NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
jftobolski
Feb 02, 2023Aspirant
Orbi RBR850 access control - what does it actually do?
I have an Orbi RBR850. Everything working well, have >100 devices with IP reservations, hence I have only a small DHCP address range set aside for "other devices". Recently I've been seen an apple ...
CrimpOn
Feb 02, 2023Guru
jftobolski wrote:
So, forum, what does access control actually *do*? Just block internet access?
An opportunity for experimentation
- Does this device respond to ICMP (Ping)?
- If Enable LAN/WAN Packet Capture is done on the Orbi debug page (http://orbilogin.net/debug.htm ) does resulting lan.pcap file show any data packets from this IP address?
My hypothesis is
- the process of associating with the WiFi takes place at the "radio level" (before Orbi code is aware the device exists)
- An IP address is assigned to the device because
- Blocking is done by placing an entry in linux iptables that says, "delete any packets from this device."
Is this device always connected to the same Orbi access point? (i.e. it appears to be in one location?)
- jftobolskiFeb 02, 2023Aspirant
Thanks for the reply - it does respond to ping, but only intermittently (meaning there might be 50-100 unsuccessful attempts, then 5-10 replies... repeat.
The log files weren't terribly self explanatory - the IP address in question shows up in the files, but not sure where exactly to look for actual packet traffic - anything you can suggest would be appreciated.
Good thought on the satellite that this device links to. It does move around. then again, so does a WEMO in-wall light switch so I wouldn't consider that high-grade information.
- jftobolskiFeb 02, 2023Aspirant
Sorry - an addendum. There is no lan.pcap file. There is an eth4.pcap and and BR.pcap. Neither are in plaintext though.
- CrimpOnFeb 02, 2023Guru
jftobolski wrote:
Sorry - an addendum. There is no lan.pcap file. There is an eth4.pcap and and BR.pcap. Neither are in plaintext though.
Oh, joy. Looks like Netgear decided to change how packet capture works in the AX products. (sigh)
pcap files are indeed binary files that can be displayed using a number of free programs. For Windows, I use Wireshark.