T-Mobile Business = 877-347-2127 If you're having problems.
Internal T-Mobile's plan names:
"Bus Unl Tablet 10 GB HS TE" = Taxes and fees extra. SOC code ZB10HSTE
"Bus Unl Tablet 10 GB HS TI" = Taxes and fees included. SOC code ZB10HSTI
For adding HD Video Pass use SOC code : HDVPASS0
Who's eligible
- Available to new lines of service only. No voice line requirement.
- US and Puerto Rico (SJP) Business customers.
- Tax Exclusive Plan: B/C, B/L, B/M, B/N, B/O, B/P, I/S.
- Tax Inclusive Plan: B/C, B/L, B/N, B/P, I/S, Both TI and TE $10 Unlimited Tablet Promo Plan included within the following SOC Groups: 5, 9, 9A, 10, 10B, 21, 22, 34, 41, 59, and 67.
- Government account types
- Consumer customers
- Cannot be combined with tax included plans.
- Retired features and promotional lines/service credit offers will be removed upon switching to this plan.
- Tax Exclusive plans only eligible to Tax Exclusive BANS
- Tax Inclusive plans only eligible to Tax Inclusive BANS
- Voice line not required
- No migrations
- There is no annual contract (Un-contract) or activation fee.
- These plans do not include Music Freedom, Binge On, or Data Stash.
- All on-network data used counts towards fair-use de-prioritization limits.
Not available
- AVD
- Netflix on Us
- $40 Voice + Tablet credit.
- $5 AutoPay bill credit ($5 per line, up to 8 lines / $40 max credit). See the page for more details.
From this post
The multiple ways of using this $10 line for home internet are:
1. T-Mobile Gateway + Cudy N300 or X6 which are wifi only routers to mask hotspot usage with TTL set on the external wifi router. You can use other wifi routers for this purpose but there's a menu page in the Cudy routers which makes setting TTL easy - Courtesy waterchange
1.1 Cudy router like Cudy LT500 or LT18 or the 5G P8 work as a single device with modem + wifi router. Work well for home internet. Nice thing about the Cudy modems is easy TTL (and imei magic if necessary). - Courtesy waterchange
2. M2100 hotspot device - Hit or a miss - native out of the box but less reliable
3. Orbic 5G hotspot device - more reliable than the m2100, however some people have reported throttling after 1st couple of months
4. Gateway + Project Genesis - works most reliably
5. TMOHS1 - ~ 30-50 mbps out of the box, no TTL update required
6. Tmobile Franklin - ~30-50 mbps with TTL update - the most reliable as of right now, however limited speed.
7. M2000 won't pull data from anywhere.
8. GL.iNET Spitz GL-X3000NR easier to use than Cudy and better performance but expensive. Great form factor and performance. Presets for T-Mobile TTL settings and advanced cell features like tower/band lock. External antennas.
9. M3000B works out of the box with T-Mobile version. Has battery preservation features and ethernet port. Some users say to switch 5G mode to NSA if the hotspot restarts frequently in your area.
Add/update if you have more/better info.
Leave a Comment
Top Comments
They will still lock you to a 2 year EIP even if it's free (They'll make a monthly credit to cover the tablet EIP)
Meaning you'd end up paying $10 for 2 years ($240) for a $129 tablet.
So if you're only doing it for the tablet then it's not worth it
soc code ZB10HSTI is the one you want.
5,699 Comments
Sign up for a Slickdeals account to remove this ad.
Windows Instructions
1. Open Powershell (Search Powershell).
2. type
3. Download the zip file from https://github.com/parker-stephen...s/main.zip and unzip it.
4. go to unzipped location in powershell using cd.
