NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
miketheknight20
Oct 08, 2022Apprentice
Using Orbi In AP Mode
Hello - i have read and read that the only way to filter specific LAN IP's through a VPN service is to set-up the Orbi in AP mode, and connect the Orbi to a seperate router to handle the VPN connecti...
miketheknight20
Oct 20, 2022Apprentice
is there a way to use the orbi app settings such as parental controls and device manager when in API mode? From what i've read, it says no, but didn't know if there was a work around.
FURRYe38
Oct 20, 2022Guru - Experienced User
- miketheknight20Oct 21, 2022Apprentice
hmmmm...could I connect a secondary router to one of the LAN ports of the ORBI and route specified devices thro this secondary router? Or would the ORBI settings over-ride this?
- CrimpOnOct 21, 2022Guru - Experienced User
This question has several components.
- Yes, it is definitely possible to connect another router to one of the Orbi LAN ports, which will force every device connected to that router to pass through that one Orbi LAN port. I personally have stacked three routers that way (as an experiment), and it certainly works. But....
- Every router creates an IP subnet for all the devices connected to it. For example, suppose there are three routers:
- Router 1 will create an IP subnet, often 192.168.1.x. Every device connected to this router will have an IP address starting with 192.168.1
- Router 2 will have one of those IP addresses. It will create a different IP subnet for every device connected to it, usually 10.0.0.x
- Router 3 will have one of those 10.0.0.x IP addresses. It will create an IP subnet, usually 192.168.1.x, so every device connected to Router 3 will have an internal IP address of 192.168.1.
- Each of these routers will use Network Address Translation to tunnel traffic from its LAN devices. so
- Every device connected to Router 3 will appear to be coming from IP 10.0.0.x (Router 3's IP address)
- When packets pass through Router 2, they will appear to be coming from Router 2's IP address, 192.168.1.x
- When packets pass through Router 1, they will appear to have the public IP adddress of Router 1.
- If any of these routers is placed in Access Point (AP) mode, it will no longer create a new IP subnet, nor will it NAT traffic passing through it.
It remains unclear (to me) what the goal is. Most people who have up to 5 devices they want to use a VPN simply install VPN software on the device itself.
- miketheknight20Oct 21, 2022Apprentice
i'm trying to ensure that if the end user forgets to connect to the vpn client installed on the PC - I can route the traffic through a VPN at that level.
It does not matter to me where the "source" traffic appears to come from...and if I'm understanding you correctly, I could leave the ORBI out of AP mode, connect the secondary router...configure the VPN service on that secondary router, then connect those devices to the secondary router. That way the traffic on those devices will pass thro the secondary router, hit VPN, then the VPN traffic will pass to the ORBI.
I could probably hardcode the IP or MAC address for those devices and assign "names" to them as well if I needed (which I don't foresee) tracign back to the source device