Cracked Telecom light cat (personal real experience)

How to crack the telecom light cat?
This is my real project experience.
We develop a site for a company, the site to connect the database on a company LAN in a Host B.
(Question one: Why do you want to connect to host B in the LAN, not even the public network database?, see below)
Company A uses light cats to surf the internet. My strategy is to use the port map + peanut Shell to implement.
But the light cat does not have "port mapping" function, so purchased Tplink (this very famous, everyone knows) of the router, Tplink router connection light cat.
Tplink can set the port mapping, but there is a problem, that is, Host B mapping is not outside the network, because the middle through the light cat fell number one (separated by a LAN). What do I do?

Methods: Remove the route function of the light cat, so that the light cat only play the role of bridge
The interface that is logged in with the default user is as follows:

The broadband settings interface is not visible at this time.
You must be logged in as a super administrator. And the Super Administrator is not known by the average person. Must be cracked.

So how to crack it?
Log in with the Useradmin account and password behind the cat 192.168.1.1
Then download http://192.168.1.1/backupsettings.conf
Open with Notepad. Find the telecomadmin+8, this is your light cat telecomadmin password.

First find the Http://devacs.edatahome.com:9090/ACS-server/ACS, change it to Http://devacs.edatahome.com.disable:9090/ACS-server/ACS. , making it impossible to connect to the remote Management Server. And then find
< totalterminalnumber>5</totalterminalnumber>. Change the 5 to a larger number to remove the limit on the number of optical cat access devices.
Then log in with the Telecomadmin account and the password you just found 192.168.1.1
For example with (light cat's management Interface):

The "Connection name" selects the second (not necessarily the second one, depending on the actual situation), then the following "mode" is set to "Bridge" on its own initiative, then click [Save/Apply]button.
Note: When doing this operation, the operation of the computer must be directly connected with the light cat, do not have a router in the middle, after the connection, open the browser input: http://192.167.1.1, enter, that is, enter the login interface.

Suppose you want to dial with your own route?
Then go into the 192.168.1.1 and change the Internet connection from PPPoE to bridging, similar to the following interface

After setting up, let the Router connect the light cat, then put the Host B to connect the number of routers, log in 192.168.1.1, first set the Internet parameters (password), and then set the port map.
Note: At this time, the computer directly connected to the light cat will not be able to surf the internet, must be connected to the Tplink router, because this time cat only play bridge function.

Question one: Why do you want to connect to host B in the LAN, not even the public network database?
No, because the customer previously purchased a client software, the client software installed a database, and we do the site to get the data in the database, so can only connect to Host B database

References: Cracked telecom light cat (real project experience)

Cracked Telecom light cat (personal real experience)