In my previous blogs I have documented the journey to getting Virgin Media’s XGS PON powered broadband installed and as you will see from reading them the inculded Hub 5x is limited in features and at the time of writing (21/7/24) does not have Modem Mode working properly which makes using your own router tricky. It is possible to bypass the Hub 5x altogether with the help of the WAS-110 SFP+ module this blog will detail what is required to achieve this.
You can get £50 cashback with any Virgin Media package using our link here
Background
Virgin Media’s new XGS PON broadband powered by Nexfibre’s new network offers speeds up to 2Gbps symmetric and is rapidly being rolled out across the country.
Unlike most FTTP installs all you get is Virgin Medias Hub 5x and the fibre goes directly into this rather than via an ONT.
An ONT would allow you to plug your own router quite eaisly where as the Hub 5x is already the router.
While Virgin Media’s DOCSIS based routers or hubs have offered a function called Modem Mode for years they have still not got it fully working on the Hub 5x.
Modem Mode essentially turns off all the router features of the Virgin Media Router/Hub making it act more like an ONT and it just passes the public IPv4 address right though to your own router.
As I documented in my last blog Modem Mode is not in the GUI natively and while I was able to get it working using a hidden page it only works on Port1 which is limited to 1Gbps or 950mbps throughput which means you are not able to achieve the full line speed of the Gig1 or Gig2 services.
It has also come to light that Virgin’s automated hourly performance speed testing done on Hub5x has caused issues with the service epically on Gig2!
There is another option and that is to use a SFP+ module that you plug the fibre cable into and this handles the XGSPON side allowing you to use your own router with full speeds.
There is a fantastic community called 8311 that have come up with the firmware and instructions to get this working not only for Virgin Media but other ISP’s around the world without them none of this would be possible so a huge thanks to the 8311 community.
Pre Requisites
Before we go any further just a disclaimer that by following this guide you do so at your own risk and note you will not get any support from Virgin Media and if you have any issues with your service you will need to plug your Hub5X back in for troubleshooting with VM.
This is intended for technical people who wish to use their own router and understand the risks involved.
You will need the following for this project:
- A WAS-110 XGSPON ONU SFP+ Module
- LC/APC to SC/APC cable or adaptor
- A device with a spare SFP+ slot (ie switch, router etc)
The WAS-110 can be ordered from Fibre Mall based in China or ECIN based in Canada you can also periodically get it slightly cheaper on group buys in the 8311 Discord. with the added advantage it comes pre loaded with the latest 8311 community firmware!
Note with fibre mall they will ask you what devices your using it with just answer with the device your plugging it into your end.
The WAS-110 is a SFP+module that is essentially an XGSPON ONT/ONU on a stick and together with the 8311 custom firmware allows you to enter the details of your ISP’s device to get connected.
Setup
Here are the links from the 8311 Discord community which provide the full details and may provide more up to date info always worth a read as well.
The following are the steps you need to follow (based on using a Windows device for setup) to get the WAS-110 working with VM XGSPON for those that prefer a video guide see my video above or click here:
Plug the WAS-110 into a 10Gbps capable SFP+ port (note some devices such as Mikrotik switches do not bring up the WAS-110 unless an active fibre is connected to it).
Get a connection to the WAS-110 by either:
- Putting your client device into the same subnet as the WAS-110 by setting a static IP of 192.168.11.2/24 with default Gateway 192.168.11.1
- Adding a static Route to 192.168.11.1/24
See if you can get to Web Gui (http://192.168.11.1) and ping the WAS-110 on 192.168.11.1
Depending on the stock firmware of your WAS-110 stick comes with try the following default web gui credentials:
For Firmware V1.0.21 and above:
| Username | Password |
| admin | BR#22729%635e9 |
| user | user1234 |
For Firmware V1.0.20 and below:
| Username | Password |
| admin | QsCg@7249#5281 |
| user | user1234
alternatively if they are not working try follow these steps:
- a. Enter this URL into your web browser http://192.168.11.1/cgi-bin/shortcut_telnet.cgi?cat%20%2Fptrom%2Fptconf%2Fparam_ct.xml
- b. Copy the XML file into your favourite text editor
- c. Parse the XML for the admin password eg:
value=”admin”></param><br /><param name=”Password” rw=”2″ type=”s” flash_rw=”1″ noti=”0″ noti_rw=”1″ key=”0″ flash_encryp=”1″ value_encryp=”1″ accesslist=”Subscriber” value=”plain text password”>
Once you have found the password log into the web gui.
Once logged into to the WebGUI go to Service tab>Service control and enable SSH.
Download the latest WAS-110 8311 Basic firmware from
https://github.com/djGrrr/8311-was-110-firmware-builder/releases
Once downloaded extract the contents of the .7z compressed folder.
Enter this in your web browser to change the root password to ‘root’ for SSH login.:
In windows explorer navigate to the extracted WAS firmware folder extracted earlier then shift+ right click and choose ‘run powershell window here’
In the PowerShell window enter this code to copy the 8311 firmware onto the WAS-110 via SCP:
scp -oHostKeyAlgorithms=+ssh-rsa -oPubkeyAcceptedKeyTypes=+ssh-rsa local-upgrade.tar [email protected]:/tmp/
Once the file has finished transferring from Step 9 run this in the same Power Shell window to install the 8311 firmware to Firmware Bank B on the WAS-110:
ssh -oHostKeyAlgorithms=+ssh-rsa -oPubkeyAcceptedKeyTypes=+ssh-rsa [email protected] 'tar xvf /tmp/local-upgrade.tar -C /tmp/ -- upgrade.sh && /tmp/upgrade.sh -y -r /tmp/local-upgrade.tar’
Once the 8311 firmware has installed and the WAS-110 rebooted check it has now got the 8311 firmware by logging into the webgui with user root and no password (be sure to set one after)
You should be greeted with the 8311 web gui.
You will then need to repeat Step 10 to install the 8311 Firmware again.
This is because the WAS-110 has two firmware partitions or banks A+B by installing once you have only installed to one of the banks and the original firmware is still on the other bank/partition.
By installing the 8311 firmware twice your installing it on both Banks/Partitions which in the event it decides to boot from the other bank/partition you will still have the 8311 firmware.
It is possible the OLT at the other end may trigger the change of firmware to boot from the other bank/partition.
note when SSHing onto the WAS-110 after installing the 8311 firmware the host key will have changed so you may need to add/update this on your trusted hosts in your SSH client.
After installing the firmware twice and the WAS-110 has rebooted you should now see the firmware on both banks/partitions
you can find this under 8311 menu and Firmware.
In the WAS-110 web gui head to 8311 from the top menu and choose Configuration.
In the Configuration screen enter the following info leaving everything else as default:
- PON Serial Number (ONTID) = PON serial number from label on hub 5x
- Equipment ID = F5685LGB
- Hardware Version = 1.2.1b
- Tick Sync Circuit Pack Version option.
- Software Version A+B = 3.7.4-2306.5
- MIB File = /etc/mibs/prx300_1V_bell.ini
- IP Host MAC Address = C4:EB:43:00:00:01
Once entered save and then reboot the device using System>reboot from the top menu and if you have not done so already connect the fibre cable (SC/APC end) into the WAS-110.
Once rebooted log back into the WAS-110 Web Gui.
Then under 8311 menu choose PON status
On the status tab you should hopefully see this line
PON PLOAM Status : O5.1, Associated state
While getting O5.1 is a good sign it does not guarantee you will get a working internet connection as you can get what’s known as false/fake O5 see this for more info.
Connect your WAS-110 to your router and you should by now pick up a Virgin Media public IPv4 address and have a working connection.
If you don’t then double check the details are correct in 8311>configuration page if your still having issues try following the troubleshooting here.
Its also worth noting that some people have found they are not getting a WAN IP on their router if your havving issues its worth trying this:
Go to 8311>Configuration menu then click on the ISP fixes tab.
In here untick/disable the ‘Fix VLANs’ option then reboot the WAS.
Then use VLAN Tag 100 on your routers WAN interface and or anything in between the WAS and your router.
You can reach out to the 8311 Community discord chat if you have any questions or issues.
My own experince
I ordered my WAS-110 from Fibre Mall which arrived quickly considering it came form China and got it working using the above steps.
It has been working fine now for a few days.
Mine is plugged into a Mikrotik CRS-317-1G-16s+ running in Switch OS mode.
The port on the switch is in its own VLAN which then routes to my pfSense Router for the WAN interface in there.
Once I did the setup and entered the correct details my pfSense router picked up the VM Public IPv4 address and been solid ever since.
The WAS-110 can run hot mines running at ~60C but been told that’s normal.
Its nice to be able to use my own router without the Hub5x in the equation and being able to monitor the XGSPON light level in my switch (and the web gui of the WAS) is also useful.
Hope people find this useful and again huge thanks for the 8311 community for making this possible!
Great blog post. I have this working and it works a treat.
Cheers Barry
Huge thanks for this guide – just set it up works great. One note – when copying and pasting step 10 the — comes through as a long line rather than a double dash so produces an error in powershell, was easily resolved but wanted to mention it in case it helps anyone else
Thank you for the kind comment glad you found it useful.
Thanks for the heads up on the PowerShell code guess the formatting got a bit messed up will see if I can correct this!
Thanks for this guide, really great instructions and I’ve managed to update the firmware as described.
However, the temperature of the WAS-110 is crazy hot in my UniFi Dream Wall. My unit got to 82 degrees C before I decided that was enough and shut it down. Removing the module required gloves it was that hot. Do you think I have a dud module?
