Calix Home Network May 21, 2026 === MAIN ROUTER (192.168.1.1) === Role: Primary Calix 4220E gateway (mesh controller) Model: u6.1 GS4220E (100-05413) Serial: 422208213826 SSID: CXNK010F208F WPA Key: 2f9f432281fdc198 ONU MAC: B89470467D4B MTA MAC: B89470467D4C Ports: 443 (HTTPS web UI), 53 (DNS) Web UI: https://192.168.1.1/ (login page, Calix Admin SPA) Credentials (admin): admin / 5e05068d Credentials (support): support / 5e05068d!5upporT -> Web UI accessible, all .cmd API endpoints return #ERROR_019 (support-level restriction) === BACK HALLWAY SATELLITE (192.168.1.109) === Role: Calix 4220E mesh satellite AP Model: u6.1 GS4220E (100-05413) Serial: 422208213783 SSID: CXNK010F2064 WPA Key: a4de3dfa91dd0129 ONU MAC: B89470467B72 MTA MAC: B89470467B73 Credentials (admin): admin / db90529d -> AP mode, HTTPS login page responds but nonce endpoint returns redirect HTML (bridge/AP mode — mesh APs don't accept standard web login flow) ICMP: Responds (u6.1 mesh APs reply to ping) DNS port 53: OPEN === OFFICE SATELLITE (192.168.1.155) === Role: Calix 4220E mesh satellite AP Model: u6.1 GS4220E (100-05413) Serial: 422208213919 SSID: CXNK010F20EC WPA Key: 82c01c4b563af393 ONU MAC: B8947046814A MTA MAC: B8947046814B Credentials (admin): admin / efe93f1d -> AP mode, same behavior as Back hallway sat (bridge/AP, login nonce blocked) ICMP: Responds (u6.1 mesh APs reply to ping) DNS port 53: OPEN === GENIESPIRE SATELLITES (EXOS / GenieACS managed) === These are separate devices from the 4220E mesh — managed via TR-069/GenieACS No local web UI (EXOS firmware does not expose a web management interface on satellites) Device: CXNK010F20EC (Back hallway sat — GenieACS confirmed IP 192.168.1.109) GenieACS ID: b89470-GigaSpire-CXNK010F20EC IP: 192.168.1.109 Hardware Version: 3000286517 Software: 25.2.0.0.44 MAC (Base): b8:94:70:46:81:4a TR-069 ConnectionRequest URL: http://192.168.1.109:60002/z7n5I5V4 TR-069 ConnectionRequest Username: b89470-GigaSpire-CXNK010F20EC TR-069 ConnectionRequest Password: 1b46b5lceui Device: CXNK010F2064 (Office sat — GenieACS confirmed IP 192.168.1.155) GenieACS ID: b89470-GigaSpire-CXNK010F2064 IP: 192.168.1.155 Hardware Version: 3000286517 Software: 25.2.0.0.44 MAC (Base): b8:94:70:46:7b:72 TR-069 ConnectionRequest URL: http://192.168.1.155:60002/nMB8ZP6l TR-069 ConnectionRequest Username: b89470-GigaSpire-CXNK010F2064 TR-069 ConnectionRequest Password: 1s3syufqcp1 Device: CXNK010F208F (Living room — was primary, currently offline/NAT'd) GenieACS ID: b89470-GigaSpire-CXNK010F208F IP: 173.21.51.61 (public, NAT'd — not locally reachable) Hardware Version: 3000286517 Software: 25.2.0.0.44 MAC (Base): b8:94:70:46:7d:4b TR-069 ConnectionRequest URL: http://173.21.51.61:60002/c22kzfhk TR-069 ConnectionRequest Username: b89470-GigaSpire-CXNK010F208F TR-069 ConnectionRequest Password: oja2voe4hy Note: IP assignments confirmed from GenieACS live data (ConnectionRequestURL field). The 4220E mesh and GenieSpire satellites share the same local IPs but are separate devices. The 4220E APs (109, 155) handle WiFi for the mesh. The GenieSpire satellites are the EXOS-based GigaSpire units that were firmware-upgraded via GenieACS NBI API. === CONNECTED CLIENTS (live scan, May 2026) === 192.168.1.1 router/gateway Calix Inc (b8:94:70:46:7d:4e) [gateway] 192.168.1.102 Chromecast "Living Room TV" Google Inc (dc:e5:5b:86:47:d1) Ports: 8008 (DIAL/Cast), 8443, 10001 | Latency: ~79ms 192.168.1.109 Back hallway AP Calix Inc (b8:94:70:46:81:4a) [mesh sat] 192.168.1.110 Unknown Amazon Technologies (10:ce:02:5b:7a:4b) No open ports detected (wireless client or firewall) 192.168.1.155 Office AP Calix Inc (b8:94:70:46:7b:72) [mesh sat] 192.168.1.159 Unknown Intel Corporate (c8:58:b3:6b:d9:60) No open ports detected (WiFi client) 192.168.1.164 Unknown Amazon Technologies (48:5f:2d:3a:ae:fa) No open ports detected (wireless client or firewall) 192.168.1.185 Unknown CANON INC (50:03:cf:af:22:7c) No open ports detected (Canon printer?) 192.168.1.195 Unknown Amazon Technologies (44:d5:cc:cd:dd:b8) No open ports detected 192.168.1.226 Unknown Amazon Technologies (1c:12:b0:4b:7e:4d) Port 8888 open (protocol unknown, non-responsive to HTTP) 192.168.1.227 Unknown TP-Link Systems (5c:62:8b:a2:ec:1f) No open ports detected 192.168.1.241 media-server [self] (eno1 interface) 192.168.1.248 Unknown Hon Hai (Foxconn) (00:24:2c:3a:61:ae) No open ports detected (likely TV, streaming device) === CALIX 4220E DEFAULT CREDENTIAL PATTERN === - Each Calix 4220E has a unique per-device default admin password (printed on label or in docs) - admin username is always "admin" - The support password is the admin default password + "!5upporT" appended Applied to our units: Main router (192.168.1.1): admin / 5e05068d | support / 5e05068d!5upporT Back hallway (192.168.1.109): admin / db90529d | support / db90529d!5upporT Office (192.168.1.155): admin / efe93f1d | support / efe93f1d!5upporT - Satellite APs (109, 155) in bridge/AP mode — nonce endpoint returns redirect HTML, blocking web login entirely. Mesh APs only accept admin CLI or OMCI management, not the standard HTTPS login flow. - Main router web UI: admin account works with password 5e05068d; support account works but all .cmd API endpoints return #ERROR_019 (read-only/monitor only) === GENIEACS SERVER === URL: https://genieacs.yoda.ddnsgeek.com NBI port: 7557 (for API tasks) ACS port: 7547 (CWMP/TR-069 — blocked by firewall, not externally accessible) Admin UI: https://genieacs.yoda.ddnsgeek.com Admin credentials: admin / 966QPr@*rCTMrWE9xSGm Version: v1.2.16+26052038e9 VPS: root@161.97.153.158