Reply

RBR850: How to disable automatic firmware updates?

stanback
Aspirant

RBR850: How to disable automatic firmware updates?

My Orbi decided to update its firmware at a very inconveninet time today. Is there a way to disable auto-updating or set a schedule? I noticed some previous firmware versions had a debug.htm page where you could enable telnet in order to change the auto update flag, but that doesn't seem to be the case with this model and firmware version (V3.2.18.1_1.4.14).

 

If there's not a way to disable, is there a specific IP/hostname of the update server that I can block during certain times of the day so that it cannot receive updates?

 

Thanks in advance!

Message 1 of 9

Accepted Solutions
CrimpOn
Sensei

Re: RBR850: How to disable automatic firmware updates?

I believe @FURRYe38 is correct.  If there is some way to block access to http.fw.updates1.netgear.com

Notice "http" is part of the domain name. The actual connection is https.

 

My nslookup returns this for http.fw.updates1.netgear.com

Non-authoritative answer:
http.fw.updates1.netgear.com canonical name = http.fw.updates1.netgear.com.edgekey.net.
http.fw.updates1.netgear.com.edgekey.net canonical name = e70.g.akamaiedge.net.
Name: e70.g.akamaiedge.net
Address: 184.30.171.212

 

The actual connection is https (secure) One of the disappointments in the Orbii router firmware is that site blocking applies only to non-secure connections. https connections sail right past site blocking.  It was a simple experiment.  Block "ford.com". Then try to connect to ford.com.  'BLOCKED'.  Connect to https://ford.com. Goes right through.

I was really frustrated by this.  The point is, I have no idea what the primary router can do in terms of blocking

 

It might work if the primary router can "Block Services" from the Orbi router only. (not any other devices). That might stop https connections from the router (to anywhere!!!)

I love my Orbi.

View solution in original post

Message 7 of 9

All Replies
FURRYe38
Guru

Re: RBR850: How to disable automatic firmware updates?

Netgear has set up a community forum specifically for the Orbi AX (WiFi 6) products. Most of the people who watch that forum are more likely to have experience with Orbi AX and know how to work it better than those of us who follow this "general Orbi" forum. Might be more likely to find someone who has a solution if the question is posted there:
https://community.netgear.com/t5/Orbi-AX/bd-p/en-home-orbi-ax

 

Orbi systems don't support disabling of Auto FW updates. 

 

Thank you.

My Setup Internet Cable 1000↓/50↑ CAX80 Mode Mode | ISP SparkLight | Wifi Router Orbi RBK853 v4.6.7.5(Router Mode), Wired BackhaulSwitches Netgear GS105/8 | 

Additional NG HW: C7800/CM1100/CM1200/CM2000, Orbi CBK40, CBR750, RBK953(v6.0.3.68) & XR450(v130), RBK853 v4.6.7.5(AP) & RBK752 v4.6.7.5, RBK50(v23), SXK30(v110), R7000(v34), R7800(v84), R7960P(v84), EX7500/EX7700, GS308v3 and WNHDE111


 


 


Testing

Message 2 of 9
stanback
Aspirant

Re: RBR850: How to disable automatic firmware updates?

Thanks for the tip! I will post to the AX product forum here in a bit.

 

Message 3 of 9
CrimpOn
Sensei

Re: RBR850: How to disable automatic firmware updates?


@stanback wrote:

If there's not a way to disable, is there a specific IP/hostname of the update server that I can block during certain times of the day so that it cannot receive updates?


I have a strong suspicion that there is no practical way to block the Orbi itself from reaching Netgear's update servers.

Now, if the Orbi was actually connected to a router rather than directly to the ISP modem, then all sorts of possibilities exist.

 

It  might be worth taking a moment to ensure that the Orbi clock is set correctly.  My memory is that automatic updates are intended to be performed in the middle of the night.

I love my Orbi.
Message 4 of 9
stanback
Aspirant

Re: RBR850: How to disable automatic firmware updates?

Thanks, yes it is actually in AP-only mode with a router in front of it, so I may inspect packets to see where it's pulling updates from.

 

I did check the clock and it seems correct, here's an excerpt from the log:

 

[Time synchronized with NTP server] Monday, Jun 07,2021 10:01:50
[Internet connected] IP address: 10.9.1.2, Monday, Jun 07,2021 10:01:49
[Initialized, firmware version: V3.2.18.1_1.4.14] Monday, Jun 07,2021 10:01:39
[Internet disconnected] Monday, Jun 07,2021 10:01:38
Message 5 of 9
FURRYe38
Guru

Re: RBR850: How to disable automatic firmware updates?

