mdibb.net

Linksys WAG354G Hidden Pages

The Linksys WAG354G router is an ADSL router and wireless access point that is sold in the UK. As well as looking kinda cool (as far as these things go) and actually being a pretty decent and reliable bit of kit with some useful features(which seems to be something of a rarity these days!), its mildly interesting in that it uses a MIPS Linux distrubtion as its firmware. Because Linux is under the GPL license, Linksys have actually made the fireware source code available for download - you can actually download the source code here, so if you are feeling adventurous/lucky you can create your own version of the firmware as far as I know.



Interestingly, the administration web interface uses ".asp" pages which is a Microsoft technology, so I was having a poke around in the source code to find out what was going on (it turns out it uses a server called "milli_httpd" which appears to be a modified version of previous works by Jef Poskanzer of ACME Labs), I found where the pages for the administration interface are kept. Turns out there are a few interesting pages lurking in there which aren't normally available through the admin interface, so I thought I'd put them up on here as someone else might find them useful (obviously, try these at your own risk). These are all present with firmware version 1.01.05 (Oct 20 2005):

PageName Description
ADSLCStatus.htm Probably the most useful page - gives you a handy breakdown of the current ADSL status - here is what is currently visible on my router:
  • ADSL Line Type - e.g. "GDMT"
  • ADSL Line CodingADSL Line Coding - i.e. "FAST" or interleaved.
  • Line Attenuation up & down
  • Noise Margin (i.e. signal to noise ratio - SNR) up & down
  • Total Output Power up & down - always seems to be 0 for me
  • Current State - up and down sync speeds in kbps
  • "undefined" - seems to be sync-status, e.g. "UP", "TRAINING"
  • FEC(FAST) error count near & far
  • FEC(INTERL) error count near & far
  • CRC(FAST) error count near & far
  • "undefined" near & far - not sure about this one; not seen anything other than 0 for it though.
  • HEC(FAST) error count near & far
  • HEC(FAST) error count near & far
  • Showtime last(sec)
  • ADSL FW Version
  • ADSL Board Type

One thing that I've noticed from time to time, if you lose sync, the upstream SNR shows some huge huge value; not sure if this is a result of the way ADSL works, or just a bug in the firmware.
SysInfo.htm
Cysaja.asp
These pages give you some basic information about the router. These pages are unique in that the output is just plain text and not HTML - could be useful for screen-scraping. Cysaja.asp appaers to be the only page I have found that contains information about the wifi error counts.

SysInfo.htm contents:
  • Boot Version
  • CodePattern
  • Country
  • DSL DSP Datapump version
  • DSL VPI/VCI
  • RF Status
  • RF Firmware Version
  • RF Domain
  • RF Channel
  • RF SSID
  • RF Antenna Selection
  • RF Mac Address
  • LAN Mac Address
  • WAN Mac Address
  • Hardware Version
  • Fast Mode Downstream Rate
  • Fast Mode Upstream Rate
  • CRC Up - these two values appear to be the same error count as is available on the ADSLCStatus.htm page.
  • CRC Dn


Cysaja.asp contents:
  • Module Name - appears to be model name (i.e. WAG354G)
  • Firmware Version
  • Firmware Time
  • Flash Type
  • Write Mac Address
  • SWAOLstatus - this value and the next two always seem to be 0
  • SWAT&Tstatus
  • SWWanStatus
  • SWGetRouterIP
  • SWGetRouterDomain
  • SWpppoeUName
  • SWGetRouterSSID
  • SWGetRouterChannel
  • SWssidBroadcast
  • SWwirelessStatus
  • SWwlEncryption
  • SWwepEncryption
  • WL_tssi_result
  • SWRXgoodPacket
  • SWRXerrorPacket
  • SWTXgoodPacket
  • SWTXerrorPacket
Summary.asp This is a large page that appears to contain a summary of all of the features of the router - from this page you can check out the status of the ADSL connection, Wifi, LAN, VPN settings, Port forwarding....you get the idea! Basically everything.

There are a couple of other strange pages that appear to be unfinished or just not working at all - maybe someone wants to give these a try and see if anything happens - I didn't though!

PageName Description
setupwizard.asp Seems to be the first fiew fields of the main setup page
Port_Services.asp An interesting one...appears to be some sort of interface for configuring the port tanges for certain network services. No idea if it does anything...
Traceroute.asp
Ping.asp
These two pages appear to be complete, but when you submit a request you dont get anything back from the router, even if there is a lot of activity.
WPA.asp This one has a title of "WEP Keys" but appears to be totally unfinished - there are no buttons to submit the changes, no labels, and even the page's images arae broken.

