NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
jjhoop
Sep 24, 2025Follower
Access Control List in AP mode
Previous versions of the Orbi (850/950 series) firmware/web interface would disable the function of MAC Access Control Lists (along with other viable features) once the unit was put into AP mode. Ca...
FURRYe38
Sep 24, 2025Guru - Experienced User
StephenB
Sep 25, 2025Guru - Experienced User
FURRYe38 wrote:https://kb.netgear.com/000061277/Which-features-are-disabled-on-my-Orbi-router-when-it-is-set-to-AP-Mode
NH:
https://kb.netgear.com/26765/Disabled-Features-on-the-Router-when-set-to-AP-Mode
FWIW, a lot of these services would work in AP mode if the Orbi RBR were in the DMZ of the edge router, or if the edge router forwarded the needed ports to the RBR.
This equipment is quite expensive, and I wish Netgear would let me do more with it. JMO.
- FURRYe38Sep 25, 2025Guru - Experienced User
You mean router mode. AP mode disables most features in AP mode. However yes, DMZ is recommended for those double NAT configurations and features could be used for router mode. I use this all the time.
- StephenBSep 25, 2025Guru - Experienced User
FURRYe38 wrote:
AP mode disables most features in AP mode.
Which is exactly what I am complaining about. A lot of those services would work in AP mode if Netgear let you turn them on. DDNS is one of several examples, as is the access control list jjhoop asked about. OpenVPN would also work with port forwarding (or if the RBR is in the DMZ).
- FURRYe38Sep 25, 2025Guru - Experienced User
I presume there are some reasons why NG disables most features in AP mode. I presume some of this also deals with handling of these features of at the host router level. If there are these same features there, then would let the host router handles those features.