aus_
Joined 13 years ago
Joined 13 years ago
edit: a pet peeve of mine is when people overstate agency capability like it’s some out of the box magic, and I’m guilty of of it here. So I should disclose that I’ve previously setup Hermes with ADB access and accessibility for remote control, and various skills for my home lan. It also had some memories or skills from sessions on managing these shield devices. other than that tho, it figured the rest out.
You have to enable `set system offload ipv4 vlan enable` else your routing performance will suffer.
1. They offer "IP Passthrough" which is fake Bridge Mode. They still do routing and you'll still hit NAT table limits of 4096. Connection falls apart for anything over 3000.
2. You can dump and reverse the router-gateway firmware and 802.1X/EAP authentication. Oh goodie.
3. There's a history of exploits for the NVG510, NVG589 and NVG599. Try your luck. [1] [2]
4. Create some "magic" to split the 802.1X and untag VLAN0. Works in Linux at least. [3]
5. But good luck if you want to do this in pfSense or FreeBSD. There's an open BTC bounty if you've got any netgraph / networking chops. [4]
[1]: http://earlz.net/view/2012/06/07/0026/rooting-the-nvg510-fro...
[2]: https://www.nomotion.net/blog/sharknatto/
[3]: http://blog.0xpebbles.org/Bypassing-At-t-U-verse-hardware-NA...
Great advice.