What is the default IP address for accessing an Actiontec Modem or Router?
The default IP address for accessing most of the Actiontec Modem and Routers is "192.168.0.1". The exceptions are the Actiontec Modems and Routers made and branded for a specific Internet Service Provider (ISP). The Modems and Routers made for a specific ISP will have a sticker on the bottom of the device with the default IP address on it. However, the IP address can be changed by the user, so it is important to document and save the IP address when it is changed. It is suggested that the IP address should be written on a label that is then attached to the Modem or Router. If this new IP address is communicated to technical support early in any relevant conversation, it will save time and confusion.
Are the Actiontec Modems and Routers upgrade-able?
Yes, they can be upgraded by flashing the Routers or Modems firmware. If the Actiontec Modem or Router that you have, is branded for a particular ISP, the proper firmware update will ONLY be available from that ISP. Actiontec can provide only the Retail or NCS (Non-Customer Specific) version of the firmware for the Router or Modem. The NCS firmware can not be substituted for all ISPs, but can be configured to be compatible with most. The firmware update for Actiontec Routers and Modem is available for download on the Actiontec Support site.
How can I make a server on my local network, available to Internet users?
Unlike local server traffic, users attempting to access your server from the Internet must pass through the Actiontec Router or Modem SPI Firewall and NAT. To pass through, the port used by the server, must be opened in the Firewall. This process is known as Port Forwarding. For example, a FTP server would typically use port 21, so you would want to forward port 21 through the router's firewall to local address or HOST name of the FTP server. (Ports are identified by a numeric value from 0 - 65535. But the port numbers for the most common servers are in the range from 0 to 1023, so they are referred to as Well Known ports. Since IANA manages this range of ports, their web site, "iana.org" provides an accurate list of the services and their assigned port numbers.)
What is the default username and password for Actiontec Modems and Routers?
Most Actiontec Modems and Routers DO NOT have a default login. The exceptions are the Actiontec Modems and Routers made and branded for a specific Internet Service Providers (ISP). Some ISP's require a default user name and password. These Modems and Routers have a sticker on the bottom of the device with the default User name and Password printed on them.
How many simultaneous connections does a Actiontec Router or Modem allow?
It varies from 190 to 254, depending on the product and the firmware. The GT704WGs that have the Verizon firmware loaded, have a limit of 190. The R7000M-2A is limited to 252, and all of the remaining Actiontec Routers and modems have a limit of 254. However, it is good to keep in mind that each computer added to the network will reduce the bandwidth available to the existing network computers. It is recommended to limit the number of connections to 45, but this number can vary depending on the activities of the network computers. For example, downloading MP3s, ISOs, or other large files, require much more bandwidth than checking email or simple Web browsing. If the network is Hosting Web, FTP or Gaming severs the limit for the number of network connections may be much lower.
Is there a limit to the number of Wireless connections, that the Actiontec Wireless Router or Modem will allow?
There is no limit on the number of wireless connections, but there is a limit to the amount of traffic or bandwidth that can pass through the Actiontec. It is good to keep in mind that each computer added to the network will reduce the bandwidth available to the existing network computers. It is recommended to limit the number of connections to 45, but this number can vary depending on the activities of the network computers. For example, downloading MP3s, ISOs, or other large files, require much more bandwidth than checking email or simple Web browsing. If the network is Hosting Web, FTP or Gaming severs the limit for the number of network connections may be much lower.
Can I stop using my software Firewall or Security program on my computers, now that I have the Actiontec Modem or Router?
The answer depends on the security requirements of your Network and what the individual computers are used for.
Actiontec Modems and Routers have a Stateful Packet Inspection (SPI) Firewall built-in, and because of this many users wonder if it is safe to uninstall their PCs software Firewall, if it is a third party product, or disable it, if it is built into the Operating System. This is desirable because when customers purchase a Router, they are interested in networking their computers, and having a separate firewall on each PC can make networking quite complicated.
The short answer is Yes, the software Firewalls can be removed or disabled, but not without risk. Many operate with only the one Firewall on the router successfully for some time. The risk is if a virus or hacker gets past the routers Firewall, there is nothing to stop it from compromising the entire network. If this type of arrangement is going to be used, any sensitive information, POS machines, or PCs used for banking, should be off of the Network, or these individual computers should continue to have their own software Firewall to protect them if the network was compromised.
