Locking custom LTE bands on ZTE MF286
My ZTE MF286 is running DNA firmware version B04. It's somewhat limited in LTE band selection, but that can easily be worked around with curl.
First of all authenticate to device using web browser. Otherwise these commands will return failure. You want to see {"result":"success"} message.
# 2100MHz (B1) / 1800MHz (B3) / 2600MHz (B7) / 800MHz (B20) / 700MHz (B28) - this is default setting
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x8080045"
# 1800MHz (B3) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x04"
# 2600MHz (B7) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x40"
# 800MHz (B20) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x80000"
# 700MHz (B28) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x8000000"
# 1800MHz (B3) / 2600MHz (B7) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x45"
# 800MHz (B20) / 2600MHz (B7) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x80040"
# 800MHz (B20) / 1800MHz (B3) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x80004"
# 700MHz (B28) / 800MHz (B20) only
curl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x8080000"
Hi. Do you know how to lock that modem at LTE_A?
ReplyDeleteYeah, I would like to know that too. Does e.g. B20 and B3 only setting allows to aggregate them?
DeleteSadly these don't work anymore with B09 firmware.
ReplyDeleteGreetings!
ReplyDeleteDo you maybe have command for 2100MHz only?
Thank you!
I need these for ZTE mf 382 router please! Text me,i will pay!
ReplyDeleteskype: johnysmithenz
email: aleksandarhakler1992@gmail.com
Anyone who knows how to band lock the mf286? Doesn't seem to work with the latest firmware?
ReplyDelete0X02 LTE BAND2
ReplyDelete0X08 LTE BAND4
0X10 LTE BAND5
0X0800 LTE BAND12
0X10000 LTE BAND 17
0X01 LTE BAND1
0X04 LTE BAND3
0X40 LTE BAND7
0X0080 LTE BAND8
0X80000 LTE BAND 20
0X01 LTE BAND1
0X04 LTE BAND3
0X10 LTE BAND5
0X40 LTE BAND7
0X0080 LTE BAND8
0X0400 LTE BAND11
0X20000 LTE BAND18
0X40000 LTE BAND19
0X100000 LTE BAND 21
0X0800000 WCDMA BAND2
ReplyDelete0X4000000 WCDMA BAND5
0X80 GSM1800
0x300 GSM900
0X400000 WCDMA BAND1
0X2000000000000 WCDMA BAND8
0X400000 WCDMA BAND1
0X4000000 WCDMA BAND5
0X8000000 WCDMA BAND6
0X2000000000000 WCDMA BAND8
0X1000000000000000 WCDMA BAND19
# 2100MHz (B) only
ReplyDeletecurl -s -H "Referer: http://192.168.1.1/index.html" "http://192.168.1.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x01"
Example of calculation
ReplyDelete0X8080045 =[0X01(LTE BAND1)+0X04(LTE BAND3)+0X40(LTE BAND7)+0X80000(LTE BAND20)+0X8000000 (LTE BAND28)
# 2100MHz (B1) / 1800MHz (B3) / 2600MHz (B7) / 800MHz (B20) / 700MHz (B28)
0X-----01 +
0X-----04 +
0X-----40 +
0X--80000 +
0x8000000 +
=
0x8080045
# 2100MHz (B1) / 1800MHz (B3) / 2600MHz (B7) / 800MHz (B20)
ReplyDeletecurl -s -H "Referer: http://192.168.0.1/index.html" "http://192.168.0.1/goform/goform_set_cmd_process?isTest=false&goformId=SET_NETWORK_BAND_LOCK<e_band_lock=0x80045"
TO send USSD request in ZTE modem try this
ReplyDeletehttp://192.168.0.1/index.html#ussd
hi, is this working with ztemf286r?
ReplyDeletehow to authenticate to device using web browser
ReplyDelete