topic Re: disable 'remote management' on a Plusnet Hub 2 in My Router

disable 'remote management' on a Plusnet Hub 2

philipk — Sat, 25 Jan 2025 20:57:20 GMT

Hi,

Is it possible to disable 'remote management' on a Plusnet Hub 2?

Many thanks

Re: disable 'remote management' on a Plusnet Hub 2

jab1 — Sat, 25 Jan 2025 21:01:16 GMT

I doubt it - I don't use one - but why would you want to? That function is effectively the only way you get updates to the Hub, and AFAIK, that is all it allows.

Re: disable 'remote management' on a Plusnet Hub 2

Champnet — Sun, 26 Jan 2025 10:25:12 GMT

@jab1 Surely a request for an update check should originate from the modem/router. I don't use a Hub 2 but a connection attempt using my external IP address will show the Netgear box login screen. I agree with @philipk this shouldn't happen and I see it as a security risk..........

Re: disable 'remote management' on a Plusnet Hub 2

jab1 — Sun, 26 Jan 2025 10:32:02 GMT

@Champnet I don't use any PN kit, but my understanding is that the 'remote management' designed to enable Hub updates - I could be wrong, and don't really want get into a long discussion -it is a bit off my payscale.

Re: disable 'remote management' on a Plusnet Hub 2

MisterW — Sun, 26 Jan 2025 11:03:23 GMT

Surely a request for an update check should originate from the modem/router. I don't use a Hub 2 but a connection attempt using my external IP address will show the Netgear box login screen. I agree with @philipk this shouldn't happen and I see it as a security risk.

@Champnet you are correct, the update check does originate from the router , it uses TR-069 to contact the Plusnet servers.

There is no remote access to the router GUI on a Hub 2.

@philipk as above BUT it is possible for Plusnet to remotely access the router for diagnostics via the secure TR-069 facility. A connection is ONLY possible from the Plusnet TR-069 servers.

Re: disable 'remote management' on a Plusnet Hub 2

Champnet — Sun, 26 Jan 2025 11:28:19 GMT

@jab1 Nothing personal but just applying logic based on experience, I could be wrong.

Edit : Thanks for your comment @MisterW

Re: disable 'remote management' on a Plusnet Hub 2

philipk — Sun, 26 Jan 2025 12:42:42 GMT

Hi All,

Thanks for your input.🙂

MisterW:

<snip> . . . it is possible for Plusnet to remotely access the router for diagnostics via the secure TR-069 facility. A connection is ONLY possible from the Plusnet TR-069 servers . . . </snip>

Can I interpret, therefore, that a 'bad actor' could enjoy remote access to my router via the Plusnet TR-069 servers? Feasible?

Many thanks

Re: disable 'remote management' on a Plusnet Hub 2

MisterW — Sun, 26 Jan 2025 12:45:05 GMT

I would have thought that access to the TR-069 servers is highly secure

Re: disable 'remote management' on a Plusnet Hub 2

Dan_the_Van — Sun, 26 Jan 2025 13:17:31 GMT

@philipk

If this of concern to you might I suggest you purchase your own router where you will have full control rather than use a locked down device such as a Service Provider Hub.

Re: disable 'remote management' on a Plusnet Hub 2

jab1 — Sun, 26 Jan 2025 13:19:26 GMT

Personally, I think this is panic over nothing - but each to their own, I suppose.

Re: disable 'remote management' on a Plusnet Hub 2

Protech — Sun, 26 Jan 2025 13:36:04 GMT

@philipk

The potential security issues relating to TRS069 are well documented

https://en.wikipedia.org/wiki/TR-069#Security

However if the current best practice recommendations are implemented by Plusnet the risks of "bad actor" access should be minimal. Plusnet ,of course, still have full management access to your router.

If this is still of concern to you, then the simplest way to avoid it is to get your own router, which will not be on Plusnet's management platform.

HTH

Re: disable 'remote management' on a Plusnet Hub 2

jab1 — Sun, 26 Jan 2025 16:08:59 GMT

Anyone using a PN Hub fallen foul of these 'security issues'?

Re: disable 'remote management' on a Plusnet Hub 2

philipk — Sun, 26 Jan 2025 16:23:58 GMT

Thanks for the very helpful and varied perspectives; much obliged.

Re: "panic over nothing"

I am taking an inexpensive online course in the 'dark' web. The first lesson is to understand and evaluate all possible "risks" within a standard home broadband network, however remote. It's all for fun, not business or employment, but since I'm retired and somewhat bored, I may as well get stuck in to this; it's fascinating. Also, it has it's benefits 😊

Many thanks again, fellas. You've been a great help

Re: disable 'remote management' on a Plusnet Hub 2

Baldrick1 — Sun, 26 Jan 2025 16:43:37 GMT

@jab1 wrote:

Anyone using a PN Hub fallen foul of these 'security issues'?

I suspect that you can add BT, EE and most other ISPs that supply a freebie router to the list.

Re: disable 'remote management' on a Plusnet Hub 2

jab1 — Sun, 26 Jan 2025 16:51:24 GMT

Probably, @Baldrick1 . I've been using ISP supplied hubs/routers ever since I joined Plusnet.

Re: disable 'remote management' on a Plusnet Hub 2

outcast — Sun, 26 Jan 2025 16:59:51 GMT

@philipk wrote:

The first lesson is to understand and evaluate all possible "risks" within a standard home broadband network ...

... It's all for fun ... .. I may as well get stuck in to this; it's fascinating. Also, it has it's benefits 😊

Just for fun, have you tried doing a remote port scan on your home network to see what "risk" your connection reports to the world ?

You might be interested to run the Gibson Research ShieldsUP!

Click on this - https://www.grc.com/shieldsup

Click on [Proceed]

There are a few tools on that page for you to play with to test your setup

To do the port scan, click on [All Service Ports] and let the test run to completion.

Re: disable 'remote management' on a Plusnet Hub 2

philipk — Sun, 26 Jan 2025 17:07:31 GMT

will do👍