Accessing Bebox via Telnet-FTP-HTTP after changing LAN IP

From BE Usergroup Technotes

Jump to: navigation, search

If, like many people, you don’t want to use the IP range Be* supply for your local address, you can change it. However because of the security config on the Speedtouch routers you won’t be able to access telnet or DMT after you’ve changed it.

This is because there is an “access list” on your speedtouch which says which ip addresses can communicate to the Be*box (you can read https://www.bethere.co.uk/forum/viewtopic.php?t=6450 for further information on securing your Be*Box)

But have no fear it is possible to change this access list to allow your new IP addresses to talk to the Be*Box via Telnet/DMT if you follow the instructions below:

Contents

Changing the access list via a hard reset and Telnet

Step 1

Perform a factory reset on the Be*Box if you have already changed your IP address (even changing it back to the standard IP address can cause problems and still not work, so a factory reset is advised) PLEASE NOTE, THIS WILL REMOVE ALL THE SETTINGS INCLUDING FIREWALL RULES / STATIC IP INFORMATION FROM THE BEBOX.

Step 2

service system ipadd name=TELNET ip=###.###.###.### for individual IP addresses

or

service system ipadd name=TELNET ip=###.###.###.[###-###] for a range

For example, you might use this:-

service system ipadd name=TELNET ip=192.168.10.[1-254]


You will also need to do the same thing for HTTP so you can view the bebox webpage

service system ipadd name=HTTP ip=###.###.###.[###-###]

etc

Then do

saveall


You may need to restart your router again before you change your IP address, but you should now be able to access your Be*Box via Telnet/DMT

Changing the access list without a router reset via the configuration file

It is also possible to perform this change in via modifications to the configuration file so a reset isn't required. This method has been vaguely tested by myself on my already modified configuration - YMMV.

  1. Backup your configuration from the router via the web page under Thompson gateway->Configuration->Save or Restore Configuration
  2. Open this file in a text editor (Notepad is fine) and find the section '[ servmgr.ini ]'
  3. You will see entries for ip add name=TELNET etc. Add a new line in the same format. These are the same as given above with out the 'service system' prefix
  4. Save this file and Restore the configuration from via the same page you downloaded the back up from before.

Enabling SNMP

SNMP can be enabled by adding an ipadd line as follows:

ipadd name=SNMP_AGENT ip=x.x.x.x

Change

modify name=SNMP_AGENT state=disabled

to

modify name=SNMP_AGENT state=enabled

The read community is 'public' and v1 SNMP is required.

Enabling SNMP on the TG585v7

On the commandline, enter the following command:

:service system modify name=SNMP_AGENT state=enabled

This has the effect of enabling the SNMP agent service and the SNMP service should be accessible from the LAN side using a command like:

snmpwalk -Os -c public -v 1 192.168.1.254
Personal tools