Cheers Matt glad you found it useful. 82C is rather high mine sits around 60C even in hot weather so you may have a faulty unit.
You could get a cooling solution for it to try and keep the temp down.
Hi Matt,
I have a 30mmx30mm fan sat on mine, this reduced it from 69 to 48.
There are 3D printable mounts for it as well.
Link to Fan
https://www.amazon.co.uk/dp/B0CB1B2193?ref=ppx_yo2ov_dt_b_fed_asin_title
Link to mount
https://cults3d.com/en/3d-model/gadget/30mm-fan-mount-for-azores-was-110-sfp-ont-stick
I used superglue to attach the fan to the mount then cable ties over the stick.
Great post! Just 1 thing to note, Virgin media is an LC/UPC connector and not APC. I’d advise swapping that cable out as using the wrong type creates huge signal losses and can cause issues on the XGSPON network.
Cheers, The provided VM/Nexfibre LC cable and connectors/faceplates are all LC/APC (Green Connectors) LC/UPC have blue connectors.
Hmm, very strange. Mine is the hub 5x and the connector is definitely UPC, maybe they have different models? My hub hardware version is 1.2.1b
Excellent post, did this last night and all is well.
One thing, after step 10 the reboot on my WAS-110 took between 7 and 10 minutes to the point where I thought I had bricked it. When it came back the next reboot after step 11 only took around 2-3 minutes.
Not to worry though I am very happy.
This is really interesting as id be willing to ditch the VM hub.
My issues is where my virgin comes in is not near where I have my comms rack, I have cat6 running from the virgin hub upto where my rack is, are you aware of anything small that can be a replacement for the hub, that I can put the sfp in and and then pass everything over to cat6 to the router, or act as as router itself (that I can just terminate into my switch). Or is there a way to extend the fibre that comes in into my comms rack so I could terminate the fibre there?
Hi Aaron,
You can use a media convertor with a SFP+ and 2.5/10GbaseT RJ45 then plug the WAS into the SFP+ port and your cat6 into the RJ45 port on the media convertor.
You could also use a small switch with SFP+ and a 2.5/10GBbaseT port or you can get fibre extension cables.
I had one of these that did this for me before I got a router that had built in SFP+.
https://www.aliexpress.com/item/1005007391933720.html?spm=a2g0o.productlist.main.1.3cf47Yqk7YqkRH&algo_pvid=5ae61d33-415b-4897-967b-eb974d3e6bd0&algo_exp_id=5ae61d33-415b-4897-967b-eb974d3e6bd0-0&pdp_npi=4%40dis%21GBP%2196.42%2129.89%21%21%21875.75%21271.48%21%40211b80e117253493574571335e9c44%2112000040567142154%21sea%21UK%216035032281%21X&curPageLogUid=b8FveCacwu9m&utparam-url=scene%3Asearch%7Cquery_from%3A
Do you mind to share your pfsense settings.
Prob a bit much to go into here in the comments but feel free to reach out on Discord via the 8311 channel!
Hi Nathan
Thanks for your work! Any guide for BE800? or it has to be some other network switch. it has combo port but when chosen SPF+ port i cant see PON stick. Any chance to look in manual(be800) and get some advice
Hi Adamski I’m sure someone else on the 8311 discord in the UK is using the TP Link Be-800 try posting on their lots of people including myself that can help 🙂
Hi there, i have cityfibre ont, how to replace? Thanks!
CityFibre operate both a GPON network and XGSPON so first thing to find out is which one of those you are on.
then I would advise joining the 8311 discord and posting in the UK general board
Depending on version of SCP there may be some incompatability leading to this error at step 9:
“`
ash: /usr/libexec/sftp-server: not found
scp: Connection closed
“`
The solution is to use a legacy support option in SCP (-O), i.e.
“`
scp -oHostKeyAlgorithms=+ssh-rsa -oPubkeyAcceptedKeyTypes=+ssh-rsa -O local-upgrade.tar [email protected].1:/tmp/
“`
Thank you for the heads up, also worth noting this guide is mainly targeted at Windows based users so some commands may vary between OS and or software versions.
Hi Nathan, thanks for all the effort you put into these guides and blogs. I have been following with keen interest.
I recently got XGSPON VM installed myself, however, I am having issues with my VPN services. PIA and Cisco for work. I wanted to ask whether you would know any solutions using the VM hub, or whether following something like this guide would be the best bet in trying to resolve things?
Hi M.B, thank you for the kind feedback 🙂
I have not experienced any issues with VPN’s myself on the VM line I use Always On VPN for work, NordVPN, Wireguard and OpenVPN.
