Harden a SOHO router
Hardening a SOHO router is a short, repeatable pass that shrinks what the internet can reach: replace the factory admin login, turn off remote management and UPnP, turn on the SPI firewall, and open only the one inbound service the plan documents. This lab uses the simulated admin page; a real router follows the same pages.
Steps
- 1
On the Administration page, replace the factory admin username and set a passphrase of at least 12 characters, then save.
- 2
Turn off remote management on the Administration page and save.
- 3
Disable UPnP on the Security page and apply.
- 4
Enable the SPI firewall on the Security page and apply.
- 5
Add the one documented inbound rule (TCP external 8443 to 192.168.50.20 port 443) and apply. Open nothing else.
What you should see
Each save confirms the setting. The verification shows the factory credential retired, remote management and UPnP off, the firewall on, and exactly one approved port forward.