NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Orbi RBR50 and web access
I have a RBR50 with 2 satellites. They have v2.7.5.6 firmware
The phone (iPhone 16) app is version 2.49.0.14 and shows connected via Anywhere Access.
My issue is the web site page. I can no longer login into it securely. It always comes up NOT SECURE !
As a result I can see my settings and info BUT cannot change anything. It starts as orbilogin.com:80 and accepts Admin and my password but once it opens it is still not secure. I don't know what has changed since it was working and am at a loss to find the fix.
Yes, the Orbi 'app' does not provide access to any of the advanced settings. Only the web interface does. Years ago, Netgear actually registered several URLs with a certificate authority (routerlogin.com, routerlogin.net, orbilogin.com, orbilogin.net) which meant that when a web browser attempted to connect, the SSL certificate in the router was verified by the certificate authority. One August (I forget the year), that certificate expired and was not renewed. (Maybe Netgear forgot? Maybe the certificate authority said, "Wait a minute. Those thousands of routers do not belong to Netgear. NO WAY we are going to certify that each of them belong to Netgear.") Netgear's solution was to include a self-signed SSL certificate in the router.
Oh, dear. Just as unencrypted (http) web connections are unsafe, modern web browsers now declare that self-signed SSL certificates are also "unsafe". If it did not cause so much confusion for customers, it would almost be comical. After all, the web connection never goes past the router. When a device on the LAN attempts to open one of those URLs, the DNS processor in the router intercepts it and returns the IP address of the router to the web browser.
The solution is to tell the web browser, "I know what I am doing. Proceed to the IP address and quit complaining." On Windows, I can open the Orbi web interface with Brave, Chrome, Edge, Firefox, and Opera.
6 Replies
The Orbi 'app' (Anywhere Access) and the web interface (orbilogin.com:80) are separate connections. By definition, any unencrypted web connection (http, port 80) is not secure. This is simply a fact.
Modern web browsers are so determined to protect users that they almost refuse to connect to an unencrypted web site. Of course, the browser does not know that when connected to the local WiFi network (a) the connection IS encrypted because WiFi itself is encrypted, and (b) it is nearly impossible for someone to eavesdrop on the connection because it never leaves your house.
Most browsers provide a method to bypass this notice, usually with a link to "More information" or something like that. (Often in small print buried down the page.) Once the user says, "Go there anyway and quit bugging me", the browser usually stops commenting. If the browser you are using does not provide a method to connect anyway, get a different browser.
So even if you import the certificate to your local store, you still get this error: ERR_SSL_KEY_USAGE_INCOMPATIBLE.
The ERR_SSL_KEY_USAGE_INCOMPATIBLE error occurs when there is a conflict between the SSL certificate's key usage settings and the intended use, often due to misconfiguration or improper certificate generation.
I remember there being a setting within the Orbi via browser to enable a SSL secure connection, but without access via the browser, there's no way to know if that was enabled.
So Netgear - what is your solution to access the router via a web browser? - as the app doesn't cut it.
I am using a Safari browser. Being a Mac user its my usual goto. I do realize port 80 is not secure. That's just how it pops up when I input orbilogin.com, routerlogin.com or 192.168.1.1. It adds the :80 on the end
I have tried to ignore the prompt and go there and most times I will get logged in BUT if I try to change anything I will get a 404 page. I can see the settings I just can't change anythin!
BTW I get the same results with Chrome.
Yes, the Orbi 'app' does not provide access to any of the advanced settings. Only the web interface does. Years ago, Netgear actually registered several URLs with a certificate authority (routerlogin.com, routerlogin.net, orbilogin.com, orbilogin.net) which meant that when a web browser attempted to connect, the SSL certificate in the router was verified by the certificate authority. One August (I forget the year), that certificate expired and was not renewed. (Maybe Netgear forgot? Maybe the certificate authority said, "Wait a minute. Those thousands of routers do not belong to Netgear. NO WAY we are going to certify that each of them belong to Netgear.") Netgear's solution was to include a self-signed SSL certificate in the router.
Oh, dear. Just as unencrypted (http) web connections are unsafe, modern web browsers now declare that self-signed SSL certificates are also "unsafe". If it did not cause so much confusion for customers, it would almost be comical. After all, the web connection never goes past the router. When a device on the LAN attempts to open one of those URLs, the DNS processor in the router intercepts it and returns the IP address of the router to the web browser.
The solution is to tell the web browser, "I know what I am doing. Proceed to the IP address and quit complaining." On Windows, I can open the Orbi web interface with Brave, Chrome, Edge, Firefox, and Opera.
one recommendation I see for web browser issues is to close the browser, delete cache and history, and start over.
CrimpOn Yes I do that as a regular practice. I don't know what or how but something changed and I was finally able to get full access. I tried many options and lost track of what worked and what didn't.
At one time i did have the option to look at the certificate and it did show as active and not expired. I did have some issues with syncing between my laptop and Mac desktop which is odd. I will investigate further to see what was the fix.
A solution is nice. Not knowing why......not so much.
