A lot of thanks Mykola, I tried to:
- Find the nano3G ip address, I found it and create a rule in my dhcp server to assign a fixed ip address.
- Ping the nano3G: 0% packet loss.
- Scan all TCP ports with nmap: there is no open port
- Capture all network traffic from nano3Gwith tcpdump: it connect to a T-mobile to perform a isakmp handshake without any result, also get the date and time from some ntp servers.
- Perform a factory reset but I think that this action just restore the custom operator firmware, at this step the nano3g also connect to ip.access servers and download some crl certificates, then also try the isakmp handshake with T-mobile server.
Best regards