2

i tried to set up my belkin n+ router as an access point a month ago, but failed, and regrettably failed after i had set it's ip address, which i can't remember. so now it appears bricked, as i don't know how to login to it via web interface from its ip address. hard resetting the router didn't work (tried all methods, 30/30/30, etc.). any suggestions how to find out what the router's ip address is to un-brick it?

fyi i have seen this: Can't find a wireless access point's IP address after changing router IP/LAN settings and it didn't get me anywhere

9
  • Does it have an inbuilt DHCP server that's running? i.e. if you connect to it's Wifi or Ethernet, do you get it serve you IP addresses? Can you tell us what the model name is?
    – LuckySpoon
    Jan 6, 2015 at 3:33
  • It's a Belkin N+ F5D8236-4
    – jason
    Jan 6, 2015 at 3:53
  • don't know if it has an inbuilt dhcp server. when i connected it via ethernet to my laptop and ran ipconfig, my laptop showed an ipv4 address of 169.254.0.23 and a subnet mask of 255.255.0.0. these numbers seem very odd to me, as i use comcast so my gateway is normally 10.0.0.1 with 255.255.255.0 subnet mask.
    – jason
    Jan 6, 2015 at 4:34
  • The 169.254.0.0/16 range is reserved for autoconfiguration; a machine that doesn't use DHCP or can't find DHCP will select an address in the region more or less randomly. Since your laptop picked an address in that range, the router isn't providing DHCP service to your laptop. You might try scanning that range with nmap, too, to see if the router autoconfigured itself.
    – Fred
    Jan 6, 2015 at 5:00
  • running -sP 169.254.0.0/16 now
    – jason
    Jan 6, 2015 at 5:11

4 Answers 4

2

Perhaps narrow the scan by a single port (like tcp 80) on all the private subnets. Other ports that may be open are udp 67, 68, tcp 443, 53 (tcp/udp)

nmap -p 80 -Pn -n -T5 10.0.0.0/8

It will scan quicker if you limit it to one or two ports. If it's bricked, you may need serial access to fix it.

1
  • Actually, if you can connect to it whatsoever to run that scan, I would think you could simply run $ route or netstat -nr to see what your computer thinks the IP is, and also to check your routing tables for errors. Perhaps you accidentally configured an incorrect static route? In order to scan the network you'd need to somehow connect to it to begin with. If it's wireless and open you could also run wireshark and see from what IP the router is send arps to/from.
    – Chev_603
    Mar 28, 2015 at 0:53
1

I'd try the DHCP approach above, but if you hadn't configured the AP to act as a DHCP server, all is not lost. If you set up the AP in private address space, you can use something like nmap to scan the range of likely IP addresses, especially if you can remember the range you used. The private IP ranges are 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16. See if you can ping the router and learn the IP.

11
  • i thought i had tried running nmap (and arp command), but didn't get anywhere. could you possibly walk me through it?
    – jason
    Jan 6, 2015 at 4:39
  • 1
    Sure. Do you have any idea which address range you used? You can use nmap to do a host discovery (ping) scan as follows: nmap -sP 192.168.1.0/24 to scan the 192.168.1.0/24 network.
    – Fred
    Jan 6, 2015 at 4:44
  • i could've sworn i used 10.0.0.255, but i'm not sure.
    – jason
    Jan 6, 2015 at 4:46
  • just to confirm, i'm running nmap on a computer that is hooked up via ethernet to a lan port on the bricked router.
    – jason
    Jan 6, 2015 at 4:47
  • Then try 10.0.0.0/24 for starters. If you don't find it there, use a /16, but it will take a lot longer. Yes, the LAN port should be in the private address range the AP is serving.
    – Fred
    Jan 6, 2015 at 4:47
0

If you reset the router, it should have DHCP service enabled. That means once you connected to it, you will get IP assigned. Then you can check the default gateway IP, that will be your router's IP (i.e. ipconfig /all when using Windows).

4
  • can't reset the router. have tried all types of hard resets, but it never resets, it's always in AP mode.
    – jason
    Jan 6, 2015 at 4:26
  • Router does not provide any confirmation on reset. Just follow manufacturer's instructions on factory reset procedure, then try to connect again.
    – nochkin
    Jan 6, 2015 at 14:32
  • i've done all types of hard resets, including belkin's. and yes, the router does provide 'confirmation' on reset in a sense: it would allow me to access it at the default web interface. it doesn't, thus confirming it is not resetting.
    – jason
    Jan 6, 2015 at 16:43
  • If it did not allow you to connect to the 100% known IP after you did the reset, that means your router is bricked. The factory default settings includes DHCP and default IP. But since you did not get IP assigned, then your router does not work properly (that's assuming you checked cables and simple things like that).
    – nochkin
    Jan 6, 2015 at 16:47
0

If the router supports IPv6 you can find an IP address by pinging ff02::1. The exact command needed to ping that IP address depend on the OS you do it from, on Linux this command can be used ping6 -nc2 ff02::1%eth0.

If the router supports IPv4 you can find an IP address by scanning all the possible IP addresses. The 222 /8 prefixes it could possibly be using have in total 3724541952 IP addresses. If the connection between computer and router can run at 1Gbit/s, it can handle at least 83333 packets per second, at that speed you can scan all the IP addresses in less than 13 hours.

Some IP addresses are more likely than others. By trying the most likely IP addresses first, you'll probably find the correct one much faster. Ranges which makes sense to try first are private and link-local ranges 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8, 100.64.0.0/10, 169.254.0.0/16.

For best performance you need to use a scanning tool, which only send one ARP request to each IP and look for an ARP reply.

If neither of those work, there should be some reset procedure, which will bring the router into a known configuration.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .