One Access Modem

[Jessia Adachi]

I have a wireless network that consists of a dual-band router and the modem that Comcast supplied to me. I'm trying to figure out how to access its configuration settings so that I can do things like remotely restart it. How would I go about doing so?

when you say remotely, do you mean from the WAN side? that will not be possible without special ISP software which you will not be able to access. allowing this would let attackers easily perform denial of service attacks on entire subnets with a simple HTTP request.

from the LAN side, this is possible if your modem and ISP configuration allow it.Check this list to determine the IP address of the lan side of the modem: ISPs use 192.168.100.1 and just point a web browser at it.

This modem IP should be the gateway IP displayed when you go to , Advanced tab, in the Internet Port box click on Connection Status. This pops up a window where Default Gateway is the IP address of your modem.

For example, I have Comcast and am running Double NAT. My Connection Status is as shown (ignore the browser URL string - My laptop is not directly connected to my Orbi AC) so goes the Comcast/Xfinity gateway admin website.

Can you please check the Orbi web interface, click on the Advanced Tab, and look at the IP under "Router Information" and under "Internet Port". The router information should be a private IP ( _network ).

I am "at a loss" to explain this. When the WAN port is a "public" IP address (212.69.54.84), that indicates to me that the Vigor is in "bridge mode". On the support site, I did not fiind a User Maual, but the Quick Start Guide contains this statements:

All I can think of is that the Orbi "knows" that anything beginning 192.168 is a private IP address, and thus cannot be found through the WAN port. Maybe the Asus knew, "it's not on the LAN, so the only place it can be is out the WAN port."

Its very frustrating that a device that depends on a further device (modem) to work is setup, it looks, to block access to the device. So the only way either basic or more advanced line device information can be got is by removing the Orbi and directly linking to the 130. When I had a line problem my ISP wanted a lot of line information (and told me how to get it from the 130 as its not shown by default) over more than a week. Anyone looking for how access the full information it is at -dsl-status-more. This was no problem with Asus but would be a real pain with the Orbi as at times we were communicating on line and once they took over my PC to show me how to get the detailed 130 data not possible with the Orbi!

Question: How do I find out my Cable modem's LAN-facing private IP address from the Orbi web interface? It is is not in the list of connected devices, but is pingable and reachable via the modem's web interface.

So Orbie/NG routers block modem access even if they are dependent on them being there. Clearly Asus manage these things very much better than nG, but I am beginning to see they do nearly everything better than NG but a bit late now I have moved over to Orbie.

When I first installed and began using the HD2, I was able to access the web GUIs of each of my WAN ISP modems. Currently, I am not able to do so. I did not change any settings in the router since the last time I was able to access the web GUIs. So, I am not sure what is wrong.

If the former then using an outbound rule as exemplified earlier should work. If the latter, and your ISP modem does not have a public IP address (as suggested by mldowling), then one way to gain access is (1) gain access to your HD2 LAN, and then (2) proceed as in my example. For (1) you may gain access by means of a PepVPN link to your HD2.

If what you are asking for is access to the Web GUI of your HD2 and the IP address is not public (or is dynamic and you are not using one of the dynamic IP address DNS systems), then InControl2 is your friend, or alternatively a FusionHub instance accessible through a fixed IP address which connects to the HD2 using a pepVPN connection.

Note that my cable modem is a plain old modem -- a Motorola MB8600, not any kind of router/access port/switch integrated device. The cable modem is in bridged mode. This model runs bridged-only, in fact.

I've tried adding a route definition from "any" to the cable modem's address object, which is declared to be on the WAN port. But that doesn't work. Oddly, with that rule in place, I can not ping 192.168.100.1, but I can't hit it with http/s. Without that rule, I can neither ping nor use http/s to the address -- it times out.

@mikeblas I'am somewhat in the same situation with a Vodafone Cable connection. Arris Modem is in bridge mode and has the internal IP 192.168.100.1. But I don't need to configure anything special, because the Modem just intercepts the traffic destined to 192.168.100.1 and provides the Web Interface for the Modem.

That is not the case -- otherwise, things would be working and I wouldn't have to ask for help. It does seem like the address should just work as if it was any other external address, responded to by the modem directly instead of The Whole Internet. But the response times out. When a computer is connected directly to the modem , I have no problem getting the status page.

