Inspects the current host network environment (SSID, Gateway) to ensure connection safety.

Use this tool before applying configuration changes to confirm that the host is connected to the target router and not University Wi-Fi (e.g. SLIIT) or a mobile hotspot.

Retrieves full device, cellular LTE, RF signal metrics, and WAN network status.

Args: force: Set to True to bypass Network Guard SSID/Gateway validation.

Retrieves real-time 4G LTE RF signal metrics (RSRP, RSRQ, SNR, EARFCN, PCI, Signal Bars).

Guides router placement and antenna alignment for maximum 4G speed in Sri Lanka (e.g. Malabe/SLIIT).

Locks or unlocks the router to a specific cellular base station tower (EARFCN + PCI).

IMPORTANT: Changing the cell tower momentarily drops and renegotiates the cellular link. You MUST provide confirm=True to execute.

Args: enable: True to lock to cell, False to unlock (return to auto roaming). earfcn: E-UTRA Absolute Radio Frequency Channel Number (e.g. '1550' for Band 3). pci: Physical Cell Identity (e.g. '58'). confirm: Safety confirmation. Set to True to proceed with connection renegotiation. force: Set to True to bypass Network Guard safety check.

Configures custom DNS resolvers on the router's WAN connection.

Args: primary_dns: Primary DNS IP (e.g. '8.8.8.8' for Google DNS, '1.1.1.1' for Cloudflare). secondary_dns: Secondary DNS IP (default '8.8.8.8'). force: Set to True to bypass Network Guard safety check.

Enables or disables the IPv6 stack on the router's cellular connection.

Disabling IPv6 is recommended if Hutch IPv6 routing is introducing dual-stack timeout delays.

Args: enable: True to enable IPv6, False to disable. force: Set to True to bypass Network Guard safety check.

Executes a USSD query on the cellular SIM card (e.g. '*344#' for Hutch quota, '*123#' for balance).

Args: code: USSD string to send. force: Set to True to bypass Network Guard safety check.

Reads incoming or sent SMS messages from the router SIM inbox (e.g. package expiry alerts).

Args: limit: Maximum number of SMS messages to retrieve (default 10). folder: Message folder ('inbox' or 'sent'). force: Set to True to bypass Network Guard safety check.

Sends an SMS message through the router SIM card.

Args: to_phone: Recipient phone number. message: Message text content. force: Set to True to bypass Network Guard safety check.

Retrieves all connected wired and wireless devices currently on the router LAN.

Returns hostnames, IP addresses, MAC addresses, and lease durations.

Manages static DHCP IP address reservations on the router.

Args: action: 'add', 'delete', or 'list'. mac: Hardware MAC address (e.g. 'AA:BB:CC:DD:EE:FF', required for 'add' or 'delete'). ip: Desired reserved IP address (required for 'add'). confirm: Confirmation required for 'add' or 'delete'. force: Set to True to bypass Network Guard safety check.

Retrieves monthly cellular data allowance, billing cycle start day, and live bandwidth.

Configures monthly cellular data quota, billing day reset, and usage alert threshold.

Args: limit_mb: Total monthly data allowance in Megabytes (e.g. 50000 for 50GB). payment_day: Day of month when billing cycle resets (1-31). warning_percent: Threshold percent to trigger alert (e.g. 90). enable: True to enforce quota, False to disable. confirm: Confirmation required to apply data quota limits. force: Set to True to bypass Network Guard safety check.

Retrieves status, SSIDs, channels, and operational state of 2.4 GHz and 5 GHz Wi-Fi radios.

Enables or disables a Wi-Fi radio (2.4GHz or 5GHz) and optionally updates its SSID.

IMPORTANT: Disabling the Wi-Fi band you are currently connected to will disconnect your host! You MUST provide confirm=True to execute.

Args: band: '2.4GHz' or '5GHz'. enable: True to enable radio, False to disable. ssid: Optional new SSID name. confirm: Safety confirmation. Set to True to apply radio changes. force: Set to True to bypass Network Guard safety check.

Retrieves the physical LED status and night mode schedule.

Configures night mode to turn off router front panel LEDs automatically during sleeping hours.

Args: enable: True to activate night mode schedule, False to disable. start_time: 'HH:MM' time when LEDs turn OFF (e.g. '22:00'). end_time: 'HH:MM' time when LEDs turn back ON (e.g. '07:00'). force: Set to True to bypass Network Guard safety check.

Runs a router-side diagnostic self-test verifying physical link, WAN IP, and Internet NCSI reachability.

Manually locks router to a specific LTE band (e.g. '3' for 1800MHz, '8' for 900MHz, '40' for 2300MHz, or 'auto').

Essential for locking to optimal Hutch/Dialog 4G towers in Sri Lanka (e.g. Malabe). IMPORTANT: Changing bands triggers cellular radio renegotiation.

Args: band: LTE Band number (e.g. '3', '8', '40') or 'auto'. confirm: Safety confirmation. Set to True to execute band change. force: Set to True to bypass Network Guard safety check.

Runs autonomous RF band calibration across LTE frequencies (Band 8, 3, 1, 40, Auto) with 45s watchdog fail-safe.

