×

Introducing the Orbi 970 Series Mesh System with WiFi 7(BE) technology. For more information visit the NETGEAR Press Room.

Orbi WiFi 7 RBE973
Reply

Re: Orbi unexpected network change RBR50

jhc94087
Aspirant

Orbi unexpected network change RBR50

I intially setup my home network with as 192.168.100.0/24 . The logs show that the system was giving out IP addresses and last night (e.g. 192.168.100.56)

 

This morning the network flipped to 192.168.1.0/24 and started to give out IPs such as 192.168.1.3.

 

I think I saw a message that Orbi had changed the network due the a conflict with the gateway 192.168.100.1 which apparently is not my cable modem.

 

Does anyone know if this is supported functionality by Orbi? 

 

 

 

admin login] from source 192.168.1.8, Thursday, June 27, 2019 08:07:50
[DHCP IP: 192.168.1.19] to MAC address 24:f5:a2:f8:7a:c3, Thursday, June 27, 2019 08:06:56
[DHCP IP: 192.168.1.3] to MAC address e0:91:f5:c3:ef:44, Thursday, June 27, 2019 08:06:40
[DHCP IP: 192.168.1.19] to MAC address 24:f5:a2:f8:7a:c3, Thursday, June 27, 2019 08:02:17
[DoS Attack: RST Scan] from source: 136.243.60.85, port 8000, Thursday, June 20, 2019 11:57:08
f[DoS Attack: SYN/ACK Scan] from source: 103.81.128.107, port 80, Thursday, June 20, 2019 11:47:35
[DHCP IP: 192.168.100.56] to MAC address 74:75:48:00:2e:37, Thursday, June 20, 2019 11:17:27
[DHCP IP: 192.168.100.88] to MAC address 30:d9:d9:0e:cb:bd, Thursday, June 20, 2019 10:50:31

Model: RBR50|Orbi AC3000 Tri-band WiFi Router
Message 1 of 5
CrimpOn
Guru

Re: Orbi unexpected network change RBR50

What is the Orbi connected to (brand and model)?  If it is indeed a "modem", not a "modem/router", then the Orbi should show the WAN as having a public address.  If the connection is to a "modem/router" then the WAN IP address will be a private address.

Message 2 of 5
jhc94087
Aspirant

Re: Orbi unexpected network change RBR50

TP Link TC7650 is the model of the modem. I do get a public wIP on the WAN side. 

 

My original configuration was working for about a 1 month before the network got flipped from 192.168.100.0/24 to 192.168.1.0/24. Orbi did that change by itself overnight. That seems very weird.


Message 3 of 5
FURRYe38
Guru

Re: Orbi unexpected network change RBR50

Most cable modems already default use a 192.168.100.1 IP address for there web page services. The Orbi should not have been using this in the first place or if you manually set it, Orbi may have not notified you about this conflict and thus changed it to avoid the conflict with with the modem in this later time frame. I'ts not recommended to use 192.168.100 range on any LAN or router as most cable modems have this already in used for there management web page feature. Try to use .1.1 or .0.1 range...


@jhc94087 wrote:

I intially setup my home network with as 192.168.100.0/24 . The logs show that the system was giving out IP addresses and last night (e.g. 192.168.100.56)

 

This morning the network flipped to 192.168.1.0/24 and started to give out IPs such as 192.168.1.3.

 

I think I saw a message that Orbi had changed the network due the a conflict with the gateway 192.168.100.1 which apparently is not my cable modem.

 

Does anyone know if this is supported functionality by Orbi? 

 

 

 

admin login] from source 192.168.1.8, Thursday, June 27, 2019 08:07:50
[DHCP IP: 192.168.1.19] to MAC address 24:f5:a2:f8:7a:c3, Thursday, June 27, 2019 08:06:56
[DHCP IP: 192.168.1.3] to MAC address e0:91:f5:c3:ef:44, Thursday, June 27, 2019 08:06:40
[DHCP IP: 192.168.1.19] to MAC address 24:f5:a2:f8:7a:c3, Thursday, June 27, 2019 08:02:17
[DoS Attack: RST Scan] from source: 136.243.60.85, port 8000, Thursday, June 20, 2019 11:57:08
f[DoS Attack: SYN/ACK Scan] from source: 103.81.128.107, port 80, Thursday, June 20, 2019 11:47:35
[DHCP IP: 192.168.100.56] to MAC address 74:75:48:00:2e:37, Thursday, June 20, 2019 11:17:27
[DHCP IP: 192.168.100.88] to MAC address 30:d9:d9:0e:cb:bd, Thursday, June 20, 2019 10:50:31


 

Message 4 of 5
Ggogo2368
Aspirant

Re: Orbi unexpected network change RBR50

I’m new here and will apologize in advance for my lack of technology skills. I have an Orbi RBR50 with one satellite and the outdoor extender. I have a guest network setup and then my home network. I am utilizing the BitDefender through NETGEAR Armor and Circle on NETGEAR (not a separate unit) for parental controls. My modem is an Arris Surfboard and my ISP is Comcast/Xfinity (or whatever they call themselves). I’ve had this setup for two years. Within the last few weeks I had noticed some weird changes on the Circle App as well on the computers connected to my home network so I started paying closer attention to the system logs. While I really don’t understand what it all means, I understood enough to see changes but not sure what it all means...please help me interpret this as I feel somehow, something, or even someone is messing with my network. I’m not even sure it couldn’t be from inside the network - but I really would like to know what it is that’s going on and why it changed. I’m seeing a lot of [DoS Attack: ACK Scan] port 80 and port 443 [DoS Attack: RST Scan] at ports 50388, 54735, [WLAN access rejected: incorrect security], DHCP IP to Mac, and then about 12-15 visits to various oscp.xxxxx.com sites and a hit in rapidssl.com. Then my internet drops in and out for the home network. Guest network seems to remains stable. The other really weird part....two of the Wi-Fi devices on my network have some version of Mcafee running on them and I’ve never run or purchased Mcafee ever and I’m unable to delete it. I’ve never seen anything like this and I’m so frustrated. I’ve called Gearhead support and they have provided zero help despite my having a paid subscription!
Model: RBR50|Orbi AC3000 Tri-band WiFi Router
Message 5 of 5
Top Contributors
Discussion stats
  • 4 replies
  • 1021 views
  • 0 kudos
  • 4 in conversation
Announcements

Orbi WiFi 7