Is there a way to clear or reset the Admin username and password on Actiontec FiOS Routers?
Yes, but clearing the password also resets the configuration of the device. So following a reset, the router will need to be completely reconfigured.
To Reset the Router, begin with the unit powered up. Then using a small tool, depress and hold the Reset button on the back of the device for 10 seconds, and then release it. When the router has finished restarting the username and password will be erased and you will need to create a new user name and password.
Do Actiontec Access Points, Modems and Routers support Wireless Bridging?
No, Wireless Actiontec Modems, Routers and Access Points do not support Wireless Bridging; they function as standard wireless access points, only.
Can I Bridge the Actiontec MI424WR router that Verizon provided, when I signed up for FiOS service?
The MI424WR does not have a bridging option, and neither Verizon nor Actiontec support attempting to bridge it.
The desire to bridge the MI424WR is based on a misunderstanding that it is a modem as well as a router. Actiontec does produce DSL Modems/Router that have a Transparent-Bridging option, which bypasses or disables the router function and allows the Modems/Router to act simply as a DSL modem, when it is enabled. Many consumers do not realize that with FiOS, the ONT (typically outside the home) is the device that handles changing the FiOS signal from Fiber to either Ethernet or Coax, and that the Router is just a Router, and if it was bridged or bypassed, it would be a device without a function. For most Verizon FiOS customers their service would completely stop if the MI424WR was bridged, because the Video on Demand service is dependent on it to work.
If your ONT is connected to the Actiontec MI424WR router via Coax, the MI424WR is required due to the Coax connection. But if the ONT is connected to the MI424WR via Ethernet, then in most cases some other router can be substituted for the MI424WR, and it can be removed.
I was told to change the MTU setting of the Actiontec, so it will work with my Xbox. How do I change the MTU?
There are several problems with this.
1. The MTU setting is not the cause. The default MTU setting for Actiontec routers is 1492 for PPPoE connections, and 1500 for DHCP as well as Static connections. To change the MTU setting, access the My Network icon at the top of the page, then select Network Connections on the left. Then on the Network Connections page select the Broadband Connection or PPPoE Connection that is being used. You can identify the connection being used by checking the Status field, it will be connected. When the Properties page is displayed, click the Settings button. The MTU is set to Automatic by default, but if 'Manual' is selected from the drop-down, a numeric value can be entered into the text box. To save the change, click Apply at the bottom of the page. (But, the MTU setting is rarely if ever the problem.)
2. The actual problem is that the ports used by the Xbox, are not open for incoming traffic. There are two ways this can be changed.
A. Enable UPnP (Universal Plug and Play). Many of our routers and modems are delivered with UPnP disabled for security reasons. But UPnP can easily be enabled. To enable it, browse to the UPnP page in the Advanced Setup. Enable both option check-boxes, and leave the Publication drop-down at its default. Click Apply, to save the change.
B. The other way to open the ports needed by the Xbox, is to use Port Forwarding. The Xbox uses ports 88 UDP and 3074 both UDP and TCP. To open these ports, begin by logging into the router and at the main screen select the Firewall Settings icon (The Security icon in older firmware versions). Make certain that the 'General' Firewall Setting is set to Typical Security or Medium. (Any other Firewall setting will in most cases have a negative effect on the ports that the Xbox needs to work correctly.) From the left-hand menu select Port Forwarding. Click the word ADD (in red) to create a new port forwarding rule. To the right of 'Networked Computer / Device:' select the HOST Name of the Xbox from the drop-down if it is listed. If the Xbox is not listed, enter its IP address into the text box to the right of 'Specify Address'. Then, to the right of 'Protocol' click the drop-down for 'Specify Protocol' and if Xbox is not listed, click the option for 'Show All Services'. Now when you click the drop-down for 'Specify Protocol' there will be many more choices and an entry for Xbox near the bottom of the list. When you select it, the ports and protocols will be displayed. On the 'WAN Connection Type' line click the drop-down and select the WAN connection method that your router is actually using. Typically this will be either 'Broadband Connection (Coax)' or 'Broadband Connection (Ethernet)'. After selecting the correct option click Apply. Now, back at the main Port Forwarding page, click Apply to complete the port forwarding for the Xbox.
