NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

carpeDiem3's avatar
carpeDiem3
Aspirant
Dec 03, 2021

RBR750 assigns IPs to Guest WiFi in Access Point mode.... how is that possible?

The orbi RBR750 seems to have a strange setting that even if it is enabled to Access mode . the guest WiFi assigns an device an ip ( in this example it is  192.168.2.x

 

How can ORBI assign a 192.168.2.X address and the firewall allows that IP traffic all over the network , the Firewall does not even see it , yet I can access all network device .

 

I really need some assistance in understanding this , shouldnt access Point disable IP assignments ?

 

So the access point assigns an IP which it shouldn’t

[DHCP IP: (192.168.2.2)] to MAC address FC:B3:BC:XXXXX, Friday, Dec 03,2021 17:07:10

[DHCP IP: (192.168.2.2)] to MAC address FC:B3:BC:XXXXX, Friday, Dec 03,2021 17:04:10

 

 

But the worst part is that the Firewall is setup to quarantine ANY new device and with that IP assignment it just passes trough firewall and does not even see it , nor quarantine it .

6 Replies

  • Netgear has set up a community forum specifically for the Orbi AX (WiFi 6) products. Most of the people who watch that forum are more likely to have experience with Orbi AX and know how to work it better than those of us who follow this "general Orbi" forum. Might be more likely to find someone who has a solution if the question is posted there:
    https://community.netgear.com/t5/Orbi-AX/bd-p/en-home-orbi-ax

     

    Guest Network should be disabled in AP mode as it's not supported in AP mode. 


    Please use this link to the main forum product list to review and choose where to make your posts. 
    https://community.netgear.com/t5/NETGEAR-Forum/ct-p/en-netgear

     

     


  • carpeDiem3 wrote:

    The orbi RBR750 seems to have a strange setting that even if it is enabled to Access mode . the guest WiFi assigns an device an ip ( in this example it is  192.168.2.x


    Are you still within the magic "90 days of complimentary support" on this Orbi router?  It would be really entertaining to hear how Netgear support explains this.  I also find this situation inconsistent with how I think Access Point should work. (All IP's assigned upstream and zero separation between primary and WiFi networks.)

     

    One of the differences between the original Orbi product and the 'AX' product is the way Guest IP addresses are assigned.  The original Orbi placed devices from both the primary and guest WiFi networks into one subnet, typically 192.168.1.x  This  surprised (and annoyed?) many customers who thought it would be a lot simpler to put guest devices into a separate subnet.  The older Orbi also had that option of whether guest devices could connect to devices on the primary network (page 80 

    https://www.downloads.netgear.com/files/GDC/RBK50/Orbi_UM_EN.pdf )

     

    I have heard comments that the AX product line does place guest devices into a separate IP subnet.  The RBR750 User Manual seems silent on this topic (see page 70 https://www.downloads.netgear.com/files/GDC/RBK752/RBK752_UM_EN.pdf )  The RBR50 User Manual also makes no mention of that option for whether devices can (or cannot) communicate with the primary network.

     

    Guest WiFi and Access Point mode are a complicated discussion.  If the 'upstream' router makes all IP assignments, then it will have no way to determine which devices have connected to the primary or to the guest WiFi networks.

     

    On the topic of what the firewall should do (or should not do), my understanding is that Access Point mode plays a role in this as well.

    There is a Netgear web page explaining what features are not available in Access Point mode:

    https://kb.netgear.com/000061277/Disabled-Features-on-the-Orbi-when-set-to-AP-Mode 

    Notice that RBR750 is on the list of products this applies to.  It is unfortunate that this web page starts with Guest Network, because obviously the Guest WiFi is still there.  Personally, I believe that the person who wrote this web page intended to say that a separate Guest Network is not supported in AP mode, not that the Guest WiFi SSID could not be used.

     

    You may notice a recurring theme: The AX product is different and those of who have never purchased one cannot speak from personal experience.

    • carpeDiem3's avatar
      carpeDiem3
      Aspirant

      unfortunatly  I am way past my 90 days. 

      I agree with your statements , the strangest thing realy is how does the guest wifi assigns an IP when DHCP is disabled  and the device set to access point , which I agree defeats the purpose of beeing an access point. also how does it go past the firwall with an IP Range I did not assign to this port. 

       

      • CrimpOn's avatar
        CrimpOn
        Guru

        carpeDiem3 wrote:

        unfortunatly  I am way past my 90 days. 

        I agree with your statements , the strangest thing realy is how does the guest wifi assigns an IP when DHCP is disabled  and the device set to access point , which I agree defeats the purpose of beeing an access point. also how does it go past the firwall with an IP Range I did not assign to this port. 


        I believe there is a technical difference between firewall and access control.  Firewall is what protects a router from accepting connections on the WAN port (from the internet).  In access point mode, access control is not supposed to be available. If a device provides the correct password, it gets on the network.

         

         

  • Any progress on this? 


    carpeDiem3 wrote:

    The orbi RBR750 seems to have a strange setting that even if it is enabled to Access mode . the guest WiFi assigns an device an ip ( in this example it is  192.168.2.x

     

    How can ORBI assign a 192.168.2.X address and the firewall allows that IP traffic all over the network , the Firewall does not even see it , yet I can access all network device .

     

    I really need some assistance in understanding this , shouldnt access Point disable IP assignments ?

     

    So the access point assigns an IP which it shouldn’t

    [DHCP IP: (192.168.2.2)] to MAC address FC:B3:BC:XXXXX, Friday, Dec 03,2021 17:07:10

    [DHCP IP: (192.168.2.2)] to MAC address FC:B3:BC:XXXXX, Friday, Dec 03,2021 17:04:10

     

     

    But the worst part is that the Firewall is setup to quarantine ANY new device and with that IP assignment it just passes trough firewall and does not even see it , nor quarantine it .