I finally got this darn thing to connect to internet. I had an old Netgear router and used the Genie app on desktop, and it works with Orbi ONLY to a point. Can I use another app, maybe Nightwawk, to make changes? I don't use my Android for many apps as it can stop working when overloaded, I don't like using Orbi app on it anyway, not sure how secure it is. Using the router page is never secure even if I enable https, I always get a warning. Also, on Wifi Analytics, my SSID says Security enabled(Unknown algorithm). I enabled WPA2-PSK so I thought, but on my Preferred networks it says WPA3SAE enabled, so I'm confused. I wasn't sure how secure WPA6 (I think?) is with an old Android. Any suggestions?

You can configure your Orbi web administration to use HTTPS only. First using http to login to your Orbi router, go to the following: ADVANCED | ADVANCED | Web Services Management.Check the box for "Always Use HTTPS to Access Router"Click APPLY. You'll then need to use https:// to login to your Orbi Web management interface. However, as the management is behind the firewall of the Orbi, this is an optional setting and not required.

On my ancient RBR50, Web Services Management appears on the Advanced Tab, Advanced Settings menu: This is where there used to be an option to allow internet access to the https web administration. Netgear removed that option, and now there is only the choice to require use of https: I do not have a 750 system to see if the Advanced menu is the same on it. RosieA wrote: I did press "continue," however, I am not confident I am doing this safely. Please advise... If you connect to the Orbi over VPN, then all data passing through the connection between your remote laptop and the Orbi is encrypted two times: Once by the Orbi using https. Then again by the VPN, which encrypts everything. The web browser knows none of this. When it sees an http connection, it cries UNSAFE. When it sees a self-signed certificate, it cries UNSAFE.

We all use the web interface. No one can snoop on the http packets that are contained in your LAN.

Use WPA2-AES which is most compatible. Not every device is WPA3 compatible. Especially older devices. There is no WPA6. RosieA wrote: I finally got this darn thing to connect to internet. I had an old Netgear router and used the Genie app on desktop, and it works with Orbi ONLY to a point. Can I use another app, maybe Nightwawk, to make changes? I don't use my Android for many apps as it can stop working when overloaded, I don't like using Orbi app on it anyway, not sure how secure it is. Using the router page is never secure even if I enable https, I always get a warning. Also, on Wifi Analytics, my SSID says Security enabled(Unknown algorithm). I enabled WPA2-PSK so I thought, but on my Preferred networks it says WPA3SAE enabled, so I'm confused. I wasn't sure how secure WPA6 (I think?) is with an old Android. Any suggestions?

I don't mind using the web--although I have trouble accessing it on laptop often so it's a PITA--but it says it's NOT secure and that makes me nervous. So please, do tell me what is so secure that nobody can snoop on the LAN packets vs. https connection. If I try this on VPN, I can't connect. One big headache this is, for me anyway. I don't like that I can't separate which SSID uses 2.5 vs. 5MHz. For instance, I have devices that can only use 2.5, I put those on Ch 6 correlating with SSID1, then I noticed on Wifi Analytics it jumps to Ch 149. Sometimes both SSID1 and SSID2 are on Ch 149. I stopped using the SSID2 for my computer, but that doesn't make a difference. I'm thinking having all these devices on one channel is going to congest the devices I need to keep stable. I'm confused. I read somewhere you can attached an old router to new one. I did that--WNDR3400v2--but I couldn't figure out how to connect to that. Granted, maybe I don't know what I'm doing?

Orbi RBR750 / AX4200 - Need Desktop App to Manage it

24 Replies

CrimpOn
Guru
Jun 22, 2022
We all use the web interface. No one can snoop on the http packets that are contained in your LAN.
- RosieA
  Aspirant
  Jun 24, 2022
  I don't mind using the web--although I have trouble accessing it on laptop often so it's a PITA--but it says it's NOT secure and that makes me nervous. So please, do tell me what is so secure that nobody can snoop on the LAN packets vs. https connection. If I try this on VPN, I can't connect. One big headache this is, for me anyway.
  
