Sitecom WLR-6100
Sitecom WLR-6100 v1
Type: wireless router
Power: 12 VDC, 2 A
Connector type: barrel
CPU1: Ralink RT6856 (700 MHz)
FLA1: 8 MiB8,388,608 B <br />65,536 Kib <br />8,192 KiB <br />64 Mib <br />0.00781 GiB <br /> (Macronix MX25L6405D)
RAM1: 64 MiB67,108,864 B <br />524,288 Kib <br />65,536 KiB <br />512 Mib <br />0.0625 GiB <br /> (Nanya Model?)
Expansion IFs: USB 2.0
USB ports: 2
WI1 chip1: Ralink RT3593
WI1 802dot11 protocols: an
WI1 MIMO config: 3x3:3
WI1 antenna connector: none
WI2 chip1: Ralink RT3593
WI2 802dot11 protocols: bgn
WI2 MIMO config: 3x3:3
WI2 antenna connector: none
ETH chip1: Ralink RT6856
Switch: Atheros AR8327N
LAN speed: 1G
LAN ports: 4
WAN speed: 1G
WAN ports: 1
abgn
Default IP address: 192.168.0.1
the IP 192.168.0.1 is used by 785 additional devices
of which 14 are Sitecom devices
Default login user: admin
Default login password: blank
admin:blank credentials used by 345 additional devices
of which 2 are Sitecom devices
802dot11 OUI: none specified
For a list of all currently documented Ralink chipsets with specifications, see Ralink.
Wireless N900 Gigabit Dual-Band Router X6
"Sitecom WLR-6100 v1 - 001" is written on label.
- Default IP address: 192.168.0.1
- Default login username: admin
- Default login password: (sticker on the bottom of the device)
Serial
• Original firmware Boot log (serial) |
---|
U-boot Ver:1.0.0.2 2012/11/14 11:07:27 Board: Ralink APSoC DRAM: 64 MB flash manufacture id: c2, device id 20 17 find flash: MX25L6405D Flash size 8MB, sector count = 128 ============================================ ASIC 6855A_MP (Port5<->GigaSW) Product Name: WLR-6100 icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 rt6855A_gsw_init: HWCFIST=23009e00 Please choose the operation: 1: Load system code to SDRAM via TFTP. 3: Boot system code via Flash (default). 3: System Boot system code via Flash. ## Booting image at b0050000 ... Image Name: Linux Kernel Image Created: 2014-03-06 4:13:37 UTC Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1847464 Bytes = 1.8 MB Load Address: 80020000 Entry Point: 80023d30 Verifying Checksum ... OK Uncompressing Kernel Image ... OK Starting kernel ... init started: BusyBox v1.13.3 (2014-03-06 12:09:20 CST) starting pid 740, tty '/dev/console': '/sbin/config_init' mknod: /dev/ttyS0: File exists mknod: /dev/ttyS1: File exists Config Init version: 2.10.20.4 date: 2014/03/06 Wed Jan 1 00:00:00 UTC 2014 ln: /lib/./modules: File exists starting pid 788, tty '/dev/ttyS0': '/sbin/config_term' ************************************************************************ * WLR-6100 * ************************************************************************ KernelApp/Ramdisk Ver:2.10.20.4 Date:2014/03/06 password: !!! wrong password !!! password: !!! wrong password !!! |
• Boot log (serial) - Ralink SDK firmware (not original firmware) |
---|