5. install the requirements by executing command:
example
C:\Users\<login>\Downloads\TMOHS1-Root-Utility-main>python ./rootScript.py -v Verbose mode enabled. Enter your weblogin password: Encrypting the login payload with key "abcdefghijklmn12" [yes, that's really the key]. . . Sending the authentication request. . . Received authentication token from hotspot: 876876876 Response: {'result': '0', 'ip': '0.0.0.0', 'timeout': '000300', 'token': '9879898'} Exploiting qcmap_web_cgi. . . Connection to device may reset. If you are running the exploit via WiFi, ensure that your device reconnects to the hotspot's network. Payload is ready: page=savepowersaving&displaytimeout=undefined&wifistandby=10;$(mount -o remount,rw /; telnetd; passwd -d root)&token=987987978 Sending the payload now! Waiting for socket. . . If you are running the exploit wirelessly, the connection may drop. Remember to reconnect to your hotspot's WiFi once it reappears. This may take up to a minute. Connected! Socket says: {'commit': 'Socket TimeOut'} Remounted root filesystem r/w. . . Removed root password. . . Enabling telnet. . . Trying to connect via telnet. . . Received: mdm 987987987 mdm9607 mdm9607 login: Telnet connection initialized. Logging in as root with empty password, please wait. . . Waiting for login to be processed. . . The exploit removed the root password of your device. It is STRONGLY recommended to set a custom root password. Your device will be EXTREMELY INSECURE if you do not. Would you like to set a custom root password? (Y/n): y Changing root password. IMPORTANT NOTE: the password will be sent insecurely over telnet, so you should manually change it later over ADB-USB if you are concerned about security. Sent command via telnet: passwd root Enter new password: Confirm new password: Root password successfully updated. ### Options ### 1) Change root password 2) Enough with this script BS, give me a shell! 3) Enable ADB 4) Enable ADB - Persistent through reboot (somewhat experimental) 5) Enable FTP server for / on port 21 - DO NOT LEAVE OPEN 6) Remove OMA-DM bootstrap (essentially disables firmware updates, recommended) 7) Enable mood lighting (look at the battery LED) 8) Mask hotspot data as "on-device" data 9) Reboot 10) Quit Enter option: 8 Sent command via telnet: echo "iptables -t mangle -I POSTROUTING -o rmnet_data0 -j TTL --ttl-set 64" > /etc/init.d/ttl.sh; echo "ip6tables -t mangle -I POSTROUTING -o rmnet_data0 -j HL --hl-set 64" >> /etc/init.d/ttl.sh; chmod 755 /etc/init.d/ttl.sh; ln -s /etc/init.d/ttl.sh /etc/rc5.d/S98ttl Added TTL rules to mask hotspot data as normal "on-device" data. Will take affect on reboot. ### Options ### 1) Change root password 2) Enough with this script BS, give me a shell! 3) Enable ADB 4) Enable ADB - Persistent through reboot (somewhat experimental) 5) Enable FTP server for / on port 21 - DO NOT LEAVE OPEN 6) Remove OMA-DM bootstrap (essentially disables firmware updates, recommended) 7) Enable mood lighting (look at the battery LED) 8) Mask hotspot data as "on-device" data 9) Reboot 10) Quit Enter option: 9 Rebooting. Goodbye! Sent command via telnet: rebootPS C:\T9\rooting> python ./rootScript.py -v
Verbose mode enabled.
Enter your weblogin password:
Encrypting the login payload with key "abcdefghijklmn12" [yes, that's really the key]. . .
Sending the authentication request. . .
Traceback (most recent call last):
File "C:\T9\rooting\rootScript.py", line 66, in <module>
if loginData.json()['result'] == '3':
File "C:\Users\Mus\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\requests\models.py", line 910, in json
return complexjson.loads(self.text, **kwargs)
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1264.0_x64__qbz5n2kfra8p0\lib\json\__init__.py", line 346, in loads
return _default_decoder.decode(s)
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1264.0_x64__qbz5n2kfra8p0\lib\json\decoder.py", line 337, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1264.0_x64__qbz5n2kfra8p0\lib\json\decoder.py", line 355, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
The associate tries again, same result. He said maybe my credit was frozen. I just checked all 3 agencies and no freeze of credit.
Also where do I update the Band and then how do I determine the appropriate TTL value? Just a trial and error based on ping? If I connect to Wi-Fi, do I keep it 1 hop more compares to tethering?Thanks!
PS C:\T9\rooting> python ./rootScript.py -v
Verbose mode enabled.
Enter your weblogin password:
Encrypting the login payload with key "abcdefghijklmn12" [yes, that's really the key]. . .
Sending the authentication request. . .
Traceback (most recent call last):
File "C:\T9\rooting\rootScript.py", line 66, in <module>
if loginData.json()['result'] == '3':
File "C:\Users\Mus\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.10_qbz5n2kfra8p0\LocalCache\local-packages\Python310\site-packages\requests\models.py", line 910, in json
return complexjson.loads(self.text, **kwargs)
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1264.0_x64__qbz5n2kfra8p0\lib\json\__init__.py", line 346, in loads
return _default_decoder.decode(s)
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1264.0_x64__qbz5n2kfra8p0\lib\json\decoder.py", line 337, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1264.0_x64__qbz5n2kfra8p0\lib\json\decoder.py", line 355, in raw_decode
raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
Sign up for a Slickdeals account to remove this ad.
