EX7300 and R7800 : Certificate Error (Server identity can't be verified)

Question

Hi,&nbsp;I have a R7800 router and EX7300 extender.&nbsp;&nbsp;Regularly, I have an error message on IOS device "The Server identity can't be verified". This message is not linked to a specific site, even if the same URL always appear in the error.&nbsp;It appears that it does come from an auto-signed &nbsp;routerlogin.net certificate that is provided instead of the target site certificate.&nbsp;I can admit thatches message could appear when I'm reaching https://routerlogin.net. Nevertheless, this certificate should not be present in an http flow to an external site. In this case, it is a Man in The Middle failure and then security issue.&nbsp;Any Idea ?&nbsp;Thank you for your help and suggestions.

xadd · Answer

HI,&nbsp;The Router is connected to a TPLink TL-R470T+ Hub, connected to 4G BoxThe R7800 router's firmware is&nbsp;V1.0.2.90The EX7300 Extender's firmware is 1.0.0.146&nbsp;I don't really know what is the connexion when it happens. It seems both was I'm either closer to the router or the extender..&nbsp;Thank you

plemans · Answer

are you getting it while trying to log into the router or extender?&nbsp;
Or when visiting sites?&nbsp;If its visiting sites, try disabling apples random mac/ip address feature.&nbsp;

xadd · Answer

The Private WI-fi Address is disable on all my devices.&nbsp;&nbsp;I must say that the problem appear on several distinct devices&nbsp;Thank you for your help

plemans · Answer

1. what modem/gateway is the router connected to?&nbsp;
2. what firmware is on the router?&nbsp;
3. what firmware is on the extender?&nbsp;
4. when does it happen? When connected to the router? when connected to the extender? Details are key

plemans · Answer

the tplink is its own router. It causes a double nat if you're running that and the netgear in router mode.&nbsp;
A double nat happens when you cascade more than 1 router. https://kb.netgear.com/30186/What-is-Double-NATFixes? There’s 3 options but only use 1. 1. Put the modem/gateway in modem only/pass through mode. This disables its routing functions. Kind of pointless with a load balancing router like the tp-link.&nbsp;2. Leave the modem/gateway in router mode but put the Netgears IP address into its DMZ. This forwards the data to the netgear. You can either leave the modem/gateway’s wireless enabled or disabled. Just make sure its using a different wifi channel to prevent interference3. Put the Netgear into access point mode. This disables its routing functions. Wifi/ethernet still works but it does disable some features. https://kb.netgear.com/26765/Which-features-are-disabled-on-my-NETGEAR-router-when-it-is-set-to-AP-Mode

Forum Discussion

EX7300 and R7800 : Certificate Error (Server identity can't be verified)

9 Replies