Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a DIR-615 router on address 192.168.10.1

If I open an URL http://192.168.10.1 then I get login page

But if I enter http://192.168.10.1/Basic/Wireless.shtml I get into control panel without any password asking.

Is this by design?

I mean, if entering router control panel is not password protected from internal network?

UPDATE

I was entering different URL's from different browsers, including curl and wget command line utilities, but from one computer.

share|improve this question

1 Answer 1

It is password protected, but requesting http://192.168.10.1/Basic/Wireless.shtml works because you are still logged in. As long as you are, the router does not distinguish between you accessing the page through a link on the control panel and you accessing the page by entering the URL directly after browsing some unrelated websites.

You are not automatically logged out by leaving the configuration pages, although it may seem that way because the URL http://192.168.10.1 presents the login screen, regardless of whether you are logged in already. Eventually, your session will expire and you will no longer be able to circumvent the password prompt by accessing one of the configuration pages directly. Although the DIR-615 does not have a 'log out' button, you can force a logout by entering an incorrect password in the login screen. Afterwards, you can convince yourself the trick no longer works and shows 'Not Found' instead.

share|improve this answer
    
How does router identifies me as "me"? By IP address? –  Suzan Cioc Oct 13 '13 at 19:04
    
@SuzanCioc: Yes. –  Marcks Thomas Oct 13 '13 at 19:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.