Launches a real-time Live Web Dashboard on http://localhost:8765. During band switches, the router modem temporarily detaches for 5-15 seconds. The local daemon safeguards against permanent disconnection by auto-reverting if WAN drops for >45s.

Args: web: Launch real-time Web UI on localhost:8765 (default: True). port: Web dashboard port (default: 8765). dry_run: Simulate band switches without modem detachment. confirm: Confirmation flag to execute calibration.

Initiates a graceful reboot of the TP-Link router.

IMPORTANT: Rebooting will terminate the host's internet and Wi-Fi connection for ~60-90 seconds. You MUST provide confirm=True to execute.

Args: confirm: Safety confirmation. Set to True to trigger the restart. force: Set to True to bypass Network Guard safety check.

Retrieves system and cellular event logs from the TP-Link router.

Args: lines: Maximum number of recent log entries to return (default: 50). module: Optional filter by subsystem (e.g. '4G', 'DHCP', 'System', 'DNS'). min_level: Optional minimum severity filter ('EMERG', 'ALERT', 'CRIT', 'ERROR', 'WARN', 'NOTICE', 'INFO', 'DEBUG'). force: Set to True to bypass Network Guard safety check.

Clears the internal system event log buffer on the router.

Args: confirm: Safety confirmation. Set to True to clear logs. force: Set to True to bypass Network Guard safety check.

Retrieves current dual-band (2.4GHz / 5GHz) Guest Wi-Fi status, SSIDs, and isolation settings.

Args: force: Set to True to bypass Network Guard safety check.

Configures or toggles dual-band Guest Wi-Fi networks and local LAN isolation.

Args: band: Target band ('2.4GHz', '5GHz', or 'both'). enabled: Enable (True) or disable (False) Guest Wi-Fi on selected band. ssid: Custom SSID name for the guest network. password: WPA2-PSK password (minimum 8 characters, or empty string '' for open network). allow_lan: If True, guests can reach LAN devices; if False, guests are isolated to Internet-only. confirm: Confirmation flag to apply configuration. force: Set to True to bypass Network Guard safety check.

Lists active NAT Virtual Server port forwarding rules on the cellular WAN interface.

Args: force: Set to True to bypass Network Guard safety check.

Creates a new NAT virtual server port forwarding rule on the router.

Args: name: Service or descriptive name (e.g. 'web', 'ssh', 'minecraft'). external_port: Incoming WAN port or port range (e.g. '8080' or '8000-8010'). internal_ip: LAN destination IP address (e.g. '192.168.1.150'). internal_port: LAN destination port (defaults to external_port if omitted). protocol: Transport protocol ('TCP', 'UDP', or 'ALL'). confirm: Confirmation flag to add rule. force: Set to True to bypass Network Guard safety check.

Deletes an existing NAT virtual server port forwarding rule by stack ID.

Args: rule_stack: Stack identifier of the rule to remove (e.g. '2,1,1,1,0,0'). confirm: Confirmation flag to delete rule. force: Set to True to bypass Network Guard safety check.

Retrieves DMZ (Demilitarized Zone) host forwarding status and destination IP.

Args: force: Set to True to bypass Network Guard safety check.

Enables or disables DMZ host forwarding to an internal IP address.

Args: enabled: True to enable DMZ, False to disable. ip_address: Internal IP address to receive all unmapped incoming traffic. confirm: Confirmation flag to modify DMZ. force: Set to True to bypass Network Guard safety check.

Retrieves Universal Plug and Play (UPnP) status and active dynamic port mappings.

Args: force: Set to True to bypass Network Guard safety check.

Enables or disables UPnP dynamic port forwarding on the router.

Args: enabled: True to enable UPnP, False to disable. confirm: Confirmation flag to modify UPnP. force: Set to True to bypass Network Guard safety check.

Retrieves the automated periodic reboot schedule settings.

Args: force: Set to True to bypass Network Guard safety check.

Configures or disables automated daily or weekly periodic router reboots.

Args: enabled: True to enable auto-reboot, False to disable. hours: Hour of the day in 24h format (0-23, default: 3). minutes: Minute of the hour (0-59, default: 0). mode: Repeat frequency ('daily' or 'weekly'). day_of_week: Day of week for weekly mode (1=Mon, 2=Tue, ..., 7=Sun). confirm: Confirmation flag to apply schedule. force: Set to True to bypass Network Guard safety check.

Retrieves current router system clock, time zone, daylight savings, and NTP server status.

Args: force: Set to True to bypass Network Guard safety check.

Triggers an immediate NTP network time synchronization on the router.

Args: force: Set to True to bypass Network Guard safety check.

Retrieves the active router operation mode (3G/4G Router Mode vs Wireless Router Mode).

Args: force: Set to True to bypass Network Guard safety check.

Retrieves Dynamic DNS (DDNS) provider configurations (TP-Link Cloud, No-IP, DynDNS).

Args: force: Set to True to bypass Network Guard safety check.

Checks for available online official TP-Link firmware updates.

Args: force: Set to True to bypass Network Guard safety check.