NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

willb_1968's avatar
willb_1968
Aspirant
Dec 03, 2025

orbi RBE371 seems to be munging IP traffic from wifi to ethernet?

 Just upgraded my home wifi to Orbi RBE371 with one satellite. Previously I had an asus zenwifi mesh system.

Firmware is V12.1.3.11_5.1.12

Everything is working pretty much as expected, very happy with performance so far.

One really weird issue, it's not a huge deal but I don't understand what's going on.

I have three raspberry pis on my network, one is connected via ethernet, one is wifi only, and one is connected via both ethernet and wifi.

When I ssh into them from an wifi-connected host, and then look at "w" or "last", I expect to see the ip address of my (e.g.) laptop, and that's what I saw before.

However, now what I actually see as the "from" address is the *external* ip address of the Orbi, but only when I am sshing from a wifi-connected host to an ethernet port on the raspberry pi.

In all other cases (wifi to wifi, ethernet to wifi, ethernet to ethernet) I see the expected "From" address.

example:

sshing from my laptop (192.168.0.50) to ethernet pi3: 

 

$ w 12:23:47 up 1 day, 4:36, 1 user, load average: 0.21, 0.20, 0.18 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user pts/0 10.0.0.111 12:23 0.00s 0.44s 0.05s w

 

ssh from same laptop to wifi-connected pi5:

 

$ w 12:26:14 up 6:30, 2 users, load average: 1.55, 1.54, 1.53 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT user pts/1 192.168.0.50 12:25 3.00s 0.07s 0.01s w user pts/0 192.168.0.50 11:18 1:07m 0.03s 0.03s -bash

 

and in the "last" output, I can see where this changed (which is exactly after I switched from the old Asus system to the new Netgear system).

 

user pts/0 10.0.0.111 Mon Dec 1 08:24 - 08:28 (00:03) user pts/0 192.168.0.50 Sun Nov 30 06:33 - 06:37 (00:04)

 

Again, this isn't a huge problem, it's just me on this network and functionally everything else seems to be fine, just wondering what is causing this.

8 Replies

  • CrimpOn's avatar
    CrimpOn
    Guru - Experienced User

    Does the Attached Devices display show a device at 10.0.0.111 ?

    • willb_1968's avatar
      willb_1968
      Aspirant

      No, 10.0.0.111 is the address of the Orbi on the WAN side.  

      • StephenB's avatar
        StephenB
        Guru - Experienced User
        willb_1968 wrote:

        No, 10.0.0.111 is the address of the Orbi on the WAN side.  

        You must be double-routing, since 10.0.0.111 is a private (not internet-routable) address.

         

        It sounds like you must have the ethernet connection going to the other router, and not the Orbi.

         

        If you are only using the Orbi for wifi, then you should consider setting it up in AP mode.  

  • It's also worth nothing that if I ssh to any of the pis from the internet through the gateway and the orbi (both doing port forwarding) the expected, correct "source" ip address is shown.

     

    $ w
     07:49:35 up 1 day,  7:50,  4 users,  load average: 0.12, 0.09, 0.09
    USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU  WHAT
    user               [obscured]      07:31   31:50m  0.00s  0.10s sshd: user [priv

     

    (in this case the address I've obscured matches what I see if I visit whatismyip.com)