snapgear pro webinterface not there

[umbletech]

Hi All

This one is a little embarrassing. Got a client where they lost the vpn password at a branch office. They were only after email so I got them into the webmail but I need to fix this soon.

Prob is that on the LAN back at head office they have multiple adsl connections going through snapgear firewalls.

The main internet goes through one and the default gateway on the clients is 192.168.15.1

But when I go to it in my browser I get nothing. Now if I do a netstat -A -N -O to .15.1 it has connections to a number of local PCs so I assume it is the firewall.

But I don't know if the web interface is enabled or what port its running on. I could re-enable it by following:

http://www.cyberguard.info/snap...e/cache/105.html

but I'm worried about leaving their network open or knocking something out because its a 24/7 operation.

I'm wondering if anyone has come across at tool like this that could try and connect via a web browser to all the ports sort of like an ip scanner for web ports. Otherwise anyone know the default webport for the snapgear pro (no other model no. on it) or how to enable it without borking everything.

I'm sure I'm missing something easy coz the webinterface should be there.

 

[cyberspace]

try Look@Lan - it's a free network mapping tool

Available at

http://www.lookatlan.com

This will show all live IPs in a range you specify, you can then check to see which ones are running HTTP services.

Hope this helps.

'When all else fails.......read the manual'

 

[umbletech]

Thx cyberspace - very cool tool Resolved - telnet was disabled too which got me to thinking - the last admin must have had some way in. So I tried the webinterface from a server I knew he used for admin work - bingo.

Now I know its a big ask but given that he might have locked it down to any machine can anyone think of a way to get the config off the snapgear in this situation. Coz of course once you've got the config you can edit it - reset the box to default and drop it in with just a 5 minute outage.

 

[cyberspace]

Glad you sorted it, what was the actual problem down to?

Were you able to log into the Snapgear?

If so.....It's possible/likely that the previous admin has set up access control so that administration can only be performed from specific machines.

You should be able to log in, find the appropriate section (perhaps "Access Control" or something similar), and remove the specifc entries if you wish.

If this is not what you mean....please say so, as i'm not fully clear on what it is you are wanting to do now.

'When all else fails.......read the manual'

 

[umbletech]

Well you know always trying to teach myself to fish.

"It's possible/likely that the previous admin has set up access control so that administration can only be performed from specific machines."

Exactly - now in this case the previous integrator had got the boot and the actual guy had moved on from them - the admin work was done from the server so it was ok.

But what if he'd locked it down to the ip/MAC of his laptop?