Business Products Feature Requests

It would be helpful if the SRK80 router supported defining firewall rules between VLANs. This would enable administrators to allow limited access to devices in other VLANs, more precisely than "Network Isolation" on (completely closed) or off (completely open).   A common use case of this feature would be to place IoT devices such as Chromecasts on an IoT VLAN and allow personal devices such as smartphones to control these IoT devices from a personal VLAN, withouth allowing IoT devices to access the personal VLAN. An example of this use-case is illustrated in OpenWRT which is already what the Orbi Pro Wifi 6 firmware is based on: https://www.youtube.com/watch?v=UvniZs8q3eU&t=310s ... View more

Routers like Ubuiquiti allow devices on main VLAN to initiate connection with devices on IoT VLAN, but protect devices on main VLAN from IoT devices being able to connect to them.    Unfortunately Network Isolation feature in Orbi Routers isolates all devices on VLAN so that no device outside VLAN can connect them. This is too limited and makes the feature of separating IoT devices into a separate IoT VLAN almost useless, because way too often devices on Default VLAN (e.g. Phone or Laptop) need to connect to IoT devices to be able to control them. The only way to achieve this is by disabling Network Isolation feature, which then completely negates the whole security value of IoT VLAN separation.   I am quite disappointed that an Orbi Pro range of routers does not have such a simple firewall rules definition capability. IoT VLAN is presented as a major security feature of the router that on the surface makes sense, but only when used in reality turns out to be totally unusable the way it is currently implemented in Orbi Pro Routers. I really hope a firmware update is released to correct this major flaw. ... View more

ALL FIRMWARE should be updated. More info: https://betanews.com/2017/10/16/krack-wpa2-security-vulnerability/ ... View more

Would love to see Armor available for the Orbi Pro SXK80. ... View more

I find it insane that the Orbi does not support any secure DNS protocols like DNS over TLS or HTTPS. I am not sure if I had bought this product had I realized that. Please add this to your backlog. ... View more

Given that this is marketted as a 'Pro' poduct I was surprised at the simplistic functionality offered withthe DHCP server.  Can I suggest you consider offering the follow options, which seem pretty basic to me:   Allow domain name for LAN to be set and also to be displayed on the web interface Allow DHCP options such as DNS servers and Time servers to be set for DHCP clients Allow lease period to be controlled   ... View more

Dear Netgear & Orbi Pro Supporter I recently bought the Orbi SXR80 router and want to use VPN to remotely connect to my office. But I am amazed that the certificates for the connection cannot be changed in the administration interface. VPN is unusable because if the certificate falls into the wrong hands, anyone can connect to my device via VPN. This happens quickly if a cell phone is lost or stolen. Why not add a function to change the certificate? This should be very easy to do. According to the following link, this was apparently already planned: https://community.netgear.com/t5/Orbi-Pro-WiFi-for-Small-Business/Orbi-Pro-SRK60-Revoke-OpenVPN-client-certificate/m-p/2139485 This function is also required by other users: https://community.netgear.com/t5/Orbi-Pro-WiFi-for-Small-Business/How-to-renew-VPN-private-key/m-p/1689399 I urgently ask you to install this function, because without a VPN switched on is a major security problem! Kind regrads Carlos ... View more

Please implement tag based vlan functionality on the internal switch of the Orbi Pro router/satellites. The product is meant for 'Pros'...so this should be no deal. When using a Netgear switch behind the Orbi Pro it would be a great benefit for the 'Pro Users' to be able to utilize tag based VLAN ports on the Orbi. Currently, different VLANs being configured on one switch can not be mapped to the Orbi router due to the fact that one port on the router can only belong to one VLAN at a time. A proper VLAN membership configuration and PVID configuration per port is needed.   Addition: The term 'Trunk' port is used differently on the Orbi Pro than it it used on the Netgear switches, which can be (and is) confusing. ... View more

I love this system but lacking these feature to increase the privacy and security is really a shame. There is a possibility to add this in the future? ... View more

