I've seen a number of posts about a similar issue but I've tried numerous suggestions with no success. I've had my XR500 for a little over a year now and it's been great. A week ago that changed when I started to get intermittent drops on my network, while working from home. This was happening on all devices. I tested connection direct to my modem to make sure it wasn't ISP and I was not having the same problem, so it is a problem specific to the XR500 router on both wifi and ethernet connection.
I have the latest firmware update and I've tried the factory reset, which fixes the problem for a few hours only. My modem is on bridge mode as well to provide further detail.
When I caught on to the fact that the router was the issue, I started to watch the router logs. It appears that I am getting some DoS logs that coincide with the exact moment of my drops. I've done some research on these from other posts, and from what I understand they aren't much of a threat, but they somehow seem to be correlated to my connection issues. I've pasted a few examples below, from the most recent occurrence:
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:43
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:42
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:41
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:40
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:39
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:38
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:37
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:36
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:35
[DoS Attack: ACK Scan] from source: 52.226.139.121, port 443, Monday, May 16, 2022 22:19:34
The IP addresses will vary, and I often get [DoS Attack: TCP/UDP Chargen] as well as [DoS Attack: SYN/ACK Scan]. I've tried disabling Port Scan and DoS Protection to see if maybe the router was tripping over itself with some false threats but that hasn't worked either. ISP suggested that I turn off UPnP which also hasn't changed anything.
I'm running out of patience and ideas, to the point where I may just disconnect the XR500 router and run straight from my **bleep**ty ISP modem/router at this point. The disconnects have become too frequent and too disruptive for my day-today.
Does anyone have any ideas? I would greatly appreciate the help!
I came across this suggestion on another thread late last night. My connection dropped a short time after making the adjustment last night but I gave it some time to test this morning as well. The drops appear to be continuing, but maybe less frequently. Still often enough for it to be a problem.
Could you take the ISP modem out of bridge mode and instead copy the WAN IP on the XR System Information page and put it in the modem DMZ and see if that prevents the disconnects please?
I have made this change and monitored for a couple of hours now. So far I haven't noticed any drops, but the logs have started to show more frequent DHCP lease changes. Again, no drops that I have noticed in the short time period, but do you think this will cause any problems moving forward? Or is it common after the DHCP change I made from the prior suggestion?
The logs also show "marking device that is marked _____" along with each DHCP lease change notice. Just want to make sure this wont result in any lag or small connection issues per individual device if its happening frequently.
No that should be fine, DHCP can try to change the lease as many times as it wants but because your devices have an IP outside of the range it won't affect you.
So after taking off bridge and running through DMZ, the drops appear to have stopped for the past couple of days....but now my internet speeds are much more inconsistent. Specifically with gaming (on Xbox, ethernet) I'm getting spikes in ping and inconsistent connections.
When I was using bridge mode (before the drop issues started) I was getting more consistent ping and connection. Obviously bridge is ideal....is there any other way to fix the drop issues and keep my modem in bridge mode?
Or maybe other suggestions that I can tinker with to help stabilize my connection and smoothen out ping?
