NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
PeteDog
Dec 16, 2020Star
Current RAX120 firmware version
The web site download page shows the current firmware version as 1.0.2.136. This morning I checked using the phone app, and it shows a version 1.2.0.16 available. Installed OK but want to verify th...
webder
Dec 21, 2020Star
Similar issues as reported earlier in the thread here. While I hadn't narrowed it down to LAN devices, that would fit the behaviour I have experienced. My media server and other published web servicess were no longer accessible externally. I only performed minimal troubleshooting, but it's worth noting that SSHing to some of these devices to further assess the problem I was able to ping out. Now I should have followed up with traceroutes and other tests, but in the end downgraded quickly upon finding this thread.
A correctly completing ping would indicate the return path is fine so traceroute may be of limited use regardless. I had surmised it may be due to UPNP not mapping the ports correctly, but my media server was also unable to access online updates or other such features, so not only was inbound media services impacted, but outbound web traffic (port 80) as well. It was only noted to impact clients on the LAN, which would fall in line with others experiences.
I did not test factory resetting, while I appreciate this is a useful troubleshooting tactic, that's not a valid and permanent solution. Especially when it would be ridiculous to expect general consumers to do so for a minor version upgrade, all without a hint of warning this may be required in the first place.
The fact the firmware is still fully available with no notes or acknowledgment from Netgear is poor. This release states it addresses a number of security vulnerabilities (of which Netgear has seen ever increasing exposure to) and it is unfortuante that I am now running a firmware version that potentially exposes the security and privacy of my home network. Even ignoring the generally poor functionality and value adds Netgear provide in firmware releases, my very expensive RAX120 router should warrant some such continued support, my friends touting Ubiquiti as a far superior product are becoming increasingly harder to ignore. The hardware is decent, the support and firmware are becoming frustratingly bottom rung consumer.
- NewfiedroolDec 21, 2020Virtuoso
Hi and welcome.
a simple reset would have had you up and running and taken less time than you trying to work out why.
The update was a bit more than a minor update and if you downgraded I would reset afterwards too.
Resets are not mandatory but are required if you notice an issue after updating. It's the first step to solving issues.
I agree though perhaps it should have been mentioned somewhere on the firmware update page but you managed to register to join the forum so hopefully other will see this thread if they go searching.
There's and interesting thread that Merlin wrote regarding resets and why it may be required on SNB. Worth popping over to have a read.
- soeunDec 21, 2020Apprentice
I downloaded it from https://www.netgear.com/support/product/RAX120.aspx#download and installed manually and also reset my rax120 and I'm still getting the same issues of none of my LAN connections being able to access internet. Everything connected via wifi still works. I'm usually quite patient but this is getting ridiculous.
- webderDec 21, 2020Star
Newfiedrool sorry I know I came across slightly over the top and somewhat belligerent, I would honestly prefer to understand the issue, and for Netgear to resolve it at the package level rather than mandate resets (I do understand the usefulness of a hard reset nethertheless).
It seems others have reported the issue persists even after hard reset, which played a part in my avoidance of continuing troubleshooting, especially when it involves hard resets and reloading configs. While not horrible time consuming I spend my weekdays troubleshooting such problems, hardly something I wanted to spend a Sunday doing for my own home.
It would be nice to get some acknowldegement from someone Netgear side here, this doesn't seem to be a couple of isolated cases. I'm not certain, but did someone say they'd pulled it from the NA support area, it's definitely still available for AUS.
- NewfiedroolDec 21, 2020Virtuoso
Not a problem, we would all like to have seen this update maybe handled a little different.
I can with my hand on heart say after a reset and watching and carefully monitoring the WiFi issues mentioned I have no issues and neither has my friend who I regularly talk too. Lan ports are fine too. It just needed something to warn users a reset was required. It seems the auto update introduced more issues than doing it manually.
I would dearly like to see a better QoS and I'm hoping we may yet see one and a few minor bug fixes which I need to have a peep at as one was missing log info after a week up. It's a great bit of kit, wonderful coverage, just needs those finishing touches.
