Help needed with ORBI issue

Downgrade. Several people, myself included, have had intermittent connnection issues wuith 2.5.1.8

What happens if you disable Armor? 

Did you factory reset the RBR and RBS and setup from scratch after applying v2.5.1.8? 

Use a whois to find out where those IP addresses are coming from. 

---

voerman wrote:

Router RBR50 with firmware version V2.5.1.8 and behind a modem in bridge modus

Satelitte RBS50 with wired backhaul (cat7) and firmware V2.5.1.8 

Satelitte RBS50 with wired backhaul (cat7) and firmware V2.5.1.8 

Netgear ARMOR is turned on

Since last week I am having issues with my Orbi setup and to date I haven't found a way to solve them. The problems started more or less after an software update. What happens is that the connections are more or less stable during the day but at night the wireless connections stop working. The only solution is restart all parts of the Orbi system the next day. It looks like the connection stops at 23:00 at night but not sure about that. Most of the time the router is still working ok and the satellites are offline for wifi. But sometimes the wifi of the router is stopping as well.

 

When I look at log files I see that I am getting Dos attacks but someone from my ISP said that could as well point at a security system not working properly. Does anybody know what I can do ?

 

Hope someone can help

 

Greets Roderick,

 

Here is a part of the log file

 

[DHCP IP: 192.168.1.14] to MAC address 18:b4:30:5e:b0:bf, Wednesday, March 18, 2020 08:00:19
[DoS Attack: ACK Scan] from source: 17.242.176.144, port 5223, Wednesday, March 18, 2020 07:57:51
[DHCP IP: 192.168.1.39] to MAC address 88:63:df:8e:35:8d, Wednesday, March 18, 2020 07:57:36
[WLAN access allowed] from MAC : 88:63:DF:8E:35:8D, Wednesday, March 18, 2020 07:57:31
[Access Control] Device IMAC-6DEALS with MAC address 88:63:DF:8E:35:8D is allowed to access , Wednesday, March 18, 2020 07:57:31
[DoS Attack: ACK Scan] from source: 34.237.198.82, port 11095, Wednesday, March 18, 2020 07:57:26
[DoS Attack: ACK Scan] from source: 3.86.149.151, port 11095, Wednesday, March 18, 2020 07:56:30
[DHCP IP: 192.168.1.26] to MAC address 14:91:82:0a:ce:ed, Wednesday, March 18, 2020 07:56:11
[DoS Attack: ACK Scan] from source: 34.195.152.165, port 11095, Wednesday, March 18, 2020 07:55:56
[WLAN access allowed] from MAC : 14:91:82:0A:CE:ED, Wednesday, March 18, 2020 07:55:40
[Access Control] Device WEMO with MAC address 14:91:82:0A:CE:ED is allowed to access the net, Wednesday, March 18, 2020 07:55:40
[DHCP IP: 192.168.1.26] to MAC address 14:91:82:0a:ce:ed, Wednesday, March 18, 2020 07:55:39
[DoS Attack: ACK Scan] from source: 34.237.198.82, port 11095, Wednesday, March 18, 2020 07:55:26
[DoS Attack: ACK Scan] from source: 3.86.149.151, port 11095, Wednesday, March 18, 2020 07:54:29
[DoS Attack: ACK Scan] from source: 34.195.152.165, port 11095, Wednesday, March 18, 2020 07:53:55
[DoS Attack: ACK Scan] from source: 34.237.198.82, port 11095, Wednesday, March 18, 2020 07:53:25
[DoS Attack: ACK Scan] from source: 3.86.149.151, port 11095, Wednesday, March 18, 2020 07:52:29
[DoS Attack: ACK Scan] from source: 3.80.102.142, port 11095, Wednesday, March 18, 2020 07:51:57
[DoS Attack: ACK Scan] from source: 34.195.152.165, port 11095, Wednesday, March 18, 2020 07:51:55
[DoS Attack: ACK Scan] from source: 34.237.198.82, port 11095, Wednesday, March 18, 2020 07:51:25
[DoS Attack: ACK Scan] from source: 18.207.62.3, port 11095, Wednesday, March 18, 2020 07:51:09
[DoS Attack: ACK Scan] from source: 3.86.149.151, port 11095, Wednesday, March 18, 2020 07:50:29
[DoS Attack: ACK Scan] from source: 3.80.102.142, port 11095, Wednesday, March 18, 2020 07:49:56
[DoS Attack: ACK Scan] from source: 34.195.152.165, port 11095, Wednesday, March 18, 2020 07:49:55
[WLAN access allowed] from MAC : 00:1D:63:04:C1:34, Wednesday, March 18, 2020 07:49:34
[DHCP IP: 192.168.1.15] to MAC address 00:1d:63:04:c1:34, Wednesday, March 18, 2020 07:49:34
[Access Control] Device MIELE-001D63FFFE04C134 with MAC address 00:1D:63:04:C1:34 is allowed, Wednesday, March 18, 2020 07:49:34
[DoS Attack: ACK Scan] from source: 34.237.198.82, port 11095, Wednesday, March 18, 2020 07:49:25
[DoS Attack: ACK Scan] from source: 18.207.62.3, port 11095, Wednesday, March 18, 2020 07:49:09
[WLAN access allowed] from MAC : 24:FC:E5:21:B4:1A, Wednesday, March 18, 2020 07:48:53
[Access Control] Device TIZEN with MAC address 24:FC:E5:21:B4:1A is allowed to access the ne, Wednesday, March 18, 2020 07:48:52
[DHCP IP: 192.168.1.10] to MAC address 24:fc:e5:21:b4:1a, Wednesday, March 18, 2020 07:48:52
[DoS Attack: ACK Scan] from source: 3.86.149.151, port 11095, Wednesday, March 18, 2020 07:48:28
[DHCP IP: 192.168.1.14] to MAC address 18:b4:30:5e:b0:bf, Wednesday, March 18, 2020 07:48:07
[DoS Attack: ACK Scan] from source: 3.80.102.142, port 11095, Wednesday, March 18, 2020 07:47:56
[DoS Attack: ACK Scan] from source: 34.195.152.165, port 11095, Wednesday, March 18, 2020 07:47:54
[WLAN access denied] from MAC : 38:D2:69:C0:1C:CF, Wednesday, March 18, 2020 07:47:54

 

 

 

---

Bought a RBR50 Orbi AC3000 plus a RBS50 Orbi Satelite. Set up both according to instructions and both worked as expected, with a few performance issues. Did not maintain a record of the original FW installed. As the web interface suggested a system upgrade, clicked on it and got an upgrade to v2.5.1.8 both on the router and the satelite. The router wi-fi went into intermittent mode, coming and going every 10 or 20 seconds. The satelite just did not connect any more.  

I downgraded the firmware all the way to 1.4.0.16. Intermittent wi-fi continued on the router. Went up through all the versions of firmware, same results. I only managhed to pair the Satelite when I got back to v.2.5.1.8. Each time, I went through the lengthy process of resetting to factory default and reconfiguring everything. But what with an intermittent wi-fi, it was useless.

BTW, I do have an ISP router, whose wi-fi has been turned off. My optical fiber network ISP is 240 Mbps nominal (what with Covid-19, sometimes I get 2 to 5 Mbps nowadays). I do have double-NAT, since I need specific addresses on my home network (because I hav IOT devices which would be painful to re-address).

Have given up and gone back to my previous Router.

Shall wait until Netgear manages to produce a stable FW version for the RBR50/RBS50.