Lab — Harden a SOHO Wireless Gateway (Northwind NX-310)

Sign in to the gateway

The NX-310 ships with a published factory login printed on its label. Sign in, then change it before you finish (Administration tab).

Username

Password

Factory label — admin / setup1234 · console at http://10.20.30.1

Live summary of the gateway. Watch these values change as you apply settings.

Name the staff network and decide whether it is advertised.

Network name (SSID)

SSIDs are case-sensitive. The clients you provision must type it exactly.

Broadcast this SSID (visible in the device's Wi-Fi list)

✓ Applied

Pick the strongest protection the gateway offers, set a strong passphrase, and close the WPS shortcut.

Authentication

Encryption

Wi-Fi passphrase

Use 12+ characters with upper, lower, a digit, and a symbol.

Wi-Fi Protected Setup (WPS) enabled

WPS lets devices join with a short PIN. Convenient — but the PIN is brute-forceable.

✓ Applied

Replace the published factory login so no one can open this console with the label credentials.

New administrator username

New password

Confirm password

Must differ from the factory login and meet the strong-password rule (12+ chars, mixed case, digit, symbol).

✓ Updated

Give customers their own network, isolated from staff devices.

Enable a separate guest network

Guest network name (SSID)

Client isolation (guests can't see staff devices or each other)

✓ Applied

Provision the owner's laptop. Join the staff network and confirm the link is up.

Network name

Passphrase

✓ Connected — internet reachable