So there you go. There was also a whole load of XML files in a folder called "verizon" that appeared to contain some of the ASP-style inlinedynamic values found in the other pages, but when trying to load them I just got a 404 - I'm guessing these are for use with some special formware version as they appear to contain information that looks like it would be useful for remote administration. Anyway. If anyone finds any more pages, feel free to contact me about them and I'll update this page!

Back 23.02.2006.

Very interesting. As I have a WAG54GS (same family) I'm going gto try these out to see if I can stop using SNMP to see the line stats. Thanks!

> Andrew Scaife > 20.03.2006

I was refered to this page on ADSL guide, by Jaydub.

I cant thank you enough for this info mat, it was most annoying not being able to get line stats from my WAG54G with the recent BT max upgrades.

I confirm that systeminfo.htm and adslcstatus.htm all work fine on my WAG54G v1 router. the other hidden pages did not work and put that down to the version of firmware i am running?

Vendor:LINKSYS
Model Name:WAG54G
Firmware Version:1.02.5, Jul 29 2004
#:07
Boot Version:1.4
CodePattern:41AL
Country:Europe

thanks for your great work!..

> Richard > 15.04.2006

Many thanks for this - its a real help!
Much appreciated :)

> Duffbeer > 16.04.2006

Thanks , I was going to by a new router till I stumbled upon this web page.
Works fine for wag54g V1

Cheers again,

Bob

> Bob > 17.04.2006

Andrew,

Any luck with WAG54GS router. I just bought one today and am really anoyed that I can't see the line stats.

What exactly is SNMP and how can I use to see my line stats?

Thanks,

Dov

> Dov > 18.04.2006

Found the answer for WAG54GS router.

Turn debug on:
http://192.168.1.1/setup.cgi?todo=debug

start telnet:
telnet 192.168.1.1

type in command:
adslctl info --stats

I don't understand why Linksys don't have a front end page for line stats but at least now I can access the data.

> Dov > 09.05.2006

There is a really good tutorial on how to use the SNMP interface of the WAG54GS at: http://tinyurl.com/rdndq

> Fence > 18.05.2006

Nah, I still can't see the ADSLCStatus.htm page on the WAG54GS, but I can use telnet into it, thanks to Dov through Fence! That's my tutorial Fence mentions, and I've just updated it based on the telnet info.

> Andrew Scaife aka ske1fr > 19.05.2006

Most useful, great work finding this stuff - cheers

> davewuk > 03.06.2006

From the WAG54GS 1.00.08 firmware:

AccessRes.htm
Administration.htm
AdvancedWSettings.htm
AppGaming.htm
ARARPTable.htm
Backup.htm
DHCPClientTable.htm
Diagnostics.htm
DMZ.htm
DSL_status.htm
EditList.htm
Factorydefaults.htm
FirmwareUpgrade.htm
index.htm
LocalNetwork.htm
Log.htm
log_data.htm
Ping.htm
PortRangeTriggering.htm
QoS.htm
reboot_guage.htm
Routing_Table.htm
Security.htm
Setup.htm
Setup_DDNS.htm
Setup_routing.htm
SingleForwarding.htm
Status.htm
Summary.htm
VPNPassthrough.htm
WClientMACList.htm
Wireless.htm
WL_ActiveTable.htm
WL_FilterTable.htm
WMACFilter.htm
WNetwork.htm
WSecurity.htm

> Dee > 04.06.2006

how do you access this router I have tried by telnet but it does not work on port 23

> Greg Sims > 14.06.2006

From what I can tell, it is not possible to telnet into the WAG354G with the standard Linksys firmware as it has been compiled without support for it.

I'm not an expert on firmware or Linux by any stretch, but I suspect it would be possible to rebuild it with telnet without much messing around.

> Matt > 14.06.2006

Hi,

Just noted the coment re WAG54GS 1.00.08 firmware but Linksys firmware downloads is only showing 1.00.06.

Where can you get the WAG54GS 1.00.08 firmware?

> GMB > 17.06.2006

I have noticed on the WAG54G v2 this shows a different firmware version than the one the conventional page shows - I downgraded to 1.0.22 after upgrading previously to 1.0.49 and ADSLCStatus.htm shows "0.49"

> Earlneath > 27.06.2006

Okay, so I can see how to turn degugging on by going to:

http://192.168.1.1/setup.cgi?todo=debug

But how do I switch it off again?

