Original here: www.elhalf.com/router.txt
The Siemens Santis 50 Wireless ADSL Router

No technical information about this router is publicly available,
so I wrote this. The "manual" that does come with it is just enough
for average Joe and nothing more.

1. Various technical details I found

Hardware BoardCPU : Helium 210-80
DSL : Globespan Slade Annex A (T79.4.10)
Firmware Version (19 March 2003) //latest version
CPE-end Interface 10/100 Mb auto-sensing Ethernet
802.11b Wireless LAN

ATM Driver (BUN Emulation, version 5.00, 20/8/1999)

An ARP request is sent every 295 seconds once a node is connected.
TTL (Time To Live) of ICMP reply is 155.

Port scan (from inside wlan):
23/tcp open telnet
53/tcp open domain ISC Bind 8.4.4-NOESW
80/tcp open http Virata-EmWeb/R6_1_0
161/tcp filtered snmp
162/tcp filtered snmptrap

Nmap TCP/IP fingerprint:

TCP Sequence Prediction: Class=random positive increments
Difficulty=1627 (Medium)
TCP ISN Seq. Numbers: 1313EF 1344F0 13818C 1355B7 131BB9 13557C
IPID Sequence Generation: Incremental

2. Web based configuration (Advanced Configuration)

Default username is admin (no password).
At the page you come now (Quick Start) you can select a pre-defined profile
for your router.
Available are: RFC 1483 bridge
RFC 1483 router
RFC 1483 MER router
PPPoE router
PPPoA router
By clicking on the values of VPI/VCI (Virtual Path Identifier/Virtual
Channel Identifier) in the table you can modify settings for
ATM, IP and PPP. You can also enable/disable NAT.

2.1 System

Device Info: displays some device information
Administration - Account: change login password
- Remote Managment: enable/disable remote access to router
- Web Port: change listening port
Backup Configuration: save/restore configuration file
Save Configuration: save any settings changed (you have to do this in
order to actually keep the settings changed after
rebooting the router)
Upgrade Firmware: download firmware upgrade from your computer
Reset Router: restart router/reset to factory defaults

2.2 Status

DSL Connection: display DSL status
WAN Connection: display wan information
Traffic Counter: display packets/bytes transferred through connections
Routing table: display routing information
DHCP table: display computers that currently receive an IP from dhcp server
Wireless Client: display all WLAN clients associated with router

2.3 Configuration

DSL: change DSL line mode
LAN - IP Adress: modify primary/secondary IP/subnet mask
- DHCP Server: configure dhcp server

WLAN - Basic Setup: Configure wlan settings
- Association Control: enable/disable association control, add/remove
allowed clients

IP Route - Static Route: setup a route
- Dynamic Routing: setup routing using RIP

DNS - Relay: enable/disable DNS relaying
- Server: enable/disable DNS server, manually add entries

Security: configure firewall and IDS
Virtual Server: setup specific port forwarding/create a DMZ host
IGMP Proxy: setup router as an IGMP proxy.
UPnP: enable/disable Universal Plug and Play Internet Gateway Device

By telnetting into the router you can find out the versions of every
software/hardware component inside, you can look at what's currently in the stack,
do some more advanced configuration etc.

Bugs: the IDS and Firewall configuration is FUBAR'd, you can enable/disable the IDS
but changing settings results in an error.
You can use the firewall and set it to Off - Low - Medium - High
- Block (All traffic except virtual server is blocked) but when using
advanced (custom) configuration an error occurs too.