diff --git a/ipk-source/sdxpinn-console-menu/root/usr/bin/sub_menus/lan_menu b/ipk-source/sdxpinn-console-menu/root/usr/bin/sub_menus/lan_menu
new file mode 100644
index 0000000..96330c0
--- /dev/null
+++ b/ipk-source/sdxpinn-console-menu/root/usr/bin/sub_menus/lan_menu
@@ -0,0 +1,252 @@
+#!/bin/ash
+
+# Function to display menu options with color coding
+menu() {
+    echo -e "\e[96mLAN Configuration Menu:\e[0m" # Cyan
+    echo -e "\e[92m1) Enable/Disable Single IP DMZ Passthrough Mode\e[0m"   # Green
+    echo -e "\e[94m2) Set Gateway Address\e[0m"       # Blue
+    echo -e "\e[93m3) Set DHCP Start/Limit Range\e[0m" # Yellow
+    echo -e "\e[96m4) Set Custom DNS\e[0m"             # Cyan
+    echo -e "\e[95m5) Use Provider's DNS (IPv4 only)\e[0m" # Magenta
+    echo -e "\e[92m6) Enable/Disable IP Passthrough with NAT (Access to modem's LAN locally)\e[0m" # Green
+    echo -e "\e[91m7) Exit\e[0m"                       # Red
+    echo ""
+    read -p "Select an option [1-7]: " choice
+}
+
+# Apply changes and restart services
+apply_changes() {
+    uci commit network
+    uci commit dhcp
+    /etc/init.d/network restart
+    /etc/init.d/dnsmasq restart
+    echo -e "\e[92mChanges applied successfully.\e[0m" # Green
+}
+
+# Function to check if IPPT is enabled by inspecting the MPDN rules
+is_ippt_enabled() {
+    local mpdn_output=$(atcmd 'AT+QMAP="mpdn_rule"')
+    echo "$mpdn_output"
+    
+    # Check if any MPDN rule has IPPT enabled (non-zero second-to-last value)
+    if echo "$mpdn_output" | grep -q "+QMAP: \"MPDN_rule\",.*,.*,.*,[1-9],.*"; then
+        return 0  # IPPT is enabled
+    else
+        return 1  # IPPT is not enabled
+    fi
+}
+
+# Function to check if MPDN rules are clear
+are_mpdn_rules_clear() {
+    local mpdn_output=$(atcmd 'AT+QMAP="mpdn_rule"')
+    echo "$mpdn_output"
+    
+    # Check if all MPDN rules are clear (all values are 0)
+    if echo "$mpdn_output" | grep -q "+QMAP: \"MPDN_rule\",0,0,0,0,0"; then
+        return 0  # MPDN rules are clear
+    else
+        return 1  # MPDN rules are not clear
+    fi
+}
+
+# Function to check DMZ status using the AT+QMAP command
+is_dmz_enabled() {
+    local lan_ip=$(uci get network.lan.ipaddr)
+    local expected_dmz_ip=$(echo "$lan_ip" | awk -F. '{print $1"."$2"."$3"."$4+1}')
+    local dhcp_start=$(uci get dhcp.lan.start)
+    local dhcp_limit=$(uci get dhcp.lan.limit)
+
+    # Check if DHCP start and limit are the same
+    if [ "$dhcp_start" = "$dhcp_limit" ]; then
+        # Get the DMZ status from the AT command
+        local dmz_status=$(atcmd 'AT+QMAP="DMZ"')
+        echo "$dmz_status"
+
+        # Check if DMZ is enabled for IPv4 (1,4 means IPv4 DMZ is enabled)
+        if echo "$dmz_status" | grep -q "\+QMAP: \"DMZ\",1,4,$expected_dmz_ip"; then
+            return 0  # DMZ is enabled
+        else
+            return 1  # DMZ is disabled
+        fi
+    else
+        return 1  # DMZ is disabled if start and limit are not the same
+    fi
+}
+
+# Function to enable or disable IP Passthrough with NAT
+toggle_ippt_mode() {
+    is_ippt_enabled
+    ippt_status=$?