> Adam > 02.07.2006

Hi cannot get telnet to work, using WAG54GS firmware 1.00.09C. Ive tried it on 1.00.08 firmware and still doesn't work, can someone tell me how i can get line stats.

Thanks

Bal

> Bal > 13.07.2006

Hi, got it to work

Turn debug on:
http://192.168.1.1/setup.cgi?todo=debug

start telnet:
telnet://192.168.1.1

type in command:
adslctl info --stats

you may need to enlarge the box.

To turn off debug just restart the router WAG54GS from the front switch or disconnect the power.

Thanks

Bal

> Bal > 13.07.2006

Hi Bal,

Where abouts can we download 1.00.08 and 1.00.09c firmware from? I have looked everywhere and cant find it =( I am in real need of either of these two versions as am having big problems stopping myu WAG54GS from dropping the connection =(

Solorize

> Solorize > 28.07.2006

Am also looking for 1.00.08 and 1.00.09c firmware, but the Linksys ftp beta site (login:linksys/pass:beta7) does not seem to work, Can anyone please help or provide working access info? Many thanks......TIA.

> Ned > 28.07.2006

Just a note to all who wanna try 1.00.08 firmware.

I upgraded from 1.00.06 to 1.00.08 after contact with linksys support.

In my case 1.00.08 is still very unstable. The modem drops the connection every 5 to 6 days. You have to switch off and on the modem to gain internet access again.

Poor quality product in my view. Linksys does not seem able to solve this problem.

For me it meant switching to a different brand modem alltogether.
Using a Zyxel 2602HW now without any problem.

> Dutch2 > 03.08.2006

To get the 1.00.08 firmware for the WAG54GS look here...

http://tinyurl.com/r54eb

> garym71 > 05.08.2006

Thanks for the link and info. Will let you know what happens. Has anyone had success with the 1.00.09c firmware?

> Ned > 06.08.2006

I am having the same problem where the connection is lost between the router and the computer rather than the internet.

I have looked at Linksys site but it seems they only have version 1.00.06 available, and the router I have is with 1.00.08.

I wanted to try and upgrade to 1.00.09c but haven't found it anywhere to download. Does anyone have a link to it?

> Zoltan > 20.08.2006

hi
i have found new version 1.00.09C
on the wep site:
http://www.shopireland.ie/electronics/detail/B000A2IV2M/Linksys-WAG354G-Wireless-G-ADSL-2+/
Get it on rapidshare:
http://rapidshare.de/files/29335882/WAG54GS_A_V10009C.zip.html
and i didint try it yet
thanks

> Silk > 28.08.2006

any help much aprpeciated on the wag54gs - as well as attempting to solve random disconnects and poor wireless performance, I had a problem with wireless which meant I downloaded and applied 1.00.09C. Whilst the router *seems* more stable, I'm still completely unable to connect wirelessly.

What happened is I temporarily connected my XP laptop via Ethernet to transfer a large file. Then switched it back to wireless. Since then it - and a Mac which had also successfully connected wirelessly in the past - will connect and appear on the router's "connected clients" web page - but will not get an IP address assigned to them. They both end up with "limited or no connectivity" and neither is assigned an IP address by the DHCP server. If I switch the server off and assign IP addresses manually (e.g. router-192.168.1.1, client=192.168.1.2) it doesn't work either, although this *does* work for Ethernet-connected PCs.

I had a Zyxel router beforehand that was utterly reliable - but B-only and ADSL-1 only, I upgraded to this Linksys to get wireless-G, more range and ADSL-2 - but am very disappointed with the Linksys!

> peter_964rs > 03.09.2006

I get the "limited or no connectivity" issue every couple of weeks trying to connect wirelessly to wag54gs router. The solution is either to reboot the rooter - which works most times - or to reset the router completly using the pin button at back of the router.

> Dov > 03.09.2006

I have Firmware Version: 1.01.05 and every now again the connection is lost. I find the WAG354G less reliable than my old SMC barricade but that was faultless.
Would you recommend 1.00.09C for better stability?
Is 1.00.09C a newer firmware? Strange the version is lower. I find the WAG354G is missing lots of helpful features like a log file with time stamps.
Also I would have liked to map MAC addresses to IP addresses like on the SMC.

