Re: Orbi Blocking Websites

notjoeone · ‎2020-03-06

Can't even log into the website AND the certificat for a Netgear website has expired. That doesn't make me very confident in a company that is supposed be branded by "security".

FURRYe38 · ‎2020-03-06

What Firmware version is currently loaded?

What is the Mfr and model# of the ISP modem the NG router is connected too?

What browser are you using? Happens in IE11, FF or Opera?

@notjoeone wrote:
Can't even log into the website AND the certificat for a Netgear website has expired. That doesn't make me very confident in a company that is supposed be branded by "security".

Spgleason17 · ‎2020-04-02

Unable to access website to change settings

FURRYe38 · ‎2020-04-02

The RBRs web page?

What NG Orbi do you have?

@Spgleason17 wrote:
Unable to access website to change settings

jflorez · ‎2020-04-05

Thank you. I had the same issue after switching from Comcast to fiber optic. I could not access some websites and certain apps such as Netflix (I could access it but I couldn’t stream). When i logged into the fiber optic’s wifi i was able to access those pages. But when i logged into Orbi, I couldn’t. After digging around I found this post and it solved it. Just add the https protocol so Orbi does not block it when the website does not specifically specify it in its URL. Thanks

FURRYe38 · ‎2020-04-05

Thanks for letting us know.

Enjoy.

@jflorez wrote:
Thank you. I had the same issue after switching from Comcast to fiber optic. I could not access some websites and certain apps such as Netflix (I could access it but I couldn’t stream). When i logged into the fiber optic’s wifi i was able to access those pages. But when i logged into Orbi, I couldn’t. After digging around I found this post and it solved it. Just add the https protocol so Orbi does not block it when the website does not specifically specify it in its URL. Thanks

MossyBoots · ‎2020-05-01

ARGH!

Brand new to Orbi and it's working great for all of the phones in the house - not so for my laptop/iPad. Same "connection not secure" situation. So I took someone's advice about traceroute on my Mac and found this:

traceroute to 8.8.8.8 (8.8.8.8), 64 hops max, 52 byte packets

1 10.0.0.1 (10.0.0.1) 4.757 ms 7.031 ms 4.356 ms

2 192.168.1.1 (192.168.1.1) 4.367 ms 5.982 ms 6.424 ms

What now? It's been a long time since I was semi-computer literate. As someone else said, I bought an Orbi because it was "simple and easy to use"!

This RBK50 said it was updated to the latest firmware on install (3 days ago).

I have no problem using the phone app and I really wish there was a way to fix this issue there.

I'm using the "performance two-pack". The route & the satellite.

MossyBoots · ‎2020-05-01

After a fruitless 50minute phone call with NetGear (40min hold time), I was simply told to call Verizon.

I think my Verizon G1100 router is competing with my Orbi RBK50v2.

Is there any way to designate proper roles to each and move on?

This seems like such a rampant issue but I've yet to find a clear solution via multiple forum readings.

MossyBoots · ‎2020-05-01

Another point of inquiry:

Can't I simply remove my Verizon G1100 router and just go straight into my Verizon BIGBOX that's wired up to the brick walls of my basement?

Sasquatch80 · ‎2020-06-17

Thank you so much for this solution! I wired into each satellite as well as the router and confirmed internet was working. My PC and phone were connecting just fine, but my Fire Sticks and Samsung TV's were failing to connect until I found your post. As soon as I saved the setting my TV connected.

FURRYe38 · ‎2020-06-18

This would be a double NAT (two router) condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
https://kb.netgear.com/30187/How-to-fix-issues-with-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge or modem only mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop

@MossyBoots wrote:
Another point of inquiry:

Can't I simply remove my Verizon G1100 router and just go straight into my Verizon BIGBOX that's wired up to the brick walls of my basement?

zero71 · ‎2020-06-19

The fix in the op works for me for an hour or two and then I'm locked out of some websites again until I log back into Orbi admin, edit the https rule created and reapply it without change. It's really annoying to need to do this all the time. This url is a good example of one I can't access without doing the above.

https://support.meetcircle.com/

Is there a permanent fix?

Hakur · ‎2020-07-16

Thank you!! I just got a new Orbi and was having the website Password and Login issue and this description solved the problem!!

Dinew30 · ‎2020-09-08

My question is why is it setting not made that way from the factory. You know this issue exists fix it in updates. I have had two like this so far...And as I am a computer repair technician and I recommend products for my customers I’m sure I will have more

Alexoe83 · ‎2020-10-06

worked like a charm.

azdbo608 · ‎2020-12-02

How do you perform this when Orbi is blocking access to the the login site? I switched networks, but then of course, I can't login into the router when I am not on the Orbi network. This issue is infuriating!!

FURRYe38 · ‎2020-12-02

You need to be on the same network as Orbi.

Do you have two routers?

@azdbo608 wrote:
How do you perform this when Orbi is blocking access to the the login site? I switched networks, but then of course, I can't login into the router when I am not on the Orbi network. This issue is infuriating!!

JacksonM · ‎2020-12-28

I can't even go to the Orbi login website without it blocking it for me. What am I doing wrong?

