Reply
kdbajaj22
Tutor

Unable to login to Corporate Office 365 portal

Hello Everyone,

 

I've been using RBK53 at home since nearly 2 years. It is currently on firmware 2.3.5.30

I have an issue which i have been simply "living with" since the day I got this router which is that I am unable to login to my work account on Office 365. I work in IT so i am pretty tech-savvy in these matters but as far as controlling or influencing the technical setup of Office 365 in my organization is concerned, I have no power there.

 

Basically the issue is that if I want to access my Office 365 portal, i need to login to my corporate microsoft account on portal.office.com

Since my organization is using a Hybrid setup, the AD authentication of my account is done internally using an on-premise AD and then transfers to the Office 365 host.

 

I am able to see the credential prompt on portal.office.com - however, as soon as it re-directs to the web-service for authentication, it times out and then I see the "Page cannot be loaded" .

 

What is important to note is that this only happens at home when I am on the Orbi network. If I connect from anywhere else, be it a Coffee Shop, my mobile hotspot or at a friend's place that uses alternative router brands, I do not encounter this issue.

 

I checked internally and i got a tip from my organization that I should have IPv6 enabled (no clue how on earth that helps). It is set in Auto-detect on my Orbi but I know for a fact my service provider in Dubai does not use IPv6 on the WAN side.

I also adjusted the MTU size to 1488 after doing some ping tests but this did not help either.

 

Is there anyone else who has a similar setup with their work-account and encountering the same issue?

Thanks very much!

 

Model: RBK53|Orbi AC3000 Tri-band WiFi System
Message 1 of 16
Fl1ntstone
Apprentice

Re: Unable to login to Corporate Office 365 portal

Hi,

 

There could be lots of issues here that need to be investigated:

1) Firstly is your Orbi in Router or AP mode?

2) Can you confirm that the web service redirect is getting resolved by DNS; what is the URL and service port you are trying to connect on and can you ping it?

3) Is there a firewall/filter rule blocking access somewhere?

 

CheerZ

Message 2 of 16
FURRYe38
Guru

Re: Unable to login to Corporate Office 365 portal

What is the Mfr and model# of the ISP modem the NG router is connected too? Built in router here by chance? If so, This would be a double NAT condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
https://kb.netgear.com/30187/How-to-fix-issues-with-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge or modem only mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop 


@kdbajaj22 wrote:

Hello Everyone,

 

I've been using RBK53 at home since nearly 2 years. It is currently on firmware 2.3.5.30

I have an issue which i have been simply "living with" since the day I got this router which is that I am unable to login to my work account on Office 365. I work in IT so i am pretty tech-savvy in these matters but as far as controlling or influencing the technical setup of Office 365 in my organization is concerned, I have no power there.

 

Basically the issue is that if I want to access my Office 365 portal, i need to login to my corporate microsoft account on portal.office.com

Since my organization is using a Hybrid setup, the AD authentication of my account is done internally using an on-premise AD and then transfers to the Office 365 host.

 

I am able to see the credential prompt on portal.office.com - however, as soon as it re-directs to the web-service for authentication, it times out and then I see the "Page cannot be loaded" .

 

What is important to note is that this only happens at home when I am on the Orbi network. If I connect from anywhere else, be it a Coffee Shop, my mobile hotspot or at a friend's place that uses alternative router brands, I do not encounter this issue.

 

I checked internally and i got a tip from my organization that I should have IPv6 enabled (no clue how on earth that helps). It is set in Auto-detect on my Orbi but I know for a fact my service provider in Dubai does not use IPv6 on the WAN side.

I also adjusted the MTU size to 1488 after doing some ping tests but this did not help either.

 

Is there anyone else who has a similar setup with their work-account and encountering the same issue?

Thanks very much!

