NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
disabling LAN ports on on RBS50
I am trying to disable the LAN ports on an RBS50 and following instructions here
https://community.netgear.com/t5/Orbi/DISABLE-LAN-PORTS-ON-RBS50/m-p/1719465#M55199
That is:
-----------------------
- From browser go to the router's debug page (http://192.168.1.1/debug.htm). Use your router's IP address or http://orbilogin.com/debug.htm
- Enter admin as user name and your router’s management password
- Tick "Enable Telnet" option
- Use Telnet from your computer to connect to your Router telnet 192.168.1.1 and enter admin and the same password as above
- Enter the following commands:
- config get dgc_netif_lan_phyif --> printout should be eth1 for RBS50
- ifconfig eth1 down --> use the value that you got from the previous command
- ifconfig commit
---------------------
Everything seems to work OK until last step - when enter 'ifconfig commit' I get 'ifconfig: commit: error fetching interface information: device not found'
Ideas or suggestions?
Note the print out for 'config get dgc_netif_lan_phyif' is eth1 so eberything seems to work up to there?
8 Replies
I have not tried the telnet LAN blocking. However, in a previous job we installed products to physically lock the RJ45 ports: https://www.amazon.com/NTW-NL-PBK10-WH-Locking-Blocker-Color/dp/B00KN1HMXY/ref=pd_sbs_147_t_0/136-7858461-1826201?_encoding=UTF8&pd_rd_i=B00KN1HMXY&pd_rd_r=d6fbbc59-74e0-4c4b-a74f-d6958df0b5d2&pd_rd_w=prke4&pd_rd_wg=3Vk7T&pf_rd_p=5cfcfe89-300f-47d2-b1ad-a4e27203a02a&pf_rd_r=AVJMH79GAMX1FECFF2NY&psc=1&refRID=AVJMH79GAMX1FECFF2NY
I am starting to realize even blocking the ports (physical or in the firmware) may not be enough.
The Sync button still allows push button WPS - anyone with physical access to the router can connect using WPS. As far as I can tell there is no way to disable the sync / WPS function on the RBS50.
For my situation it looks like the Orbi Outdoor Satellite (RBS50Y) would be best. Its in an separate (normally locked) building - but for security I would prefer that anyone who has physical access can't access my network.
The RBS50Y has no ethernet ports and the sync button is disabled after the intial sync with the router. It is more than I would like to pay - but seems best option.
Vandergraff wrote:The Sync button still allows push button WPS - anyone with physical access to the router can connect using WPS. As far as I can tell there is no way to disable the sync / WPS function on the RBS50.
I asked a person who is writing custom firmware about disabling the sync button. He confirmed there is no configuration setting to do so, mostly because it is a requirement that WiFi access points have a sync button. He did say that a person could hack some of the "button code" in the router, but made no guarantee (a) that it would work, or (b) that the hack would not be overwritten with any new firmware release.
I put this in my "things to try" file for some time when I won't mind having to do a factory reset and reconfig if I screw it up. Not any time soon.
Of course, if someone REALLY wanted to disable the sync button, he could open the case and snip a wire leading to the switch (if the switch isn't soldered directly to the circuit board). Or, glue something over the button that someone would have to break off to get at the switch. Or, put some Crazy Glue in the switch so it won't move any more.
Disabling ports on the RBS is not supported. Thus why you see the config error when you try to apply the change.
You might try Voxels 3rd party FW over on smallnetbuilders forum.
Vandergraff wrote:I am trying to disable the LAN ports on an RBS50 and following instructions here
https://community.netgear.com/t5/Orbi/DISABLE-LAN-PORTS-ON-RBS50/m-p/1719465#M55199
That is:
-----------------------
- From browser go to the router's debug page (http://192.168.1.1/debug.htm). Use your router's IP address or http://orbilogin.com/debug.htm
- Enter admin as user name and your router’s management password
- Tick "Enable Telnet" option
- Use Telnet from your computer to connect to your Router telnet 192.168.1.1 and enter admin and the same password as above
- Enter the following commands:
- config get dgc_netif_lan_phyif --> printout should be eth1 for RBS50
- ifconfig eth1 down --> use the value that you got from the previous command
- ifconfig commit
---------------------
Everything seems to work OK until last step - when enter 'ifconfig commit' I get 'ifconfig: commit: error fetching interface information: device not found'
Ideas or suggestions?
Note the print out for 'config get dgc_netif_lan_phyif' is eth1 so eberything seems to work up to there?
FURRYe38 wrote:Disabling ports on the RBS is not supported. Thus why you see the config error when you try to apply the change.
Why not? Seems a strange decision given that the Orbi Outdoor Satellite (RBS50Y) has no Ethernet ports (for somewhat obvious security reasons).
The RBS50Y seems functionally very similar to the RBS50
- The RBS50Y has no physical ethernet port to disable.
