Cloning modems

[PumaTechTV]

Thanks for all the replies guys. I have taken drew's word from something he told me in another post ( to read a lot on sbhacker, even if I can't post because I have a free account ) and I have figured out a way to get the certs of my other modem without having to modify it [my subbed one]. According to http://www.sbhacker.net/forum/topic/441-...ne__st__20
I can use a bitfile to remotely get my sb5100 (the subbed one) in factory mode. After this, I can download and upload the certs to my new modem (sb5100 too). Do you guys see any flaws in this method?

Also, after poking around in the web for how to use the bitfile method, I came up with this post that was a copy/paste of a tcniso post:

The bitfile method works like this.

1) Using SNMP you set the OID 1.3.6.1.4.1.1166.1.19.3.1.18.0 to the interger.

The value of your HFC MAC address. (Calc.exe)

2) The modem then TFTP gets a 'bitfile' from 192.168.100.10

4100 modem will TFTP get SB4100.bit, and 4200 modem will TFTP get SB4200.bit

3) If the bit file is the correct size and contains the exact sequence of, bytes, then factory mode is enabled and the modem reboots!

4) When the modem reboots you have full access to all the factory MIB and OID's, within it.

NOTE: Factory mode will stay enabled until you turn it off by setting

1.3.6.1.4.1.1166.1.19.4.29.0 to integer 1 and reboot the modem!

My question is, in step one. What integer am I supposed to set my oid to? If you guys have any knowledge about the bitfile method, please share with me

P.S. If you're wondering why I just don't use jtag and dump it, here are the reasons:
1.) this is my new hobby, and if I want to learn a lot about this subject, I better do things the hardway or the ways that I find appropiate.
2.) I haven't added any money to my paypal balance. lol