TP-Link TD-W8901G Configuration - Revision history

Xx176 at 13:42, 26 September 2019

2019-09-26T13:42:16Z

← Older revision		Revision as of 13:42, 26 September 2019
Line 3:		Line 3:

	= ⚠ Vulnerable to Misfortune Cookie: Avoid/Replace ⚠ =		= ⚠ Vulnerable to Misfortune Cookie: Avoid/Replace ⚠ =
	In December 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running ~~out dated~~ firmware and if the remote access (ACL) is set to allow remote access. We ~~are not aware of a firmware fix for~~ this ~~model. As such we are advising our members to avoid using this modem and replace it if they are currently using it due to it's~~ [[Misfortune Cookie Vulnerability~~\|Vulnerability to the Misfortune Cookie.~~]]		In December 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running outdated firmware and if the remote access (ACL) is set to allow remote access. We documented this vulnerability on the [[Misfortune Cookie Vulnerability]] page.

	Read more on the Misfortune Cookie as reported ~~in http~~://www.kb.cert.org/vuls/id/561444.		Read more on the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

	If the modem cannot be replaced immediately, please ensure ACL has been deactivated from '''Access Management''' → '''ACL'''.		'''NCF Recommendation for this modem:'''
			* '''Avoid''' using this modem and '''replace''' it if they are currently using it. We are not aware of a firmware fix for this model.
			* If the modem cannot be replaced immediately, please ensure ACL has been deactivated from '''Access Management''' → '''ACL'''.

	<gallery widths="300" heights="300">		<gallery widths="300" heights="300">

Xx176 at 13:32, 26 September 2019

2019-09-26T13:32:32Z

← Older revision		Revision as of 13:32, 26 September 2019
Line 9:		Line 9:
	If the modem cannot be replaced immediately, please ensure ACL has been deactivated from '''Access Management''' → '''ACL'''.		If the modem cannot be replaced immediately, please ensure ACL has been deactivated from '''Access Management''' → '''ACL'''.

	<gallery>		<gallery widths="300" heights="300">
	File:TP-Link modem with ACL activated.png\|TP-Link modem with ACL activated		File:TP-Link modem with ACL activated.png\|TP-Link modem with ACL activated
	File:TP-Link modem with ACL deactivated.jpg\|TP-Link modem with ACL deactivated		File:TP-Link modem with ACL deactivated.jpg\|TP-Link modem with ACL deactivated

Xx176 at 13:31, 26 September 2019

2019-09-26T13:31:37Z

← Older revision		Revision as of 13:31, 26 September 2019
Line 2:		Line 2:
	[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]		[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]

	= ~~'''~~Avoid/Replace~~: Misfortune Cookie'''~~ =		= ⚠ Vulnerable to Misfortune Cookie: Avoid/Replace ⚠ =
	As of ~~2014~~-~~Dec-23~~ we are advising our members to avoid using this modem and replace it if they are currently using it due to it's [[Misfortune Cookie Vulnerability\|Misfortune Cookie ~~Vulnerability~~.]] ~~Read more on the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.~~		In December 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. We are not aware of a firmware fix for this model. As such we are advising our members to avoid using this modem and replace it if they are currently using it due to it's [[Misfortune Cookie Vulnerability\|Vulnerability to the Misfortune Cookie.]]

			Read more on the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

			If the modem cannot be replaced immediately, please ensure ACL has been deactivated from '''Access Management''' → '''ACL'''.

			<gallery>
			File:TP-Link modem with ACL activated.png\|TP-Link modem with ACL activated
			File:TP-Link modem with ACL deactivated.jpg\|TP-Link modem with ACL deactivated
			</gallery>

			= Configure as router =
	This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.		This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.

	To learn more about configuring your particular modem, consult the [[Modem Manuals\|manual]].		To learn more about configuring your particular modem, consult the [[Modem Manuals\|manual]].

	~~= Configure as router =~~

	# Connect power and turn on the modem with the black button on the back.		# Connect power and turn on the modem with the black button on the back.
Line 85:		Line 93:

	The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.		The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

	~~=Security=~~
	In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [[CERT-announced vulnerability of TP-Link modem/router\|This web page]] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [http://www.tp-link.com/en/download/TD-W8901G.html TP-Link website].

	~~Some older TP-Link modems were shipped from the factory with the ACL activated. This should be checked and if activated then deactivated at Access Management → ACL.~~

	~~<gallery>~~
	~~File:TP-Link modem with ACL activated.png\|TP-Link modem with ACL activated~~
	~~File:TP-Link modem with ACL deactivated.jpg\|TP-Link modem with ACL deactivated~~
	~~</gallery>~~

	=See also=		=See also=

Xx176: /* See also */

2019-09-26T13:12:12Z

Xx176 at 13:10, 26 September 2019

2019-09-26T13:10:29Z

← Older revision		Revision as of 13:10, 26 September 2019
Line 3:		Line 3:

	= '''Avoid/Replace: Misfortune Cookie''' =		= '''Avoid/Replace: Misfortune Cookie''' =
	As of 2014-Dec-23 we are advising our members to ~~update the FW in their~~ modem~~/router to counter possible vulnerability~~ to the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.		As of 2014-Dec-23 we are advising our members to avoid using this modem and replace it if they are currently using it due to it's [[Misfortune Cookie Vulnerability\|Misfortune Cookie Vulnerability.]] Read more on the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

	This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.		This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.

