On this page ...

Warning:
as with all hacks, and based on official information: applying this hack will definitely VOID WARRANTY! If you are not experienced with tricks like these: stop NOW! Ask someone who is more experienced (even those guys WILL sweat on this one). Read this disclaimer before continuing!

This hack has been successfully tested on firmware's GSV7AA3.261 and 235 of the ISDN and PSTN/Analog Alcatel SpeedTouch Home. If you can confirm a succesfull hack with other firmware, then please let me know by mailing me. See the "How to upgrade firmware" page for details.

NEW: Available for download now, the firmware Gsv7aa3.281 (ISDN) which I tested with ISDN and it's working. Others have tested the firmware with POTS, and confirmed it to work! POTS/Analog version Gv8baa3.281 (POTS).

Warning: Updating firmware is NOT without riscs and can render you modem useless!

READ THIS CAREFULLY

Tip: With newer firmware (for example GV8BAA3.270 - and 281) releases this hack appears to work aswell. At the "User" prompt you should use the username "guest". After login type "td". You now get the [td]-prompt - Type "prompt"'. You will now get to the expert-mode (sometimes shown as Trace & Debug mode) as seen with the older firmwares, so the MAC address of your adsl-modem will become visible.
[with a lot of thanks to Marco de Grauw, Reinier and Pavaronnie for this tip!]

Note: If you would like to know more about the Alcatel Shell, for example for mapping ports, you will need the command line interface manual, which you can download here.

So why the hack?

Well, with the standard modem (Alactel SpeedTouch Home) using KPN's MXStream, the user needs to login using a dialup-connection from the PC he or she is working from. Once a connection like that is setup, a second user (connected using a hub or something like that) would be unable to connect at all. Bummer ...

Next problem is that the computer you are using should be able to setup a PPTP dialup connection. This is not only difficult to implement for the no-Windows machines, but also an additional load in general.

So I figured a few solutions, which can be found here (one of them being sharing the connection using WinRoute or using a router). I found the router solution to be working just great, but had to try this hack anyway ...

The hack makes your modem a Pro version. The Alcatel Pro has additional features like acting as a router, DHCP server and it can actually do the dialing work for you. Basically it does everything what WinRoute and the Vigor router do as well.

This means that your setup, after the hack, can be limited to a modem, a simple hub and your PC(s) as shown below:

All PC's are automatically connected to the Internet - no additional action required!
Not even software like ZoneAlarm is required anymore since both NAT and the buildin Alcatel Firewall manage this for you!

Be prepared ...

Before start this hack, we must make sure that we have everything setup properly.

• Modem: Alcatel Speed Touch Home (either ISDN or PSTN/Analog version)
  
  
• UTP network
  
  
• Clean PC

Step 1: Get connected

Direct Connect
Connect the modem directly to the PC using a standard UTP-cable. Do not use hubs, switches, etc.

Make sure the PC is CLEAN!
Do not use software like Zone Alarm, WinRoute, etc. Make sure you clean the PC of that kind of software, since (even when not running) it can interfere with the connection from your PC to your modem. Also make sure all dialup-connections are CLOSED.

PC IP Settings
Set the network adapter settings for TCP/IP (assuming you have your modem setup the way KPN want's it for use with MXStream - IP-address modem = 10.0.0.138, subnetmask = 255.255.255.0 - and if you're not with KPN, use the settings of your provider!):

Try making contact
You can do this by opening the Internet Explorer (or any other browser) and open address 10.0.0.138 (no WWW or whatever, just type this plain IP-address in the "Address"-field of the browser). A similar window as show below should appear:

Step 2: Get the Expert-password

In order to apply the hack, you will need the "Expert" password. Unfortunately I do not know how to "calculate" this password, but at the SDSC website you will find a tool that will do this for you.

Update: The Expert password can now also be calculated with the WeetHet Alcatel Expert password calculator.

Before you go there, start a TELNET session (if you want, you can use PUTTY - a tiny but easier to use program);

1. open a DOS box
2. type "telnet 10.0.0.138" (without the quotes)
3. A prompt appears asking for a username. Enter the name "user" here.

User : user
------------------------------------------------------------------------
*
*                             ______
*                         ___/_____/\
*                        /         /\\ ALCATEL ADSL MODEM
*                  _____/__       /  \\
*                _/       /\_____/___ \   Version 3.2
*               //       /  \       /\ \
*       _______//_______/    \     / _\/______ Copyright 1999-2000.
*      /      / \       \    /    / /        /\
*   __/      /   \       \  /    / /        / _\__
*  / /      /     \_______\/    / /        / /   /\
* /_/______/___________________/ /________/ /___/  \
* \ \      \    ___________    \ \        \ \   \  /
*  \_\      \  /          /\    \ \        \ \___\/
*     \      \/          /  \    \ \        \  /
*      \_____/          /    \    \ \________\/
*           /__________/      \    \  /
*           \   _____  \      /_____\/
*            \ /    /\  \    /
*             /____/  \  \  /
*             \    \  /___\/
*              \____\/
*
-----------------------------------------------------------------------
=>

(The yellow text is the text you entered)

4. Now we enter the Expert mode by entering the command "EXPERT", your modem will respond similar as shown below:

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :

(The yellow text is the text you entered, remember the red text!)

