Awesome. I glanced through the Efficient Networks SpeedStream 5200 guide but did not see anything in there. Also, I googled around a bit and nada. This one came in the router version even though it is the one ethernet port version. Since it has the router firmware, this may explain it, but still, very weird. Anyway, I did the -O option, here are the results for anyone interested: root@anisoptera:/home/me# nmap -O 192.168.1.1 Starting Nmap 4.03 ( http://www.insecure.org/nmap/ ) at 2006-09-07 22:10 EDT Interesting ports on 192.168.1.1: (The 1669 ports scanned but not shown below are in state: closed) PORT STATE SERVICE 80/tcp open http 1720/tcp open H.323/Q.931 2001/tcp open dc 5060/tcp open sip 6001/tcp open X11:1 No exact OS matches for host (If you know what OS is running on it, see http://www.insecure.org/cgi-bin/nmap-submit.cgi). TCP/IP fingerprint: SInfo(V=4.03%P=x86_64-unknown-linux-gnu%D=9/7%Tm=4500D14B%O=80%C=1) TSeq(Class=TR%IPID=RD%TS=U) T1(Resp=Y%DF=N%W=1020%ACK=S++%Flags=AS%Ops=ME) T2(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=) T3(Resp=N) T4(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=) T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=) T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=) T7(Resp=Y%DF=N%W=0%ACK=S%Flags=AR%Ops=) PU(Resp=N) Nmap finished: 1 IP address (1 host up) scanned in 39.786 seconds Do you have a VOIP service? As for the login prompt it looks like a standard Cisco IOS (level_15 access), try cisco/cisco or admin/cisco?