Clones #1

Closed
opened 2026-02-03 22:58:27 +00:00 by Sirherobrine23 · 16 comments
Owner

The original model is the Ainopol ZH-VOLT, which is a compact GPON OLT SFP.

There are some clones, such as the Pacetech PAC-VOLT, which is a clone commonly sold on AliExpress.

Ainopol Web:

The original model is the `Ainopol ZH-VOLT`, which is a compact GPON OLT SFP. There are some clones, such as the `Pacetech PAC-VOLT`, which is a clone commonly sold on AliExpress. Ainopol Web: - [32 terminals](https://www.sczhgx.com/product/detail.html?id=941&language=en) - [16 terminals](https://www.sczhgx.com/product/detail.html?id=939&language=en) - [tools](https://www.sczhgx.com/service/dfu_download.html?t_id=45&language=en)
Author
Owner

@merbanan you could send photo from sfp module's label?

@merbanan you could send photo from sfp module's label?

Here is the picture.

Here is the picture.
Author
Owner

@merbanan i not found almost information about this module, but it seems to only work with certain devices, and this is a clone of a version only for the Chinese market. From what I found, few people had success with this module only with only chines devices. The bad thing is that they didn't say if it was used with a media converter or a switch with a MAC controller

@merbanan i not found almost information about this module, but it seems to only work with certain devices, and this is a clone of a version only for the Chinese market. From what I found, few people had success with this module only with only chines devices. The bad thing is that they didn't say if it was used with a media converter or a switch with a MAC controller

Yeah, I have another ONT sfp stick that I need to test if it works with this module. My main goal with the device is to find something I can talk ploam with.

This olt stick only has one manufacturer so it should be possible to hack it as long as it is possible to get one device working.

Yeah, I have another ONT sfp stick that I need to test if it works with this module. My main goal with the device is to find something I can talk ploam with. This olt stick only has one manufacturer so it should be possible to hack it as long as it is possible to get one device working.
Author
Owner

My OLT arrived at the airport here in Brazil today, it will probably arrive by the end of the week or on the 17th

My OLT arrived at the airport here in Brazil today, it will probably arrive by the end of the week or on the 17th
Author
Owner

My Olt arrived, I already tested it and managed to get it working on the local network, but without internet access. It must be some kind of sharing problem. I'll take a look at the SFP physically, and as for the Linux software, it's not feasible. We'll have to reverse engineer the program to port it to Linux. With the TP-Link stock software, we can get a connection of 800~959 Mbps.

As for the OMCI, we don't have a log for it, so we'll just stick with the router part to test the PLOAM. @kvn193 and I can test it, but it would be useless because it's the same Xpon

My Olt arrived, I already tested it and managed to get it working on the local network, but without internet access. It must be some kind of sharing problem. I'll take a look at the SFP physically, and as for the Linux software, it's not feasible. We'll have to reverse engineer the program to port it to Linux. With the TP-Link stock software, we can get a connection of 800~959 Mbps. As for the OMCI, we don't have a log for it, so we'll just stick with the router part to test the PLOAM. @kvn193 and I can test it, but it would be useless because it's the same Xpon
Author
Owner

internal photos, it seems to have an FPGA, but I haven't checked to see if it has a UART yet

internal photos, it seems to have an FPGA, but I haven't checked to see if it has a UART yet

Fudan Micro FMK50T2ef64.

The 2 testpoints to the right seems like GND and VCC. And the 3 test points to the left looks like IO.

Fudan Micro FMK50T2ef64. The 2 testpoints to the right seems like GND and VCC. And the 3 test points to the left looks like IO.

Attached is an OMCI parser for Wireshark.

Attached is an OMCI parser for Wireshark.
41 KiB

sys wan2lan on 15

This command should mirror the wan onto the lan ports.

sys wan2lan on 15 This command should mirror the wan onto the lan ports.

/userfs/bin/ponmgr gpon get info

This should report some gpon link information.

/userfs/bin/ponmgr gpon get info This should report some gpon link information.

#To enable debug logs in Serial/console :

tcapi set OMCI_Entry0 DebugLevel 1

tcapi save

tcapi commit OMCI_Entry0

And then check "tcapi show omci" if it is enabled

#Enable PLOAM debugging (ring buffer setting needed to pass ranging due to introduced delays):

echo "msg oam 1" > /proc/xgpon/debug

echo ring_buffer_mode 1 > /proc/uart/uart

echo "msg act 1" > /proc/xgpon/debug

#To change serial number :

prolinecmd protectEnv set 0

prolinecmd xponsn set <> (Example : ABCD002460E2)

prolinecmd restore default

#To enable debug logs in Serial/console : tcapi set OMCI_Entry0 DebugLevel 1 tcapi save tcapi commit OMCI_Entry0 And then check "tcapi show omci" if it is enabled #Enable PLOAM debugging (ring buffer setting needed to pass ranging due to introduced delays): echo "msg oam 1" > /proc/xgpon/debug echo ring_buffer_mode 1 > /proc/uart/uart echo "msg act 1" > /proc/xgpon/debug #To change serial number : prolinecmd protectEnv set 0 prolinecmd xponsn set <> (Example : ABCD002460E2) prolinecmd restore default
Author
Owner

Yesterday I captured these packets

Yesterday I captured these packets
Author
Owner

xx230v log

xx230v log
Author
Owner

Tools and Firmware Updates

Tools and Firmware Updates
Sirherobrine23 locked as Resolved and limited conversation to collaborators 2026-05-09 15:02:25 +00:00
Sign in to join this conversation.
No labels
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Sirherobrine23/zh-volt#1