Security Issue In New Airtel Router ZYXEL (Gateway ).

[mrps786]

@Chip Thank You For Your Quick Reply For Taking The Time To Read It . Based On Your Suggestions I have two options set I have some questions also please help out with it.

1. I have asked the local airtel guy to change my router to something different he said it will take 3 to 4 days based on your experience what routers to go for and what routers to avoid ( I know it will be based on what is available right now) Your Suggestions ?

2. I have an TP-Link Archer C6 Lying Around If No Good Option Or Airtel Local Guy Does Not Show Up Will Have Airtel Switch On Bridge Mode.
What Has Been Your Experience With Bridge Mode On Your Router ?

 

[Chip]

@mrps786 I recommend the Nokia if you want to use it either as a dumb ONT or a basic WiFi router. It is rock stable and has stealth mode which I really like + wifi on/off hardware buttons. Only thing I am doubtful you'll get it now since Airtel now supplies other makes and models. Rule of the thumb - get a model that can be bridged. Tell the technician in advance.

Also, remember, ISP supplied CPE is always basic to mid level. If your requirements are higher you should have it bridged via Airtel's backend and use your own router. A TP-Link Archer should do fine. I am not familiar with the C6. But many guys here use TPL models. Bridge mode works perfectly for me. Honestly I couldn't ask for more.

 

[doineedto]

@mrps786 Ah! So the security flaw was patched. I thought that you were able to access the router login page only via Airtel fiber!
Also, get a Nokia if possible. It is one of the most decent offerings Airtel has. Or maybe had. I hear they have discontinued offering a Nokia now.

And, if you are really hosting a website for a hospital, and any personal data might I recommend getting a real firewall? Assuming of course that you do not deal with user data. If you do, that is a separate story altogether!

 

[mrps786]

@Chip Thank You For Your Support I Really Appreciate And Effort You Put In Regarding My Issue . Will Keep In Mind The Suggestions You Gave Me.

 

[mrps786]

@doineedto I hope it has been patched. Yes Nokia Is Indeed A Very Good Router. Let Us See What I Can Get . No We Do Not Handle Any Personal Data On Our Hospitals Website It Is Only For Validation Of Our Business Online So I Think I Can Get Away Without A Firewall. Let Us See Till When.

 

[rohitks]

What Has Been Your Experience With Bridge Mode On Your Router ?

@mrps786

Now what we get is integrated ONT Router which is ont as well as wifi router.
I have zte 670l and after I put it in bridge many functions continue to still work on zte router, which ideally is not desired
e.g. ddns, port forwarding, firewall, alg, dhcp, wifi etc
so what happens is if you leave them running they take precedence for the incoming WAN data.
e.g. in bridge mode if you have port forwarding set on airtel router as well as your router, you hope your router will control it but before that airtel router would already process it.

So when I put my zte in bridge, i turn off all wan related features on it, turn off firewall and turn off wifi and do a proper config on my router which then does all heavy lifting.
This is just about what I observed with my setup, your router may exhibit different behavior and your experience may vary.
I had requested airtel to offer me only dumb ont but they refused stating I will get ont router only. They do not provide only ont.

 

[Chemical]

This vulnerability also affects ZyXEL aot5221zy and dasan hg660m-a. It allegedly also affects Mikrotik sfp module. And airtel hasn't patched it yet.