[XX='bjarnco32, c: 415898, m: 1690679'][/XX]
Well i opened both of them, R051 indeed has the same ASR1802 Chip as the R281, but it's provisioned/set to be CAT4 modem, while the r281 is provisioned to be CAT6 (not even cat 7). I would want to test copying the reliable data from the r281 to the r051 though i dont know how to do that. The r281 has a bigger flash mem for the chips compared to the r051 and also uses ubi flash instead of plain emmc. so i wonder if its possible.
Well the webUI runs on the mediatek side btw on the r281 (try exporting the config from the pldt UI and it will emit a mt_cfg.tar.gz that is encrypted by openssl salt), though the lte modem chip also has openwrt in it and can run independently from the mediatek. Anyway as my comment above shows, I think there is no need to unlock the unit since the lte modem doesnt have mep data - i checked via serial interface and issuing PXA1826 AT command for the mepdata.