NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Orbi and WEP
I’ve been under the assumption that using WPS encryption is insecure, and the best encryption is to use WPA2 (hopefully with the Krack exploit patched). I noticed that it seems the Orbi system does us...
st_shawwrote:I'm not sure if you have a question anymore, but clearly, WPS should be turned off on an outdoor device.
I understand what is is saying. The risk of someone just coming up to your outdoor Orbi is you can connect just by pushing a button without knowing the password, so they allow turning WPS totally off. While a little lower risk, it still is there for the indoor units. For example: I have a contractor working on the house. I can CHOOSE to give them guest wifi access but they could also just push the WPS button and get connected to my router.
I agree, that functionality should be able to be totally turned off.
I agree with what you wrote. But, if somoene can touch your Orbi to push the WPS button, they can plug something into a LAN port and access the LAN directly. So, WPS ON or OFF doesn't make a huge difference in security if someone has physical access to your router.
- “I agree with what you wrote. But, if somoene can touch your Orbi to push the WPS button, they can plug something into a LAN port and access the LAN directly. So, WPS ON or OFF doesn't make a huge difference in security if someone has physical access to your router.”
The Outdoor Orbi does not have any LAN ports, so they added the ability to turn off WPS (sync button) so no one can easily get access to your network. Since the other Orbi satellites have LAN ports, you’re saying that it wouldn’t matter if the WPS (sync) button was disabled or not because they could use a cable to get into your network.
Is the Sync Button (using WPS) only used to sync the router with the satellites, or could someone get wireless access to the network by pressing the sync button?The Sync buttons\ on Satellites is ONLY for getting the Satellite(s) connected to the main routers wifi.
1n wrote:
“I agree with what you wrote. But, if somoene can touch your Orbi to push the WPS button, they can plug something into a LAN port and access the LAN directly. So, WPS ON or OFF doesn't make a huge difference in security if someone has physical access to your router.”
The Outdoor Orbi does not have any LAN ports, so they added the ability to turn off WPS (sync button) so no one can easily get access to your network. Since the other Orbi satellites have LAN ports, you’re saying that it wouldn’t matter if the WPS (sync) button was disabled or not because they could use a cable to get into your network.
Is the Sync Button (using WPS) only used to sync the router with the satellites, or could someone get wireless access to the network by pressing the sync button?Makes sense there are no LAN ports on the outside Orbi, because "yes" anyone can access your network if they plug into the LAN. Unless you "Block all new devices" based on MAC addresses.
According to the Orbi User Manual the sync button on the router is used to connect WPS-enabled clients. The satellites are WPS clients, so their WPS button should not allow other clients to join the network.
Since it's a client, it makes no sense that the RBS50Y would allow you to disable WPS. In fact, I don't see anything about disabling WPS in the RBS50Y user manual. Where did you get the information that WPS could be disabled on the RBS50Y?
- The RBS50Y not only lets you disable the Sync (WPS) button, but the online setup manual (screenshot attached), states the physical sync button will automatically be disabled once the outdoor Orbi is synced to your router and Netgear recommends keeping the sync button turned off for security reasons. I was questioning that since I have the ability to turn on/off the physical sync button on the RBS50Y, that I would like to have that ability to turn on/off the Sync button on the router and satellites if I wanted to through the router interface.
