requires additional custom options, retain them in dhcp-options while omitting clientid.

Troubleshooting

Symptom Likely cause Check
Stuck before O5 PON serial, optics, or Registration ID Serial format, optical power, Registration ID
O5.1, but no Extended VLAN table OMCI identity or MIB mismatch NP6089XGS, NP6089-V1.1, 0xA0, prx300_1U.ini, slot 1
No Alloc-IDs or data GEMs OLT did not continue provisioning Check the VLAN page and OMCI log after ME 287
GEMs exist, but no DHCP Offer Wrong router VLAN or WAN MAC VLAN 35, clone the original Internet service MAC
DHCP Offer followed by NAK on the router DHCP Option 61 still present Verify that the WAN DHCP client does not send Option 61

For general optical, PLOAM, and OMCI diagnostics, follow the Troubleshoot connectivity issues with the WAS-110 or X-ONU-SFPP guide.