The Siemens Santis 50 Wireless ADSL Router

[el-half]

Original here: www.elhalf.com/router.txt
--------------------------------------------------------
The Siemens Santis 50 Wireless ADSL Router
--------------------------------------------------------

No technical information about this router is publicly available,
so I wrote this. The "manual" that does come with it is just enough
for average Joe and nothing more.


1. Various technical details I found
-------------------------------------------

Hardware BoardCPU : Helium 210-80
DSL : Globespan Slade Annex A (T79.4.10)
Firmware Version 5.0.0.11 (19 March 2003) //latest version
CPE-end Interface 10/100 Mb auto-sensing Ethernet
802.11b Wireless LAN

ATM Driver (BUN Emulation, version 5.00, 20/8/1999)


An ARP request is sent every 295 seconds once a node is connected.
TTL (Time To Live) of ICMP reply is 155.

Port scan (from inside wlan):
23/tcp open telnet
53/tcp open domain ISC Bind 8.4.4-NOESW
80/tcp open http Virata-EmWeb/R6_1_0
161/tcp filtered snmp
162/tcp filtered snmptrap


Nmap TCP/IP fingerprint:
SInfo(V=3.50%P=i686-pc-windows-windows%D=3/20%Time=405C680F%O=23%C=1)
TSeq(Class=RI%gcd=1%SI=F91%IPID=I%TS=U)
TSeq(Class=RI%gcd=1%SI=18BD%IPID=I%TS=U)
TSeq(Class=RI%gcd=1%SI=65B%IPID=I%TS=U)
T1(Resp=Y%DF=N%W=1FFE%ACK=S++%Flags=AS%Ops=ME)
T2(Resp=Y%DF=N%W=1FFE%ACK=O%Flags=R%Ops=)
T3(Resp=N)
T4(Resp=Y%DF=N%W=1FFE%ACK=O%Flags=R%Ops=)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
PU(Resp=Y%DF=N%TOS=0%IPLEN=38%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E)


TCP Sequence Prediction: Class=random positive increments
Difficulty=1627 (Medium)
TCP ISN Seq. Numbers: 1313EF 1344F0 13818C 1355B7 131BB9 13557C
IPID Sequence Generation: Incremental


2. Web based configuration (Advanced Configuration)
-------------------------------------------------------------------

Default username is admin (no password).
At the page you come now (Quick Start) you can select a pre-defined profile
for your router.
Available are: RFC 1483 bridge
RFC 1483 router
RFC 1483 MER router
PPPoE router
PPPoA router
By clicking on the values of VPI/VCI (Virtual Path Identifier/Virtual
Channel Identifier) in the table you can modify settings for
ATM, IP and PPP. You can also enable/disable NAT.


2.1 System
--------------

Device Info: displays some device information
Administration - Account: change login password
- Remote Managment: enable/disable remote access to router
- Web Port: change listening port
Backup Configuration: save/restore configuration file
Save Configuration: save any settings changed (you have to do this in
order to actually keep the settings changed after
rebooting the router)
Upgrade Firmware: download firmware upgrade from your computer
Reset Router: restart router/reset to factory defaults


2.2 Status
-------------

DSL Connection: display DSL status
WAN Connection: display wan information
Traffic Counter: display packets/bytes transferred through connections
Routing table: display routing information
DHCP table: display computers that currently receive an IP from dhcp server
Wireless Client: display all WLAN clients associated with router


2.3 Configuration
----------------------

DSL: change DSL line mode
LAN - IP Adress: modify primary/secondary IP/subnet mask
- DHCP Server: configure dhcp server

WLAN - Basic Setup: Configure wlan settings
- Association Control: enable/disable association control, add/remove
allowed clients

IP Route - Static Route: setup a route
- Dynamic Routing: setup routing using RIP

DNS - Relay: enable/disable DNS relaying
- Server: enable/disable DNS server, manually add entries

Security: configure firewall and IDS
Virtual Server: setup specific port forwarding/create a DMZ host
IGMP Proxy: setup router as an IGMP proxy.
UPnP: enable/disable Universal Plug and Play Internet Gateway Device



By telnetting into the router you can find out the versions of every
software/hardware component inside, you can look at what's currently in the stack,
do some more advanced configuration etc.

Bugs: the IDS and Firewall configuration is FUBAR'd, you can enable/disable the IDS
but changing settings results in an error.
You can use the firewall and set it to Off - Low - Medium - High
- Block (All traffic except virtual server is blocked) but when using
advanced (custom) configuration an error occurs too.

[patrickv]

does anyone know if this router is adsl2 compatible.
I can't find anywere a deacent specification of this router.

[SirDice]

It's a posting from 2004! I'm sure Siemens has stopped making them. I'm also quite sure it doesn't support ADSL2+ as it didn't exist back then.

[Benjamin Wills]

The Siemens Santis 50 Wireless ADSL Router is a great router with a lot of features, but be aware of the bugs in the IDS and Firewall configurations.

[rlirpa]

This thread is from March 21st, 2004, some 19 years ago.