> Martin > 06.09.2006

I can't really complain about my Linksys WAG354G (UK) Router...

Currently using Firmware Version: 1.01.09 (which I think might be a beta version as I've not done anything with it for a couple of months). But anyway, as an example, the router has remained connected (or at least had the same IP [I'm with a dynamic host]) since Tue Aug 22 07:54:19 2006 (GMT+1). That's nearly 16 days.

Aubs

Any questions/etc direct to: LinksysSupport WhichIsAt Aubs.co.uk

> Aubs > 06.09.2006

Actually I have discovered a hidden page "dhcp_reserved.asp" that can map MAC to IP addresses.

Think I will try 1.01.09 because my connection has gone again.

How do you find the router up time? I can never tell if the problem is the router or the isp. There is no connection log file exposed to the user.

> Martin > 08.09.2006

Is 1.01.09 firmware available for binary download? I can only find the GPL source. Why doesn't Linksys put the WAG354 downloads on their web site? The 354 product does not appear in the product drop down.

> Martin > 08.09.2006

Here's a link given to me by one support contact from linksys; http://www.linksysdata.com/betafiles/Linksys/
user name: linksys password: beta76 hope you find what you need there.

I would also gretly appreciate any suggestions in solving my connection problem, herea run down;

Problem: VPN-1 SecuRemote connection fails because gateway is not responding (despite correct pin, tokencode, & connection/location profile entry).

I am using a Linksys 354 Wireless ADSL Home Gateway ver.1 with firmware version 1.01.09.

Thanks in advance.


> Palmer > 17.09.2006

I have a Linksys WAG54GS EU version and was losing internet connection every few days and I had to switch it off and back on again to restore connection. It came with firmware version 1.00.08. I telephoned Linksys and
they suggested that I try 1.00.09C and if I continue to
experience the same problem they told me to call back and they would give me a later version of this firmware
1.00.10 (this version will be officially released and put on their website soon). Since installing 1.00.09C I've had no problems.

> Tom > 21.09.2006

Seems like I'm still having the same problem so I'm going to try 1.00.10.

> Tom > 26.09.2006

Thanks Palmer I upgraded to 1.01.09 from that link. Seems OK so far.

I'm not too sure about your VPN problem. I use Cisco VPN and it works fine with passthrough enabled.

> Martin > 27.09.2006

Guys..

For the wag54gs going to firmware 1.00.9c worked for me...

Thanks

Geoff

> Geoff > 04.10.2006

Anyone got a link to the beta firmware (1.01.09) for the WAG354G.

> Chris > 21.10.2006

Where can we download the latest firmware for the WAG54GS with speedbooster. The latest linksys have on their site still is 1.00.6

> Mark D > 04.11.2006

I have a Linksys WAG54GS. It is linked via ethernet cable to my destop and accesses the Internet well. I use the wireless side of the Linksys to print to my HP WiFi printer. I also print from my laptop to this printer wirelessly. Every time I get it working the Linksys and the laptop both fail to print on restart. Any ideas?
John

> John O > 05.11.2006

usernam and pass dont work anymore

> dontasciime > 09.11.2006

just a thought, and it is a bit random. i had connection issues with my wag54gs, and the orientation of the box seemed to have something to do with it. ie. flat or stood on its end so to test the theory i drilled a large hole in the top and fitted a fan which solved my particular problems! it was very unreliable before but is much better now, so is the firmware maxing out the processor and causing the issues??

> jason > 27.11.2006

I have updated a Torrent to Demonoid with beta 1.00.09C for WAG54GS. The same Torrent also have 1.00.08. Not convinced these fw solve the problem with getting stuck after 4/6 days.

> PerArne > 04.12.2006

PerArne you should try the latest stable firmware that is 1.01.11. Take a lot on the officila linksys site.

> marco > 12.12.2006

Does anyone know the difference between the UK and EU versions?

> Stephen > 14.12.2006

Linksys have officially released firmware version 1.00.12 for the WAG54GS. Its available from their website. They have got the date wrong though (2005 instead of 2006)so just ignore that. So far the new firmware version is working fine for me.

> Tom > 22.12.2006

Great info on the WAG54GS. A problem I have with SNMP:
I can do an "snmpwalk" while connected from the "inside" (ie lan or wifi), but if I try an snmpwalk to the connected IP (assigned by ISP) from the outside (from a remote computer), it just does a timeout. Am I missing something? Thanks in advance.

> John > 07.01.2007