This information was taken from https://slickdeals.net/f/11788767-t-mobile-wi-fi-cellspot-router-60-free-shipping?src=SiteSearchV2_SearchBarV2Algo1
Use at your own risk.
You can flash this router to an RT-AC68U: http://www.bayareatech
- Avoid CFE 22.214.171.124 from the RT-AC68P, as the newest Asus firmwares (126.96.36.199.384.20624 and later) detect this on the TM-AC1900 and revert the mod. Instead, use CFE 188.8.131.52 US AiMesh; it was dumped from an actual RT-AC68U by user goggles99 at SNB. The CFE generator by danielfenghas this version available.
- Some TM-AC1900 ship with a firmware version that allows SSH access. If you get one of these, you can skip steps 5-10 of the guide. To check if you have SSH available, go to Administration > System in the router configuration interface. If your firmware permits SSH, there will be a setting to Enable SSH. If so, choose Yes, then Apply. Move on to step 11.
- The T-Mobile certificates have to be wiped from the mtd5 partition. This can be done after all of the steps in the guide have been completed, but must be done before any newer version of ASUS firmware is flashed. As of this writing, the firmware included in the bayareatechpros guide is 184.108.40.206.376.3626, so the steps below should be performed when this version is running on your router.
Wiping T-Mobile certificates from the mtd5 partition
These instructions originally existed on SNB before that forum thread was shut down . Credit to XVortex and rdallen. After you’ve performed these steps, you can flash 220.127.116.11.384.21045 (and possibly newer) using the GUI.
# Backup MTD5 (dd produces identical bin)
cat /dev/mtd5 > /jffs/mtd5_backup.bin
# Copy mtd5_backup.bin from router using scp
# From host: scp email@example.com:/jffs/mtd5_backup.bin ./
# Mount MTD5
mount -t jffs2 /dev/mtdblock5 /tmp/asus_jffs
# Copy mtd5 files from router using scp
# From host: scp firstname.lastname@example.org:/tmp/asus_jffs/* ./
# Wipe mtd5 files and reboot
rm -rf /tmp/asus_jffs/*
sync && umount /tmp/asus_jffs
rm -rf /jffs/.sys/RT-AC68U
nvram unset fw_check && nvram commit && reboot
SNB now disallows discussion about converting TM-AC1900 to RT-AC68U with AiMesh. So, modding information may be a bit harder to come by going forward. Some discussion has moved to this thread on whirlpool.
If you are having problems accessing the mini-CFE webserver this works:
- Power off the router using the power button
- Set your PC’s IP to 192.168.29.2 (assuming the recovery mode is gateway is 192.168.29.1)
- Navigate to 192.168.29.1 using your browser — the browser continue to try and access the page until it is available
- Press and hold the reset button while powering-on the router
- When the mini-CFE webpage appears on the browser, release the reset button
- As long as the browser status is still spinning — looking for a webpage — the mini CFE web page will load