Remote access to hub

[EDMA]

Hey all! Recently new to EE and tweaking settings on my hub.

Everything is working great, port forwarding a doddle to set up etc however there's a setting that I don't seem to be able to find (if it even exists) which is to be able to turn off any sort of access to the hub management from the internet.

Can I restrict that ability?

Cheers!

E

[Mustrum · Accepted solution]

@EDMA   there is no access to EE routers from the internet as standard.

However opening ports will increase vulnrabilty, so should only be done if you know the risks.

There is no option to turn off TR-069 as this is used to keep your router software up to date.

[EDMA]

---

@EDMA   there is no access to EE routers from the internet as standard.

There sort of is if the IP address can be figured out surely?. Or in my case by using my NoIP Address too.

---

However opening ports will increase vulnrabilty, so should only be done if you know the risks.

---

Fully appreciated, understood and accounted for on my test equipment

---

There is no option to turn off TR-069 as this is used to keep your router software up to date.

---

Fair enough. I would have thought the hub should at least not allow a random browser to read my attached equipment names, MAC addresses, and amount of data transferred though. Oh and they can turn my hub light on and off ;-). Nothing mad in the way of security fair enough but still a minor annoyance.

Thanks for the swift reply.

[Bowserscastle]

Im trying to work out exactly this too. Not liking the visible info/light control ability either 

[bobpullen]

The Hub Manager shoudn't be accessible from the Internet. Is the suggestion that it is?

[EDMA]

The hub manager is most certainly accessible from the Internet. 

It requires the usual password auth to view or change anything important but it is definately available and can show certain information about connected devices. 

I see no reason that there shouldn't be an option to completely hide it from the Internet side. The hub polls the EE servers for updates and should establish the connection that way. There is no reason I can see for exposing the front end of the hub manager to all and sundry. 

[bobpullen]

@EDMA - it definitely isn't accessible in my case 🤔

How are you determining this? Note that if you try accessing something like your NoIP address whilst connected to your local network, then it's very likely that the hub will use hairpinning to route you to the Hub Manager. That does not mean the hub is accessible to others from the Internet.

If you're adamant that it is, then I'm curious to know what port forwarding rules you have configured, because I'm not seeing the same from where I'm sat.

[XRaySpeX]

I can't get there either, from a separate O2 network.

[blackops786187]

this shouldnt be possible since the management interface would only accessible on the LAN side not the WAN side. I have just tested it and i cant reach it when connecting to my public IP via DDNS from an external network thats not my lAN ie 4g

Whilst im on the LAN, if i use the ddns address, NAT hairpinning is performed and i am able to hit the management interface as expected (mentioned by @bobpullen )

Unless you or someone has made a configuration change, the default setup should be fine