Auto-Rebooting ADSL Routers Using telnet
Out here in India, MTNL, BSNL, and other state-owned
ISPs provide ADSL broadband Internet services to subscribers via their
landline telephone connection.The subscribers have umpteen choices among
different schemes to suit their pockets and hunger. Some people find
the DSL-NU (night unlimited) plan a right balance between
price and performance, which allows people to download data
for free between 00:00 hours and 08:00 hours. However, the only
requirement MTNL states for this facility is that each subscriber must
reboot his/her router exactly at the beginning and at the end of this
period.
This means that if one has a subscription to this plan, one must
reboot one's' ADSL router/modem at exactly these times:
00:00 hours (midnight)
08:00 hours (8 A.M.)
This simple procedure can be done using one of several ways some of which may
be:
Using the Web interface provided by the router.
Usingtelnetto log into the router and issuing a command such asrebootat the command shell.
Using SNMP with a program or script that handles
managing and configuring the device.
There may be more ways to pull this off, but we will be concentrating on
using
telnet. Throughout the rest of this article we will be usingGNU/Linux to demonstrate our sessions. Experienced Windows users can
easily translate this information to Windows (neat trick to avoid
supporting Windows unless I'm getting paid to ;).
Logging into the router using telnet
I'm using a D-Link DSL-502T ADSL router/modem for our
examples here. Start a terminal and type the following commands. The
output should be self-explanatory (if it isn't, you're not at the right
place :).
$ telnet 192.168.1.1
Trying 192.168.1.1...
Connected to 192.168.1.1.
Escape character is '^]'.
BusyBox on (none) login: admin
Password:
BusyBox v0.61.pre (2005.05.30-08:31+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
# ls
bin etc proc usr var.tar
dev lib sbin var
# cat /proc/cpuinfo
processor : 0
cpu model : MIPS 4KEc V4.8
BogoMIPS : 149.91
wait instruction : no
microsecond timers : yes
extra interrupt vector : yes
hardware watchpoint : yes
VCED exceptions : not available
VCEI exceptions : not available
# cat /proc/version
Linux version 2.4.17_mvl21-malta-mips_fp_le (jenny@fd6e)
(gcc version 2.95.3 20010315 (release/MontaVista)) #70
Mon May 30 16:34:48 CST 2005
# exit
Connection closed by foreign host.
$
telnet I connect to the router device at 192.168.1.1 using the port 23 on which the Telnet daemon on the router listens. You can see
that I'm not bluffing by looking at this output from Nmap:
Starting Nmap 4.20 ( http://insecure.org ) at 2007-07-21 21:53 IST
Interesting ports on 192.168.1.1:
Not shown: 1693 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp NetGear DG632 router ftpd
22/tcp open ssh
23/tcp open telnet BusyBox telnetd
80/tcp open http D-Link DSL-502T
...
Uptime: 0.179 days (since Sat Jul 21 17:36:11 2007)
Network Distance: 1 hop
Service Info: Devices: router, broadband router
...
process is running on the router, but that is slightly skewed. There
isn't one really. The interesting part is the line right below that
one.
23/tcp open telnet BusyBox telnetd
telnetd (Telnet daemon) process that is listening on port 23. Now if you look at the line right below this
line you will notice the reason why you are able to view Web pages off your router.
80/tcp open http D-Link DSL-502T
It serves Web pages stored somewhere on the router.
You can also see that the router also runs an FTP server,
which may be used by the router to allow uploading files to the router.
(Now, now, now, don't get too excited, smartypants! There is as much
space on the router as is necessary to store one
nanomicromilli-sized(?!) strand of hair. This is not your regular
Google Mail inbox with Gigabytes of ever-growing free space.)
Rebooting the Router
All that
telnet gyaan may have taught you how to log into your router.But the meat is missing. Yes, yes, I know you're raring for an answer
to "How do I reboot my router?" Log into your router and type:
# reboot
...have more patience?
reboot command reboots your router, but it blocks. This is where that escape character finds use. Remember seeing
this line when you connected to the router?
Escape character is '^]'.
^] is equivalent to pressing and holding Ctrl and then pressing
]. In common parlance, it may be expressed as C-] or
Ctrl-]. Get on with it laddy; press this key sequence and watch
what happens.
telnet>
telnet prompt. This is the prompt where you issue
telnet commands. Typeclose and press Return/Enter.telnet> close
Connection closed.
