NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
[Orbi RBR750] VPNs don't work over guest network
I have a RBR752 with a router/satellite setup in AP mode and the guest wifi enabled (FW version V4.6.11.1). I can't manage to get VPNs to work on devices connected over the guest network, even thou...
Netgear is not terribly precise at times. My understanding is:
- The Guest WiFi SSID/password can be enabled, which allows the owner to grant access to "Guests" without compromising the primary SSID password, but
- None of the isolation features of Guest WiFi exist. i.e.
- Guest devices do not receive IP addresses in a different subnet as they do when the Orbi is in router mode
- There is no capability to keep Guest devices from communicating with devices on the primary network (or with each other).
I can sign up for a NordVPN account "free trial" and put an RBR50 into Access Point mode to see what happens to WiFi devices that attempt to use a VPN service on Guest WiFi. However, I do not have a 750 so:
- If the RBR50 Guest WiFi in AP mode does not allow VPN, that would tend to support the hypothesis that Guest WiFi in some unknown way interferes with VPN.
- If the RBR50 Guest WiFi in AP mode allows VPN to succeed, that does not prove that the 750 will as well.
More Fun with Orbi!!!
Experiment a Success!
I have a spare RBR50 which is intended to replace the primary RBR50 when (if?) it fails. The spare is connected to the primary Orbi. On this spare:
- I Enabled the Guest WiFi, with no security (because it will be turned off later this afternoon before the Russian hackers drive down my street).
- Changed spare Orbi from router mode to Access Point (AP) mode.
- All good. The spare Orbi now reports having a different IP address (no longer 10.0.0.1).
- Connected Android Galaxy S6 Lite tablet to the new Guest WiFi. The tablet is assigned an IP address by the primary router and shows up in both the primary Orbi and spare Orbi Attached Devices display.
- Went to NordVPN and signed up for "Standard" VPN account (with intentions of cancelling within the 30 day free trial).
- Loaded NordVPN Android app on the tablet. I did not sign up for the premium super duper NordVPN that also bakes cookies and corrects spelling.
- Opened NordVPN and signed in to my new NordVPN account.
- NordVPN reports my "new public IP address" is something I have never seen before (to be expected).
- Opened Chrome Browser. whatsmyip.com reports my public IP address is the same as NordVPN says it is.
- Opened Amazon Shopping app All good. (did not buy anything)
- Opened Google Play App. All good.
The conclusions are:
- The RBR50 router supports Guest WiFi in AP mode.
- The RBR50 router in AP mode supports Android NordVPN.
- If the RBR750 does not support NordVPN, I have no clue why not.
Any other experiments I should conduct before undoing all this?
A small update: no luck getting in touch with the ISP. They just generically recommend internet access through their native router, rather than "custom" setups like the one I have with my ORBI in AP mode after their branded router (Zyxel EX5501-B0).
I temporarily solved this issue by using the ORBI in Router mode, where VPNs work just fine. This screws up the ISP IPTV services with lags and freezes happening all the time (which is exactly why I used the AP setup), but that's another issue I suppose...
Be sure to enabled DMZ on the ISP Modem for the RBR if you have the modem in router mode. Disable ALL wifi on the ISP modem a well. Should help with wifi problems.
DMZ appears to be in section 11.4 of the User Manual for the Zyxel EX5505-B0:
https://www.manualslib.com/manual/1864676/Zyxel-Communications-Ex5501-B0.html?page=180#manual