You could first try seeing if you can get the Hub 5X into Modem Mode using the workaround posted in my other blog here https://fttppro.co.uk/getting-virgin-medias-new-xgspon-broadband-installed-part-3/
Failing that I would raise it with VM as those services should work on the connection I would not want to recommend spending the money on the WAS etc as its not guaranteed to fix that sort of issue.
Feel free to reach out to us via the 8311 Discord 🙂
I am getting the ‘O2.3, Serial number state’ – One of the ‘Fake05’ states.
Does that mean I will be unable to get this solution working?
My router is not getting a public IP at the moment despite Disabling the ‘Fix vlans’ option and creating a vlan 100 sub interface on my router.
I have ran the ‘omci_pipe.sh md | grep -E ‘^\|\s+(84|171)\s\|’
and got an empty response.
Any ideas where to troubleshoot next?
Hi Stephen O2.3 sounds more line the info is not correct as your not even getting to O5.
I would first double check the info on the pon config page to ensure it matches the values form your Hub5x.
If your still having issues reach out via the 8311 discord channel and we can help further 🙂
Great article, having just had VM XGS PON installed in my area, I am thinking of moving over for the speed boost until Openreach finally get fibre installed.
my router only has 2.5gb ports and housed at the other end of the house with cat6 already in place, so I am not sure which way to go,
The media converter as per this link:
https://www.aliexpress.com/item/1005007391933720.html?spm=a2g0o.productlist.main.1.3cf47Yqk7YqkRH&algo_pvid=5ae61d33-415b-4897-967b-eb974d3e6bd0&algo_exp_id=5ae61d33-415b-4897-967b-eb974d3e6bd0-0&pdp_npi=4%40dis%21GBP%2196.42%2129.89%21%21%21875.75%21271.48%21%40211b80e117253493574571335e9c44%2112000040567142154%21sea%21UK%216035032281%21X&curPageLogUid=b8FveCacwu9m&utparam-url=scene%3Asearch%7Cquery_from%3A
or a small switch – these 2 looked ok but going up in price
https://www.amazon.co.uk/Binardat-Ultra-Mini-Unmanaged-Multi-Gigabit-Wallmount/dp/B0CQM3MGMV/ref=pd_ci_mcx_di_int_sccai_cn_d_sccl_3_4/262-6062350-6763462?pd_rd_w=d1BxA&content-id=amzn1.sym.6448d24d-f04d-4e11-90e5-10165d266aa2&pf_rd_p=6448d24d-f04d-4e11-90e5-10165d266aa2&pf_rd_r=88KRFQ3NNNZZV7FM1MHJ&pd_rd_wg=47tTn&pd_rd_r=1ad4efcd-c201-4420-98f3-d2b0497ae98b&pd_rd_i=B0CQM3MGMV&psc=1
https://www.amazon.co.uk/MikroTik-CRS305-1G-4S-IN/dp/B07LFKGP1L/?_encoding=UTF8&pd_rd_w=NOaKU&content-id=amzn1.sym.23de1171-f5c7-4e79-b72f-cf461366ee95%3Aamzn1.symc.9c69961c-776f-45c4-b797-9eea1239a3fb&pf_rd_p=23de1171-f5c7-4e79-b72f-cf461366ee95&pf_rd_r=P6C7AYSCJYJSKD6YR3JF&pd_rd_wg=wFIFQ&pd_rd_r=1e725a48-14f2-40be-970b-7cd3e8d9af43&ref_=pd_hp_d_atf_ci_mcx_mr_ca_hp_atf_d
Any recommendations?
Hi Andy,
Thank you for the kind feedback glad you liked the blog.
If you have not had the Virgin fibre connection installed yet then its possible they may be able to install the fibre where your existing router is.
In terms of installing the WAS-110 I would avoid media converters as they dont work very well together so would be looking at the switch route I use MikroTik myself so would personally recommend them however I know others have had success with cheaper switches.
Kind Regards,
Nathan
Hi Nathan, I’m trying to get my Virgin Media WAS-110 setup running. Here’s my setup:
-The WAS-110 is running v2.8.0 and is connected to a switch.
-From the switch, I’ve tried connecting either my Eero 5 router or my GL.iNet AR-150 travel router.
-I followed the pon.wiki guide and get an O5.1 state with “Associated” status, which seems valid (not a fake one).
-I’ve disabled VLAN tagging and added VLAN 100 for both routers
-The port is set to a fixed 10Gb.
However, I still can’t get internet access.
Am I missing any critical steps, or does anyone have suggestions for further troubleshooting?
Thanks in advance!
Hi Enrique,
Have you tried spoofing the VM routers MAC address on your own router? I know this step is needed for some to get a connection.
Other than that if you can I would join the 8311 discord and post in the UK>General channel where myself and others can help diagnose further 🙂
If you don’t do Discord feel free to email me [email protected]
Kind Regards,
Nathan