 


 

My Setup (Cable 1Gbps/50Mbps)>CM1200 v2.02.03(LAG Disabled)>RBK853 v3.2.17.12
RBK50 v2.7.2.104(WW) Circle Enabled
Additional NG HW: C7800/CM1100/CAX80/CM2000, Orbi CBK40, R7800, R7960P, EX7500/EX7700, XR450 and WNHDE111
Message 3 of 16
Ragar99
Luminary

Re: Unable to login to Corporate Office 365 portal

I have the same scenario and it works without  issue.  I have the Orbi in AP  mode, I bet you don't.  I'd try two things, connect directly to your ISP's modem via ethernet and see if the issue persists.  If it does, talk to your ISP.  I'd also try a different browser/clear cache.

Message 4 of 16
FURRYe38
Guru

Re: Unable to login to Corporate Office 365 portal

Any progress on this? 


@kdbajaj22 wrote:

Hello Everyone,

 

I've been using RBK53 at home since nearly 2 years. It is currently on firmware 2.3.5.30

I have an issue which i have been simply "living with" since the day I got this router which is that I am unable to login to my work account on Office 365. I work in IT so i am pretty tech-savvy in these matters but as far as controlling or influencing the technical setup of Office 365 in my organization is concerned, I have no power there.

 

Basically the issue is that if I want to access my Office 365 portal, i need to login to my corporate microsoft account on portal.office.com

Since my organization is using a Hybrid setup, the AD authentication of my account is done internally using an on-premise AD and then transfers to the Office 365 host.

 

I am able to see the credential prompt on portal.office.com - however, as soon as it re-directs to the web-service for authentication, it times out and then I see the "Page cannot be loaded" .

 

What is important to note is that this only happens at home when I am on the Orbi network. If I connect from anywhere else, be it a Coffee Shop, my mobile hotspot or at a friend's place that uses alternative router brands, I do not encounter this issue.

 

I checked internally and i got a tip from my organization that I should have IPv6 enabled (no clue how on earth that helps). It is set in Auto-detect on my Orbi but I know for a fact my service provider in Dubai does not use IPv6 on the WAN side.

I also adjusted the MTU size to 1488 after doing some ping tests but this did not help either.

 

Is there anyone else who has a similar setup with their work-account and encountering the same issue?

Thanks very much!

 


 

My Setup (Cable 1Gbps/50Mbps)>CM1200 v2.02.03(LAG Disabled)>RBK853 v3.2.17.12
RBK50 v2.7.2.104(WW) Circle Enabled
Additional NG HW: C7800/CM1100/CAX80/CM2000, Orbi CBK40, R7800, R7960P, EX7500/EX7700, XR450 and WNHDE111
Message 5 of 16
kdbajaj22
Tutor

Re: Unable to login to Corporate Office 365 portal

Hello,

sorry for the delayed response

1) The ORBI is in Router mode. The service provider's fibre-optic modem only provides a bridged link. They provide you with a set of credentials for PPPoE which need to be configured on the user's home router, i.e. in this case for Orbi it's the internet link properties.

2) Yes, the destination host is correctly resolved but it is not pingable or telnet-able. I believe that is by design for the security of the destination host that processes OAUTH requests

3) No, there is not. In fact, i have tried to explictily add port 80, 443 and HTTPS sites as NOT blocked in the Orbi setting's for "Block sites" and "Block services". Did not make any difference.

Thanks!

Model: RBK53|Orbi AC3000 Tri-band WiFi System
Message 6 of 16
kdbajaj22
Tutor

Re: Unable to login to Corporate Office 365 portal

Hello,

sorry for the delayed response

You're right, The ORBI is in Router mode - but it has to be like that. The service provider's fibre-optic modem only provides a bridged link. They provide you with a set of credentials for PPPoE which need to be configured on the user's home router, i.e. in this case for Orbi it's the internet link properties. There is no double-NAT condition.

No, the problem does not happen if I take the Orbi out of the equation completely and connect directly to the ISP's modem and then to the internet.