Do the Actiontec Routers support File and Printer Sharing? Is there anything that needs to be done, to enable it?
Yes, the Actiontec Routers support File and Printer Sharing.
No, it does not require enabling. There are no settings on the Actiontec Routers and Modems with regard to Sharing, it is the router's default behavior. All of the settings for Sharing are on the computers (or printers, or NAS, etc...) themselves.
The Actiontec MI424WR and RI408 routers have only one additional feature that can effect File and Printer Sharing (computers that can 'see each other' or a networked printer on the network). As stated earlier, the default behavior of these Actiontec routers allows this activity with no restrictions. Wireless devices have access to each other and to Wired devices, whether Ethernet or USB. The reverse is also true, Wired devices (like a PC) have full access to other Wired devices (like a printer or NAS), as well as Wireless devices (whether PC or printer).
Provided that the PCs in question have a functioning Internet connection through the Actiontec Router. Then...
If a device can not 'see' the network or access resources on the network, the cause will be on the devices themselves. If it is a printer, then it may be a network TCP/IP setting or missing protocol. If it is a server or workstation that cannot be accessed, then it will be TCP/IP settings, Firewall settings or mis-configured Sharing on the PC.
The only setting that can restrict Sharing is Advanced Filtering, in the Firewall Settings section. To repeat it again, the default setting does not restrict ANY internal traffic. However, these routers allow for the creation of VLANs, and Advanced Filtering allows the User to keep the VLANs separate if they wish or to isolate or certain IP addresses. Advanced Filtering allows a great deal of control. If the User has blocked something unintentionally, the rule can be deleted, or the router can be Reset to return it to default values again.
Help for the configuring of File and Printer Sharing for MS Windows.
Should I turn the Actiontec Router or Modem Off each night, or should I leave it On, perpetually?
Actiontec Routers and Modems are designed to be left on continuously. The nature of the Internet makes an 'always on' connection very desirable, and in some cases a requirement. Turning the Actiontec Off when it is not being used, could arguably add to security. But any gains to Security by not being connected to the Internet 24/7, must be balanced against the loss of much convenience.
Whether it is a computer or a router, many users feel that turning electronic devices Off and On each day will wear them out prematurely, and others are convinced it will not.
Actiontec recommends leaving our routers and Modems on continuously, but they can be turned Off and On each day if you prefer.
My VPN Client shows that I am Connected. Why am I unable to access the network resources?
This will sometimes occur when there is a problem with the IP address used by the VPN Client computer. The remote VPN Client is either using an IP address that is in a range that conflicts with the VPN network or the VPN network requires that Clients use an IP address from within a specific range. If the IP address is in conflict, the solution is to change the range of IP addresses used by the Actiontec Router. But if the VPN network requires a specific range of IP addresses, then only an administrator can provide the information that is needed. After contacting the network Admin to determine the correct IP range, the directions in the following section can be used to configure the LAN IP Address of the Actiontec Router.
To change the range of addresses used by the computer network, the router's LAN IP address must be changed. To change the LAN IP address, you must first access the User Interface of the Router at the current IP address. (The Routers that Actiontec produces for use on Verizon's FiOS Service have a default IP address of 192.168.1.1.) After accessing the User Interface, select the 'My Network' option, and then 'Network Connections' from the left-hand margin. On the 'Network Connections' page select 'Network (Home/Office), and then on the 'Properties' page click the 'Settings' button. Now in the 'General' section below 'Internet Protocol', on the line for 'IP Address' you need to do more than just change the IP address, you need to change the network. The simplest way to do this is to change the third octet, or the third section of the IP address. The third section, or octet, is 'x' in the address 192.168.x.1. Not just any number value can be used; it must be a value that is between the number '2' and the number '254'. So something like 192.168.5.1 (The third octet is '5') or 192.168.77.1 (The third octet is '77') would work. It is not enough to just change the last octet or section. That would not change the network, only the IP address. This means that the network clients would still be assigned an IP address that conflicts with the VPN sever.
