How can the default gateway of router change suddenly from 192.168.0.1 to 192.168.1.1?

2

I used to access my home router—a TP-LINK model—at the address 192.168.0.1.

But today, I just couldn't do that. Apparantly, it the gateway got changed to 192.168.1.1 for absolutely no reason.

So, how did the gateway got changed? I knew that router generally used one of those IP’s by default. But, didn’t know that they could change the it just like that.

Could it my ISP or the manufacturer of the router or someone else? Also can manufacturer of the router push some sort of software update to the router? Does the router have some sort of operating system independently capable of doing that?

Edit: I found the DHCP settings of the router and it clearly showed that DHCP as enabled and "default gateway(optional)" was set to192.168.1.1. I tried to change it back to 192.168.0.1 to which I got:

Error code: 26106
The IP address is not in the same subnet with LAN IP address.

Bibek_G

Posted 2015-09-03T14:24:04.800

Reputation: 153

2Generally, your TP-Link device won't change its gateway or IP Address unless the interface you're talking about has been changed to DHCP to receive its address automatically. Also updates won't be pushed to your device automatically - generally anyway, you'd have to update the firmware for that. So have you made any changes to any of the interfaces on the router by accident? Or do you know if anyone else has connected to your router and made the changes for you - usually there are logs on them that you should be able to see if this has happened. – James – 2015-09-03T14:57:00.510

@James Actually, I did change the "WAN Connection Type" from "PPPoE/Russia PPPoE" to "Dynamic IP". But, that's just the way I connect to my ISP, right? And also, I used to do switch between those modes without ever having the router's IP changed. – Bibek_G – 2015-09-03T15:03:37.510

Hmm, well "Dynamic IP" will definitely be the reason why it has changed, however I am not sure about why it hasn't before. The only think I can think of there is that the ISP has changed something at their end - no updates or anything like that, just an infrastructure change which would have possibly changed the gateway address. – James – 2015-09-03T15:05:54.587

@james: no, in this case the "dynamic IP" is for the WAN side. The router LAN interface IP will not be changed by the ISP. The only possible way the ISP might be able to change this from the WAN side is if they own this equipment and can push a firmware update or configuration file. – Yorik – 2015-09-03T19:27:30.903

Hmm, I am pretty sure that there was a configuration/update push from the ISP side, i.e. If you did not change any DHCP config or Your LAN config, Did you?. Yes they can push that from their end, if they have access to enter your router. Which depends whether you have changed the password which was given by them! You can check if it was really the case by checking the last reboot time/last reboot reason. Also if any logs are getting saved on the router.(oops old question, last part may not be possible to check) – Anirudh Malhotra – 2016-10-22T03:03:34.693

Answers

2

It could be one of the following:

  1. Someone gained access to your router and changed the settings from inside of your network or from outside of your network. Your password could be too weak and thus allowed someone to get in by simply guessing it.

  2. You (or someone else around) reset device to the factory default by accident.

  3. Your device malfunctioned and reset itself to the factory default settings.

  4. A vulnerability in your router could exist and someone used it to change configuration of your router.

  5. Router's internal IP address is configured with DHCP and suddenly the DHCP configuration changed for some reason (it is possible, but very unlikely) - will depend on the exact model that you have.

Also can manufacturer of the router push some sort of software update to the router?

Usually firmware updates for devices like yours are published on the manufacturer's web site and users are responsible for downloading and installing them themselves. Thus it is very unlikely that manufacturer pushed some sort of update.

Does the router have some sort of operating system independently capable of doing that?

Yes, router does have some sort of operating system. And usually it should not change the settings without user interaction (unless configured to do so). But, still it could malfunction and change the settings.