Regards,

 

Model: RBK53|Orbi AC3000 Tri-band WiFi System
Message 7 of 16
kdbajaj22
Tutor

Re: Unable to login to Corporate Office 365 portal

Hello,

here's my feedback/answers

It's a Huawei all-in-one fibre optic gateway router the ISP provides in all homes to deliver all services in one appliance (traditional approach by most ISPs that have fibre-optic infrastructure). I can't check the exact model number at the moment - it's buried in the ceiling and i need a ladder to get to it.

 

1) and 2)  -->  The service provider's fibre-optic modem only provides a bridged link. They provide you with a set of credentials for PPPoE which need to be configured on the user's home router, i.e. in this case for Orbi it's the internet link properties. It's definately not a double-NAT condition.

 

Thanks!

 

Message 8 of 16
Fl1ntstone
Apprentice

Re: Unable to login to Corporate Office 365 portal

Hi,

 

I believe Office 365 uses other TCP ports and that is what could be blocked by your Orbi.  I would speak with your IT asking which ports need to be allowed?

 

I know some of the following TCP ports need to be allowed:

 

443

25

465

587

 

CheerZ

Message 9 of 16
FURRYe38
Guru

Re: Unable to login to Corporate Office 365 portal

What happens if you configure the gateway modem for router mode and then configure the Orbi RBR for router mode, removing the PPPoE connection configuration. Input the IP address the RBR gets from the ISP modem in to the modems DMZ/IP Pass-thru feature?

Or configure the ISP modem for router mode then configure the Orbi RBR for AP mode?

 

Couple of options to help you narrow down where the problem may be.


@kdbajaj22 wrote:

Hello,

here's my feedback/answers

It's a Huawei all-in-one fibre optic gateway router the ISP provides in all homes to deliver all services in one appliance (traditional approach by most ISPs that have fibre-optic infrastructure). I can't check the exact model number at the moment - it's buried in the ceiling and i need a ladder to get to it.

 

1) and 2)  -->  The service provider's fibre-optic modem only provides a bridged link. They provide you with a set of credentials for PPPoE which need to be configured on the user's home router, i.e. in this case for Orbi it's the internet link properties. It's definately not a double-NAT condition.

 

Thanks!

 


 

My Setup (Cable 1Gbps/50Mbps)>CM1200 v2.02.03(LAG Disabled)>RBK853 v3.2.17.12
RBK50 v2.7.2.104(WW) Circle Enabled
Additional NG HW: C7800/CM1100/CAX80/CM2000, Orbi CBK40, R7800, R7960P, EX7500/EX7700, XR450 and WNHDE111
Message 10 of 16
nguser_01
Aspirant

Re: Unable to login to Corporate Office 365 portal

We just ran into the same thing.  if you try accessing http://portal.office.com and you are presented with a netgear page, that is the cause of your issues.  We were unable to install Office 365 while behind a Netgear router because of this issue.  Swapped out to a different router and were able to install without any other changes to the PC or network.  Wasted 2 days on this issue to find out it's an issue with the Netgear router intercepting the traffic for this address http://portal.office.com (try it without https).

Message 11 of 16
FURRYe38
Guru

Re: Unable to login to Corporate Office 365 portal

What is the Mfr and model# of the ISP modem the NG router is connected too?

What model NG router are you referring too? 


@nguser_01 wrote:

We just ran into the same thing.  if you try accessing http://portal.office.com and you are presented with a netgear page, that is the cause of your issues.  We were unable to install Office 365 while behind a Netgear router because of this issue.  Swapped out to a different router and were able to install without any other changes to the PC or network.  Wasted 2 days on this issue to find out it's an issue with the Netgear router intercepting the traffic for this address http://portal.office.com (try it without https).