5. Copy the line (without the quotes) saying 'SpeedTouch (00-90-D0-00-00-00)' (the red text in the example above) and open this webpage at SDSC: Calculate expert password script.
In the lower part of this webpage (at the "Enter challenge string:" field), you must paste the text you just copied (in this example 'SpeedTouch (00-90-D0-00-00-00)' - without the quotes!).
Read the information provided carefully and confirm them by selecting all options and setting them to "YES"on the SDSC webpage. Finally click "SUBMIT".

6. The SDSC script will now return with a new page stating the proper password (a 10 digit number). In this example:

Remember the 10 digit number, here "1552815226" (I wrote it on my modem).

Unfortunally the calculator at the SDSC site is no longer available.

Alternative 1: The Expert password can now also be calculated with the WeetHet Alcatel Expert password calculator.

Alternative 2: You can use this standalone DOS password generator by "The Master of Disaster". You will need to open a DOS box and go to the directory where this program sits. Now enter in dos (yellow text): CRACK "SpeedTouch (00-90-D0-00-00-00)" (where 00-90-D0-00-00-00 whould be replaced with the numbers you modem produced!)

C:\alcatelpwdgen>crack "SpeedTouch (00-90-D0-00-00-00)"
Copyleft 2002 by The Master of Disaster:
SpeedTouch (00-90-D0-00-00-00): 1552815226

The red marked text is the required password.

If all went fine, then you can start applying the hack - read the disclaimer FIRST!

Step 3: The real hack - Changing things a byte

This is actually the easiest part, but requires you to be more precise and most of all careful!

7. Enter the 10-digit number you just wrote down and press enter. If you did everything by the book, you should now get a confirmation of the Alcatel modem that you are indeed in expert mode.

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :1552815226

Switch to expert mode.

Return to Normal mode by typing <NORMAL>

>

(The yellow text is the text you entered)

8. Enter the "rip" mode by typing "rip" (without the quotes);

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :1552815226

Switch to expert mode.

Return to Normal mode by typing <NORMAL>

>rip
rip>

(The yellow text is the text you entered)

9. Enter the "drv_read 2 1 b" (without the quotes and don't forget the spaces);

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :1552815226

Switch to expert mode.

Return to Normal mode by typing <NORMAL>

>rip
rip>
rip>drv_read 2 1 b
the data in hex is :
9600
rip>

(The yellow text is the text you entered)

10. Now remember this number which was just returned by the drv_read command. Change the last digit to a "6" (without the quotes). This is the actual hack: enter "drv_write 2 1 b XXXX", without the quotes, where XXXX is the number relevant for your modem.

NOTE:
Save the original number, as you will need it for undoing the hack.

NOTE:
I noticed for ISDN modems that the response is 9600, so the new number will be 9606.
Analog modems appear to have a response 8600 (actually, at the www.sateh.com site - which is no longer available -, even 8604 has been reported), the new number for these modems will be 8606.

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :1552815226

Switch to expert mode.

Return to Normal mode by typing <NORMAL>

>rip
rip>
rip>drv_read 2 1 b
the data in hex is :
9600
rip>
rip>drv_write 2 1 b 9606
rip>

(The yellow text is the text you entered)

11. Finally we enter "exit" to exit rip-mode.

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :1552815226

Switch to expert mode.

Return to Normal mode by typing <NORMAL>

>rip
rip>
rip>drv_read 2 1 b
the data in hex is :
9600
rip>
rip>drv_write 2 1 b 9606
rip>
rip>exit
>

(The yellow text is the text you entered)

12. Enter "system" to enter system-mode, and finally enter "reboot" to have the modem reboot.

=>EXPERT
'SpeedTouch (00-90-D0-00-00-00)'

Password :1552815226

Switch to expert mode.

Return to Normal mode by typing <NORMAL>

>rip
rip>
rip>drv_read 2 1 b
the data in hex is :
9600
rip>
rip>drv_write 2 1 b 9606
rip>
rip>exit
>system
system>reboot

(The yellow text is the text you entered)

Step 4: Reset modem to defaults

Once your modem restarted, it already has the Pro-options enabled. We just want to bring it just a bit further ... we will now full reset the modem to it's (SpeedTouch Pro) defaults, just to make sure that we don't forget anything ...

This is done pretty straight forward. For convenience: shutdown your computer first.

1. Switch the modem OFF.
   
   
2. On the back of the modem you will find a small hole with the word "defaults" written below it. It's just big enough for a ball-point tip. Insert a ball-point tip into this little hole (actually it's a reset switch) and keep the ball-point tip in there.
   