Linux version 2.6.36 (ris8@ris8-Aspire-5720) (gcc version 3.4.2) #6 Sun Oct 5 01:51:00 CEST 2014 ISPRAM0: PA=002c8000,Size=00008000,enabled Ralink RT63165 SOC prom init CPU revision is: 00019555 (MIPS 34Kc) Determined physical RAM map: memory: 03fe0000 @ 00020000 (usable) Wasting 1024 bytes for tracking 32 unused pages Initrd not found or empty - disabling initrd Zone PFN ranges: Normal 0x00000020 -> 0x00004000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000020 -> 0x00004000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 16224 Kernel command line: es=1 root=/dev/ram0 console=ttyS0 PID hash table entries: 256 (order: -2, 1024 bytes) Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=00058174 Readback ErrCtl register=00058174 Memory: 58040k/65408k available (2752k kernel code, 7368k reserved, 820k data, 3096k init, 0k highmem) Hierarchical RCU implementation. RCU-based detection of stalled CPUs is disabled. Verbose stalled-CPUs detection is disabled. NR_IRQS:64 CPU frequency 699.00 MHz console [ttyS0] enabled Calibrating delay loop... 465.30 BogoMIPS (lpj=2326528) pid_max: default: 32768 minimum: 301 Mount-cache hash table entries: 512 NET: Registered protocol family 16 start PCIe register access *************** RT6855A PCIe RC mode ************* registering PCI controller with io_map_base unset bio: create slab <bio-0> at 0 SCSI subsystem initialized usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb pci 0000:00:00.0: BAR 0: can't assign mem (size 0x80000000) pci 0000:00:01.0: BAR 0: can't assign mem (size 0x80000000) pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x200fffff] pci 0000:00:01.0: BAR 8: assigned [mem 0x20100000-0x201fffff] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x2000ffff] pci 0000:01:00.0: BAR 0: set to [mem 0x20000000-0x2000ffff] (PCI address [0x20000000-0x2000ffff] pci 0000:00:00.0: PCI bridge to [bus 01-01] pci 0000:00:00.0: bridge window [io disabled] pci 0000:00:00.0: bridge window [mem 0x20000000-0x200fffff] pci 0000:00:00.0: bridge window [mem pref disabled] pci 0000:02:00.0: BAR 0: assigned [mem 0x20100000-0x2010ffff] pci 0000:02:00.0: BAR 0: set to [mem 0x20100000-0x2010ffff] (PCI address [0x20100000-0x2010ffff] pci 0000:00:01.0: PCI bridge to [bus 02-02] pci 0000:00:01.0: bridge window [io disabled] pci 0000:00:01.0: bridge window [mem 0x20100000-0x201fffff] pci 0000:00:01.0: bridge window [mem pref disabled] ** bus= 0, slot=0x0 BAR0 at slot 0 = 0 bus=0x0, slot = 0x0 res[0]->start = 0 res[0]->end = 0 res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 ** bus= 0, slot=0x1 BAR0 at slot 1 = 0 bus=0x0, slot = 0x1 res[0]->start = 0 res[0]->end = 0 res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 ** bus= 1, slot=0x0 bus=0x1, slot = 0x0 res[0]->start = 20000000 res[0]->end = 2000ffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 ** bus= 2, slot=0x1 bus=0x2, slot = 0x1 res[0]->start = 20100000 res[0]->end = 2010ffff res[1]->start = 0 res[1]->end = 0 res[2]->start = 0 res[2]->end = 0 res[3]->start = 0 res[3]->end = 0 res[4]->start = 0 res[4]->end = 0 res[5]->start = 0 res[5]->end = 0 Switching to clocksource MIPS NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 2048 (order: 2, 16384 bytes) TCP bind hash table entries: 2048 (order: 1, 8192 bytes) TCP: Hash tables configured (established 2048 bind 2048) TCP reno registered UDP hash table entries: 256 (order: 0, 4096 bytes) UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) NET: Registered protocol family 1 RT3xxx EHCI/OHCI init. fuse init (API version 7.15) io scheduler noop registered io scheduler deadline registered io scheduler cfq registered (default) Ralink gpio driver initialized ttyS0 at I/O 0xbfbf0003 (irq = 1) is a TC3162 brd: module loaded flash manufacture id: c2, device id 20 17 MX25L6405D(c2 2017c220) (8192 Kbytes) mtd .name = raspi, .size = 0x00800000 (0M) .erasesize = 0x00000008 (0K) .numeraseregions = 65536 Creating 5 MTD partitions on "raspi": 0x000000000000-0x000000800000 : "ALL" 0x000000000000-0x000000030000 : "Bootloader" 0x000000030000-0x000000040000 : "Config" 0x000000040000-0x000000050000 : "Factory" 0x000000050000-0x000001000000 : "Kernel" mtd: partition "Kernel" extends beyond the end of device "raspi" -- size truncated to 0x7b0000 rdm_major = 253 MAC_ADRH -- : 0x0000000c SMACCR1 -- : 0x0000000c MAC_ADRL -- : 0x432880fc SMACCR0 -- : 0x432880fc Ralink APSoC Ethernet Driver Initilization. v2.1 256 rx/tx descriptors allocated, mtu = 1500! MAC_ADRH -- : 0x0000000c SMACCR1 -- : 0x0000000c MAC_ADRL -- : 0x432880ce SMACCR0 -- : 0x432880ce PROC INIT OK! PPP generic driver version 2.4.2 PPP MPPE Compression module registered NET: Registered protocol family 24 PPTP driver version 0.8.5 ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver rt3xxx-ehci rt3xxx-ehci: Ralink EHCI Host Controller rt3xxx-ehci rt3xxx-ehci: new USB bus registered, assigned bus number 1 rt3xxx-ehci rt3xxx-ehci: irq 18, io mem 0x1fbb0000 rt3xxx-ehci rt3xxx-ehci: USB 0.0 started, EHCI 1.00 hub 1-0:1.0: USB hub found hub 1-0:1.0: 2 ports detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver rt3xxx-ohci rt3xxx-ohci: RT3xxx OHCI Controller rt3xxx-ohci rt3xxx-ohci: new USB bus registered, assigned bus number 2 rt3xxx-ohci rt3xxx-ohci: irq 18, io mem 0x1fba1000 hub 2-0:1.0: USB hub found hub 2-0:1.0: 2 ports detected Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. Netfilter messages via NETLINK v0.30. nf_conntrack version 0.5.0 (906 buckets, 3624 max) GRE over IPv4 demultiplexor driver gre: can't add protocol ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone TCP cubic registered NET: Registered protocol family 10 IPv6 over IPv4 tunneling driver NET: Registered protocol family 17 L2TP core driver, V2.0 PPPoL2TP kernel driver, V2.0 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> Freeing unused kernel memory: 3096k freed init started: BusyBox vAlgorithmics/MIPS FPU Emulator v1.5 1.12.1 (2014-10-05 01:23:5devpts: called with bogus options 5 CEST) starting pid 216, tty '': '/etc_ro/rcS' mount: mounting none on /proc/bus/usb failed: No such file or directory Welcome to _______ _______ ___ __ ____ _ _ ___ | ___ \| __ || | |__|| \ | || | / / | |___| || |__| || |__ __ | \| || |/ / | _ /| _ || || || |\ || \ |__| \__\|__| |__||______||__||_| \____||_|\___\ =System Architecture Department= starting pid 225, tty '/dev/ttyS0': '/bin/sh' BusyBox v1.12.1 (2014-10-05 01:23:55 CEST) built-in shell (ash) Enter 'help' for a list of built-in commands. # internet.sh Password for 'admin' changed rmmod: ralink_wdt: No such file or directory rmmod: cls: No such file or directory rmmod: hw_nat: No such file or directory rmmod: raeth: No such file or directory insmod: bridge.ko: module not found insmod: mii.ko: module not found insmod: raeth.ko: module not found ##### disable 1st wireless interface ##### rmmod: ip_nat_pptp: No such file or directory rmmod: ip_conntrack_pptp: No such file or directory ifconfig: ioctl 0x8913 failed: No such