access modem status through router?

[DFlood]

Hello All!

I have been running the Merlin ports for awhile now, first on an AC66 that's been retired to Media Bridge mode and now on an AC3200. In both cases I have been unable to access the modem status page at 192.168.100.1 unless I hook directly to the modem which takes the rest of the home network off the net...

I understand that the 192's are supposed to stay on one side of the router and never make it out...but it would be nice...

Is there a static route I could enter into Merlin to allow me to not have to rewire every time I want to check out the modem status?

Thanks,
D.Flood

 

[JDB]

Here you go

https://www.snbforums.com/threads/asus-rt-ac86u-what-is-the-best-vdsl2-modem.57091/#post-497835


Sent from my iPhone using Tapatalk

 

[coxhaus]

I have an ACL access control list, on my Cisco router. I can turn it on and off for access to my modem web page. Next router upgrade think about a router with ACL support. More than likely it will need to be a small business router.

 

[ColinTaylor]

I understand that the 192's are supposed to stay on one side of the router and never make it out...but it would be nice...

Not true. Private addresses like 192.168.x.y are treated no differently than public addresses by the router (so long as they are not the same as your local subnet). The issue as described by @JDB is usually a source address restriction on the modem itself.

What make/model modem do you have?

 

[DFlood]

@JDB Thanks! Looks like I need to read up on some of the more advanced features like JFS.

@coxhaus I'd love to have that kind of equipment but for now I'll stick with the SurfBoard I have since it's paid for.

@ColinTaylor SB8200

 

[coxhaus]

I paid under $160 for my Cisco RV340 router new. They are about $210 now.

 

[ColinTaylor]

I have an ACL access control list, on my Cisco router. I can turn it on and off for access to my modem web page. Next router upgrade think about a router with ACL support. More than likely it will need to be a small business router.

Given that the OP has an Asus AC3200 then he can already do that using the Network Services Filter. So in effect he already has a form of ACL it's just called something different.

 

[ColinTaylor]

@ColinTaylor SB8200

There was a user here with the same modem. He said "NOTE: if a device accessing this status page is not on 192.168.100.x network, then it is delayed 20-22 seconds for response time." Maybe you need to wait a bit longer?

 

[coxhaus]

Given that the OP has an Asus AC3200 then he can already do that using the Network Services Filter. So in effect he already has a form of ACL it's just called something different.

Please explain Network Services Filter? It does not sound the same as an ACL.

 

[ColinTaylor]

Please explain Network Services Filter? It does not sound the same as an ACL.

It's not the same as an ACL but in this specific scenario the effect is the same. It can be used to block access to the modem from the LAN.

NSF is a firewall filter that blocks or allows traffic as is passes from the LAN to the WAN. Optionally you can specify whether the source is a single IP address, a range or the entire LAN. So by specifying the destination address as that of the modem's admin interface you can control access to it in a similar way to an ACL. The main difference would be that an ACL controls access from the LAN whereas the NSF controls access to the WAN.

 

[coxhaus]

Can you block by protocol?

Actually Cisco ACLs can block from or to any interface. It is not LAN specific.

 

[DFlood]

It's not the same as an ACL but in this specific scenario the effect is the same. It can be used to block access to the modem from the LAN.

Here's the quick tutorial on it...doesn't fix the 192.168.100.1 issue but it is interesting for other reasons.

https://www.asus.com/support/faq/1013636/

 

[coxhaus]

I get is it. It is a blacklist and whitelist filtering. Yes that is different than ACLs.