NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
buzzoff
Aug 06, 2025Luminary
Netgear stated firmware to be released to fix inability to work with iOS Private Relay
Netgear published an article, located at https://kb.netgear.com/000065057/The-Nighthawk-or-Orbi-app-on-my-Apple-iOS-device-only-connects-to-my-router-or-mesh-system-with-Anywhere-Access-What-can-I-do...
- Aug 10, 2025
Fixed I believe is a different MAC address that differs from the actual HW MAC address that is burned in to devices and would be as safe to use as randomizer is. This seems to stay unchanging and limits what other devices seen when connected using Fixed. This seems to be Apple attempt to help with some issues seen when using the randomizer that changes the MAC address every so often. So you could use this while at home as well if you feel that randomizer may cause problems.
I feel that most NG routers are handling the randomizer ok now days, users just need to be aware if odd issue they may see with it enabled and router may not indicate what these devices are when the randomizer is enabled and connected. As we see "unknown" for a device name rather than the actual device name. MAC Filters rely on static unchanging MAC addresses to make filtering work so no, having randomizers enabled would not work well for MAC Filtering. That would be the nature of the beast. Why I leave mine disabled and my choice. I don't do lots of traveling and when I go, then I enable it at that time. You'll need to make your own choice when it comes to these features. All that's up to you. No body is force you do anything. Features are there in Apple devices. Up to you to use them or not.
Any more details, contact Apple regarding there products and features. They'll have the best information to provide.
It maybe possible that with the older AC series, since it's EoL, FW may not handle the newer generation iOS features and no work well with randomizers enabled. Not sure if this is a FW issue or combined FW and iOS issue as well. I just had a 50 series online for a few days last month, did not see any log in issues with either Apple iOS 18 or Android devices having randomizers enabled.
buzzoff wrote:
Furrye38, I apologize and you are correct. I misstated using Private Relay and the issue is Private WiFi Address. I do keep it Private WiFi turned OFF.
What is different in using Fixed versus Off?
My frustration is users shouldn't be forced to remember to turn this feature on and off as they leave and return home to their LAN.
buzzoff
Aug 09, 2025Luminary
Furrye38, thanks as usual for the response.
Actually aware of the fix Apple provided and do use it but it is frustrating that Netgear never followed through with their "promised" firmware fix per the document I referenced. It is a PITA to deal with the off/on status for Private Relay when it should have been fixed in the code. I am sure companies like Apple and Netgear talk about changes in OS and firmware but I have found Netgear to be very slow at implementing fixes now and in the past that affect millions of users.
FURRYe38
Aug 09, 2025Guru - Experienced User
I've never had to disable Private Relay. Only WiFI Private IP address. Haven't seen any issues to day with Private Relay being enabled all the time. Private Relay is a Apple feature, and nothing NG would be able to change.
Also there is newer iOS for apple devices that support it. My iPhone 12 Pro Max is on 18.6 currently. iOS 15 is 4 years old and by now, hopefully I would think that newer iOS versions are not effected by how NG FW operates with there Private Relay features.
Also the Orbi AC series is not EoL so you'll not see any more updates unless there is some major security issue. So use the system if it works for you and fits your needs. THere maybe some 3rd party FW providers like OpenWRT or DD-WRT that may have support for the 40 series. Something you check with them about. If not, you'll need to find something new gen at some point.
Good Luck.
- buzzoffAug 10, 2025Luminary
Furrye38, I apologize and you are correct. I misstated using Private Relay and the issue is Private WiFi Address. I do keep it Private WiFi turned OFF.
What is different in using Fixed versus Off?
My frustration is users shouldn't be forced to remember to turn this feature on and off as they leave and return home to their LAN.
As always, I appreciate your help!
- buzzoffAug 10, 2025Luminary
Furrye38, if I understand correctly, the Fixed Mode is using a MAC address other than your actual hardware Mac but never changes. Is this marginally safer than Off which just uses the actual Mac address?
The problem, besides remembering to turn on/off as I travel, is I get approved users (I use Mac Filtering) that come to my house and say they can't login. I turn their Private WiFi Address to off if they want it to work as I originally approved them but when they return the Mac has changed (I think it changes every couple of weeks?).
I am not as techie as you but it seems like rotating the MAC address is a good thing but would be nice if the routers could handle this, using Mac filtering.
- StephenBAug 10, 2025Guru - Experienced User
buzzoff wrote:
it seems like rotating the MAC address is a good thing but would be nice if the routers could handle this, using Mac filtering.
No idea how that would work. Are you suggesting that Apple should just give you a couple of MAC addresses for your phone, and you'd add them all to your router ACL??? That would limit the privacy benefit.
- FURRYe38Aug 10, 2025Guru - Experienced User
Fixed I believe is a different MAC address that differs from the actual HW MAC address that is burned in to devices and would be as safe to use as randomizer is. This seems to stay unchanging and limits what other devices seen when connected using Fixed. This seems to be Apple attempt to help with some issues seen when using the randomizer that changes the MAC address every so often. So you could use this while at home as well if you feel that randomizer may cause problems.
I feel that most NG routers are handling the randomizer ok now days, users just need to be aware if odd issue they may see with it enabled and router may not indicate what these devices are when the randomizer is enabled and connected. As we see "unknown" for a device name rather than the actual device name. MAC Filters rely on static unchanging MAC addresses to make filtering work so no, having randomizers enabled would not work well for MAC Filtering. That would be the nature of the beast. Why I leave mine disabled and my choice. I don't do lots of traveling and when I go, then I enable it at that time. You'll need to make your own choice when it comes to these features. All that's up to you. No body is force you do anything. Features are there in Apple devices. Up to you to use them or not.
Any more details, contact Apple regarding there products and features. They'll have the best information to provide.
It maybe possible that with the older AC series, since it's EoL, FW may not handle the newer generation iOS features and no work well with randomizers enabled. Not sure if this is a FW issue or combined FW and iOS issue as well. I just had a 50 series online for a few days last month, did not see any log in issues with either Apple iOS 18 or Android devices having randomizers enabled.
buzzoff wrote:
Furrye38, I apologize and you are correct. I misstated using Private Relay and the issue is Private WiFi Address. I do keep it Private WiFi turned OFF.
What is different in using Fixed versus Off?
My frustration is users shouldn't be forced to remember to turn this feature on and off as they leave and return home to their LAN.- buzzoffAug 11, 2025Luminary
Furrye38, thanks for all your help. If I understand FIXED from what you are saying, it is a randomized MAC address but doesn't continue to rotate to a new one. For me, if this is correct, turning the feature off when I am home is better as I don't have to approve another Mac address in Access Control.
Having to remember to turn on/off is one frustration but I can get used to it. However anyone that comes over I also have to remember to have them turn off Private WiFi Address or the next time the come over we are back to their phone or pcs not being able to login to my WiFi.
I get that this is the way it is and sometimes I just have to accept that this is the case. Don't have to be happy about it though :)