(Changing the LAN IP Address will cause the Router or Modem to assign new IP addresses that are compatible with the new LAN IP Address to all DHCP clients. Network Clients with Static IP addresses will need to be changed manually. Naturally, you will need to use the new IP address when accessing the User Interface of the device in the future.)
Since I installed the Actiontec Router, my server is no longer accessible from the Internet. How do I configure Port Forwarding on the Actiontec FiOS Routers?
Before attempting to configure port forwarding on the FiOS router, there is some information that you need to have in hand.
1. Computer/Device HOST name or IP Address if it is a static IP address
2. A list of the Port numbers and Protocols needed for the game, service or application
The Actiontec FiOS Routers have built in pre-configured rules for many of the common games, applications and services. It is a good practice to check the list before you begin to configure a new port forwarding rule. If the Protocol you need is not listed, you can create a custom rule using these directions. Any rule that you create will become part of the list and remain there until the router is Reset. (Resetting the router will restore all settings to default values and remove any custom rules that have been added.)
How to Create Custom Port Forwarding Rules for model RI408 fimware versions (22.214.171.124.44.11 to 126.96.36.199.45.27)
How to Create Custom Port Forwarding Rules for model MI424WR Rev. A,C & D firmware versions (188.8.131.52.44.28 to 184.108.40.206.220.127.116.11.3)
How to Create Custom Port Forwarding Rules for model MI424WR Rev. A,C & D firmware versions (18.104.22.168.22.214.171.124.3)
How to Create Port Forwarding Rules for model MI424WR Rev. A,C & D firmware versions (126.96.36.199.188.8.131.52.4)
How to Create Custom Port Forwarding Rules for model MI424WR Rev. E & F firmware versions (20.8.0 to 20.9.0)
How to Create Custom Port Forwarding Rules for model MI424WR Rev. E & F firmware versions (20.10.7)
How to Create Port Forwarding Rules for model MI424WR Rev. E & F firmware versions (20.19.8)
How to Create Port Forwarding Rules for model MI424WR Rev. G firmware versions (30.18.5)
How to Create Port Forwarding Rules for model MI424WR Rev. I firmware versions (40.19.22)
What is the current firmware version for my Actiontec Device?
This document lists the current product firmware versions for Actiontec and the various Internet Service Providers or ISPs.
Current Firmware Versions
If a product is not listed in the document, then there has been no firmware update or upgrade released for that product.
How many VPN connections can my device support at one time?
Most Actiontec devices can support up to 8 multiple outbound VPN tunnels to the same server.
All of the Ethernet ports on my Modem or Router are in use; can I still add devices? How?
Yes, connecting an Ethernet hub or switch will extend the capabilities of the Actiontec Modem or Router. Just run a standard Ethernet cable from the UPLINK port of your new hub or switch to a LAN port on the Actiontec Modem or Router. Then connect the power supply to the hub or switch.
Will my Xbox work with the Actiontec Modem or Router?
Yes, Actiontec Modems and Routers are compatible with the Xbox. However, it may be necessary to forward the ports used by the Xbox, in the Actiontec Modem or Router. Without Port Forwarding, the Xbox Connection Test may report a "NAT" rating of "STRICT" or "MODERATE", rather than "OPEN".
Can I use the Actiontec Modem or Router to connect to my employers VPN so that I can work from home?
Yes, the Actiontec Modems and Routers support connecting to VPN servers. By default, Actiontec Routers and Modems allow Client VPN traffic to pass-through. (the Actiontec will allow a connected PC to "pass-through" and connect to a remote VPN server).
NOTE: Unless otherwise specified, Actiontec Routers and Modems do not function as VPN endpoints. They cannot make a VPN connection directly to a VPN server, router or client. The reverse is also true, VPN routers, servers and clients cannot make a VPN connection directly to the Actiontec Router itself. (Some of the proprietary VPN applications require specific ports be opened in the Actiontec, for a successful connection. Not all VPNs use the same ports, so determine the ports used by your VPN software before attempting to forward the ports.)
Can the antenna on the Actiontec Wireless device be upgraded?