  I don't like that I can't separate which SSID uses 2.5 vs. 5MHz. For instance, I have devices that can only use 2.5, I put those on Ch 6 correlating with SSID1, then I noticed on Wifi Analytics it jumps to Ch 149. Sometimes both SSID1 and SSID2 are on Ch 149. I stopped using the SSID2 for my computer, but that doesn't make a difference. I'm thinking having all these devices on one channel is going to congest the devices I need to keep stable. I'm confused.
  
  I read somewhere you can attached an old router to new one. I did that--WNDR3400v2--but I couldn't figure out how to connect to that.
  
  Granted, maybe I don't know what I'm doing?
  - CrimpOn
    Guru
    Jun 24, 2022
    RosieA wrote:
    
    I don't mind using the web--although I have trouble accessing it on laptop often so it's a PITA--but it says it's NOT secure and that makes me nervous. So please, do tell me what is so secure that nobody can snoop on the LAN packets vs. https connection. If I try this on VPN, I can't connect.
    
    In my case, the PC I use to administer the Orbi is physically connected to one of the Orbi LAN ports. Any communication between my PC and the Orbi goes through that cable and nowhere else. Suppose instead of the wired PC, I used a laptop connected to the Orbi with WiFi. WiFi transmission is encrypted. Yes, it is technically possible to intercept WiFi signals, learn the encryption key, and decrypt WiFi packets. This requires a sophisticated person to park close enough to capture the 5G WiFi signals long enough to perform the required analysis. If the Mission Impossible team want to hack my Orbi that badly, they would probably just break in. I'm not a bank, a corporation, etc. etc. Non of my neighbors show much technical capability. The basic point is that data within the LAN is not exposed to the internet in any way. Spectrum cannot intercept it. Neither can the NSA. (or the Russians, Chinese, or some teenager in Burbank.)
    
    The solution to restrict web access to https creates yet another irritation. Netgear uses a self-signed SSL certificate, which almost every web browser complains about. UNSAFE. UNSAFE. GO BACK. So, http == not secure. https == not secure.
    
    I have OpenVPN implemented on my Orbi and occasionally VPN into the system and access the Orbi web management over VPN. I always use the actual IP address of the router and the regular http method. I'll put it on my "list of things to do" to VPN into the Orbi and try the secure web portal using the URL rather than IP (https://orbilogin.net)
FURRYe38
Guru
Jun 22, 2022
Use WPA2-AES which is most compatible. Not every device is WPA3 compatible. Especially older devices. There is no WPA6.

RosieA wrote:

I finally got this darn thing to connect to internet. I had an old Netgear router and used the Genie app on desktop, and it works with Orbi ONLY to a point. Can I use another app, maybe Nightwawk, to make changes? I don't use my Android for many apps as it can stop working when overloaded, I don't like using Orbi app on it anyway, not sure how secure it is. Using the router page is never secure even if I enable https, I always get a warning.

Also, on Wifi Analytics, my SSID says Security enabled(Unknown algorithm). I enabled WPA2-PSK so I thought, but on my Preferred networks it says WPA3SAE enabled, so I'm confused. I wasn't sure how secure WPA6 (I think?) is with an old Android.

Any suggestions?
- RosieA
  Aspirant
  Jun 24, 2022
  A few of my devices say they only work with 2.5MHz, but the SSID defaults to 5MHz, I can't seem to control it. The Orbi default was WPA3, I did change it to WPA2-PSK (my mistake on WPA6)...
  - $SeaRefractor's avatar$
    SeaRefractor
    Apprentice
    Jun 24, 2022
    You can configure your Orbi web administration to use HTTPS only.
    
    First using http to login to your Orbi router, go to the following:
    
    ADVANCED | ADVANCED | Web Services Management.
    Check the box for "Always Use HTTPS to Access Router"
    Click APPLY.
    
    You'll then need to use https:// to login to your Orbi Web management interface.
    
    However, as the management is behind the firewall of the Orbi, this is an optional setting and not required.

Forum Discussion

Orbi RBR750 / AX4200 - Need Desktop App to Manage it