VL-80

Posted 2015-09-03T14:24:04.800

Reputation: 3 867

1You forgot 6. Router detected default subnet (.0.1/24) was in use and automatically switched to the next available subnet, or 7. Guest wireless network configuration messes things up. – qasdfdsaq – 2015-09-03T15:17:39.960

I've added updates in question. Could you break that down for me? – Bibek_G – 2015-09-03T15:24:18.263

@coder_Bibek, It is little bit beyond the original question you asked, but here is explanation: Your proposed IP address for the default gateway is outside of the internal subnet range. If you really want to have this IP address, then try to set subnet mask 255.255.0.0, or change internal subnet IP address to 192.168.1.0 with subnet mask 255.255.255.0 – VL-80 – 2015-09-03T15:30:40.050

1Or 8. There's another router on your LAN. – David Schwartz – 2015-09-28T19:10:16.223

1

I have the Tp-Link router model Tl-WR1043ND Ver 1.7 with the latest firmware .

I set the lan ip address of the router at 192.168.100.254 . The DHCP is set automatically at 192.168.100.100 to 192.168.100.199 . There are 10 computers with fix ip address . 192.168.100.1 to 192.168.100.10 .

Sometimes , the router ip address change itself to 192.168.0.1 . Maybe 6 times in 2 years . The DHCP became 192.168.0.100 to 192.168.0.199 . Now the router is not part of the local network . The router job is to connect everyone to internet . Now , nobody have internet . No emails ...

I do some maintenance on those computers from outside. There are 10 lines in the port forwarding section of the router . Those 10 lines are still there but became disable . The wifi part is OK

If I reset to factory default the router . All the configuration is lost and the router lan ip address became 192.168.1.1 not 192.168.0.1 .

I replace the router with the same model and same firmware . Same problem . At the beginning I had to go next to the router (100km away) to fix the problem . I found the remote management part in the router . Now I can fix that remotely .

The ISP is Videotron .

One cable modem connected to the router wan port . 16 ports ethernet switch connected the one lan port of the router . 10 computers and 3 network printers connected to the switch .

I don't know what to say . I thing it is a bug in the router ...

Rejean

Rejean

Posted 2015-09-03T14:24:04.800

Reputation: 11

how do you connect to the WAN? adls.docsis...etc? – Francisco Tapia – 2015-09-17T14:04:59.197

0

Very simple answer, my cable router have address 192.168.0.1, you cant change that setting because provider lock router access. Automatically your wireless router adapt and change address to 192.168.1.1, and also your DHCP address range to 192.168.1.100 - 192.168.1.199. You are not hacked.
If you connect router on other network and factory reset it will change back to 192.168.0.1.

Andra

Posted 2015-09-03T14:24:04.800

Reputation: 1

0

What address does your TP-LINK router have on its WAN port? Often the "modem" you get from your ISP is not just a bridging modem but actually a full gateway that does NAT and DHCP service. If that's the case for you, and if your ISP-provided modem (really gateway) started using the 192.168.0.0/24 subnet on its LAN side, your TP-LINK device would have had to switch to a different subnet on its LAN side in order to work.

When you were using PPPoE directly from the TP-LINK box, it was probably connecting to a PPPoE server at your ISP and getting a publicly routable IP address. When you switched to "Dynamic IP", it was probably relying on your ISP-provided modem/gateway to act as a NAT gateway and DHCP server. If that ISP-provided box was already using 192.168.0.0/24 as its NAT private (LAN side) subnet, then the TP-LINK box couldn't use it, so the TP-LINK box had to switch its NAT private (LAN side) subnet to something else, and picked 192.168.1.0/24.

That's assuming your TP-LINK box was smart enough to be helpful like that. Honestly I would have expected it to just fail and force you to fix the subnet conflict yourself.

By the way, if this hypothesis is correct, then you're effectively doing "double NAT" on your network, which is fraught with problems. I recommend everyone avoid double NAT unless you really really know what you're doing. Pick whether you want your ISP-provided box or your TP-LINK box to be your NAT gateway, and configure the other box to just transparently bridge traffic.

Spiff

Posted 2015-09-03T14:24:04.800

Reputation: 84 656