The Huawei B593 LTE discussion thread

Derrick_SA said:
Hi there, thanks for the welcome. he he.

K-Tech, jcheek I appreciate the detailed answers. thanks very much.

Yes, I want my NETGEAR Router with 1Gbps to do the heavy lifting inside my network (when I come back from shooting I often have 200GB-500GB+ to transfer, he he, and at 100Mbps it takes a while). and my wifi streaming etc... works well also, so (ek wil nie krap waar dit nie juk nie). I do have WAN port on my NETGEAR.

so basically I want the 601 model (That they offer) to give me a good speed internet to my existing Network setup so I can retain 1Gbps wired. (beating my current 3G/adsl speeds hopefully)

Bluetec phoned me offering me the telkom 601 version (they checked). at R469 for two years with 20GB per month. Any better offers you guys think I should rather take? I would actually prefer to buy the LTE device outright and get a nice data bundle deal, but they don't seem to offer that?

thanks again for the help,
Derrick
Click to expand...

Grin, I just knew you were more interested in that 1Gbps lan speed. :D I am in the same boat
Soos jy sê (ek wil nie krap waar dit nie juk nie)

In my personal opinion... don't sign the dotted line. I think most prepaid users are
there for a valid reason.... the freedom to move from one sp to another at anytime.

Seeing that you are new to LTE you will certainly learn a lot on these threads.

First recommendation is to see who offer the best LTE in your area.
R469 x 24 months = R11256.00 (The B593-601 only now cost about R2600)

Try your local Telkom/Telkom Mobile shop/Makro first for cash price...
If you can't find any, I can supply + warranty

I think Telkom still offer 60+60 Gigabyts for R1800 on prepaid (valid for 12 months)
Someone else also recommend using prepaid sim cards to find the best sp first.

Enjoy
 
Last edited:
Thank you Azimuth & jcheek for your answers.... on above.

On Q3 my focus was more on the effect on RF not on MIMO, but your answers helped.

On Q4 my understanding is that LTE/4G is totally different equipment / a different panel
- This mean that if Telkom has a 100Mb line fed into the tower, their 3G and LTE panels are fed from the same 100Mb.
 
Last edited:
K-Tech said:
Q3 Someone post that LTE are not effected by weather...??? please explain...
Click to expand...
I see urban legend is spreading over this and similiar threads. Like this: "LTE doesn't suffer congestion" - wait, more people will use it, you will see...
LTE is affected by weather the same as 3G. Receive diversity citated above (as a property of LTE) is also present in 3G. Tower antennas had been engineered to optimise reception by using technique called beam forming (which also allows 2x1 MIMO). There is also 2x2 MIMO in HSPA+ Rel.7, but not implemented in SA networks. Difference is in user equipment. It is not common that 3G modem use receive diversity, but more expensive do. Examples? My 3G modem has two antennas for receive diversity. Upmarket phones the same, maybe except iPhone 4 which has terrible poor reception. Read old messages on MyBB and learn little bit before formulating theories. :)
 
Last edited:
jcheek said:
Shouldn't that be on the 3G thread ? This one's for B593 owners :p
Click to expand...
Is this coming from the person who spreaded urban legend about LTE features and advantages to 3G?

If true, I am justified. ;)
 
sajunky said:
Solution was already given by ginggs in hist post here: http://mybroadband.co.za/vb/showthread.php/575591-The-Huawei-B593-LTE-discussion-thread/page29
Click to expand...

Dead link / wrong page ?
If it's the post I think you mean, it's here.

sajunky said:
It doesn't need Linux laptop, it can be tested from your Windows, I tried it on B683. Here is how to do it:

1. Open command-line prompt (CMD).
2. Enter: telnet 192.168.1.1
3. Enter login/password at ATP CLi prompts, the same as you do from WEB interface
4. Enter: shell
5a. If you have B683 enter: atcmd
5b. If you have B593 enter: lteat
6. Enter AT+CREG?
Your Cell ID is quoted directly from the post:
Code: 
 AT+CREG?
    +CREG: 2,1, YYYY, XXXXX, 2
    OK

    Y = LAC
    X = Cell ID
    Added: Note that both are in hex so need to convert it
If you submit this number to the service department, split it on two RNC/Cell_ID before converting to decimal. Examples given in original post.
Click to expand...

I gave this a try when the topic first came up a week or 2 back.
I tried using Telnet but got no joy at all. For others wanting to try this, bear in mind you have to manually install Telnet on a Windows 7 machine - it isn't installed by default.

My understanding of the blogger's post where it was discussed, was that the connection to the B593 has to be made using SSH. So I also tried using PuTTY and got a bit further - the modem issued a login challenge at least.
But it didn't accept the login credentials I used (which were the same as for the Web UI).
I also tried the default password - still no joy.
So it might be that the procedure works on a '683 but not on a '593.

I also gathered from that same post that the B593 might first have to be 'hacked' to accept a default password on PuTTY/SSH.

Has anyone else actually tried this on a B593 ?
 
Last edited:
Moving your post here was not a good idea. It is more about antenna alignment and contains information common to other routers.

Originally Posted by jcheek:
Dead link / wrong page ?

I gave this a try when the topic first came up a week or 2 back.
I tried using Telnet but got no joy at all. For others wanting to try this, bear in mind you have to manually install Telnet on a Windows 7 machine - it isn't installed by default.
Click to expand...
1. Link points to the valid page when using old mobile scheme. Unfortunately I can't copy a link to the specific post in this scheme.
2. Some telnet clients require to specify explicit port number. Windows XP client takes default port when argument is missing.
3. SSH, I don't know, it must be a different settings for password authentication method. Going to check on B683.

