S33 Modem - First Take - Leassons Learned
[Surfboard S33 Modem] First Take - Lessons Learned: WEbUI access to the S33: When installed and connected the WebUI remains inaccessible (denied by firewall filters), ALWAYS: Access to 192.168.100.1 (the modem) is denied by firewall rules to which I have no visibility in my configuration. The 192.168.100.0/24 network lies upstream of the WAN interface, and private network addresses (e.g. 192.168.100.0/24) off the WAN interface are blocked. [Although theoretically one could allow these narrow flows thru the WAN port, it provides a theoretical vector to attacks.] When installed and connected use the second GIGe interface, instead: Access to192.168.100.1 is allowed, as this access is treated as an out-of-band “console”. You can connect to the console webUI directly with an Ethernet-capable laptop/pad, or an Ethernet switch and get status information without interference. First-Time WebUI login: Use intead user: admin, Password: “last-8-digits-of-serial-number” The advertized login with us