+
+    if [ "$ippt_status" -eq 0 ]; then
+        echo -e "\e[93mIP Passthrough is currently ENABLED. Would you like to DISABLE it? (y/n)\e[0m" # Yellow
+        read -r disable_ippt
+        if [ "$disable_ippt" = "y" ]; then
+            are_mpdn_rules_clear
+            mpdn_clear_status=$?
+            if [ "$mpdn_clear_status" -ne 0 ]; then
+                atcmd 'AT+QMAP="mpdn_rule",0'  # Clear MPDN rule
+            fi
+            atcmd 'AT+QMAP="mpdn_rule",0,1,0,0,1'  # Disable IPPT
+            echo -e "\e[92mIP Passthrough disabled.\e[0m" # Green
+        else
+            echo -e "\e[93mIP Passthrough remains enabled.\e[0m" # Yellow
+        fi
+    else
+        echo -e "\e[93mIP Passthrough is currently DISABLED. Would you like to ENABLE it? (y/n)\e[0m" # Yellow
+        read -r enable_ippt
+        if [ "$enable_ippt" = "y" ]; then
+            local arp_output=$(arp -n)
+            local device_count=0
+            local device_list=""
+            while IFS= read -r line; do
+                if echo "$line" | grep -q "br-lan"; then
+                    device_count=$((device_count + 1))
+                    mac=$(echo "$line" | awk '{print $4}')
+                    ip=$(echo "$line" | awk '{print $2}' | tr -d '()')
+                    echo "$device_count) $mac current IP $ip"
+                    device_list="$device_list
+$device_count $mac"
+                fi
+            done <<EOF
+$arp_output
+EOF
+
+            if [ "$device_count" -eq 0 ]; then
+                echo "No devices found. IP Passthrough cannot be enabled."
+                return
+            fi
+
+            device_count=$((device_count + 1))
+            echo "$device_count) Cancel"
+            read -p "Select what device to pass the IP to: " device_choice
+
+            if [ "$device_choice" -ne "$device_count" ] && [ "$device_choice" -gt 0 ] && [ "$device_choice" -le $((device_count - 1)) ]; then
+                selected_mac=$(echo "$device_list" | awk -v choice="$device_choice" '$1 == choice {print $2}')
+                are_mpdn_rules_clear
+                mpdn_clear_status=$?
+                if [ "$mpdn_clear_status" -ne 0 ]; then
+                    atcmd "AT+QMAP=\"mpdn_rule\",0"  # Clear MPDN rule
+                fi
+                atcmd "AT+QMAP=\"mpdn_rule\",0,1,0,1,1,\"$selected_mac\""
+                echo -e "\e[92mIP Passthrough enabled for device with MAC: $selected_mac\e[0m" # Green
+            else
+                echo -e "\e[93mIP Passthrough remains disabled.\e[0m" # Yellow
+            fi
+        else
+            echo -e "\e[93mIP Passthrough remains disabled.\e[0m" # Yellow
+        fi
+    fi
+}
+
+# Function to toggle DMZ mode based on the current state
+toggle_dmz_mode() {
+    is_dmz_enabled
+    dmz_status=$?
