NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
WC7600v2 really RFC 2866 Radius Accounting Compliant?
Hi Netgear Community, Before I contact Netgear support to give feedback in regards to the quality of their wireless controllers I wanted to seek clarification from Netgear community about an issue we are currently facing at our site. We would like to utilise the Radius accounting information generated by our WC7600v2 (firmware v6.5.1.11) to be utilised by our Windows 2012r2 NPS server. The specific attribute we need is the "Framed-IP-Address" attribute to contain the IP address of the client / user requesting the authentication. This attribute is helpful in identifying successfully authenticated clients to be simultaneously authenticated against other systems i.e. like internet filters. Some internet filters providers utilise agent software that can sit on a Windows NPS server and read the logs generated by the NPS service and automatically apply the appropriate internet access policy to the client devices / users at the moment of wireless authentication essentially providing a Single Sign On process. After attempting to undertake this process at a site that utilises a Netgear WC7600v2 we have come to the conclusion that the WC7600v2 does not provide the Framed-IP-Address. This has been confirmed by reviewing the NPS server logs where Framed-IP-Address radius attribute is 0.0.0.0 for all clients authenticating via the WC7600v2 Thanks to previous advice on this forum, we were able to make contact with Netgear text based support and after sometime the Netgear technician, he was able to confirm that the WC7600v2 does not provide the Framed-IP-Address as part of its radius account response to the NPS (radius) server. This feature maybe included sometime in the future but could not give any ETA on its implementation; he was also able to confirm that other customers of the WC7600 series have requested this feature to be implemented. What my site is trying to perform is something that is not to complex, I have done it many times via cisco / h3c / Aruba controllers and wireless implementations. These devices are more compliant with the RFC 2866 radius standard than what Netgear equipment is, even though your product information sheet (https://www.netgear.com/images/datasheet/wireless/wirelessmanagement/WC7600v2.pdf) states that the controller is complaint with this spec. How are we meant to recommend Netgear equipment to clients in enterprise when the device does not standard up against large enterprise network equipment manufactures. I can understand something like "it will be included in the next firmware release" but when something like "No ETA at this time" it makes us feel like recommending to the site management the entire removal the Netgear wireless implementation and going for something "more enterprise". Do you think if the site invested in Prosafe support agreement it would carry more weight with Netgear in implementing a basic feature like a more extensive implementation of the RFC 2866 accounting standard? I hope that I do not come across as too negative in this forum thread, but was hoping to provide constructive feedback to help improve your products and the process to improve them. PeterFramed IP's BYOD Solution
We have just had smoothwall implemented and are trying to get BYOD working. Smoothwall have looked into this and stated that our wireless is not providing Framed IP's which is essential to the smoothwall BYOD system working please see notes below: Framed-IP-Address — This contains the IP address of the client that has been authorized to join the wireless network. This attribute is essential to the BYOD service. Could this feature be added in a firmware update? we have 2 wc7600 controllers and over 80 access points so pretty stuck at the momentWC7600 Feature request
Firmware Version: 6.5.1.11 Currently the guest/captive portal feature is very very limited and to customise the portal to reflect a business brand is extremely limited. I accept there are limitations to what can be done and its not a website, but you are effectively limited to a background picture and some customised text within the terms and conditions panel. Need the ability to enter more than just email address, for example Name, Address, Age, Phone number, Am interested in more information on "This", "That", "The Other" and possibly some other data. I have this WC7600 in a hotel and minimal information is ok for a basic environment, but this is a 4 star hotel and they want a more professional appearance.
WMS5316 - Please keep it alive!!!
Hi Please keep this device alive as your low level/entry level device for us with small and medium installations. The device is working perfect but you have now put it EOL, we, your users, have been told. Why? It’s still on your list of devices to choose from...! No alternative devise (price) is available! I just got my last brand new device some months back from a main street supplier. And now it’s EOL!?! I don’t get it!Remove SSL 2.0 and 3.0 and TLS 1.0 from Embedded https Web Servers
Many NTGR business products still have SSL 2.0 and 3.0 and TLS 1.0 as options - nowadays these are obsolete and should be removed, TLS 1.2 is in the field for more then 10 years, so there should be no more prehistorical Web browser still requiring anything different.
