Need to crack a password on a router

[Booshanky]

We've had the same setup at our office for about 7 or 8 years now and everything has been working fine, but we're about to change ISP's and we're going to lose the static IP we've had for that whole time.


The problem is that we've got an office in san jose that connects to our network via VPN. Both offices have a webramp 700s router that handles the VPN stuff, but I really have no idea how it works. I was hoping that I could just get into the admin screen of that router in san jose and change the IP address it tries to connect to here, but nobody knows the admin password. And it turns out the guy who set it up hasnt worked here for years.

So does anyone know a way to just crack the password on one of those routers? I'm sure I could just reset the device back to defaults, but I'm worried that I'd have no idea how to get the VPN back up and working. which would leave a bunch of people SOL.

Thanks for any help.

 

[multiband8303]

Unfortunately - you won't recieve much assistance here. As this information could be used in the wrong way many times over...

Your best bet is to reset it to factory defaults, setting up a VPN is not difficult. You should be fine...

 

[Booshanky]

ok, how bout some help on what this stuff in the vpn setup means?

Under "add/modify IPsec security associations" it has these values listed,




Name <-- This is just an alias i'm guessing. it has the name of our SJ office there.

IPSec Keying Mode: <-- set as manual key

Allow Remote Clients <-- this option is checked
Destination Address Range Begin <-- this has the beginning IP address of our clients in SJ
Destination Address Range End <-- this has the end of that range.
IPSec Gateway Address <-- this is the public IP of the SJ office

All that stuff is pretty self explanitory. The next stuff is what's confusing me.


Incoming SPI <--Both of these boxes have seemingly random groups of alpha numeric characters listed, EG 100ag222. What do these mean?
Outgoing SPI <--
Encryption Method Encryption is fastencrypt ESP arcfour
Encryption Key <-- the encrpytion key is another long group of alpha numeric characters.
Authentication Key <-- this box is left blank.



If anyone can help me understand these settings better i'd be way appreciative.

 

[Booshanky]

I guess another option would be to just get new routers for both locations seeing as these ones are old as hell and not even supported any more. Can anyone reccomend a good router that will function as a VPN gateway like this one does?

 

[Podolak]

Do you need to stay CISCO? SonicWall has some great Firewall/VPN appliances that are a lot easier to use for those who are not familiar with the CISCO IOS.

www.sonicwall.com

 

[Booshanky]

I'm not using cisco right now, we're using a company called "Webramp" which is currently out of businness.

From everything i've read though, the router is extremely similar to a sonicwall.

 

[Brazen]

Just hit Up, Up, Down, Down, Left, Right, Left, Right, B, A, B, A and click OK and it should let you in.

Or check out getting some Linksys business routers with VPN.

 

[Booshanky]

Originally posted by: Brazen
Just hit Up, Up, Down, Down, Left, Right, Left, Right, B, A, B, A and click OK and it should let you in.

Or check out getting some Linksys business routers with VPN.

Any particular model numbers?

 

[Brazen]

Originally posted by: Booshanky

Originally posted by: Brazen
Just hit Up, Up, Down, Down, Left, Right, Left, Right, B, A, B, A and click OK and it should let you in.

Or check out getting some Linksys business routers with VPN.

Any particular model numbers?

No, not particularly. You'll just have to go to Linksys.com and look over their products. If you mouse over the Products link, it will drop down and choose Business Solutions. After that there is an option for Router/VPN solutions. They have a couple products and you will just have to look them over and decide what features and capabilities you think you want. You'll also need to make sure it can handle your networks. I _think_ if you have more than 256 computers behind the router, you will want to go with something beefier than a linksys, but you should look over the specs to verify that.

I'm just guessing on linksys business routers though. I lover their home router and wireless products, so I would feel good going with them if we didn't already have a SonicWall (purchased back when linksys only offered soho routers).

 

[cmetz]

Booshanky, get new VPN device for each end. You could probably reset the old boxes, but then you're putting labor into a dead end. For not too much money you can put that effort into a better/newer device solution with a future.

I would tell you to get a PIX 506E for each end, but that's a dying platform now. Possibly a Cisco 1800/2800 platform? What kind of connection and what kind of router do you have currently? You might be able to consolidate an existing router and outboard firewall into an all-in-one.

 

[imported_Sincity]

Originally posted by: Brazen
Just hit Up, Up, Down, Down, Left, Right, Left, Right, B, A, B, A and click OK and it should let you in.

LOL!