Security Concerns on a Used Peplink Switch

Product Discussion
1

Hello, I recently purchased a used Peplink 24 port switch that is still registered under the prior owner’s InControl2 organization. I factory reset it and upgraded the firmware hoping this removes all traces of the prior owner. I opened a support ticket to move it to my organization, but Peplink denied the request saying the prior owner must release the switch before I can add it to my organization. Contacting the prior owner is not possible so the only way I can interact with the switch is to use the local Web Portal (no InControl2 available).

My question is, if I put this switch into service, can the prior owner take over the switch or gain access to it?

Is there any way for me to get it into InControl2 to manage it in the cloud?

2

I you turn IC2 off via the GUI the answer to this question is “no.”

No, not so far as I am aware. At least not directly. However you could do a bit of a work-around. For example, if one has the switch behind a Peplink router and the router is available to you via IC2 one could use the “InTouch” feature of IC2 to log into the switch via its GUI.

1 Like