Enable Bridge Mode on Verizon 5G Home Router (model LV55 / LVSKIHP)

Just Use IPv6

This is the most simple solution. Log in to the router, use the following code to enable IPv6, and call it a day. Trust me, you don't want to spend more time on it.

WNC.DM.set({
  args: {
    "Object":"Device.DHCPv6.Server.",
    "Operation": "Modify",
    "X_WNC_RA_management":"Stateless",
    "Enable": 1,
  },
  success: function s(objs, status) {
    console.log("success: ", status, objs)
  },
  error: function s(objs, status) {
    console.log("error: ", status, objs)
  },
})

Even if you're still behind NAT, having a public IPv6 address is still much better than nothing. Also, you'll get an extra Wi-Fi hotspot for guests. The built-in Wi-Fi is actually quite good.

Enable DMZ

Unfortunately, IPv4 is still a thing, and pure-IPv6 network doesn't quite work for most people.

Enable DMZ mode and point that to your router. DMZ can be configured directly from the GUI.

Disable Firewall

Use the following code:

WNC.DM.set({
  args: {
    Object: "Device.Firewall.",
    Operation: "Modify",
    Config: "Advanced",
  },
  success: function s(objs, status) {
    console.log("success: ", status, objs)
  },
  error: function s(objs, status) {
    console.log("error: ", status, objs)
  },
})

Enable Bridge Mode

It is possible to enable bridge mode with some effort. The MTU on cellular network is smaller than 1500, and my test concludes that 1400 is a good number.

Paste the following to inspector console:

$('#restart-modal').data('action', { url: modeswitch_url, msg: "Click YES", data: {mode: "Bridge"}, count: 150000, refresh: false }).modal('show');

Click Yes.

Alternatively, run the following command (replace CSRF Token and Cookie with yours).

curl 'http://192.168.0.1/cgi-bin/luci/verizon/home/changeidumode' \
  -H 'Accept: */*' \
  -H 'X-CSRF-TOKEN: XXXX' \
  -H 'X-Requested-With: XMLHttpRequest' \
  -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' \
  -H 'Origin: http://192.168.0.1' \
  -H 'Referer: http://192.168.0.1/cgi-bin/luci/' \
  -H 'Cookie: sysauth=XXXX' \
  --data-raw 'mode=Bridge' \
  --insecure \
  --verbose

The router should then reboot. Wait for a few minutes (it might take a few hours, just wait patiently). Eventually, you'll see an IPv4 address DHCP'ed to you. To access the router's consumer facing GUI, visit http://10.0.0.2.

That should be it!

Enabling Bridge Mode (alternative method)

The router can be powered by PoE. Pry off the bottom cover, remove the 4 screws, and pry off the bottom panel to remove the window mount. Use PoE to power the previously hidden port. Do NOT use the AC adapter.

That's probably the easiest way to enable bridge mode, but it's impossible to mount the router on the window with ethernet cable connected, unless if someone 3D prints a bracket.

The PoE port supports 5GBASE-T, and it's possible to reach to ~3Gbps speed with it.

Dumping TR069 Config Files

To dump TR069 config, use the following code:

WNC.DM.encr_get({
  args: {
    "Object":"Device.DHCPv4",
  },
  success: function s(objs, status) {
    console.log("success: ", status, objs)
  },
  error: function s(objs, status) {
    console.log("error: ", status, objs)
  },
})

Some objects cannot be dumped directly.

Running Servers

Verizon blocks port 22.

tifan.net