Xx176 at 13:08, 26 September 2019

2019-09-26T13:08:01Z

← Older revision		Revision as of 13:08, 26 September 2019
Line 2:		Line 2:
	[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]		[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]

	= '''~~Update Firmware~~: Misfortune Cookie''' =		= '''Avoid/Replace: Misfortune Cookie''' =
	As of 2014-Dec-23 we are advising our members to update the FW in their modem/router to counter possible vulnerability to the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.		As of 2014-Dec-23 we are advising our members to update the FW in their modem/router to counter possible vulnerability to the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

Fs881 at 22:49, 25 September 2019

2019-09-25T22:49:34Z

← Older revision		Revision as of 22:49, 25 September 2019
Line 1:		Line 1:
	<div class="ncfrightbox"> {{Template:Modem Links}} </div>		<div class="ncfrightbox"> {{Template:Modem Links}} </div>
	[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]		[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]

			= '''Update Firmware: Misfortune Cookie''' =
			As of 2014-Dec-23 we are advising our members to update the FW in their modem/router to counter possible vulnerability to the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

	This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.		This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.

Fy792 at 22:29, 28 July 2018

2018-07-28T22:29:38Z

← Older revision		Revision as of 22:29, 28 July 2018
Line 1:		Line 1:
	<div class="ncfrightbox"> {{Template:Modem Links}} </div>		<div class="ncfrightbox"> {{Template:Modem Links}} </div>
	[[File:TD-W8901G-02.jpg\|left\|x250px\|The TP-Link 8901G modem]]		[[File:TD-W8901G-02.jpg\|thumb\|left\|x250px\|The TP-Link 8901G modem]]
	This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.		This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.

Fy792 at 22:05, 28 July 2018

2018-07-28T22:05:08Z

← Older revision		Revision as of 22:05, 28 July 2018
Line 1:		Line 1:
	[[File:TD-W8901G-02.jpg\|~~thumb~~\|~~right\|300px~~\|The TP-Link 8901G modem]]		<div class="ncfrightbox"> {{Template:Modem Links}} </div>
	This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset~~. To learn more about configuring your particular modem, consult the [[Modem Manuals\|manual]]~~.		[[File:TD-W8901G-02.jpg\|left\|x250px\|The TP-Link 8901G modem]]
			This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.

	=== Configure as router ===		To learn more about configuring your particular modem, consult the [[Modem Manuals\|manual]].

			= Configure as router =

	# Connect power and turn on the modem with the black button on the back.		# Connect power and turn on the modem with the black button on the back.
Line 46:		Line 49:
	Proceed with four more steps - Setting administrator access, and wireless locale setting		Proceed with four more steps - Setting administrator access, and wireless locale setting

	=== Password protect the Admin Role ===		== Password protect the Admin Role ==
	# Click on '''Maintenance''' in the menu along the top of the page. Below it other options appear.		# Click on '''Maintenance''' in the menu along the top of the page. Below it other options appear.
	# Select '''Administration'''		# Select '''Administration'''
Line 55:		Line 58:
	A pop-up log-in screen appears, and asks for sign-in. Use the User-ID '''admin''' and the DSL-Password just set. Return to the same configure page you were just at.		A pop-up log-in screen appears, and asks for sign-in. Use the User-ID '''admin''' and the DSL-Password just set. Return to the same configure page you were just at.

	===Set daylight savings time===		==Set daylight savings time==
	# In '''Maintenance''' select '''Time Zone'''.		# In '''Maintenance''' select '''Time Zone'''.
	# Daylight Saving: Enabled		# Daylight Saving: Enabled

	===Turn on SPI firewalling===		==Turn on SPI firewalling==
	# In '''Advanced Setup''' select '''Firewall'''.		# In '''Advanced Setup''' select '''Firewall'''.
	# SPI: Enabled		# SPI: Enabled

	=== Final area setting and check ===		== Final area setting and check ==
	# Click '''Interface Setup''' in the top-of-page menu		# Click '''Interface Setup''' in the top-of-page menu
	# Now select '''Wireless''' in the menu below that.		# Now select '''Wireless''' in the menu below that.
Line 79:		Line 82:
	The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.		The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

	==Security==		=Security=
	In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [[CERT-announced vulnerability of TP-Link modem/router\|This web page]] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [http://www.tp-link.com/en/download/TD-W8901G.html TP-Link website].		In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [[CERT-announced vulnerability of TP-Link modem/router\|This web page]] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [http://www.tp-link.com/en/download/TD-W8901G.html TP-Link website].

Line 89:		Line 92:
	</gallery>		</gallery>

	==See also==		=See also=
	*[[CERT-announced vulnerability of TP-Link modem/router]]		*[[CERT-announced vulnerability of TP-Link modem/router]]
	*[[Modem Configuration]] - for a complete list of instructions for all NCF modems		*[[Modem Configuration]] - for a complete list of instructions for all NCF modems

Xx176: Xx176 moved page Modem Configuration (DSL) TP-Link 8901G to TP-Link TD-W8901G Configuration

2018-07-28T10:01:27Z

Xx176 moved page Modem Configuration (DSL) TP-Link 8901G to TP-Link TD-W8901G Configuration

← Older revision	Revision as of 10:01, 28 July 2018
(No difference)

← Older revision		Revision as of 13:12, 26 September 2019
Line 97:		Line 97:

	=See also=		=See also=
	*[[~~CERT-announced vulnerability of TP-Link modem/router~~]]		*[[Misfortune Cookie Vulnerability]]
	*[[Modem Configuration]] - for a complete list of instructions for all NCF modems		*[[Modem Configuration]] - for a complete list of instructions for all NCF modems
	*[[Port forwarding]]		*[[Port forwarding]]