speedtouch 510

[willy]

problems again for some reason when i try to add a new entry i get error message that it is unable to add entry,does anybody have any idea what the hell could be causing this help me please!

[igodit]

problems again for some reason when i try to add a new entry i get error message that it is unable to add entry,does anybody have any idea what the hell could be causing this help me please!


Where are you trying to make the entry. Give us a step by step of what it is that you had done and got then error.

[willy]

went to my speedtouch site then to advanced the to the nat settings clicked on new to make a new entry put in the internal ip address that i want computers to connect to when i try saving it it gives me the error unable to apply changes

[ramesh]

went to my speedtouch site then to advanced the to the nat settings clicked on new to make a new entry put in the internal ip address that i want computers to connect to when i try saving it it gives me the error unable to apply changes


You mean DNS, right? We have a speedtouch pro and it detects and distributes the proper ip addresses automatically. Yours should not be that different?

[willy]

no i dont mean dns i mean NAT i have a ftp but it is behind a firewall what i did was to allow traffic to pass to my internal ip address by modifying the nat settings my internal ip address changed so i when back to modify the settings again to allow passage to 10.0.0.1 but now when i try to save the changes i get a error that it is unable to save changes and i dont know why that is happening

[willy]

ok figured it out the problem was so simple i was trying to use a port that was already taken assigned to another ip addy(pc) so i fixed it thanks for the help though guys liked the quick response

[igodit]

See why it is important to be detailed.

You can create a new NAT from the telnet as well. I find it to be much easier than the web interface.

telnet 10.0.0.138 (speedtouch modem)

Enter your username and password when prompted *the username is not important though.

then type 'nat' at the command line.

then create

It will ask you to enter a protocol UDP or TCP then the rest should be straight forward. It will just ask for port and IP address of the machine you are creating the NAT for .

There was a post earlier that was made, think you should also use the search

[willy]

thanks igodit that way is easier

[igodit]

Anytime Willy!

[jamrock]

The telnet protocol passes the username and password in clear text. If you are remotely administering your device over the internet, there is a big security risk. Any average joe with a packet sniffer can get the administrative password.

Is it possible to wrap the telnet message in some kind of encryption tunnel?

[tech_guru]

The telnet protocol passes the username and password in clear text. If you are remotely administering your device over the internet, there is a big security risk. Any average joe with a packet sniffer can get the administrative password.

Is it possible to wrap the telnet message in some kind of encryption tunnel?


The Interface on which telnet is listening on the 510 is internal so an attacker would have to already be on your internal LAN to sniff such traffic....

[igodit]

The speedtouch modems only accept only from machines on the same IP range (10.0.0.0, 192.192.168.0.0) for telnet, ftp and http.

Although this does not protect the modem if a machine on the network has been compromised.

[jamrock]

Most security professionals talk about defence in depth. The argument goes that no single device can protect a network. Proper protection comes when every host on the network is protected. If the firewall is compromised, the defences on each host must slow down the attacker long enough for the IDS to report the attack.

Is there any way to encrypt the telnet packets? People use ssl (Linux) or ipsec (Windows) to protect sensitive info. as it travels around the network. Can a similar approach be taken here?

Security groups such as SANS state that most attacks against a network originate inside the LAN.

I only use telnet to configure stuff like HP print servers since no sensitive info. is being sent. Of course I have read where print servers were attacked and documents were re-routed. That sounded a bit extreme to me, however.