01 October 2019

DD-WRT allowing setting of initial username and password then locking out, and unable to TFTP new firmware

Seems it's the day for discovering things. I upgraded to the latest Brainslayer DD-WRT release on an R7000 at work. So far, so good, fairly standard stuff. I'd wiped it beforehand, set my PC IP to 192.168.1.2, got to the web interface, set the username and password as previous, clicked on setup, waited, and then watched myself repeatedly get a "connection reset" message. I figured it was a bad flash. Tried to TFTP a new copy of the image in, it wouldn't take - turns out it works better if you use the .CHK format for that. Got out a USB-TTL interface and flashed it manually, wiped it, rebooted.

Same problem.

After much head scratching, it turned out the problem was in fact a combination of my browser and saved credentials (in this case, provided by Kee and KeePass). Because I had previously saved HTTP credentials for 192.168.1.1 on an unrelated router, it tried to repeatedly automatically submit them to the HTTP auth request, and it looks like I triggered anti-lockout rules.

Whoops!

Suffice to say opening the router was unnecessary, but at least I had the kit handy and ready.

No comments:

Post a Comment