How to disable SSO login?

I also would like to disable the SSO stuff and use local administration.

Yeah. I waited too long to return mine so it went into the electronics waste disposal. If I can't have a local login and keep mine and my devices info private, I will just buy a different brand. Which I did. I think Netgear maybe miscalculated on this one. 

NetGear msut not be paying attention to security.  The security breaches we are hearing about on the news involve hacks to centralized services like NetGear is pushing on people.  Way to weaken customer's network security NetGear.  :golfclap:

---

cybernawt wrote:

I'll be trashing this POS nighthawk the first chance I get.

---

There is no word of Nighthawk routers neither in the Netgear business community, nor specifically in this thread. 

---

cybernawt wrote:

Your POS router keeps redirecting to your stupid ass website saying I "may not be connected to my WiFi" when I clearly am because I'm reading the F'n page over the internet.  This is ENRAGING.  I'm trying to get work done and I can't because I have to screw with this stupid ass, broke POS. All because you want to collect data on your users.  **bleep** YOU

---

Save your energy - we're community members.

Most connection issues using these DNS names are really caused by wireless connections to other APs, for example an ISP router, or caused by using "secure" DNS (https/ssl based) what the device in the data path can't capture and inject the LAN IP reply.

On the subject WAC1xx here - when I have it right, this aplogin.com/.net does only work as long as the AP isn't set-up. Later, the special named don't work anymore.

For anyone still looking into this, I have found a partial solution.

The router login page is sso.html

There are 3 possible login forms:

1. The local login (what you want)

2. The first time login (when you first power on the router)

3. The Internet SSO Netgear login (yuck)

All 3 of these forms are actually on the login page, sso.html, the others are simply hidden.

The way the page determines which login form is shown, is a page-level JavaScript variable called "hasInternet". The value is set internally by the firmware and is baked into the page source. The value changes constantly and is some sort of time/date format like "418:33:34". I'm not sure what this time is indicating.

Anyways, if the "hasInternet" has a value of "00:00:00" that means the router has internally determined you don't have internet access. In this case, the page simply uses JavaScript to hide the SSO login form and display the Local Login form.

I'm not sure if there is a way to trick out the AP to change that "hasInternet" value. Maybe with firmware hacking. I dunno.

BUT you can use simple JavaScript on the page to hide/show the login login form and ignore the SSO login form.

SSO login form HTML div element ID: "box_internet_everlogon"

Local login form HTML div element ID: "box_local_login"

So if you open up the browser dev tools and goto the JavaScript console you can use the following Javascript

(function(){
  document.getElementById('box_local_login').style.display='block';
  document.getElementById('box_internet_everlogon').style.display='none';
})()

Just copy and paste that in and run it.

TADA: Now the SSO login is gone and the Local login is accessible and ready to accept input.

So how can we make this a little more accessible? A pain to open up the console and copy/paste this thing every time you login right? How about a browser Bookmarklet?

In your browser create a new Bookmark. Give it any name, like "Netgear Local Login" or whatever you want. For the URL paste in the following Javascript:

javascript:(function(){ document.getElementById('box_local_login').style.display='block'; document.getElementById('box_internet_everlogon').style.display='none'; })();

For some reason Netgears Message Board is replacing the "colon" in the above code with the HTML colon entity code ":". Anyways it should look like this at the start:

(https://imgur.com/ajpf6c5)

Now, whenever you get to your Netgear AP SSO login page, click on their bookmark. The JavaScript in the bookmark will execute and you will now magically have your local login instead of the stupid Netgear SSO login.

There may be other ways of automating this, such as a Chrome/Firefox extension that automatically can execute custom JavaScript whenever you access certain URLs. Or something to automatically open the Bookmarklet when you get to this URL. I haven't really looked deeper into it beyond this.

This isn't a perfect solution, but I hope it helps everyone. Netgear should really not require SSO logins for local network devices. Really really dumb idea.

That's even better indeed :-)

How did you program the firewall to prevent the WAC124-OS from accessing the internet and NOT prevent the other traffic, routed through the WAC124, to pass through?

I guess you programmed a filter of some sort in the firewall to filter out the WAC124-specific-traffic?

Is that relatively easy to do? Maybe I could do someting comparable in my 4G internetmodem...
('I'm not a support-tech and more a bit advanced "consumer" so I could use some pointers ;-))

Entering the MAC address of the Netgear router is absolutely the easiest and best way of getting rid of the ridiculous Netgear policy.

Only thing is that the Netgear router must be behind another router that accesses the internet.

If the Netgear is your only modem and router you can use the scripting work around.

 So, get a good product to connect to the internet and use this Netgear crap for internal purposes only.

I've been finding this out from customers that only had their SSO logins. As Netgear has the firmware automatically disabling SSO. About half my customers didn't bother to save the local login info and are now locked out of their devices completely. Bravo!