 

My Setup (Cable 1Gbps/50Mbps)>CM1200 v2.02.03(LAG Disabled)>RBK853 v3.2.17.12
RBK50 v2.7.2.104(WW) Circle Enabled
Additional NG HW: C7800/CM1100/CAX80/CM2000, Orbi CBK40, R7800, R7960P, EX7500/EX7700, XR450 and WNHDE111
Message 12 of 16
tomschmidt
Virtuoso

Re: Unable to login to Corporate Office 365 portal

Do you have Armor and/or Circle enabled on your Orbi?  If so, they may be causing the issue.  I do not have either enabled, and when I navigate to http://portal.office.com it redirects me to https://login.microsoftonline.com/ for login to Microsoft as it should. Using http or https has the same results.

 


@nguser_01 wrote:

We just ran into the same thing.  if you try accessing http://portal.office.com and you are presented with a netgear page, that is the cause of your issues.  We were unable to install Office 365 while behind a Netgear router because of this issue.  Swapped out to a different router and were able to install without any other changes to the PC or network.  Wasted 2 days on this issue to find out it's an issue with the Netgear router intercepting the traffic for this address http://portal.office.com (try it without https).


 

RBK53 Orbi AC3000 Tri-band WiFi System (RBR50v1 router and two RBS50v1 satellites) running v2.5.1.16 firmware
Model: RBK53|Orbi AC3000 Tri-band WiFi System
Message 13 of 16
kdbajaj22
Tutor

Re: Unable to login to Corporate Office 365 portal

I think I have finally figured it out but I will have to observe this over the next weeks.

I realized that whenever I would reset the router and satellites to factory default using the physical reset button and then re-setup my home network, the login to portal.office.com would work for not longer than one week because of the Auto-detect setting of the IPv6.

If I disable IPV6 the portal.office.com redirection to my company's secure token service (which is used for the Authentication - just like any other enterprise would use) would again, not work.

I then noticed on the debug.htm page of the router that you have the ability to enable jumbo frames and ICMP response.

As soon as I enabled this and re-enabled IPV6 to Auto, it has started to work.

 

Could anyone else having a similar setup please do the same thing and confirm to me?

Could also be a good tip if others are having issues accessing AWS services. 

 

 

debugpageoptions.JPG

Model: RBK53|Orbi AC3000 Tri-band WiFi System
Message 14 of 16
RAllred
Aspirant

Re: Unable to login to Corporate Office 365 portal

I had the same issue.  Solution - Login to the router > Advanced > WAN Setup > NAT Filtering changed to "Open"

Office 365 now works perfectly - no other issues...yet Smiley Wink  I'll update if something changes.

 

Message 15 of 16
FURRYe38
Guru

Re: Unable to login to Corporate Office 365 portal

Jumbo frames should only be enabled if your entire network supports Jumbo frames, i.e. switches and LAN adapters. Otherwise you should disable it. 


@kdbajaj22 wrote:

I think I have finally figured it out but I will have to observe this over the next weeks.

I realized that whenever I would reset the router and satellites to factory default using the physical reset button and then re-setup my home network, the login to portal.office.com would work for not longer than one week because of the Auto-detect setting of the IPv6.

If I disable IPV6 the portal.office.com redirection to my company's secure token service (which is used for the Authentication - just like any other enterprise would use) would again, not work.

I then noticed on the debug.htm page of the router that you have the ability to enable jumbo frames and ICMP response.

As soon as I enabled this and re-enabled IPV6 to Auto, it has started to work.

 

Could anyone else having a similar setup please do the same thing and confirm to me?

Could also be a good tip if others are having issues accessing AWS services. 

 

 

debugpageoptions.JPG


 

My Setup (Cable 1Gbps/50Mbps)>CM1200 v2.02.03(LAG Disabled)>RBK853 v3.2.17.12
RBK50 v2.7.2.104(WW) Circle Enabled
Additional NG HW: C7800/CM1100/CAX80/CM2000, Orbi CBK40, R7800, R7960P, EX7500/EX7700, XR450 and WNHDE111
Message 16 of 16
Top Contributors
Discussion stats
  • 15 replies
  • 1496 views
  • 0 kudos
  • 7 in conversation
Announcements