1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

web access from wan

Discussion in 'Asuswrt-Merlin' started by jjulez, Mar 21, 2019.

  1. jjulez

    jjulez Regular Contributor

    Joined:
    Oct 18, 2014
    Messages:
    53
    Is this ok to do ? Also allow only specified ip address.
    I want to do this my for cousins so i don't have to go over there every time.
    I notice the 86u power led was responding the the LG tv remote power button.
     
    Last edited: Mar 21, 2019
  2. HuskyHerder

    HuskyHerder Senior Member

    Joined:
    May 12, 2017
    Messages:
    311
    VPN is the preferred method, and much more secure.

    *No, I would not use web access from WAN for any reason. Too many past problems, give the forums a search I am sure you'll find some posts on the subject. A lot of those would be from a lot of folks more knowledgeable than me.
     
    SMS786 and L&LD like this.
  3. martinr

    martinr Very Senior Member

    Joined:
    Nov 27, 2014
    Messages:
    1,699
    Location:
    United Kingdom
    You will be hacked if you do it. Here is what Merlin has said:

    “Personally however, I do not recommend opening even HTTPS to the WAN. Asuswrt's web server is poorly secured, and has had numerous security issues over the years. Best to limit it to LAN only, and use a VPN to remotely access it.”

    From: https://www.snbforums.com/threads/e...wan-but-keep-http-from-lan.42521/#post-361843

    Like HuskyHerder says, VPN is by far the safest way.

    But why do you need to keep going “over there” every time? The router should not need constant tinkering with.
     
    QuikSilver, SMS786 and L&LD like this.
  4. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    8,595
    Agree with all the above. Use and setup an OpenVPN server on the router and connect when needed.

    Better yet, maybe a full M&M Config and minimal and manual configuration to secure the router and connect to the ISP is needed so that your presence is not continually required. ;)

    See the signature below for links and more info.
     
    HuskyHerder and SMS786 like this.
  5. jjulez

    jjulez Regular Contributor

    Joined:
    Oct 18, 2014
    Messages:
    53
    Alright thanks, knew i read something with web access being a problem few years back.
    Someone over there be messing with stuff, next time i go will change the router ip login,password, etc
     
    HuskyHerder, L&LD and QuikSilver like this.