[WXC/VFX] Linksys devices randomly longing admin & losing config setting out

Forums › One NZ (including Farmside) › [WXC/VFX] Linksys devices randomly longing admin & losing config setting out

freakalad

236 posts

Master Geek
+1 received by user: 9

#41484 16-Sep-2009 21:31

Not quite sure if this is the appropriate area for this, but since this is my second device & this happens once the VFX VoIP config script is loaded, as per instructions, I'm wondering if anyone else here is experiencing similar issues.

Previously I had a WAG54PG2v2 device, and now I've "upgraded" to a WAG310G, but the issue remains the same.

Do a factory-reset (paper-clip @ the the back) & going through the motions of setting the device up from scratch, again.
Keeping the default IP/class of 192.168.1.1/255.255.255.0, & disabled the WiFi completely (setting up a secondary firewall & services behind it, like WiFi, VoIP, etc).

Check connection & see that everything's OK, and then load the config: http://58.28.20.69/configs/default/default$MA.cfg
Reboot for good measure

Make calls via analogue phone & everything goes swimmingly for a wile, so there's no need to continually jump into the device & muck around, so I assume that everything *stays* OK

The rub is: when I try to get into the device at a later stage, I'm am unable to log in at a later stage.
With the WAG54GP2v2 unit, it seems to have set the login values to something I have no access to.
With the WAG300G device, I'm not even able to get the login dialogue. Only sockets available are 21 (FTP) & 8080 (proxy/voip interface), event though I *distinctly* set 443 (HTTPS) & pretty-much noting else, to lock the device down solid

Will now have to go through the motions of setting the device up, again, to make sure settings are cool (not too happy with nodes on my network that I don't have full control over)

Anyone experience similar issues, or know what's up with this?

FLOSS'er, aspiring Maker

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#256286 16-Sep-2009 21:34

You do realise the VFX provisioning will lock down the device and restrict access to some things?

Niel

3267 posts

Uber Geek
+1 received by user: 80

Trusted

#256324 16-Sep-2009 23:07

I think he is unable to get into the device at all. It happens when you set a device to bridge mode, which is probably the problem. Or the firewall is blocking access to the gateway config pages.

You can never have enough Volvos!

freakalad

236 posts

Master Geek
+1 received by user: 9

#256331 17-Sep-2009 00:10

Thanks for the snappy replies, guys.

<quote>
You do realise the VFX provisioning will lock down the device and restrict access to some things?
</quote>

Yea. That's one of the thing that really grated me, but was a requirement of making use of the VFX service.
I'm planning on remedying it by setting up my own VoIP proxy/gateway (elastix, trixbox, ebox, etc)

Initially when the povisioning script took effect, it would "only" locked me out of the admin mode of the voip configuration.
Which actually makes sense, since, as an xSP, you really don't wan't users to muck around with complicated settings & end up breaking things & frustrating support.
What gets me, is that it allows for a foothold into my local network from outside my control & locks me out of aspects of my own device. Hence the addrirional firewall (just set up a new pfSense box - whoo-hoo!)

<quote>
I think he is unable to get into the device at all.
</quote>
Correct. Last week I was able to get into my router & set up NAT's &QoS & do all sorts of funky stuff, and was working fine when I left it.
Today when I tried to get in & check stats & do this & that, I could simply not get in in any way.
I've done this dance a few times, so I've learned the hard way what I can & cannot do.

There are probably quite a few other things that I could or could not do, but the fact of the matter is that I've now had 2 seperate devices doing similar admin lock-out actions, even though I'm fairly certain I've not done anything that would break things

FLOSS'er, aspiring Maker

maverick

3594 posts

Uber Geek
+1 received by user: 80

Trusted

WorldxChange

#256344 17-Sep-2009 05:09

The only thing that is locked out is the Admin Voice section for the reasons that you highlight. Everything this gives no foothold into your own network as there are no settings in there that would even allow this, they are SIP and provisioning related.

Everything else is all under your control, I run this unit myself at home we have a number of these setup here as well and all router functions, are fully available... The actual router password is fully controlled by the user.

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

freakalad

236 posts

Master Geek
+1 received by user: 9

#256369 17-Sep-2009 08:38

The only thing that is locked out is the Admin Voice section for the reasons that you highlight.
...
Everything else is all under your control,
...
The actual router password is fully controlled by the user.

The fact that there are areas of such a critical piece of network infrastructure that I do not have FULL control over is what bothers be a bit, but it's something I'm learning to live with (whether I like it or not), since I've gotten some pretty decent support from my ISP & it's a position I can understand.
I'd much rather make use of a provisioning script that would load the VFX settings, but still permit me use of said sections (i.e. I'd like the option of specifying my own additional SIP trunks, including my own twix/elastix gateway/proxy, do something different with the 2nd analogue line, test out different CODEC's, or just learn a bit more about VoIP infrastructure & services)

But what I'm trying to figure out is why I periodically get locked out of the admin console, event though I'm 110% certain that I haven't locked myself out (could be a Linksys WAG-firmware issue for all I know).
It seems to occur well after the provisioning script has been loaded, but I cannot say with any degree of certainty that it's the actual cause; only that the issue crops up well after the device has been set up & tweaked & in constant use for a few days

FLOSS'er, aspiring Maker

maverick

3594 posts

Uber Geek
+1 received by user: 80

Trusted

WorldxChange

#256379 17-Sep-2009 08:57

We are allowing users under a Astersik profile to control all thier settings, but with that comes the responsibility of the customer for all calls, ie if the call didn't hang up becasue of misconfig etc

We do not support any devices using their own settings as with so many devices and settings any changes can have an impact on the VFX service and intergation with the SIP profile.

Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well

https://www.facebook.com/wxccommunications

Samsung

Shop now on Samsung phones, tablets, TVs and more (affiliate link).

freakalad

236 posts

Master Geek
+1 received by user: 9

#256384 17-Sep-2009 09:17

Understood; can't have it both ways. If you're carrying the risk of abnormal call behaviour, you'd want control over that section.
Trying to set up some other services of my own (testing various VoIP servers & clients), so I'll be dealing with that @ a later stage.
Obviously the Asterisk settings are well-documented & discussed in this area, so I'll defer to that when I need to.

FLOSS'er, aspiring Maker