NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
XR500 Intermittent Drops
I've seen a number of posts about a similar issue but I've tried numerous suggestions with no success. I've had my XR500 for a little over a year now and it's been great. A week ago that changed when I started to get intermittent drops on my network, while working from home. This was happening on all devices. I tested connection direct to my modem to make sure it wasn't ISP and I was not having the same problem, so it is a problem specific to the XR500 router on both wifi and ethernet connection.
I have the latest firmware update and I've tried the factory reset, which fixes the problem for a few hours only. My modem is on bridge mode as well to provide further detail.
When I caught on to the fact that the router was the issue, I started to watch the router logs. It appears that I am getting some DoS logs that coincide with the exact moment of my drops. I've done some research on these from other posts, and from what I understand they aren't much of a threat, but they somehow seem to be correlated to my connection issues. I've pasted a few examples below, from the most recent occurrence:
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:43
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:42
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:41
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:40
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:39
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:38
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:37
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:36
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:35
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:34
The IP addresses will vary, and I often get [DoS Attack: TCP/UDP Chargen] as well as [DoS Attack: SYN/ACK Scan]. I've tried disabling Port Scan and DoS Protection to see if maybe the router was tripping over itself with some false threats but that hasn't worked either. ISP suggested that I turn off UPnP which also hasn't changed anything.
I'm running out of patience and ideas, to the point where I may just disconnect the XR500 router and run straight from my **bleep**ty ISP modem/router at this point. The disconnects have become too frequent and too disruptive for my day-today.
Does anyone have any ideas? I would greatly appreciate the help!
7 Replies
Could you please try going to the the Settings -> Setup -> LAN Setup and change the Starting DHCP address to be 192.168.1.50.
Then, add address reservations for each device on the network. Make sure you give them addresses between 192.168.1.2 to 192.168.2.49.
After that, see if it still appears to be dropping connection.
I came across this suggestion on another thread late last night. My connection dropped a short time after making the adjustment last night but I gave it some time to test this morning as well. The drops appear to be continuing, but maybe less frequently. Still often enough for it to be a problem.
Anything else I can try?
- Could you take the ISP modem out of bridge mode and instead copy the WAN IP on the XR System Information page and put it in the modem DMZ and see if that prevents the disconnects please?