   
3. Switch the modem ON, and hold the ball-point tip in the little hole.

You can release the ball-point once the LED's "Line Sync" and "PWR/Alarm" are green (takes about 45 seconds). You have then completed the full-reset. Your modem will now have it's default settings. IP address will be 10.0.0.138 and the subnetmask will be 255.255.255.0.

Note: Do NOT activate the ADSL dialin connection you usually would use! This is NOT needed and WILL INTERFERE with the next steps if you do use it.

Note: expert mode is still active. Now you can reboot your PC again.

Step 5: Configure your modem for auto dial-in

The now following setup instructions are for the current (Dutch) KPN MXStream valid only. If you do now use a MXStream account in the Netherlands, then you might need slightly different settings!

Bert apparently have tested this hack with the KPN's MXStream ADSL service using XS4ALL as provideraccount, but it also is known to work with Planet. I tested this hack (thanks to FFB who stood next to me sweating like hell ... just like I did) with a HCC-net account.

Ludo informed me that this hack works for the Belgian SkyNet as well.

Connect to the modem webinterface by using the Internet Explorer or any other browser. Enter the address "http://10.0.0.138". It is very well possible that you cannot connect. Please consider resetting your PC or using a different PC. Somehow the network settings can be mixed up.

Note: Make sure you are no longer connected to the Internet!

Tip: Make sure there is NO dialup adapter installed on your PC! Otherwise IE will use it to connect to the modem and block the settings.

Click the blue "PPTP" menu button on the left of the now opened window.
You will find a list of entries there: remove them all by clicking the blue "Delete" buttons next to them. One entry cannot be remove and remains (it is not an actual entry, it is used to "Add" entries).
Click the blue "Apply" button in the left-top corner and click the blue "Save All" button on the lower left.

Now click the blue "Phone Book" button and once more remove all entries.

Tip by Tristan: If you are unable to delete all entries: goto BRIDGE and remove all entries there. This appears to be an issue with Belgian providers.

Click the blue "Apply" button in the left-top corner and click the blue "Save All" button on the lower left.

In the "Phone Book" screen, you must now add a new entry. Enter these setting for KPN:

According to Ludo these are the phonebook settings for the Belgian SkyNet, Bart did confirm that this is the case with the Belgian EasyNet as well:

Click the blue "Apply" button in the left-top corner and click the blue "Save All" button on the lower left.

Now click the blue "PPP"-button and add a new entry for the newly made 'MXS' with type 'vc-mux'. Click "configure" at the 'MXS' entry with the now following settings

Click the blue "Apply" button in the left-top corner and click the blue "Save All" button on the lower left.

Now - still in the "PPP" window - you should now activate the connection by setting "Status" to "On", as shown below:

It can take a while before the modem actually connects and changes to the "Up" "State".
If it does not go to "Up", I'd suggest you check the settings (particularly username and password).
What might as well is entering the DNS numbers of your ISP - I have a small list HERE.

Step 6: DHCP settings (optional)

DHCP helps you to easily configure network settings of the computers connected to your network. It automatically can set IP-address, DNS, default gateway etc. etc. It definitely can make live a lot easier, but it's optional. The settings for the client are done as described below, most of the time you do not need to do any efforts, since most OS-installations go for the DHCP settings anyway ...

Click the blue "DHCP" button and check the option "DHCP server" and click the blue "Apply" button in the left-top corner and click the blue "Save All" button on the lower left.

Now click then blue "DHCP" button once more, and then the "ADVANCED" button (upper right corner), and a new window will open.

In the table below these field's you will see a list of connected computers by IP-address and MAC-Address
Click the blue "Apply" button in the left-top corner and click the blue "Save All" button on the lower left.

If you would like to see the actively connected PC, then blue "DNS" button. It shows PC name and IP-Address.

Step 7: Configuring Clients (optional)

I'm assuming you're using Windows, click here for Windows 2000/XP or Windows 9x/ME. Linux and Macintosh have similar settings: set networking to use DHCP.

WINDOWS 95, 98, ME

Configuring the PC's is relative simple.

Start the PC (Win9x/ME) and click with the right mouse button "Network Neighborhood" and choose "Properties".

No select the "TCP/IP" protocol that goes with the network-card connected to the router and click"Properties".

Make sure "Obtain an IP address automatically" is checked. Click "OK" and click "OK" once more. The computer now would like to restart: do so. The configuration is done now. Settings can be checked by typing "winipcfg" in a DOS box or in the "Start"- "Run" box.

WINDOWS 2000

Select "START" - "Settings" - "Control Panel" and click "Network and Dial-up Connections".
Select, with the right mouse button, the LAN network-connection that is connected to the router (you can actually rename this connection by pressing F2) and choose "Properties". This window now appears:

Choose "Internet Protocol (TCP/IP)" and click "Properties", copy these settings:

Click "OK" and click "OK" once more. The client is now configured. Windows 2000 does not require a reboot, it takes a few seconds before Windows gets a new IP-address (Use IPCONFIG in a DOS-box to verify).