Login to D7000 - works on wifi but not on switched ethernet

[walaj]

Any reason my D7000v1 will allow me to login to the GUI on wifi, but no if I'm connected via ethernet (via a switch)?

I have zero issues with internet access, and I can telnet to cli with no problem on wired and wifi.  Switch is an unmanged TP-Link 24 Port Gig-E

When accesing the web GUI via wired connection, I'll get a request for authentication, but zero response there after.

ethernet: 

(! 35)$ wget http://192.168.1.254/ --user=admin --password=password --timeout=20 --tries=3 --verbose
--2018-09-21 14:54:31--  http://192.168.1.254/
Connecting to 192.168.1.254:80... connected.
HTTP request sent, awaiting response... 401 Unauthorized
Authentication selected: Basic realm="NETGEAR D7000"
Connecting to 192.168.1.254:80... connected.
HTTP request sent, awaiting response... Read error (Operation timed out) in headers.
Retrying.

--2018-09-21 14:54:52--  (try: 2)  http://192.168.1.254/
Connecting to 192.168.1.254:80... connected.
HTTP request sent, awaiting response... Read error (Operation timed out) in headers.
Retrying.

--2018-09-21 14:55:14--  (try: 3)  http://192.168.1.254/
Connecting to 192.168.1.254:80... connected.
HTTP request sent, awaiting response... Read error (Operation timed out) in headers.
Giving up.

on wifi:

(! 36)$ wget http://192.168.1.254/ --user=admin --password=password --timeout=20 --tries=3 --verbose
--2018-09-21 15:21:51--  http://192.168.1.254/
Connecting to 192.168.1.254:80... connected.
HTTP request sent, awaiting response... 401 Unauthorized
Authentication selected: Basic realm="NETGEAR D7000"
Connecting to 192.168.1.254:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html’

index.html                                    [ <=>    ]   6.26K  --.-KB/s    in 0s

2018-09-21 15:21:51 (436 MB/s) - ‘index.html’ saved [6406]

[walaj · Accepted solution]

seems my mitm box is potentially eating packets. But only the first few packets, meaning the web browser doens't get a valid html response. 

my issue though, presumably not the router.

[antinode]

> Any reason my D7000v1 will allow me to login to the GUI on wifi, but

> no if I'm connected via ethernet (via a switch)?

   Nothing leaps to mind.  I seem to have no such trouble:

ITS $ wget dsl --user=admin --password=password --timeout=20 --tries=3 -v
Conversion from 'ASCII' to 'ASCII' isn't supported
--2018-09-21 01:03:38--  http://dsl/
Resolving dsl... 10.0.0.1, 10.0.0.1
Connecting to dsl|10.0.0.1|:80... connected.
HTTP request sent, awaiting response... 401 Unauthorized
Authentication selected: Basic realm="NETGEAR D7000"
Connecting to dsl|10.0.0.1|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: 'index.html'

index.html              [ <=>                ]   6.26K  --.-KB/s    in 0s      

2018-09-21 01:03:38 (125 KB/s) - 'index.html' saved [6406]

   Around here, that's V1.0.1.68_1.0.1 (freshly updated), and:

ITS $ wget --version
GNU Wget 1.18a built on VMS IA64 V8.4.

-cares +digest -gpgme +https +ipv6 -iri +large-file -metalink -nls 
+ntlm +opie -psl +ssl/openssl 

Wgetrc: 

[...]

ITS $ tcpip show version

  HP TCP/IP Services for OpenVMS Industry Standard 64 Version V5.7 - ECO 5
  on an HP rx2600  (1.50GHz/6.0MB) running OpenVMS V8.4    

   Do you get the same result from a GUI web browser?  The worst
behavior I could manage was:

ITS $ wget dsl --user=admin --password=password --timeout=20 --tries=3 -v
Conversion from 'ASCII' to 'ASCII' isn't supported
--2018-09-21 01:08:04--  http://dsl/
Resolving dsl... 10.0.0.1, 10.0.0.1
Connecting to dsl|10.0.0.1|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: 'index.html'

index.html              [ <=>                ]   6.65K  --.-KB/s    in 0s      

2018-09-21 01:08:04 (133 KB/s) - 'index.html' saved [6807]

ITS $ search index.html currently
        <p><span languageCode="10008">You are currently logged in from another d
evice. There can be only one device logged in at a time. If you log in from this
 device, the other device will be logged out. Do you want to proceed?</span></p>

But, as you can see, even that didn't time out.

   The D7000 (port 1, others unused) goes to only some (Netgear?)
24-port Gb switch, one port of which goes to a port on some cheap 8-port
switch; another port of the 8-port switch feeds a Gb Ethernet interface
on the computer.  (None of which should matter at all.)

[walaj]

Hmm.

OK - I do have an active "filter" (work box, does traffic shaping/filtering/monitoring), however it isn't supposed to be doing anything to this traffic.

Bypassed the filter - works straight away.

Stumped why the filter would be impacting it though, given it doesn't appear to be altering anything else.

[walaj · Accepted solution]

seems my mitm box is potentially eating packets. But only the first few packets, meaning the web browser doens't get a valid html response. 

my issue though, presumably not the router.