S33 Modem - First Take - Leassons Learned

[Surfboard S33 Modem]  First Take - Lessons Learned:

• WEbUI access to the S33:

1. When installed and connected the WebUI remains inaccessible (denied by firewall filters), ALWAYS:  Access to 192.168.100.1 (the modem) is denied by firewall rules to which I have no visibility in my configuration.  The 192.168.100.0/24 network lies upstream of the WAN interface, and private network addresses (e.g. 192.168.100.0/24) off the WAN interface are blocked.  [Although theoretically one could allow these narrow flows thru the WAN port, it provides a theoretical vector to attacks.]
2. When installed and connected use the second GIGe interface, instead:  Access to192.168.100.1 is allowed, as this access is treated as an out-of-band “console”.  You can connect to the console webUI directly with an Ethernet-capable laptop/pad, or an Ethernet switch and get status information without interference.

• First-Time WebUI login:

1. Use intead user: admin,  Password: “last-8-digits-of-serial-number”
2. The advertized login with user: admin,   Password: password is denied, and does not work

• ​​​​​​​The time stamps reported by STATUS under the WebUI use GMT standard, without markings.
• ​​​​​​​The Surfboard mobile application is totally useless.

Learned the hard way.  ​​​​​​​But, it is working after 48 hours.

Cannot say anything about its long-term health.

.