Internet Access

Internet access to the FRITZ!Box via HTTPS enabled

This setting allows the user interface of the FRITZ!Box to be accessed from the internet.

• FRITZ!Box users who have been granted the right "Access from the internet allowed" can access the FRITZ!Box user interface over HTTPS and view all settings. FRITZ!Box users who also have the "FRITZ!Box settings" right can also change settings in the FRITZ!Box.
• FRITZ!Box users who have been granted the rights "Access from the internet allowed" and "Access to NAS contents" can access the FRITZ!Box storage media over HTTPS.

TCP port for HTTPS

The TCP port used by the FRITZ!Box for HTTPS is displayed here. Encryption protects access to the FRITZ!Box user interface via HTTPS.

The default HTTPS port is 443.

If the FRITZ!Box is to be accessed at a port other than the default HTTPS port 443, you can change the port number here. Select a port number between 1 and 65535.

If the FRITZ!Box is registered with a MyFRITZ! account, then a different port number was already entered for HTTPS. The port number was assigned randomly.

If the FRITZ!Box does not use the default HTTPS port 443, then the port number must be entered to open the FRITZ!Box user interface. This applies both when the user interface is opened from within the home network and for access from the internet.

Web address of your FRITZ!Box

The web address of the FRITZ!Box is the FRITZ!Box's public IP address. FRITZ!Box can be reached from the internet at this IP address. The public IP address is assigned by the internet service provider.

The IP address can change every time a connection to the internet is established. The connection is cleared automatically by the internet provider every 24 hours. Then a new public IP address is assigned.

The following addresses are displayed here:

• The MyFRITZ! address: If the FRITZ!Box is registered with a MyFRITZ! account, the MyFRITZ! address is displayed here as well. The MyFRITZ! address is the IP address assigned by the internet provider. The MyFRITZ! address remains constant even when the IP address changes.
• The dynamic DNS address: If you enabled dynamic DNS in the FRITZ!Box, the dynamic DNS address is displayed here. The dynamic DNS address is the IP address assigned by the internet provider. The Dynamic DNS address remains constant even when the IP address changes.
• The IP address assigned by the internet provider.
• The IPv6 address: If you enabled IPv6 in the FRITZ!Box, the public IPv6 address is displayed here.

If the FRITZ!Box uses an HTTPS port other than the default 443, the port number is appended to the web address after a colon.

If you want to access the FRITZ!Box via HTTPS from the internet when you're away from home, you must enter one of the displayed addresses. Enter the address exactly as it is displayed here.

Internet access to your storage media via FTP/FTPS enabled

This setting allows the storage media on the FRITZ!Box to be accessed from the internet.

• The storage media are accessed using the FTP and FTPS protocols.
• The prerequisite is that a user account has been configured in the FRITZ!Box with the rights "Access from the internet allowed" and "Access to NAS contents".

TCP Port for FTP/FTPS

The TCP port used by the FRITZ!Box for FTP/FTPS is displayed here. If you want to use a different port, then you can enter another port number here.

FTP address

The following FTP/FTPS addresses are displayed:

• DynDNS address: If you enabled DynDNS (dynamic DNS) in the FRITZ!Box, the DynDNS address is also displayed. The DynDNS address is the IP address assigned by the internet provider. The DynDNS address remains constant even when the IP address changes.
• The IP address assigned by the internet provider.
• The IPv6 address: If you enabled IPv6 in the FRITZ!Box, the public IPv6 address is displayed here.

If you want to access your storage media over the internet from a remote location via FTP or FTPS, use one of these addresses.

Certificate

Certificates allow the authenticity of remote peers to be checked for internet communication.

The FRITZ!Box uses its own SSL certificate.

You can use another certificate instead.

The SSL Certificate of the FRITZ!Box

• It is not issued by any of the common, well known certification authorities.
• It is not included by default in the certificate administration of browsers.

How a Certificate Check Works

The certificate administration is a list of certificates from trustworthy certification authorities.

When remote peers are accessed, the browser looks in this list for the certificate for the remote peer. Based on this certificate the browser checks to make sure that the remote peer is what it claims to be. When the FRITZ!Box is accessed this means that it checks to make sure that it is accessing the right FRITZ!Box. If the certificate is not included in the list, or if the authenticity of the remote site is not confirmed, the browser issues a certificate warning.

You can avoid the certificate warning by downloading the SSL certificate used by the FRITZ!Box from the FRITZ!Box and importing it to the browser's certificate administration.

If you access the FRITZ!Box from different computers, load the certificate on all of the computers and import it into the certificate administration of all your browsers.

Status

This indicates which certificate the FRITZ!Box is using: its own certificate or another certificate.

The fingerprint of the certificate is also displayed.

Install

Two steps are required to install the certificate for the browser:

1. Download the certificate from the FRITZ!Box.
2. Import the certificate into the certificate administration of the browser.

Downloading the Certificate from the FRITZ!Box

1. Click "Download Certificate".
2. Select "Save File".
3. Click on "OK".

The certificate is loaded from the FRITZ!Box to the "Download" folder of your device.

Importing the Certificate into the Certificate Administration of the Browser

For the browser to find the certificate, it must be added to the list of trustworthy certificates. The following section describes how certificates are imported into the certificate administration of several browsers and the Apple OS X operating system.

Microsoft Internet Explorer

Mozilla Firefox

Google Chrome in Windows

Google Chrome in Apple OS X

Apple OS X

User's Own Certificate

If you have your own SSL certificate, which you use in the certificate administration of your browsers, then load it to the FRITZ!Box in order to prevent certificate warnings.

Certificates protected with a password can also be imported.

The certificate must fulfill the following criteria:

• The certificate and the private key must be in PEM format.
• The private key must be an RSA key.

Importing the Certificate to the FRITZ!Box

1. Click the "Browse..." button.
2. Select the folder and the PEM file.
3. Click "Open".
4. If the certificate is protected with a password, enter the password in the "Password" field.
5. Click "Import...".