+
+    if [ "$dmz_status" -eq 0 ]; then
+        echo -e "\e[93mDMZ is currently ENABLED. Would you like to DISABLE it? (y/n)\e[0m" # Yellow
+        read -r disable_dmz
+        if [ "$disable_dmz" = "y" ]; then
+            # Reset DHCP to default range and disable DMZ via AT command
+            uci set dhcp.lan.start='100'
+            uci set dhcp.lan.limit='150'
+            atcmd 'AT+QMAP="DMZ",0,4'  # Disable IPv4 DMZ
+            echo -e "\e[92mDMZ mode disabled.\e[0m" # Green
+        else
+            echo -e "\e[93mDMZ remains enabled.\e[0m" # Yellow
+        fi
+    else
+        echo -e "\e[93mDMZ is currently DISABLED. Would you like to ENABLE it? (y/n)\e[0m" # Yellow
+        read -r enable_dmz
+        if [ "$enable_dmz" = "y" ]; then
+            local ip=$(uci get network.lan.ipaddr)
+            local device_ip=$(echo "$ip" | awk -F. '{print $1"."$2"."$3"."$4+1}')
+            uci set network.lan.ipaddr="$ip"
+            uci set dhcp.lan.start='2'
+            uci set dhcp.lan.limit='2'
+            atcmd "AT+QMAP=\"DMZ\",1,4,$device_ip"  # Enable IPv4 DMZ
+            echo -e "\e[92mDMZ mode enabled. Device IP: $device_ip\e[0m" # Green
+        else
+            echo -e "\e[93mDMZ remains disabled.\e[0m" # Yellow
+        fi
+    fi
+    apply_changes
+}
+
+# Function to set the gateway address
+set_gateway() {
+    get_current_settings "lan"
+    local gateway=$(prompt "Enter new LAN Gateway IP" "$CURRENT_IP")
+    uci set network.lan.ipaddr="$gateway"
+    apply_changes
+}
+
+# Function to set the DHCP range
+set_dhcp_range() {
+    get_current_settings "lan"
+    local start=$(prompt "Enter DHCP Start" "$CURRENT_START")
+    local limit=$(prompt "Enter DHCP Limit" "$CURRENT_LIMIT")
+    uci set dhcp.lan.start="$start"
+    uci set dhcp.lan.limit="$limit"
+    apply_changes
+}
+
+# Function to set custom DNS
+toggle_custom_dns() {
+    is_ippt_enabled
+    ippt_status=$?
+
+    if [ "$ippt_status" -eq 0 ]; then
+        echo -e "\e[93mIP Passthrough (IPPT) is enabled. Modifying DNS for 'lan_bind4' interface.\e[0m" # Yellow
+        interface="lan_bind4"
+    else
+        echo -e "\e[93mIP Passthrough (IPPT) is disabled. Modifying DNS for 'lan' interface.\e[0m" # Yellow
+        interface="lan"
+    fi
+
+    get_current_settings "$interface"
+    local dns=$(prompt "Enter DNS servers (comma-separated)" "$CURRENT_DNS")
+    uci set dhcp.$interface.dhcp_option="6,$dns"
+    apply_changes
+}
+
+# Function to use the provider's DNS (IPv4 only)
+set_provider_dns() {
+    local dns=$(awk '/^nameserver [0-9]+\.[0-9]+\.[0-9]+\.[0-9]+/ {print $2}' /tmp/resolv.conf.d/resolv.conf.auto | tr '\n' ',' | sed 's/,$//')
+    echo -e "\e[93mSetting DNS to: $dns\e[0m" # Yellow
+    uci set dhcp.lan.dhcp_option="6,$dns"
+    apply_changes
+}
+
+# Helper function to prompt with a default value
+prompt() {
+    local message="$1"
+    local default="$2"
+    read -p "$message [$default]: " input
+    echo "${input:-$default}"
+}
+
+# Function to get current settings for a specific interface (lan or lan_bind4)
+get_current_settings() {
+    local interface="$1"
+    CURRENT_IP=$(uci get network.$interface.ipaddr 2>/dev/null || echo "Not set")
+    CURRENT_START=$(uci get dhcp.$interface.start 2>/dev/null || echo "Not set")
+    CURRENT_LIMIT=$(uci get dhcp.$interface.limit 2>/dev/null || echo "Not set")
+    CURRENT_DNS=$(uci get dhcp.$interface.dhcp_option | grep -oE '6,.*' | cut -d, -f2-)
+}
+
+# Main menu loop
+while true; do
+    menu
+    case $choice in
+        1) toggle_dmz_mode ;;
+        2) set_gateway ;;
+        3) set_dhcp_range ;;
+        4) toggle_custom_dns ;;
+        5) set_provider_dns ;;
+        6) toggle_ippt_mode ;;
+        7) echo -e "\e[92mGoodbye!\e[0m"; exit 0 ;; # Green
+        *) echo -e "\e[91mInvalid option. Please try again.\e[0m" ;; # Red
+    esac
+done