The Siemens Santis 50 Wireless ADSL Router
Original here: www.elhalf.com/router.txt
--------------------------------------------------------
The Siemens Santis 50 Wireless ADSL Router
--------------------------------------------------------
No technical information about this router is publicly available,
so I wrote this. The "manual" that does come with it is just enough
for average Joe and nothing more.
1. Various technical details I found
-------------------------------------------
Hardware BoardCPU : Helium 210-80
DSL : Globespan Slade Annex A (T79.4.10)
Firmware Version 5.0.0.11 (19 March 2003) //latest version
CPE-end Interface 10/100 Mb auto-sensing Ethernet
802.11b Wireless LAN
ATM Driver (BUN Emulation, version 5.00, 20/8/1999)
An ARP request is sent every 295 seconds once a node is connected.
TTL (Time To Live) of ICMP reply is 155.
Port scan (from inside wlan):
23/tcp open telnet
53/tcp open domain ISC Bind 8.4.4-NOESW
80/tcp open http Virata-EmWeb/R6_1_0
161/tcp filtered snmp
162/tcp filtered snmptrap
Nmap TCP/IP fingerprint:
SInfo(V=3.50%P=i686-pc-windows-windows%D=3/20%Time=405C680F%O=23%C=1)
TSeq(Class=RI%gcd=1%SI=F91%IPID=I%TS=U)
TSeq(Class=RI%gcd=1%SI=18BD%IPID=I%TS=U)
TSeq(Class=RI%gcd=1%SI=65B%IPID=I%TS=U)
T1(Resp=Y%DF=N%W=1FFE%ACK=S++%Flags=AS%Ops=ME)
T2(Resp=Y%DF=N%W=1FFE%ACK=O%Flags=R%Ops=)
T3(Resp=N)
T4(Resp=Y%DF=N%W=1FFE%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)
TCP Sequence Prediction: Class=random positive increments
Difficulty=1627 (Medium)
TCP ISN Seq. Numbers: 1313EF 1344F0 13818C 1355B7 131BB9 13557C
IPID Sequence Generation: Incremental
2. Web based configuration (Advanced Configuration)
-------------------------------------------------------------------
Default username is admin (no password).
At the page you come now (Quick Start) you can select a pre-defined profile
for your router.
Available are: RFC 1483 bridge
RFC 1483 router
RFC 1483 MER router
PPPoE router
PPPoA router
By clicking on the values of VPI/VCI (Virtual Path Identifier/Virtual
Channel Identifier) in the table you can modify settings for
ATM, IP and PPP. You can also enable/disable NAT.
2.1 System
--------------
Device Info: displays some device information
Administration - Account: change login password
- Remote Managment: enable/disable remote access to router
- Web Port: change listening port
Backup Configuration: save/restore configuration file
Save Configuration: save any settings changed (you have to do this in
order to actually keep the settings changed after
rebooting the router)
Upgrade Firmware: download firmware upgrade from your computer
Reset Router: restart router/reset to factory defaults
2.2 Status
-------------
DSL Connection: display DSL status
WAN Connection: display wan information
Traffic Counter: display packets/bytes transferred through connections
Routing table: display routing information
DHCP table: display computers that currently receive an IP from dhcp server
Wireless Client: display all WLAN clients associated with router
2.3 Configuration
----------------------
DSL: change DSL line mode
LAN - IP Adress: modify primary/secondary IP/subnet mask
- DHCP Server: configure dhcp server
WLAN - Basic Setup: Configure wlan settings
- Association Control: enable/disable association control, add/remove
allowed clients
IP Route - Static Route: setup a route
- Dynamic Routing: setup routing using RIP
DNS - Relay: enable/disable DNS relaying
- Server: enable/disable DNS server, manually add entries
Security: configure firewall and IDS
Virtual Server: setup specific port forwarding/create a DMZ host
IGMP Proxy: setup router as an IGMP proxy.
UPnP: enable/disable Universal Plug and Play Internet Gateway Device
By telnetting into the router you can find out the versions of every
software/hardware component inside, you can look at what's currently in the stack,
do some more advanced configuration etc.
Bugs: the IDS and Firewall configuration is FUBAR'd, you can enable/disable the IDS
but changing settings results in an error.
You can use the firewall and set it to Off - Low - Medium - High
- Block (All traffic except virtual server is blocked) but when using
advanced (custom) configuration an error occurs too.