I recommend that Netgear allow the Orbi Pro models to the ability to disable wifi radios at user's option for the following reasons:   Simple update for Netgear/Orbi - Currently, Orbi software allows wifi radio strength choices of 100%, 50%, 25%...they should add an option for 0%/Off.  It woudn't cost Netgear anything to provide the 0%/Off option as it only requires a modification to an existing field. It provides the User the option/choice rather than Netgear/Orbi making the choice for the user.  Netgear/Orbi should place security as one of their highest priorities, and providing this option would reflect that as ethernet-only wired systems are generlly more secure than wifi.  Netgeat provides this option on almost all of their other routers, so why not provide consistency and allow this as an option and give the user the same flexibility as other competing routers such as TP-Link, Linksys, and Asus. Consequently, I don't understand the resistance to doing so as it's an easy fix, increases security, and provides users the same option they have with other competing routers. Since you already provide an option for radio strength down to 25%, why not add an addtional selection for 0%/Off? Some users only use wifi occaisionally or alternatively would like to occaisoinaly diable wifi for security and/or interference reasons, and such an option would allow users to so turn it on when needed, and off when not needed. Wifi is not as secure in dense city areas and sometimes creates interference with other devices/systems, thus it would be prudent to allow the user to have the option to disable the wifi radios when needed...just give the user the choice. ... View more

When I bought this business class mesh system about a year back (1 router and 2 satellites), tech support stated that the product being a business producr does not have a built in firewall and I should procure an external firewall. A year back tech support stated that vlan segmentation and vlan to ssid mapping would be coming in a later release. At this point indeed the feature came in a later release of hardware in AX6000. I was talking to tech support today again as I purchased a decent hardware firewall and I would like to have the same vlan feature Iin the AX6000) of vlan 1,10,20 and 30 married to SSID with trunking available on the AC3000 as this should be basic network fiormware/software update and has nothing to do with wifi6 which may demand a new chipset. In the very least I need to segment the IOT stuff from business traffic. Can you please integrate proper vlan/ssid mapping into the AC3000 (SRR60). The way this should work is a user joins SSID Wireless 1 and should be part of the corresponding VLAN/Subnet and the AC3000 would run in AP mode and trunk (80-2.1q) the vlans via the WAN port to the Firewall which provides the IP routing, dhcp and all other services. I am not looking for wifi-6. ... View more

I'd like to see in the app a back haul status, even if it were a simple color coded line connecting the satellite to the router as shown on the network map.  Better would be some tangible measure of signal strength or bandwidth ... View more

I'd like to have the ability through the orbi app when remote (not connected to the wifi) to set and adjust things like fixed ip addresses for connected devices ... View more

I would like to upload my own certificate to web interface and be able to use my own domain name ... View more

I had opened a ticket asking for the ability to trunk multiple vlans out a single port to allow easier management of devices on each vlan, this seems like its not possible today, the alternative to this request is to just install SSH on the router.  With SSH enabled on the router I can create dynamic tunnels through the router to the other networks without even needing to make any port changes.   I am actually shocked that the orbi only supports Telnet, there is no reason in 2022 that the only CLI management is Telnet.  Dropbear is already installed on the device, we should be allowed to choose SSH or telnet.       ... View more

Seems like we only have an all or nothing choice: "Allow IoT devices to see each other and access my local network" If I allow this then the whole purpose of the seperate SSID for IoT is lost. I want the IoT devices to see each other, but NOT access my local network. Specifically I have a Hubitat hub which needs to talk to two Android tablets, two Konnected boards and some TVs. They are all on the same SSID, and I would like them to stay removed from my local network.  Seems the newer WiFi 6 router allows this to be configured via VLAN. Personally I'd prefer a method whereby access levels could be granted on a device by device basis.   Thank you ... View more

I have two requests, 1) Being the most important and 2) being less important. 1) Per attached device real-time bandwidth monitor. Consider the scenario that a connect device is utilising too much bandwidth and slowing other users. You can’t easily identify the culprit at present. 2) Historical bandwidth and traffic stats, per attached device. Allowing you to identify large upload and downloads, etc., and View usage patterns. Thanks for the consideration. ... View more

What if we could have a superuser network that could cut across network isolation? Scenarion: - wireless 1: owner's network (superuser) - wireless 2: a network for guests, with network isolation Disired outcome: - How can wireless 1 see devices on wireless 2? - How can we ensure wireless 2 has no visibility of devices on wireless 1? I want W2 guests to be able to access Sonos, lights, fans that would be on W2, but not devices set on W1. All this while enabling W1 (superuser) to see IoT devices on any network. ... View more

It would be great to drill down on the daily Content Filtering Report, to see which connected clients tried to visit blocked sites.     It would also be nice to offer parental controls for the device or connected client browsing history.    The system is amazaing however it needs some additional features to be a reasonable solution for a work from home user with children.    ... View more