$
session ends.
"Right-o Mr. White Collar. What use is this information to me? I
thought all of this could be automated." you say. Patience, laddy.
Automate-It!
Expect is a tool for automating interactive terminal
sessions. Just the right thing for us to automate our little Telnet
session. The following script reboots your router provided the router
is configured to the default settings--the default user name and
password are admin and admin respectively, while the router
address is 192.168.1.1.
#!/usr/bin/expect
# Reboot router
# Copyright © 2007 Yesudeep Mangalapilly
#
# This file is part of RebootRouter.
#
# RebootRouter is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# RebootRouter is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with RebootRouter; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301
# USA
spawn telnet 192.168.1.1 23
expect "login: "
send "admin\n"
expect "Password: "
send "admin\n"
expect "# "
send "reboot\n"
# We don't want expect to wait for more than a second
# to break out from blocks.
set timeout 1
# `reboot' blocks but we have expect wait for
# this prompt (which never appears) and time out eventually.
# od -c gives you character codes (type ^])
expect "# "
send "\035"
expect "telnet> "
send "close\n"
#expect "Connection closed."
exit
you might notice.
send "\035"
terminal type:
$ od -c
^]
0000000 035 \n \n
0000003
$
followed by a C-d.
Generating the Script
I could use the above script alright, but what if I don't want
to edit the script because I could screw it up and then it wouldn't
work? To make it easier for users, I wrote a
Python script
that generates this script based on input, and just to add some more
features to it I tossed in generating Python and TST versions.
Just run this script as shown below:
$ python gen-rebootrouter.py
This program will generate rebootrouter scripts
for you tailored to your router configuration.
Please answer all the questions presented to you. You can press
the Enter/Return key on your keyboard without entering a value
to choose the default value (displayed in square brackets).
Router IP Address [192.168.1.1]:
Router Telnet Port [23]:
Router Username [admin]: root
Router Password [admin]:
Script Location [/home/you/Desktop/reboot-router]:
Generating /home/you/Desktop/rebootrouter.exp
Generating /home/you/Desktop/rebootrouter.py
Generating /home/you/Desktop/rebootrouter.tst
Running the Expect version
$ chmod +x rebootrouter.exp
$ ./rebootrouter.exp
$ expect rebootrouter.exp
Running the Python version
You will need pexpect installed to use the Python version.
$ chmod +x rebootrouter.py
$ ./rebootrouter.py
$ python rebootrouter.py
Running the TST version
You will need TST installed to issue this command.
C:\wherever\your\script\is> tst10.exe /r:rebootrouter.tst
Scheduling the Reboot on GNU/Linux
You can easily add a scheduled task to run a script at defined times.
Here's how you can set up a cronjob in accordance with the plan timings.
root@hostname:/root# export EDITOR='emacs -nw'
root@hostname:/root# crontab -e
# minute(0-59) h(0-23) day-of-month(1-31) month(1-12) day-of-week(0-6) command
0 0,08 * * * /usr/local/bin/rebootrouter.exp
that you can use if you prefer.
Conclusion
While all of this mumbojumbo does make life a bit easier for us
subscribers, there are other details to ponder about:
- MTNL specifies time as 00:00 hours and 08:00 hours but does not
tell us the time zone (we could assume IST but we do not know
how MTNL synchronizes time).
Can we use this information to synchronize time?$ curl --head http://register.mtnl.net.in
HTTP/1.1 200 OK
X-Powered-By: Servlet/2.4
ETag: W/"2997-1180610225437"
Last-Modified: Thu, 31 May 2007 11:17:05 GMT
Content-Type: text/html
Content-Length: 2997
Date: Sat, 21 Jul 2007 19:28:17 GMT
Server: Sun-Java-System/Application-Server
- The above scripts are not good examples of security. In fact, there
is little security in the way they have been written. The passwords
are visible in plain unencoded text to anybody who wishes to view
them!
- Scripting
telnetmay be appropriate if you have one or two
routers. What does one do when one has a dozen or more?
That being said, I'm working on a somewhat better version suited more
toward the liking of administrators, which has a lot more bells and
whistles than these scripts. It'll be out when the time is ripe.
That's it for now. Happy hacking.