device brctl: bridge br0: No such device or address /sbin/internet.sh: line 559: iptables: not found /sbin/internet.sh: line 560: iptables: not found /sbin/internet.sh: line 561: iptables: not found ##### config Ralink ESW vlan partition (LLLLW) ##### switch reg write offset=2004, value=ff0003 switch reg write offset=2104, value=ff0003 switch reg write offset=2204, value=ff0003 switch reg write offset=2304, value=ff0003 switch reg write offset=2404, value=ff0003 switch reg write offset=2504, value=ff0003 switch reg write offset=2010, value=810000c0 switch reg write offset=2110, value=810000c0 switch reg write offset=2210, value=810000c0 switch reg write offset=2310, value=810000c0 switch reg write offset=2410, value=810000c0 switch reg write offset=2510, value=810000c0 switch reg write offset=2610, value=81000000 switch reg write offset=2710, value=81000000 switch reg write offset=2604, value=20ff0003 switch reg write offset=2704, value=20ff0003 Special Tag Disabled switch reg write offset=2610, value=81000000 switch reg write offset=2014, value=10001 switch reg write offset=2114, value=10001 switch reg write offset=2214, value=10001 switch reg write offset=2314, value=10001 switch reg write offset=2414, value=10002 switch reg write offset=2514, value=10001 REG_ESW_WT_MAC_ATC is 0x7ff0002 done. phy_tx_ring = 0x02918000, tx_ring = 0xa2918000 phy_rx_ring0 = 0x02919000, rx_ring0 = 0xa2919000 MAC_ADRH -- : 0x0000000c SMACCR1 -- : 0x0000000c MAC_ADRL -- : 0x432880ce SMACCR0 -- : 0x432880ce ESW: Link Status Changed - Port5 Link UP CDMA_CSG_CFG = 81000007 GDMA1_FWD_CFG = C0710000 vconfig: ioctl error for rem: No such device vconfig: ioctl error for rem: No such device rmmod: 8021q: No such file or directory insmod: 8021q.ko: module not found brctl: iface ra0: No such device device eth2.1 entered promiscuous mode device eth2 entered promiscuous mode udhcpc (v1.12.1) started br0: port 1(eth2.1) entering learning state br0: port 1(eth2.1) entering learning state ifconfig: ioctl 0x8914 failed: Cannot assign requested address ifconfig: ioctl 0x8914 failed: Cannot assign requested address br0: port 1(eth2.1) entering forwarding state killall: udhcpd: no process killed Set: phy[0].reg[0] = 3900 Set: phy[1].reg[0] = 3900 Set: phy[2].reg[0] = 3900 Set: phy[3].reg[0] = 3900 Set: phy[0].reg[0] = 3100 Set: phy[1].reg[0] = 3100 Set: phy[2].reg[0] = 3100 Set: phy[3].reg[0] = 3100 rm: cannot remove '/etc/radvd.conf': No such file or directory /sbin/nat.sh: line 47: iptables: not found iptables -F -t filter 1>/dev/null 2>&1 iptables -D FORWARD -j macipport_filter 1>/dev/null 2>&1 iptables -F macipport_filter 1>/dev/null 2>&1 iptables -D FORWARD -j web_filter 1>/dev/null 2>&1 iptables -F web_filter 1>/dev/null 2>&1 iptables -D FORWARD -j malicious_filter 1>/dev/null 2>&1 iptables -F malicious_filter 1>/dev/null 2>&1 iptables -D INPUT -j malicious_input_filter 1>/dev/null 2>&1 iptables -F malicious_input_filter 1>/dev/null 2>&1 iptables -P INPUT ACCEPT sh: iptables: not found iptables -P OUTPUT ACCEPT sh: iptables: not found iptables -P FORWARD ACCEPT sh: iptables: not found iptables -t filter -N web_filter 1>/dev/null 2>&1 iptables -t filter -N macipport_filter 1>/dev/null 2>&1 iptables -t filter -N malicious_filter 1>/dev/null 2>&1 iptables -t filter -N synflood_filter 1>/dev/null 2>&1 iptables -t filter -N malicious_input_filter 1>/dev/null 2>&1 iptables -t filter -N synflood_input_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j web_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j macipport_filter 1>/dev/null 2>&1 iptables -t filter -A FORWARD -j malicious_filter 1>/dev/null 2>&1 iptables -t filter -A malicious_filter -p tcp --syn -j synflood_filter 1>/dev/null 2>&1 iptables -t filter -A INPUT -j malicious_input_filter 1>/dev/null 2>&1 iptables -t filter -A malicious_input_filter -p tcp --syn -j synflood_input_filter 1>/dev/null 2>&1 iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 1>/dev/null 2>&1 iptables -A malicious_input_filter -i eth2.2 -p tcp --dport 80 -j DROP sh: iptables: not found /bin/super_dmz -f sh: /bin/super_dmz: not found iptables -t nat -D PREROUTING -j port_forward 1>/dev/null 2>&1 iptables -t nat -F port_forward 1>/dev/null 2>&1; iptables -t nat -X port_forward 1>/dev/null 2>&1 iptables -t nat -D PREROUTING -j DMZ 1>/dev/null 2>&1 iptables -t nat -F DMZ 1>/dev/null 2>&1; iptables -t nat -X DMZ 1>/dev/null 2>&1 cat /proc/sys/net/netfilter/nf_conntrack_udp_timeout > /var/.udpbackup echo 0 > /proc/sys/net/netfilter/nf_conntrack_udp_timeout cat /var/.udpbackup > /proc/sys/net/netfilter/nf_conntrack_udp_timeout; rm -f /var/.udpbackup cat /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_established > /var/.tcpbackup echo 0 > /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_established cat /var/.tcpbackup > /proc/sys/net/netfilter/nf_conntrack_tcp_timeout_established; rm -f /var/.tcpbackup iptables -t nat -N port_forward 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 1 -j port_forward 1>/dev/null 2>&1 iptables -t nat -N DMZ 1>/dev/null 2>&1; iptables -t nat -I PREROUTING 2 -j DMZ 1>/dev/null 2>&1 ntp.sh ddns.sh sh: ddns.sh: not found kill -9 `cat /var/run/wscd.pid.ra0` cat: can't open '/var/run/wscd.pid.ra0': No such file or directory kill: you need to specify whom to kill iwpriv ra0 set WscConfMode=0 1>/dev/null 2>&1 route delete 239.255.255.250 1>/dev/null 2>&1 killall -9 watchdog 1>/dev/null 2>&1 rmmod ralink_wdt.o rmmod: ralink_wdt.o: No such file or directory killall -q klogd killall -q syslogd syslogd -C8 1>/dev/null 2>&1 klogd 1>/dev/null 2>&1 killall -q zebra killall -q ripd echo 0 > /proc/sys/net/ipv6/conf/all/forwarding webs: Listening for HTTP requests at address 10.10.10.254 |
See also
- Sitecom WLA-2100 - Wireless N300 USB 2.0 Wi-Fi Adapter
- Sitecom WLR-3100 - Wireless N300 Gigabit Router X3
- Sitecom WLA-3100 - Wireless AC600 Dual-Band USB 2.0 Wi-Fi Adapter
- Sitecom WLR-4100 - Wireless N300 Gigabit Router X4 NL
- Sitecom WLA-5000 - Wireless N600 Dual-Band USB 2.0 Wi-Fi Adapter
- Sitecom WLR-5002 - Wireless AC750 Gigabit Dual-Band Router PR
- Sitecom WLR-6000 - Wireless N750 Gigabit Dual-Band Router X6
- Sitecom WLA-6000 - Wireless N750 Dual-Band USB 2.0 Wi-Fi Adapter
- Sitecom WLR-6100 - Wireless N900 Gigabit Dual-Band Router X6
- Sitecom WLA-6100 - Wireless N900 Dual-Band USB 2.0 Wi-Fi Adapter
- Sitecom WLR-7100 - Wireless AC1200 Gigabit Dual-Band Router X7
- Sitecom WLA-7100 - Wireless AC1200 Dual-Band USB 3.0 Wi-Fi Adapter
- Sitecom WLR-8100 - Wireless AC1750 Gigabit Dual-Band Router X8