NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi excessive pinging
Does anyone else see their Orbi satellites doing excessing pings to the default gateway? In my firewall log I am getting thousand of them and I don't know why. Or where to disable it. Joe
j0ebeer wrote:Does anyone else see their Orbi satellites doing excessing pings to the default gateway? In my firewall log I am getting thousand of them and I don't know why. Or where to disable it.
Am interested in which "firewall log" this is. When Orbi is configured as a "router", it IS the gateway, and satellites never communicate past the Orbi. So, this Orbi must be configured as an Access Point, in which case every device on the network, including the satellites, gets an IP address from whatever device is using DHCP to assign IPs (the gateway?) One would expect that satellites would then do things like ARP requests, pings, etc. against the gateway. "Thousands" sounds like a lot, but I have been surprised at how "chatty" an ethernet network is.
CrimpOn wrote:
j0ebeer wrote:Does anyone else see their Orbi satellites doing excessing pings to the default gateway? In my firewall log I am getting thousand of them and I don't know why. Or where to disable it.
Am interested in which "firewall log" this is. When Orbi is configured as a "router", it IS the gateway, and satellites never communicate past the Orbi. So, this Orbi must be configured as an Access Point, in which case every device on the network, including the satellites, gets an IP address from whatever device is using DHCP to assign IPs (the gateway?) One would expect that satellites would then do things like ARP requests, pings, etc. against the gateway. "Thousands" sounds like a lot, but I have been surprised at how "chatty" an ethernet network is.
The firewall log is my Fortinet sending logs into Splunk. From a search of the past 4 hours the 2 satellites have ping my FW gateway over 6500 times. My guess is its default behavior and I'm probably stuck with it. I would call it poor coding.
I just now captured my Orbi LAN traffic. My (one) satellite sends ICMP (ping) once per second to the Orbi router, which is also the "gateway". I believe that the default behavior when Orbi is providing DHCP is to provide the Orbi IP address as both the gateway and the DNS for every device on the network that gets an IP from the Orbi. 60 time/min * 60min/hr = 3,600 pings/hr per satellite. Two satellites = 7,200 pings/hr. Thus, my analysis does not match what the firewall is reporting. It should be seeing more than twice as much.
Yes, that sounds like "a lot". On the other hand, we're talking about gig ethernet, so the actual portion of total bandwidth consumed is not "large".
I am still wondering how the firewall is capturing these pings. Is the firewall the "gateway"? Which device is providing DHCP?