The Support for Secondary Subnets can be found in the ARP settings section. After activating this setting you need to go back to your Interface settings for X1 and configure the new subnet on the Advanced Tab.

You should make sure that your 192.168.0.0/24 gets translated via NAT rule to the configured secondary subnet address when accessing 192.168.100.1, otherwise the return packets can't find their way back.

I have my ISP provided modem (ISP router in bridge mode) connected to ER605 in an Omada controller enviroment. How can i access the Modem web UI from LAN? The Modem is on subnet 192.168.1.0/25 and ER605 on 172.27.27.0/24.

@d0ugmac1 Thanks for the info. Can you help me a little more here. My bridge mode ip to access the modem is 192.168.1.1 and my LAN is on 172.27.27.1. I know there is an option Transmission -->Routing-->Static Route in Omada controller and ER605, but I am not sure how to set it up exactly. Much thanks.

If you have a wireless network and only one internet 'device,' this means you have a modem with built-in wireless networking, i.e., a router. This setup is the most common, and you can access both your router and modem settings from any device connected to your home network.

If you have a router sitting between the device and modem, the default gateway IP address will be the router's address, not the modem's. One way to find the modem's address if trying various known defaults doesn't work (e.g., ), is to plug a computer directly into the modem, bypassing the router, and then searching for the default gateway.

To access your Arris modem's settings, you'll log in to your product's Web Manager. Most Arris modems use a default IP address and log-in information, which you can find in your user manual. Depending on your modem model, the main buttons in the Web Manager might include WAN setup, Configuration, Status, and Utilities. Some Arris Wi-Fi modems also receive support from an Arris mobile app for iOS and Android.

If you can't log in to your modem, you could have an issue with the device itself or the browser. Log in from a different browser and double-check the cable connections with the modem. If those fixes don't work, you may want to power-cycle your modem or factory reset it.

Unless I am doing something wrong, you can't add another interface on the external nic - you get an error "Interface type requires exclusive access to the network interface". I thought the way was to set up an Additional Address as per my OP?

Also I am not sure on what you mean for the NAT rule. I know some cable modems restrict access to devices on the same subnet, but I dont think that is what is going on here due to the firewall logs. In any case adding a SNAT rule of: Internal (network) -> Any -> External (Wan) [Modem] (address) with Source translation to 192.168.100.2 doesn't make any difference.

I had hoped that the Sophos XG Firewall would do the address translation for me because I can successfully ping the modem through Sophos' own Ping Tool already, Port2 is in the same network after all. Both Port1 and Port2 are in the LAN zone as well.

Show me the interface configurations. Here, the modem and LAN switch are directly connected devices for the XG hence, you don't need any specific configurations. I think you just need a LAN to WAN Fw-rule with MASQ, as the LAN requests will be NATed with the out interface i.e. 192.168.0.1 and the XG will add the required entry in the routing table.

you can raise up the security level by defining a source IP where you can access the modem from. IP and Mac-Address should be used but XG does not manage MAC-Addresses correctly at the moment on firewall rule.

Create a second LAN interface port (Assuming you have a free port available on the Sonicwall) and assign an IP address to it within the network range on the modems LAN, and use the same netmask as the modems LAN. Connect the newly created interface port to one of the LAN ports on the modem.

In re-reading your post, it sounds like you may not be running the modem in bridge mode. If this is the case you should be able to reach it by from your browser at 10.1.10.1, as dbeato indicated, unless there is a firewall rule(s) blocking connections between private networks, as Lee Sharp indicated.

It should just work (with OpenWrt at basic default settings) to connect to the OpenWrt LAN then send your browser to 192.168.1.1. The default route (for anything other than 192.168.2.0/24) of the OpenWrt box is to its WAN port and thus it will go to the modem.

When you attach the OpenWrt WAN network to the modem, that makes it configure a 192.168.1.X network on the WAN port. You don't have to add another. Do not add another. This is one of those cases where default configuration (other than changing the LAN IP to 192.168.2.1 so as not to conflict with the WAN network) will suit your needs.

c80f0f1006