NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Can't login to WAC124 any more
Hi, Today, I realized I couldn't log into the WAC124 any more, even though I've been able to do that for the past 3 years. I'm still able to use it as WiFi Internet access point, though. The ...
PC (static IP) 192.168.0.123 255.255.255.0 gateway 192.168.0.1 <-> WAC124 (DHCP) 192.168.0.100
-or-
Alternate approach block the WAC124 LAN IP on your router from the Internet access. This won't impact the Wi-Fi / WLAN access to the LAN
Essentially what I explained above already - operate the WAC124 offline!
schumaku wrote:The routerlogin.net DNS query can be captured on the AP when the request does pass the device - it will return the device LAN IP.
The default 192.168.0.100 IP address is only in place in case there is no DHCP server returning a valid IP for your LAN IP subnet.
I know its assigned IP, but it's apparently not possible to log into the WAC124 without using Netgear's remote server while it's connected to the Internet, so I have to disconnect it first before I can use the local admin login.
I'm using a modem/router, which is imposed by my provider, so the only way to remove Internet is to unplug the cable between the modem and the DSL filter, which would disconnect the Internet for everyone else. The other solution would be to isolate the WAC124 from Internet with the modem/router, but I doubt it can do that.
When operating the WAC124 offline - so no connection to your LAN with DHCP server - the DHCP client (permitting there is no static LAN IP defined) is likely fall-back to the default LAN IP 192.168.0.100 (/24, 255.255.255.0 subnet mask). This does require an Ethernet LAN config in that subnet, so 192.168.0.x (.1 ... .254) on your computer Ethernet adapter. At that point is no Internet connection, so the outdated Netgear Single Sign-on feature won't be active, but was defines obsolete and removed almost three years ago.
Ah, so that explains it. Netgear's basically sawn off the branch on which its product was sitting, not very smart (unless it's on purpose).
Said this, with a correct network adapter config, and only a direct connection PC <-> WAC124, a login is certainly possible, without "Checking the Internet connection ...". At that point you can install https://kb.netgear.com/000065060/WAC124-Firmware-Version-1-0-4-9
Yes, that's exactly what I'm asking. That's what I've been trying to do, but without any success (and I understand why it didn't work, since I explained the current DHCP configuration).
What are the owners of that device supposed to do after they shut down their server?
I suppose my only option is to temporarily disable Internet for everyone, or start messing with a local router and just a laptop and this WAC124, which I really would like to avoid. They could just have added a checkbox "local connection", but no, it would have been too user-friendly. An overall lazy design with a very limited guarantee.
Thanks for the link to the new firmware! I'll make sure to install that if I can get past the login.
PC (static IP) 192.168.0.123 255.255.255.0 gateway 192.168.0.1 <-> WAC124 (DHCP) 192.168.0.100
-or-
Alternate approach block the WAC124 LAN IP on your router from the Internet access. This won't impact the Wi-Fi / WLAN access to the LAN
Essentially what I explained above already - operate the WAC124 offline!
schumaku wrote:PC (static IP) 192.168.0.123 255.255.255.0 gateway 192.168.0.1 <-> WAC124 (DHCP) 192.168.0.100
I'm not sure what you mean by that. Nothing replies on 192.168.0.123.
Alternate approach block the WAC124 LAN IP on your router from the Internet access.Yes, that's what I said. I found out that I could use the parental control on my modem/router to exclude the WAC124 from the Internet access. So I could *finally* login locally.
Once I was logged in, of course it said there was a firmware update—but couldn't download it because it was offline. Another thing they didn't design properly (why propose a download in offline mode?).
Anyway, I'm upgrading it now and I'll see how it goes.
It's easily the most amateur job I've ever seen. My next network hardware won't be Netgear, for sure.
PS: I also tried to plug an USB key in and boot on it, no luck. I also tried to connect the WAC124 on another port than the yellow one, but it doesn't change anything. If it can't connect to the login server because it's not online anymore, why not give a correct status? Why not offer a local login?! It's just bad design.
Apparently with the last firmware, it correctly proposes the local login. They just threw in a silly pseudo-security extra by requiring the password to include at least one uppercase letter (doesn't even add one bit, but whatever), and adding two mandatory "security questions" that are probably even weaker. Amateurs until the end.
Once that is done, it's finally working as it should, or almost. I'll have to see if they finally fixed the restrictions on the guest access, which were not enforced correctly before (I'm not expecting any improvement).
Thanks again for your help.
Please keep in mind I'm not Netgear, just yet another active community member. Due to various questions in this community section, I've invested some of my own hard earned money to buy a small selection of similar Netgear AP models (not a WAC124, however other models like the WAX202 are very similar - similar SOC, partially different radios),
Tom_G wrote:
Apparently with the last firmware, it correctly proposes the local login.
That last firmware was created mid of July 2022, and published a few days later.
Tom_G wrote:
They just threw in a silly pseudo-security extra by requiring the password to include at least one uppercase letter (doesn't even add one bit, but whatever), ...
In no way, that was adding any security -.this change was about harmonisation of the many Netgear products, applying a standard default password scheme. The reason why all vendors have deployed similar schemes, including no longer allowing to keep the default password in place again, comes from one of these strange laws Netgear has to comply, e.g. the California state law (SB-327) stating that manufacturers of any device connected to the internet (IoT-device) that want to sell their products in California have to equip the devices with “reasonable security feature(s)”.
Tom_G wrote:
...adding two mandatory "security questions" that are probably even weaker.
What you put in is fully up to you. This was done for consumer commodity. Not my favourite feature, but users much to often asked for password recovery options - and Netgear implemented it.
Tom_G wrote:
...it's finally working as it should, or almost. I'll have to see if they finally fixed the restrictions on the guest access, which were not enforced correctly before (I'm not expecting any improvement).
Guest network? There is no such thing on this router/AP model. Yes, of course you can configure three Wireless SSIDs, Wireless 1, 2, and 3. There is only a simple access control to the LAN ports for the "Wireless 2" wireless network - and nothing else.
That's life.
-Kurt.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
