SG Broadband Community

Hello,

I've got a strange problem. We're trying to get access to a router and we can't figure out the IP. It is one of those Firebox routers. We can do an ipconfig on the other side of the router and figure out the Gateway IP... however this 10.142.x.x number doesn't get us into the router... the page just doesn't load.

Is there any IP sniffing type software I can run that can tell me all IPs currently active? I can pick out the ones for the computers and it should leave me with the router IP. We can't reset the router as it is somewhat important and nobody here wants to reset it and not get it back where it was.

Another interesting thing that came up was this...

We have a computer in this setup with a static IP... it connects via cables through the walls to a patch panel. From the patch panel there is a network cable that plugs it into a plain D-link 16port hub/switch. Everything works fine. I figured that if I take just a network cable and plug it into the computer and then into the back of the hub (thereby bypassing the patch panel) that everything should work fine. However, it doesn't. The computer senses the connection... however no internet access. There are no routers between the computer and the patch panel. Basically I am just changing the cables and bypassing a patch panel.

Any thoughts?

Thanks,

-dr

Whoever is the admin for that Firebox should know how to get in, and it certainly isn't managed through a web browser. Have you tried asking your admin to make whatever change it is that you are trying to make?

Did you try to telnet into the router from the gateway?

Courtney

You have to be able to find the router's IP from a computer connected to it by using the ipconfig command and looking at the default gateway line. It sounds like you're trying to access the router from a web browser, and that the router doesn't have a web interface. It probably has a command line interface, which you can access via telnet and/or hyperterminal. There could also be some access control list preventing access via particular ports and/or computers, or limiting it only to one specific computer.

Disclaimer: I have no experience with Firebox products, so I could be way off.

Watchguard Firewalls are most commonly managed via a "management station" which is a computer with the Watchguard System Manager software installed.

I am unfortunately the "admin" that has to solve this mess. They had a local company set everything up for my client (it is an international hotel chain... and they have lots of requirements when setting up this stuff).... anyhow... the local company went bankrupt and all the ips, logins, passwords went with them.

Its all been quite frustrating up til now... I will try your tips and see how I make out!

THanks,

-dr

dico wrote:I am unfortunately the "admin" that has to solve this mess.

In that case, do you have all the product documentation, software media, and Watchguard licensing certificates that you would need to setup the firebox from scratch?

I imagine that I can get them... however I'm a bit afraid that if we reset the router... that i'll never get it setup the same way again to make everything function. If the system at the hotel goes down for any amount of time... heads will roll. They're kinda in a catch 22 position...

-dr

dico wrote:They're kinda in a catch 22 position...

-dr

I see.

Are you guys up to date on your LiveSecurity Service subscription with Watchguard so that you can call them for support? If you're not current on your LIveSecurity Subscription, then they should be able to give you a quote. Be warned, it might not be cheap.

Without support you are dead in the water and will need to find someone that you can bring in that is capable of footprinting, planning, and implementing an appropriate solution. If the person taking care of the Firebox has been terminated but they hold all the passwords, then the business can easily find itself in a compromising situation, as the company is held in the hands of "he who has passwords".

Do you know of a certain computer on the network that you can try to find the Watchguard System Manager software? Most likely it was being managed from a certain computer, possibly even a server on the network. It could even be managed from a laptop.

Even if you can't find the password to let you into the firebox you may be able to at least grab a saved copy of the configuration files off the hard drive of the management station. Call Watchguard first though.. See what they have to say.

Best of luck to you.