Internet/Certificate issues after firmware update on RBR50

Aspirant

Dec 10, 2020

RBR/S50 pair currently running v2.5.2.4 (obviously out of warranty support)

Just wanted to add on to the idea of manually updating to one of the later firmwares (2.6.1.40 and 2.7.1.60) that attempting to update my satellite results in a server error 400 and I'm unable to update my satellite manually. As many (and the manuals state) SATELLITES FIRST! If this is a requirement I'm truly in a hole until Netgear decides to publish a one of the newer versions for managed upgrade, as my recent update to version 2.5.2.4 has introduced the infamous untrusted certificate issue for all of my internet bound WiFi clients and I have no way to up/downgrade my setup manually.

I've already verified none of my attached devices are blocked
I've already disabled secure address in iOS 14.x
I've already done factory reset, reset+restore config, and have come to the conclusion that the certificate issue is baked into the firmware (I suspect with a little DNS spoofing/ trickery to pull off the "easy login").
I have too many security concerns and too many PC's and browsers to make this exception considering Netgear's continued failure to manage their PKI like an enterprise.

Does anyone have any solid advice for a seasoned user who, admittedly, apparently chose the wrong product? (Bird to TheWirecutter)

My last resort would be to upgrade/ downgrade the router first, but I don't want to paint myself into a corner - though at the moment the situation couldn't be much worse, and I'm about ready to just buy a real mesh WiFi system.

FURRYe38
Guru - Experienced User
Dec 10, 2020
Are you using the RBR to update RBS FW or logging into the RBS web page and sending the FW file directly there? Use a wired PC?
I have loaded my RBS50 with v60 and didn't see any problems. I did use the RBS web page to send the FW file.

I think I used MS Edge to send the FW file. Thought FF or Opera should work as well. Be sure to clear all browser caches before entering the web page. Be sure your unpacking the .zip file.

I did downgrade back to v16 from v60 as I found problems with recent FW after v16.
TheRealNavigat0 wrote:

Just wanted to add on to the idea of manually updating to one of the later firmwares (2.6.1.40 and 2.7.1.60) that attempting to update my satellite results in a server error 400 and I'm unable to update my satellite manually. As many (and the manuals state) SATELLITES FIRST! If this is a requirement I'm truly in a hole until Netgear decides to publish a one of the newer versions for managed upgrade, as my recent update to version 2.5.2.4 has introduced the infamous untrusted certificate issue for all of my internet bound WiFi clients and I have no way to up/downgrade my setup manually.

I've already verified none of my attached devices are blocked
I've already disabled secure address in iOS 14.x
I've already done factory reset, reset+restore config, and have come to the conclusion that the certificate issue is baked into the firmware (I suspect with a little DNS spoofing/ trickery to pull off the "easy login").
I have too many security concerns and too many PC's and browsers to make this exception considering Netgear's continued failure to manage their PKI like an enterprise.
Does anyone have any solid advice for a seasoned user who, admittedly, apparently chose the wrong product? (Bird to TheWirecutter)

My last resort would be to upgrade/ downgrade the router first, but I don't want to paint myself into a corner - though at the moment the situation couldn't be much worse, and I'm about ready to just buy a real mesh WiFi system.
- TheRealNavigat0
  Aspirant
  Dec 10, 2020
  I was attempting to update the RBS via the RBR UI. I used multiple browsers on multiple systems (all but one were virgin to Orbi UI) - all were wired because the WiFi was knackered.
  
  To be honest - I'd never actually tried connecting directly to the RBS - didn't even know there was a GUI there. When you say v16 are you referring to:
  https://kb.netgear.com/000061838/RBR50-RBS50-Firmware-Version-2-5-1-16
  
  Can you share any details on some of the issues you faced on versions later than the above?
  
  I'm definitely unpacking the .img from the ZIP ;-)
  
  Thanks for the quick response!
  - FURRYe38
    Guru - Experienced User
    Dec 10, 2020
    TheRealNavigat0 wrote:
    I was attempting to update the RBS via the RBR UI. I used multiple browsers on multiple systems (all but one were virgin to Orbi UI) - all were wired because the WiFi was knackered.
    
    To be honest - I'd never actually tried connecting directly to the RBS - didn't even know there was a GUI there.
    You can send FW directly using the RBS web page. Look at the RBRs connected devices page and find the IP address for the 1 RBS. Use this IP address to log into the RBS web page and send the file there.
    
    When you say v16 are you referring to:
    https://kb.netgear.com/000061838/RBR50-RBS50-Firmware-Version-2-5-1-16
    Yes.
    
    Can you share any details on some of the issues you faced on versions later than the above?
    Later versions of FW cause ARP storms with RBS ethernet connected to the RBR.
    
    I'm definitely unpacking the .img from the ZIP ;-)
    
    Thanks for the quick response!

Forum Discussion

Internet/Certificate issues after firmware update on RBR50