401 Authorization Error message

[TXSWoodruff]

Just installed Orbi RBR40 and 3 satellites. Generally working well but receiving a 401 Authorization error on several devices, Apple iPad and iPhone. Other devices working OK. 

Devices working well show Network on the Devices map, others not working well show Smart Phone or iPad.  Interesting but not sure if it’s relevant. RBR40 FW is V2.3.5.30 

[FURRYe38 · Accepted solution]

This would be a double NAT condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop

[FURRYe38]

Where are you seeing this Authorization Error message on these devices? 

Try the Forget This Network for all Apple devices. The then power off then back on and re-connect. 

What is the Mfr and model# of the ISP modem the NG router is connected too?

Is the Orbi system operating in Router or AP mode?

[ekhalil]

Please test for double NAT as follows:
Please open a Command Prompt on any computer attached to Orbi and type:
> tracert 8.8.8.8  (or traceroute 8.8.8.8 if you're using a Mac computer)
1. If you see two private IP addresses listed in the first two hops then you have double NAT. Please check the model of your ISP modem and if you have a manual for it.
2. If you see only one private address and the second hop shows a public address, then you’re all good and we need then to troubleshoot further to find the root cause of the issue,

[TXSWoodruff]

To answer your questions, we would see the 401 Auth message when clicking on an old, saved link to a website.  Sometimes even typing in the URL in the search line would result in the 401 Auth message.  Same for my husband. But it did not happen with all old links, only some, and it appeared to be random. I did not have as many issues as he did on his devices. 

Also, we are on Excede (ViaSat) satellite internet. The modem is an Excede WiFi Modem. There are no model numbers on it or on the installation manual. We've had this modem for ~4 years. Not thrilled with satellite but its the best we can do in rural America for now. Based on another response, I did do a traceroute command and I think I have a double NAT. 

And the new ORBI router is operating in Router mode, not AP mode. Today is day 3 of our new network. Coverage is outstanding. Weird thing is I now cannot recreate the 401 Auth message on my devices. Yesterday, I did do a complete reboot of everything, even the Excede modem, the ORBI router and reconnected the satellites, then rebooted all our Apple devices.  

When in doubt, reboot.  I will post again if I see the 401 Auth error again. Thank you for your help!

[TXSWoodruff]

Thank you - yes I do see two private IP addresses when I do a traceroute (I am on a MacBook Pro). First IP address is the ORBI router, followed by the Excede WiFi Modem. Looks like we do have a double NAT. 

[FURRYe38 · Accepted solution]

This would be a double NAT condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop

[TXSWoodruff]

That took care of our issue!! I chose to disable the WiFi on our Excede Modem and then put the Orbi in AP mode. Your links and YouTube videos helped a ton. 

We are up and running! We love the coverage and now, with our issue resolved, I think we are Orbi-fans. Thanks again.

[FURRYe38]

Good to hear. Enjoy. 

[brianbarth61]

Recently reset my RBR40 back to the factory settings and after that have been getting a lot of 401 unauthorized access errors. This happens even via Chrome or Safari. Orbi router is connected via an AT&T Arris NVG 599. No issues accessing the same sites via the AT&T modum. 

[ekhalil]

---

@brianbarth61 wrote:

Recently reset my RBR40 back to the factory settings and after that have been getting a lot of 401 unauthorized access errors. This happens even via Chrome or Safari. Orbi router is connected via an AT&T Arris NVG 599. No issues accessing the same sites via the AT&T modum. 

---

This can be a double router issue.

Please open a Command Prompt on any computer attached to Orbi and type:

> tracert 8.8.8.8  (or traceroute 8.8.8.8 if you're using a Mac computer)

1. If you see two private IP addresses listed in the first two hops then you have double NAT. Please check the model of your ISP modem and if you have a manual for it.
2. If you see only one private address and the second hop shows a public address, then you’re all good and we need then to troubleshoot further to find the root cause of the issue,

[brianbarth61]

Below is what I get and it appears ok please let me know.

Brians-MBP-2:~ brianbarth$ traceroute 8.8.8.8

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 52 byte packets

1  dsldevice (192.168.1.254)  5.226 ms  2.103 ms  1.768 ms

2  107-216-40-1.lightspeed.austtx.sbcglobal.net (107.216.40.1)  18.895 ms  8.209 ms  3.443 ms

3  * * *

4  12.123.240.166 (12.123.240.166)  13.522 ms  18.120 ms  12.485 ms

5  12.122.85.197 (12.122.85.197)  16.769 ms  10.185 ms  10.027 ms

6  206.121.120.90 (206.121.120.90)  16.445 ms

    206.121.120.70 (206.121.120.70)  10.369 ms

    206.121.120.90 (206.121.120.90)  9.923 ms

7  108.170.240.129 (108.170.240.129)  11.426 ms

    108.170.252.129 (108.170.252.129)  11.499 ms *

8  108.170.226.57 (108.170.226.57)  16.418 ms

    dns.google (8.8.8.8)  13.778 ms  9.983 ms

Brians-MBP-2:~ brianbarth$