Why you do not post if not working? Good idea somebody with B593 to try it.


----------------
Here is delault Telnet port number:
Code: 
C:\Documents and Settings\Internet>netstat /a

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    ME-HPQ:1173            192.168.1.1:telnet     ESTABLISHED
[...]

C:\>netstat /a -n

Active Connections

  TCP    192.168.1.100:1173     192.168.1.1:23         ESTABLISHED
[...]
 
Last edited:
Yes, port 23 is the default for Telnet and Windows 7 uses it.
Port 22 is the default for SSH.

Unfortunately I have no luck when attempting a Telnet connection to my B593 on port 23:

Telnet port 23.JPG

I get the same result when using PuTTY to make a Telnet connection on Port 23.

I've also tried using PuTTY to attempt an SSH connection on port 22, like this :

PuTTY config.JPG

With that method, I get a login challenge at least, but no connection :

PuTTY SSH on port 23.JPG
 
Does it give login prompt when telneting without user name?
telnet 192.168.1.1 23
 
Failed connection (see screenshot # 1), so that's a no.

Rather than hitting a brick wall with the above, I'm going to acquire a backup LTE USB Speedstick for my (mis)adventures per ginggs' suggestion in the antenna thread.
 
Last edited:
jcheek said:
My understanding of the blogger's post where it was discussed, was that the connection to the B593 has to be made using SSH. So I also tried using PuTTY and got a bit further - the modem issued a login challenge at least.
But it didn't accept the login credentials I used (which were the same as for the Web UI).
I also tried the default password - still no joy.
Click to expand...
Did you try admin/admin and admin no password?

I found some more info here: Gaining root shell on Huawei B593 4G LTE router
 
Tried ssh default PuTTY settings on B683, it doesn't respond. It either do not run service or uses non-standard port.
Which Windows utility can be used for port scanning?
 
ginggs said:
Did you try admin/admin and admin no password?

I found some more info here: Gaining root shell on Huawei B593 4G LTE router
Click to expand...

Yes, all the usual suspects. None worked so far, unfortunately :-(

There're a bunch of other options on the SSH tab of PuTTY which have defaults, but maybe not the correct ones.
Although the fact that I get a login challenge kinda suggest the basics are right ?

Thanks for the additional info ... wondering what to make of these snippets together :

"1. Under diagnostics there's "ping" feature that allows execution of commands as root. Web interface has javascript checks but nothing on server side"

"Disable iptables via ping exploit and then ssh in to device using "ssh [email protected] -s /bin/sh" with password "admin", type "shell" and that's it."

The Web UI does indeed have a Ping test facility but I can't see how one would use that in the way described :

Ping feature.jpg

From further "ramblings" in the same blog it sounds as if one might first have to hack into some user tables:

"So, those people who are able to use the exploit, are able to know what the SSH-passwords are. A command like
B593cmd.pl "cat /var/sshusers.cfg"
will give you immediate answer and a regular
ssh admin@-the-IP-here- /bin/sh will do the rest.
As I previously stated, the thing is, you need to know the admin password to the web-console and old enough firmware to have the exploit in it to be table to any of that."

I'm not very familiar with this kind of stuff so if you have further advice / suggestions, please shout - I fear the idiot's guide will be needed !
 
Last edited:
jcheek said:
Although the fact that I get a login challenge kinda suggest the basics are right ?
Click to expand...
Yes, it sounds like you don't need to mess with the firewall (disable iptables).
jcheek said:
"So, those people who are able to use the exploit, are able to know what the SSH-passwords are. A command like
B593cmd.pl "cat /var/sshusers.cfg"
Click to expand...
So to find out what the SSH passwords are you need to gain access to the file.
Sounds like you can do this with the ping exploit or the FTP exploit.

More links:
Huawei B593: Logging into shell [Solved!].
download cURL for just about any operating system
 
Last edited:
ginggs said:
It sounds like B683 uses telnet, but B593 uses ssh.

Search for WS Ping Pro Pack.
Click to expand...
Correct. In meantime I did port scan using McAfee SuperScan on B683, it shows response to ports 21,23,80 and 443. No SSH. Will try WS Ping, but it looks like problem is solved.
 
Last edited:
ginggs said:
So to find out what the SSH passwords are you need to gain access to the file.
Sounds like you can do this with the ping exploit or the FTP exploit.
Click to expand...
Tried the FTP exploit quickly.
I can create user accounts (with arbitrary names + passwords) for use on the B593's FTP server.
Seems the FTP server only starts up when a USB stick is inserted. At that time only, I can connect to the device by opening an FTP session in Windows Explorer. The defined logins (and only those logins) then work.
I can see the contents of the USB stick in a folder called "usb1_0".
I can see another folder called "cfg", which appears empty, even with hidden files shown (though I'm sure it isn't). Can't do anything much in there.

FTPscreen.jpg

So far, no luck trying to navigate upwards, or map the folder as a drive.
 
jcheek said:
I can see another folder called "cfg", which appears empty, even with hidden files shown (though I'm sure it isn't). Can't do anything much in there.
Click to expand...
You should be looking for a directory named 'var'. The blogs linked to previously mention something about setting your home directory to '../..'.
Try using a proper FTP client like FileZilla.
 
... ek verstaan nie kop of gat van dit... so I will give it a pass for now unless it can do something for me.
Is this now all one need to do to know one's connected Cell_ID, I am a Schuster ;)
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X