FURRYe38 · ‎2020-12-28

What do you mean by blocking it? You can't access the RBRs web page?

What Firmware version is currently loaded?
What is the Mfr and model# of the Internet Service Providers modem/ONT the NG router is connected too?

Do you have Armor or Circle enabled?

Try using a different web browser.

Has a factory reset and setup from scratch been performed since last FW update?

@JacksonM wrote:
I can't even go to the Orbi login website without it blocking it for me. What am I doing wrong?

bdiges · ‎2021-02-06

I want to block youtube on the devices my kid uses. but not on the device I use. can we do that with orbi mesh network?

schumaku · ‎2021-02-06

@bdiges wrote:
I want to block youtube on the devices my kid uses. but not on the device I use. can we do that with orbi mesh network?

Not with the default Orbi on-board keyword blocker - which can work with clear text http only anyway - I'm afraid.

The only way to achieve this is using some App on the end-point, like the Smart Parental Controls which comes in two flavors (Circle or Netgear Smart Parental Controls SPC) depending on your product. More and more devices will be added or migrated from Circle to SPC with coming-up firmware updates.

LinderB · ‎2021-02-13

Hello Netgear!

I have the RBR850, newest mesh system with 2 satellites. I love it! However, there are a few issues with blocking that I'd like to eliminate. We're experiencing a temporary 'unavailable' status on some websites, and it takes 2 tries to get them to open up. When they finally connect it doesn't specify the connection type.

I followed the instructions to add the HTTPS and that helped. There is a WHOLE list of possible 'Service Types' that could be added as well. Are there any others that I could safely add to improve my connectivity? I hope someone knows which of the types below are safe to add:

ANY (UDP)

AIM

AGE OF EMPIRE

BGP

BOOTP CLIENT

BOOTP SERVER

CU-SEEME (7648)

CU-SEEME (24032)

DNS

FINGER

FTP

HTTP

HTTPS (already added)

ICUII

IDENT

IP-PHONE

IRC

NET MEETING

NFS

NEWS

QUAKELL

RCMD

REAL-AUDIO

REXEC

R LOGIN

R TELNET

RTSP

SFTP

SMTP

SNMP

SNMP TRAPS

SQL NET

SSH

STRMWORKS

TACACS

TELNET

TFP

VDOLIV

VPN-IP

VPN-IPSEC

VPN-L2TP

PPTP

Thank you!!

schumaku · ‎2021-02-13

@LinderB wrote:
However, there are a few issues with blocking that I'd like to eliminate. We're experiencing a temporary 'unavailable' status on some websites, and it takes 2 tries to get them to open up. When they finally connect it doesn't specify the connection type.

The new modern trend by the Web browser makers ot hide things - click into the broser URL line eg. behind the text and the protocol (typically https:// or rarely the http:// ) will show up.

@LinderB wrote:
I followed the instructions to add the HTTPS and that helped.

Very unlikley. If you block https (this is port 443/tcp) and http (port 80/tcp) virtually no usual web site would be reachable....

FURRYe38 · ‎2021-02-13

https://community.netgear.com/t5/Orbi/RBR50-Have-You-Installed-V2-7-2-104/td-p/2055212/jump-to/first...

@LinderB wrote:
Hello Netgear!

I have the RBR850, newest mesh system with 2 satellites. I love it! However, there are a few issues with blocking that I'd like to eliminate. We're experiencing a temporary 'unavailable' status on some websites, and it takes 2 tries to get them to open up. When they finally connect it doesn't specify the connection type.

I followed the instructions to add the HTTPS and that helped. There is a WHOLE list of possible 'Service Types' that could be added as well. Are there any others that I could safely add to improve my connectivity? I hope someone knows which of the types below are safe to add:

ANY (UDP)
AIM
AGE OF EMPIRE
BGP
BOOTP CLIENT
BOOTP SERVER
CU-SEEME (7648)
CU-SEEME (24032)
DNS
FINGER
FTP
HTTP
HTTPS (already added)
ICUII
IDENT
IP-PHONE
IRC
NET MEETING
NFS
NEWS
QUAKELL
RCMD
REAL-AUDIO
REXEC
R LOGIN
R TELNET
RTSP
SFTP
SMTP
SNMP
SNMP TRAPS
SQL NET
SSH
STRMWORKS
TACACS
TELNET
TFP
VDOLIV
VPN-IP
VPN-IPSEC
VPN-L2TP
PPTP

Thank you!!

Retired_Member · ‎2021-06-04

I followed the procedure but the default port number for all websites was 443. That doesn't seem right. Plus, is this method bypassing security protocol and just allowing all websites through, regardless of their certificates, expired or not?

@jeffbr26 wrote:
ORBI is blocking HTTPS websites that are not explicitly defined in URL.

To unblock any https website, do the following:

Log into to your router admin console (https://orbilogin.net)
Click on Advanced Tab
Click on Security >> Block Services
Click Add
Click on Service Type DropDown and Select HTTPS
Click Add to save

Your all set. Close out admin and then retry ORBI admin console as just orbilogin.net and waalaa.Add Https as unblocked service

Re: Orbi Blocking Websites