Try blocking:

http.fw.updates1.netgear.com
updates1.netgear.com


@stanback wrote:

Thanks, yes it is actually in AP-only mode with a router in front of it, so I may inspect packets to see where it's pulling updates from.

 

I did check the clock and it seems correct, here's an excerpt from the log:

 

[Initialized, firmware version: V3.2.18.1_1.4.14] Monday, Jun 07,2021 10:01:39
[Internet disconnected] Monday, Jun 07,2021 10:01:38

 

My Setup Internet Cable 1000↓/50↑ CAX80 Mode Mode | ISP SparkLight | Wifi Router Orbi RBK853 v4.6.7.5(Router Mode), Wired BackhaulSwitches Netgear GS105/8 | 

Additional NG HW: C7800/CM1100/CM1200/CM2000, Orbi CBK40, CBR750, RBK953(v6.0.3.68) & XR450(v130), RBK853 v4.6.7.5(AP) & RBK752 v4.6.7.5, RBK50(v23), SXK30(v110), R7000(v34), R7800(v84), R7960P(v84), EX7500/EX7700, GS308v3 and WNHDE111


 


 


Testing

Message 6 of 9
CrimpOn
Sensei

Re: RBR850: How to disable automatic firmware updates?

I believe @FURRYe38 is correct.  If there is some way to block access to http.fw.updates1.netgear.com

Notice "http" is part of the domain name. The actual connection is https.

 

My nslookup returns this for http.fw.updates1.netgear.com

Non-authoritative answer:
http.fw.updates1.netgear.com canonical name = http.fw.updates1.netgear.com.edgekey.net.
http.fw.updates1.netgear.com.edgekey.net canonical name = e70.g.akamaiedge.net.
Name: e70.g.akamaiedge.net
Address: 184.30.171.212

 

The actual connection is https (secure) One of the disappointments in the Orbii router firmware is that site blocking applies only to non-secure connections. https connections sail right past site blocking.  It was a simple experiment.  Block "ford.com". Then try to connect to ford.com.  'BLOCKED'.  Connect to https://ford.com. Goes right through.

I was really frustrated by this.  The point is, I have no idea what the primary router can do in terms of blocking

 

It might work if the primary router can "Block Services" from the Orbi router only. (not any other devices). That might stop https connections from the router (to anywhere!!!)

I love my Orbi.

View solution in original post

Message 7 of 9
stanback
Aspirant

Re: RBR850: How to disable automatic firmware updates?

@CrimpOnand @FURRYe38 Thanks! I really appreciate the info. Cat Wink I am using a barebones celeron/mini pc running Ubuntu that does the routing so it's pretty flexible. I could basically use dnsmasq to set/tag the orbis via their MAC addresses and override the DNS for those hostnames.

 

Now that I'm thinking about it more (and before I spread misinformation), I'm not actually sure if it did apply a firmware update or if the unit just happened to crash. I'm probably going to leave it for now and take note of the FW version number. I'll browse some more threads to see if there are any known stability issues. It's a new unit, so there's some chance it could be faulty.

 

Is there a way to know if things are getting overloaded in terms of number of clients, memory usage, temperature, etc? Maybe I'll relocate the satellite so that the clients are split up a bit more evenly. Seems somewhat unlikely but I was also thinking it could be something with a connection watchdog where the unit decided to reset itself?

 

Message 8 of 9
CrimpOn
Sensei

Re: RBR850: How to disable automatic firmware updates?


@stanback wrote:

Is there a way to know if things are getting overloaded in terms of number of clients, memory usage, temperature, etc? Maybe I'll relocate the satellite so that the clients are split up a bit more evenly. Seems somewhat unlikely but I was also thinking it could be something with a connection watchdog where the unit decided to reset itself?

 


http://orbilogin.net/debug.htm provides some primitive stats. The older Orbi has been reported to support more than 100 devices.  I would think the 850 can do WAY more, especially if the majority are IoT gizmos.

 

Another area where not having the telnet capability sucks.  Linux has commands to display things like CPU temperature.

I love my Orbi.
Message 9 of 9
Top Contributors
Discussion stats
  • 8 replies
  • 1811 views
  • 3 kudos
  • 3 in conversation
Announcements

Orbi WiFi 6E