Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[tickmike]

This thread is about getting stats through LAN1 

I will go and get on with putting my oak floor down and get a eye test booked 

[SignedAdam]

so what does everyone want me to test, remember, make it very clear, I dont talk networking binary language just yet

I recall you saying,

1) Untick bindings. from Basic - WAN - port 1 and 2

2) how do i enter the firewall settings in to the interface, so tell me what to press on the firewall tab, and what to enter, if we cant enter them in to the user interface, then there is no point in proceeding with this, as the firewall settings will reset everytime there is a power cut, shame the router cant force the modem in the right place and everything, because the router can save its command settings

3) Set the 2nd LAN subnet on router, im guessing this is the

Code: [Select]

ifconfig vlan2:1 192.168.3.253 netmask 255.255.255.0
iptables -t nat -I POSTROUTING ! -s $(nvram get lan_ipaddr) -d 192.168.3.0/24 -j SNAT --to 192.168.3.253
command ?

[Chrysalis]

dray needs to answer, I havent plugged in the hg612 since I did the guide.

He thinks its as simple as one change in the GUI if I understand him correctly.

[SignedAdam]

That would be much more easyer than doing it in telnet for n00bs, my Chrysalis friend dont worry, if it fails, i will be doing everything you said still, your still a legend

[Dray]

As far as I can see, all you need to do is

1) Untick bindings. from Basic - WAN - port 1 and 2
2) Give the modem the address 192.168.3.1 netmask 255.255.255.0 in Basic - LAN - LAN Host Settings

3) Apply those settings from before to the router (I'll just go and see if I can find them) Yeah these:

3) go to the command line and enter one by one :

Code: [Select]

ifconfig vlan2:1 192.168.3.253 netmask 255.255.255.0
iptables -t nat -I POSTROUTING ! -s $(nvram get lan_ipaddr) -d 192.168.3.0/24 -j SNAT --to 192.168.3.253

Although I have to say I don't actually understand what these are doing because as I mentioned I use pfSense which does it in a different way.

[SignedAdam]

WELL DONE Dray!

with your settings, im able to gain access to the modem

I'm still testing here, we will have to see what happens when the firewall settings go on a powercut

please list how you do it with "pfSense" the more ways we have of doing this, the more chance people will get GUI Over WAN working

[Dray]

I've already linked to the instructions for pfSense, but in my case I'll update this thread if I ever get round to trying it as my set up is a bit more bizarre.

Excellent news, thanks for doing it 

[SignedAdam]

Now, I guess, theres still the firewall, does anyone know how to enter the following strings,

Code: [Select]

iptables -I INPUT_SERVICE_ACL -i br1 -s 192.168.3.253 -p ICMP -j ACCEPT
iptables -I INPUT_SERVICE_ACL -i br1 -s 192.168.3.253 -p TCP --dport 80 -j ACCEPT
iptables -I INPUT_SERVICE_ACL -i br1 -s 192.168.3.253 -p TCP --dport 23 -j ACCEPT
iptables -t nat -I PRE_SERVICE_ACL -i br1 -s 192.168.3.253 -p ICMP -j ACCEPT
iptables -t nat -I PRE_SERVICE_ACL -i br1 -s 192.168.3.253 -p TCP --dport 80 -j ACCEPT
iptables -t nat -I PRE_SERVICE_ACL -i br1 -s 192.168.3.253 -p TCP --dport 23 -j ACCEPT
in to the GUI, with out telnet or any command lines but the interface of the HG612,

* Basically I need someone to translate the code above in to a string of imputs, to imput in to the interface, as shown in the image bellow, it can be done

[Dray]

It would help if we knew what those commands actually do

[SignedAdam]

I've just found out the hardway, it's if you have a custom setup within the modem, for ports and address, but if you keep it as default, you dont get blocked by the modems firewall, so keep the setting as "Standard" setting, dont change anything to do with the modems firewall, and you will find you can connect to it like Dray, so this is where your going wrong Chrysalis, dont mess with the modems firewall


If anyone runs in to the modem blocking you, with its firewall, try changing your ethernet ip to 192.168.3.100, then connect by lan two, you will be able to login at 192.168.3.1, then reset to default and try again

[d2d4j]

Hi signedadam

I just had a quick look at hg612, and setting those up in hg612 looks simple to complete

I can take pictures as I'm not looking at it now, but login to hg612, advanced, firewall, select custom, give it a name, submit, click acl, add in http, telnet etc, submit and test

Many thanks

John

[Dray]

updated my reply, no firewall settings needed if you keep it as default settings, "normal" mode for the firewall

I think you mean Firewall Level: Standard

[SignedAdam]

correct, i mean "Standard" firewall settings allow you to connect to the modem GUI with out the need of editing any firewall ports on the modem

now that I have a permanent solution, which wont stop working if theres a power cut, I will make a guilde for n00bs to follow,

Thank you both Dray + Chrysalis for the permanent solution,

* d2d4j thanks for taking alook, we sorted it 

* dont use firefox 64x, it wont show the modem

[Dray]

Brilliant 

[Chrysalis]

I've just found out the hardway, it's if you have a custom setup within the modem, for ports and address, but if you keep it as default, you dont get blocked by the modems firewall, so keep the setting as "Standard" setting, dont change anything to do with the modems firewall, and you will find you can connect to it like Dray, so this is where your going wrong Chrysalis, dont mess with the modems firewall


If anyone runs in to the modem blocking you, with its firewall, try changing your ethernet ip to 192.168.3.100, then connect by lan two, you will be able to login at 192.168.3.1, then reset to default and try again

those rules dont block anything, they just poke a hole to allow the lan second subnet traffic on the br1 interface (by default blocked on the shipped configuration).

As for the change dray recommended, I am glad it works, although compared to how other routers behave this is inconsistent.