BCM routers
From kitz wiki
Broadcom-based modem/routers
This table lists modem/routers with Broadcom DSL chips, with their default GUI and telnet login details.
Manufacturer | Model | Chipset | IP address | Login name | Password | 2nd stage login? | Shell command | CLI command prefix |
---|---|---|---|---|---|---|---|---|
Actiontec | C1000A | BCM | 192.168.0.1 | No | xdslctl | |||
C2000A | BCM | 192.168.0.1 | No | xdslctl | ||||
Asus | WL-600G | BCM 6348 | 192.168.1.1 | admin | admin | No | ||
Asus | DSL-AC88U | BCM 63138 | 192.168.1.1 | admin | admin | No | ||
Belkin | F1PI243EGau (BoB) | BCM 6362 | 10.1.1.1 | admin (?) | admin | No | ||
Billion | 7700(N) | BCM 6328 | 192.168.1.254 | admin | admin | No | adsl | |
7800(N) | BCM 6358 | 192.168.1.254 | admin | admin | No | adsl | ||
7800DXL | BCM 6361 | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
8800NL | BCM 63168 | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
8800NL R2 | BCM63381 | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
8900AX | BCM | 192.168.1.254 | admin | admin | No | adsl or xdslctl | ||
BT HomeHub | 5B (Arcadyan) | BCM 63268 | 192.168.1.254 | admin | Locked | Locked | ||
D-Link | DSL-2300U | BCM 6338 | 192.168.1.1 | admin | admin | No | adsl | |
DSL-2540B | BCM 6338 | 192.168.1.1 | admin | admin | No | adsl | ||
DSL-2542B | BCM 6338 | 192.168.1.1 | admin | admin | No | adsl | ||
DSL-2640B | BCM 6348 | 192.168.1.1 | admin | admin | No | adsl | ||
DSL-2740B | BCM 6358 | 192.168.1.1 | admin | admin | No | adsl | ||
Dynalink | RTA230 | BCM 6345 | 192.168.1.1 | admin | admin | No | ||
RTA1025W | BCM 6348 | 192.168.1.1 | admin | admin | No | |||
RTA1025W rev2 | BCM 6348 | 192.168.1.1 | admin | admin | No | |||
RTA1046VW | BCM 6348 | 192.168.1.1 | admin | admin | No | |||
RTA1320 | BCM 6338 | 192.168.1.1 | admin | admin | No | |||
RTA1335 | BCM 6338 | 192.168.1.1 | admin | admin | No | |||
EE Brightbox | V2 (Arcadyan) | BCM 63168 | 192.168.1.1 | admin | Locked | |||
Free | Freebox V4/V5 | BCM 6348 | ||||||
Freebox V6 | BCM 6368 | |||||||
Huawei | HG610 | BCM 6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd |
HG612 | BCM 6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
HG622 | BCM 6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
HG635 | BCM | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
HG658b | BCM 6368 | 192.168.1.1 | admin | admin | Yes | sh | xdslcmd | |
Linksys | X3000 | BCM 6362 | 192.168.1.1 | admin | admin | No | (No telnet server) | |
Motorola | NVG510 | BCM 6362 | xdslctl (?) | |||||
Netgear | D6400 | BCM 63168 | 192.168.0.1 | admin | password | No | adslctl (?) | |
D7000 | BCM63138 | 192.168.0.1 | admin | password | No | |||
DG834(G) v4 | BCM 6348 | 192.168.0.1 | admin | password | No | adslctl | ||
DG834Nv1 | BCM 6358 | 192.168.0.1 | admin | password | No | adslctl | ||
DG834GT | BCM 6348 | 192.168.0.1 | admin | password | No | adslctl | ||
DG834PN | BCM 6348 | 192.168.0.1 | admin | password | No | adslctl | ||
DGN2000 | BCM 6348 | 192.168.0.1 | admin | password | No | adslctl | ||
DGN2200 | BCM 6358 | 192.168.0.1 | admin | password | No | adslctl | ||
DGND3300 v1 | BCM 6358 | 192.168.0.1 | admin | password | No | adslctl (?) | ||
DGND3300 v2 | BCM 6358 (?) | 192.168.0.1 | admin | password | No | adslctl (?) | ||
DGND3700 v1 | BCM 6368 | 192.168.0.1 | admin | password | No | adslctl (?) | ||
DGND3700 v2 | BCM 6361 | 192.168.0.1 | admin | password | No | adslctl (?) | ||
DM111P | BCM 6348 | 192.168.0.1 | admin | password | No | adslctl | ||
SagemCom | F@ST 2504N | BCM 6362 | 192.168.0.1 | admin (web UI login, no telnet) | sky (web UI login, no telnet) | No | adsl (command prefix used via custom firmware - 'Sky Router Tool Lite') | |
F@ST 2504 | BCM 6348 | 192.168.0.1 | admin | sky | No | adslctl | ||
Sky | SR101 | BCM 6362 | 192.168.0.1 | admin | sky | |||
Thomson/Speedtouch | ST536 | BCM 6338 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | |
ST546 | BCM 6338 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
ST585 v6 | BCM 6348 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
ST585 v7 | BCM 6338 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
ST608WL | BCM | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
ST708WL | BCM | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
ST780WL | BCM 6348 | 192.168.1.254 | Administrator | (none) | No | (custom CLI) | ||
Thomson/Technicolor | TG582N | BCM 6328 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | |
TG585v7 | BCM 6338 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | ||
TG589vn v3 | BCM 6368 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | ||
TG784 | BCM 6358 | 192.168.1.254 | Administrator | 1 | No | (custom CLI) | ||
TP-Link | Archer VR900 v1 | BCM 63168 | 192.168.1.1 | admin | No | locked | Limited custom CLI | |
Archer VR900 v2 | BCM 63137 | 192.168.1.1 | admin | No | locked | Limited custom CLI | ||
TD-W8960N | BCM 6358 | 192.168.1.1 | admin | admin | No | |||
TD-W9970 | BCM 63381 | 192.168.1.1 | admin | admin | No | Limited custom CLI | ||
ZTE | ZXDSL931vII | BCM 6368 | 192.168.1.254 | admin | (per device) | Yes 2 | 2 | xdslctl |
Zoom | X7n | BCM | 192.168.1.1 | admin | zoomadsl | |||
Zyxel | C1000Z | BCM | 192.168.0.1 | No | xdslctl | |||
P-870HN-51b | BCM 6368 | 192.168.1.1 | admin | 1234 | No | adsl (?) | ||
SBG3300-N | BCM 6368 | 192.168.1.1 | admin | 1234 | No | adsl | ||
VMG1312-B10A | BCM 63168 | 192.168.1.1 | admin | 1234 | No | adsl | ||
VMG1312-B10D | BCM 63381 | 192.168.1.1 | admin | 1234 | No | xdslctl | ||
VMG3925-B10B | BCM 63168 | 192.168.1.1 | admin | 1234 | No | |||
VMG3926-B10A | BCM 63168 | 192.168.1.1 | admin | 1234 | No | |||
VMG8324-B10A | BCM 63168 | 192.168.1.1 | admin | 1234 | No | adsl | ||
VMG8924-B10A | BCM 63168 | 192.168.1.1 | admin | 1234 | No | adsl |
1 The password for Technicolor routers may be the serial number.
2 The ZTE ZXSDL931vII has additional stages to reach the Busybox shell:
Second stage command: enable, password = zte
Third stage command: shell
After entering shell you have to login - Login: root, Password: root