I signed up on a small office plan and was sent the archer vr1600v modem router.
However I do have a low traffic server that sits behind this router with a FQDN running my work cloud and mail server which needs to be put into the DMZ of the router (as I alreay have my own firewall), however I cannot do this because of a service called CWMP which for the life of me I cannot turn off.
I can run the modem in bridge mode to my UniFi USG however you then lose VoIP capability when running in this mode. The CWMP also leaves ports open which is not very ideal for those who don't change the default access username and passwords.
Is there a setting somewhere I can change or a firmware update available to remedy this?
I have just installed Google Wifi which ultimately creates a double NAT in my network. Easy answer is enable DMZ but I get the same problem as you do and because I have VOIP, cannot bridge the modem.
I have same question. How do I enable DMZ? With the release of mesh wifi network devices now at consumer level, this is going to become a problem.
The open CWMP ports are not a security risk. They are used for remote configuration of the modem on TPG’s network. The modem will not accept a request from a remote CWMP server unless the user manually overides the CWMP server setting in the GUI.
We have a firmware upgrade that fixes the DMZ issue.
@ccall48 can you PM your TPG username to me so I can have your firmware upgraded
@arrikhan your firmware upgrade is done. Please try to enable the DMZ.