- NewfiedroolDec 21, 2020Virtuoso
soeun wrote:I downloaded it from https://www.netgear.com/support/product/RAX120.aspx#download and installed manually and also reset my rax120 and I'm still getting the same issues of none of my LAN connections being able to access internet. Everything connected via wifi still works. I'm usually quite patient but this is getting ridiculous.
Did you perform a software reset or the pinhole reset?
- CrtfdgkDec 21, 2020StarWould like to reiterate for the thread that I also have had issues with the LAN ports after an upgrade and full reset. I’ve tried resets through the web interface as well as the pinhole. I’ve tried downgrading (which immediately restored functionality), erasing again, upgrading and re-erasing a third time via the web interface. I’ve tried not using a settings backup and creating a minimal config - but nothing works.
The LAN ports do still ping out and I can actually use curl to pull down non-SSL websites. The issue seems to be that any secure connection is blocked by some internal service or firewall on the router. Here’s an example:
~ ❯❯❯ curl -v https://google.com
* Trying 172.217.14.238:443...
* Connected to google.com (172.217.14.238) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
* CAfile: /opt/chef-workstation/embedded/ssl/certs/cacert.pem
* CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to google.com:443
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to google.com:443
The expected “Server Hello” inbound traffic never makes it, unless the client is on WiFi and then there’s no issue.
- KillhippieDec 22, 2020Prodigy
Please do not assume you know the reason I turn my router off. Its done so all my logs start zeroed from boot which is how I have always done my updates and is a personal thing. Also it clears the cache and you will notice that RAM useage drops after a power down with the power supply removed for about 10 minutes. If this was such a myth why do Sony suggest to do this to clear the cache on Android TV's and the cache on PlayStations!
As far as a pin hole reset I take it you have not read R Merlins report on factory resetting? This person has his own Asus fork on smallnetbuilder and also patches for Asus themselves with many years of doing this behind him, so excuse me if I belive him over you. Here is a link that may be helpful about factory resets.
https://www.snbforums.com/threads/faq-nvram-and-factory-default-reset.22822/
As far as the current firmware there has been a change in the QCA SDK I cannot talk anymore about this as I am under a NDA. I have factory reset my router, set it up from scratch and all ports work, I also powered it down as usual to clear the cache and reset all the logs (personal choice on powerdown) The issue with the ports is a known one and a reset or re-downloading the firmware then logging out after updating and resetting should sort the issue out. If it does not please contact Netgear support.- webderDec 22, 2020Star
I assumed nothing about you, you've contribute minimally to the thread and certainly nothing since I started reading.
Powering off versus powering off 'for 15 minutes' are two entirely different things and I made no such claim on the former. Powering off and even soft resetting in most cases (where firmware is appropriately configured) will zero logs and perform other beneficial functions, believing powering off for 15 minutes does anything contrary to this is ridiculous and I beg you go claim such to anyone with an electrical engineering degree.
Clearing NVRAM isn't even being discussed and this can be mitigated from within firmware.
Come on guys, all the rest of us are doing is highlighting a problem with the firmware and even discussing where it may lie. If you don't want to join the discussion that's fine, otherwise your solutions are somewhat rudimentory and non viable to the rest of us.
- NewfiedroolDec 22, 2020Virtuoso
Killhippie I believe is pretty clued up and I'm really sorry clearing the NVram is required and that's the same across many manufacturers. I know he beta tested this way back in July 2018 and he just explained it's a known issue and that's all he can say as can I due to Non Disclosure Aggreements.
clearing the cache is not mandatory but was mentioned in the thread which some do and some don't.
Have you read the post linked or are you saying Merlin has no idea I'm a bit confused.
If you have an issue maybe a mod may pick up on it and you maybe able to help if they deem it productive but your best action is to contact Netgear support as no one on here knows what internal changes to the SDK took place and if you have an issue only support can lead you to further help.
I would raise a ticket and link to this thread and see what happens but as end users we can't help solve it once you have reset the router and a problem persists.
We can both go to secure sights via lan connections so we are not suffering the issue you have and we have no way to know what steps you took which leads back to support who will insure you follow the steps to resolve your issue.