I will call business support Tomorrow and ask, since I have to ask them to switch me to a TI plan too.
A Python code for T9, not the same function but it can be useful for some:
https://github.com/RayBB/franklin-t9-api
Change APN settings based on which sim card is inserted
Change wifi settings based on time of day
See which band priority gets you the best speeds
Windows Instructions
1. Open Powershell (Search Powershell).
2. type
3. Download the zip file from https://github.com/parker-stephen...s/main.zip and unzip it.
4. go to unzipped location in powershell using cd.
5. install the requirements by executing command:
example
C:\Users\<login>\Downloads\TMOHS1-Root-Utility-main>python ./rootScript.py -v Verbose mode enabled. Enter your weblogin password: Encrypting the login payload with key "abcdefghijklmn12" [yes, that's really the key]. . . Sending the authentication request. . . Received authentication token from hotspot: 876876876 Response: {'result': '0', 'ip': '0.0.0.0', 'timeout': '000300', 'token': '9879898'} Exploiting qcmap_web_cgi. . . Connection to device may reset. If you are running the exploit via WiFi, ensure that your device reconnects to the hotspot's network. Payload is ready: page=savepowersaving&displaytimeout=undefined&wifistandby=10;$(mount -o remount,rw /; telnetd; passwd -d root)&token=987987978 Sending the payload now! Waiting for socket. . . If you are running the exploit wirelessly, the connection may drop. Remember to reconnect to your hotspot's WiFi once it reappears. This may take up to a minute. Connected! Socket says: {'commit': 'Socket TimeOut'} Remounted root filesystem r/w. . . Removed root password. . . Enabling telnet. . . Trying to connect via telnet. . . Received: mdm 987987987 mdm9607 mdm9607 login: Telnet connection initialized. Logging in as root with empty password, please wait. . . Waiting for login to be processed. . . The exploit removed the root password of your device. It is STRONGLY recommended to set a custom root password. Your device will be EXTREMELY INSECURE if you do not. Would you like to set a custom root password? (Y/n): y Changing root password. IMPORTANT NOTE: the password will be sent insecurely over telnet, so you should manually change it later over ADB-USB if you are concerned about security. Sent command via telnet: passwd root Enter new password: Confirm new password: Root password successfully updated. ### Options ### 1) Change root password 2) Enough with this script BS, give me a shell! 3) Enable ADB 4) Enable ADB - Persistent through reboot (somewhat experimental) 5) Enable FTP server for / on port 21 - DO NOT LEAVE OPEN 6) Remove OMA-DM bootstrap (essentially disables firmware updates, recommended) 7) Enable mood lighting (look at the battery LED) 8) Mask hotspot data as "on-device" data 9) Reboot 10) Quit Enter option: 8 Sent command via telnet: echo "iptables -t mangle -I POSTROUTING -o rmnet_data0 -j TTL --ttl-set 64" > /etc/init.d/ttl.sh; echo "ip6tables -t mangle -I POSTROUTING -o rmnet_data0 -j HL --hl-set 64" >> /etc/init.d/ttl.sh; chmod 755 /etc/init.d/ttl.sh; ln -s /etc/init.d/ttl.sh /etc/rc5.d/S98ttl Added TTL rules to mask hotspot data as normal "on-device" data. Will take affect on reboot. ### Options ### 1) Change root password 2) Enough with this script BS, give me a shell! 3) Enable ADB 4) Enable ADB - Persistent through reboot (somewhat experimental) 5) Enable FTP server for / on port 21 - DO NOT LEAVE OPEN 6) Remove OMA-DM bootstrap (essentially disables firmware updates, recommended) 7) Enable mood lighting (look at the battery LED) 8) Mask hotspot data as "on-device" data 9) Reboot 10) Quit Enter option: 9 Rebooting. Goodbye! Sent command via telnet: rebootThanks for this step-by-step guide. Works like a charm. I have both the Franklin T9 and the TMOSH1. The Franklin T9 lets you change the IMEI to further mask the device on the network. Any idea if the TMOSH1 lets you do that?
Sign up for a Slickdeals account to remove this ad.
Leave a Comment