Yes, this device has an antenna that can be removed and replaced or upgraded. The connection method for this device, Reverse Polarity Sub-Miniture Adapter (RP-SMA), is readily available at most computer or electronics stores.
I need to secure my wireless network. What types of Wireless Security are there? What kind should I use?
There are several types of security for wireless networking.
Wireless MAC Address Filtering - allows the router to control access to the wireless network by allowing only certain MAC addresses to connect to the wireless network. This is an older type of security and can be circumvented. The MAC address was intended to be a unique permanent identification number assigned to every network adapter, but now the BIOS on some computers allow the MAC address to be assigned by the user, and there are free programs that allow the user to change the MAC address at will. These changes undermine the integrity of using a MAC address for identification. While some users still prefer to use this type of security, in reality it should only be used in conjunction with some other type of wireless security, and not as the sole method for securing a wireless network.
WEP (Wired Equivalent Privacy) - gives the wireless network security equivalent to that of a wired network. There are known hacks, but it is probably the type of security that is most commonly used, because nearly all wireless cards support it. If WEP is going to be used, be sure to use the highest bit level possible. Common values are 64-bit, 128-bit and 256-bit, the higher the number the stronger the encryption.
WEP+ 802.1x - is an improved form of WEP that uses a Radius Server for authentication. This Enterprise class Wireless Security Solution is not commonly used outside of large companies though, due to the expensive hardware requirements.
WPA (WiFi Protected Access) - has two levels; an Enterprise mode that uses 802.1x, and replaces WEP with WPA; and a PSK (pre-shared key) mode known as WPA Personal. The latter is considered the best option available at this time for many home users. WPA's strength is that it does not trust to encryption alone. It has been improved in many areas. WPA allows a for a much larger and therefore stronger key. It also implements TKIP (temporal key integrity protocol) which dynamically changes keys as the system is used. WPA makes breaking into a wireless LAN far more difficult.
The best choice for security is WPA Personal (WPA PSK), it uses a password or passphrase called a PSK (Pre-Shared Key) string that is created by the customer. The key needs to be from 8 to 63 characters long, with 20 characters being considered by most to be the minimum length required for a reasonably secure network. The key must be strong because this is where many hackers will attack. They often use a dictionary attack so those 20 characters CAN NOT be in the form of a real word (like dog or umbrella), they should be random, letters or numbers, capitol letters and even punctuation is allowable.
The best choice for compatibility would be WEP, it is probably the type of security that is most commonly used, because nearly all wireless cards support it.
Before WPA is enabled or a PSK string is set on the router, be certain that all of the wireless cards that are going to be used support WPA. If a network adapter does not support WPA, check the support pages for that product. Many adapters may have an updated driver or firmware that may provide or improve WPA compatibility.
How do I Reset the Actiontec to its default settings?
Begin with the power light solid Green. Then using a small tool, press and hold the Reset button in for 10 seconds, then release the button. It will take 30 to 40 seconds for the Actiontec to restart.
(Be aware that ALL configuration settings stored in the Actiontec will be lost when resetting the unit, and that it will need to be reconfigured, once it has restarted.)
I need to open ports on the Actiontec, should I use Port Forwarding or DMZ Hosting? Why?
Port Forwarding and DMZ Hosting are two ways to accomplish the same thing, opening ports. Where Port Forwarding is selective and specific, DMZ Hosting is indiscriminate and wide open. If you need to open one port or a small range of ports, or even a combination of both, Port Forwarding is the best choice. If the list of ports that need to be opened is long and complicated, it may be tempting to use DMZ Hosting, but it should still be avoided unless the security of the machine in question is not critical. The only time that DMZ Hosting is appropriate, is when it can be used without compromising the security of the network.
Examples where DMZ Hosting might be appropriate:
1. Devices like game consoles or web-cams with a limited Operating System
2. A server designed for that type of an environment
(like a proxy server or a server with hardened security)
3. Possibly a gaming computer, but it is not recommended
(At the very least the computer may need frequent reloading of the OS)
The difference between Port Forwarding and DMZ Hosting is security. While any open port will slightly degrade security, it is possible to maintain a level of security on a network that utilizes Port Forwarding. It is not really possible to keep a network secure using DMZ Hosting, unless the network or some of it's critical components are designed for it.
Rule of Thumb:
Use Port Forwarding as the primary tool for configuring ports.
Use DMZ Hosting only when it is required.
Can the Actiontec FiOS Routers be used with a Cable Internet Service Provider, if I change ISPs?
Yes, the Actiontec FiOS routers are compatible with ISPs that allow the customer to use their own router. (Some ISPs require their customers to use specific routers that they provide.)
Since the Actiontec FiOS Router can automatically configure many dynamic ISP connections, the following setup will work for many Cable service providers.
1. Begin by powering Off the Cable modem
2. With the Actiontec Router turned On, Press and hold Reset button for 10 seconds
3. When the Actiontec Router has finished restarting, turn it Off
4. With a standard Ethernet cable, connect one end to the Cable modem
5. Connect the other end to the WAN (white) Ethernet port of the Router
6. Now turn the Cable modem On
7. When it has finished restarting, Turn the Actiontec Router On
In most cases this process will allow the Actiontec router to obtain an IP address from the Cable provider, and the Internet LED on the Actiontec FiOS Router will come on. When it has, the Router has connected and is online. At this point a computer can be connected to the Router to use the Internet, or to make any other configuration changes that may be desired in the Router.
Does this device support IPv6?
No this device does not support IPv6.
Why is my AT&T MicroCell not working correctly with my MI424WR router?
If your AT&T MicroCell device is not working with your Actiontec MI424WR please check to make sure that the AT&T MicroCell is registered to ATT with a 911 address that matches the current GPS location of the AT&T MicroCell. Please follow the steps below to correct this problem.
1) Power on the AT&T MicroCell and wait for the Power indicator to turn solid green.
a. The Ethernet indicator will illuminate when the AT&T MicroCell is connected to the MI424WR router/Internet connection.
b. The Computer indicator will illuminate when a PC is connected (not required).
2) 45 seconds after power up the 3G indicator will begin to slowly blink.
3) 70 seconds after power up the GPS indicator will begin to slowly blink.
a. Both the 3G and GPS indicators will be slowly blinking.
b. The AT&T MicroCell will remain in this state indefinitely if the GPS signal is too weak.
4) 2 to 4 minutes after power up the GPS indicator will turn solid green (this does not require an Internet connection).
a. This does NOT require an Internet connection.
b. This does NOT require the AT&T MicroCell physical location to match the Active Device Location set in the myAT&T online account in the "Your 3G MicroCell Device Location & E911 Information" section.
5) 5 to 7 minutes after the GPS indicator is solid green the 3G indicator will turn solid green
a. This does require the AT&T MicroCell physical location to match the Active Device Location set in the myAT&T online account in the "Your 3G MicroCell Device Location & E911 Information" section.
b. If the Active Device Location and the actual GPS locations do NOT match, then the 3G indicator will continue to blink indefinitely.
c. A power cycle of the AT&T MicroCell is required when the Active Device Location is changed in the online account.
6) The AT&T phones will need to be power cycled after the MicroCell has been activated.
7) NO port forwarding is required for the activation or function of the AT&T MicroCell.
a. The AT&T MicroCell does not open any ports using UPnP in the router.
What is Actiontec doing about the industry wide issue of the (WPS) Wi-Fi Protected Setup PIN brute force vulnerability?
As of 1/31/2012 all future Actiontec products that have the (WPS) Wi-Fi Protected Setup feature in the firmware will also contain a WPS "lock-out" feature and/or any other Wi-Fi Alliance recommended improvements to the (WPS) Wi-Fi Protected Setup.
Is my Actiontec DSL Modem or Cable/DSL Router a Firewall?
Yes, the Actiontec DSL Modem and Cable/DSL Router acts as a Firewall. They provide security through "Stateful Packet Inspection" or SPI, which inspects incoming data packets to make sure they correspond to an outgoing request. Unsolicited packets (which could be harmful) are rejected. Through the use of specific Firewall settings, the firewall can be configured to block outgoing as well as incoming traffic.
How do I disable Client Isolation or AP (access point) Isolation?
Actiontec devices NOT have Client Isolation or AP (access point) Isolation enabled on our routers (therefore no disabling is required).