NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
cax80
27 TopicsPoor cable connection error message
I have Xfinity internet service. I have the Netgear CAX80 router/modem that I own. This was recommended by Xfinity. I read in the forums that the incoming speed is to fast for the router/modem? I am confused by this and don't understand why Xfinity would tell me to purchase something that doesn't work? My home computer and streaming on the TV in the living room, the speeds are fine, no issues or problems. Netflix on the TV in the bedroom is a little slow to load, but this works off of a wifi mesh system. Do I need to add a splitter to split the internet cable coming into the router/modem when I'm not having issues? I'm not a gamer so not sure why this would be an issue. thanks. Brian See stats from admin page below. thanks for any help.281Views0likes20CommentsCAX 80 injecting malformed TCP RSTs
I have a CAX80 that appears to be actively interfering with and terminating encrypted TLS connections by injecting malformed TCP Reset (RST) packets. This occurs even with the following disabled: IPv4 Firewall DoS Protection SIP ALG Protection Engine Is there somewhere else I'm missing? A little context: I've noticed this happen on occasion when using OpenVPN AS web interface, as I admin my company's VPN at times. But it was only an occasional nuisance. Now I'm working with an AI agent, and I have to constantly retry due to this, upwards of 20-30 times sometimes, which also causes the agent to lose track of what is was in the middle of doing, but eventually the retry will work. However, if I create an SSH tunnel, and launch the agent that way, it works flawlessly (presumably because the tunnel is masking some signature from the router that causes it to insert these packets, i.e., it's not watching traffic over tcp:22, but is doing so over tcp:443). tcpdumps taken from my laptop connected to the CAX80 show the following signature: A TCP RST (Reset) packet is received. The RST packet contains 6 bytes of zero-filled payload (00 00 00 00 00 00). Standard TCP RST packets should have a 0-byte payload. The TTL (Time To Live) of these RST packets is 102, while the remote server (daily-cloudcode-pa.googleapis.com) packets arrive with TTL ~118. This proves the packets are generated locally by the CAX80, not the remote server. Some of the behaviors I've observed through the tcpdumps: With Protection Engine enabled: Connection is reset immediately. With everything disabled: Connection hangs for a few seconds, then is flooded with the exact same 6-byte RST packets (TTL 102). So is this just a firmware/hardware bug at this point? Or is there something else I'm missing that needs to be disabled for it to stop injecting these RSTs? The only other thing I can think of is to put the thing in bridge mode, then go buy a different wi-fi router.92Views0likes8CommentsUnderstanding how CAX80 works
I have this with xfinity internet. I have the two wifi networks set up, 2.4 & 5. The router/modem is in one end of the house. I can get a wifi signal on my TV in my bedroom through ROKU that is loaded on the TV. Roku signal meter says the connection is excellent. Works OK< Netflix speed is very low, but works. Problem is the Roku can't find or connect with the 5.0 wifi signal. I don't understand why it can find one signal from the router, but not the other faster signal? Appreciate any help. Brian54Views0likes3CommentsEvery month I have to reconfigure the CAX80
Mine is different; every month, the CAX80 internet connection must stop, and then will require a password change. I have been having the same problem for 4 months. Every month I have to reconfigure the CAX80. This month is twice. I am tired. Is frustrating. I have called and spoken with their customer support/ technician unit 4 times, and I still have the same problem every month. The problem is that it has been more than four months since I purchased this CAX80, so I can't return or replace it.550Views0likes2CommentsCAX80 v5.1.1.8 Firewall Blocking HTTPS API Traffic - DMZ Confirmed
Hi all, I'm experiencing a firewall bug on my CAX80 (firmware v5.1.1.8) that's blocking HTTPS API calls to legitimate services (specifically api.anthropic.com for Claude AI/Claude Code). Symptoms: API connections consistently fail on home WiFi, while same connections work perfectly on cellular hotspot Issue started intermittently, now persistent Internet speed normal (675 Mbps down / 28.6 Mbps up, Comcast) Extensive troubleshooting completed: Disabled IPv6 (temporarily helped, then broke again) Disabled DoS Protection and Port Scan in WAN Setup Changed DNS to 8.8.8.8 / 8.8.4.4 Tested with VPN (still failed - rules out ISP filtering) DMZ test: Placed computer in Default DMZ Server - API calls work perfectly Conclusion: The DMZ test definitively proves the CAX80's firewall is incorrectly blocking legitimate encrypted API traffic. This is not an ISP, endpoint security, or configuration issue. Questions: Is there firmware beyond v5.1.1.8 that fixes this firewall bug? (Router says no updates available) Are beta firmware versions available for testing? What specific firewall settings should be adjusted beyond disabling DoS/Port Scan? Permanently running in DMZ isn't an option from a security standpoint. My support/warranty expired so I can't contact paid support. Any help/guidance is much appreciated!Solved563Views0likes10CommentsUsing Nighthawk web app to turn off wireless radios
I'm trying to turn off the wireless radios on my CAX80 using the Nighthawk web app. The support chat system says I should go to Advanced > Setup > Wireless Setup and then "Uncheck the Enable Wireless Router Radio checkbox for the desired band." However, there is no "Enable Wireless Router Radio" checkbox to uncheck. Can the web app still be used to disable the wireless radios on this model? Web app version is V5.1.1.8.526Views0likes26CommentsProblem with port forwarding not working on my CAX80 connected to Xfinity.
I was having the same problem with port forwarding not working on my CAX80 connected to Xfinity. After double and triple checking for errors on my part I checked the web for a solution and found your post. Sure enough, after reverting to FW 2.1.5.2 port forwarding works, and Xfinity breaks it again overnight. It looks like nobody is interested in actually fixing the problem.501Views1like19CommentsCAX80 lights on but no internet
Hello, I’ve checked over everywhere I could find because a few hours ago my lovely CAX80 decided it wanted to start cutting out about every 5-15 minutes. The lights on the device stay on but I get cut out of internet both on wireless and wired connections. The device was purchased in January 2023 so just under 2 years and now I’m pretty sure it’s bricked and I just want to be sure there’s nothing that could be done before I’m forced to buy a new one because it’s out of the one year warranty. ISP is Xfinity I live in an apartment complex but it’s never once been an issue prior. I’ve taken the following steps: -Unplugged the CAX80 -Completely unplugged co-axel, Ethernet plugs, and power while holing reset and re-plugging while reset. -Checked any devices that may have been hung on the device through the app or web page while I was able to access said app or webpage before connection cut out. -Reset the device through the app -Checked firmware updates which is the most current version being 5.1.1.8 -Forced a factory reset through webpage via advanced options and backup erase because the push to reset wouldn’t reset to factory. -After Factory reset made sure the devices cleared and after that re-activated it through xfinity app which took several attempts due to cut outs. -Any basic troubleshooting steps I saw in the chats here on these discussion boards specifically from the guru level reply person FURRye38 including but not limited to checking the channels and making sure they were within acceptable levels, checking the error log so make sure this had nothing to do with my ISP network drops which it did not they’ve have full service all night no drops on the radar in the least, made sure I don’t have protection engine on which I never did in the first place, ect ect. And after all that it still is cutting out every few minutes with the lights still white and glowing on the front, so is there anything I can even still try or maybe something Netgear is aware of that is causing issues? I saw online there have been previous issues with firmware and bricking this specific device before almost identical to my description and that Netgear ended up replacing those devices for a bunch of users but I’m not one to assume my situation is the same so I ask is there anything else troubleshooting wise I should do and if not is this a case I should even get ahold of Netgear support or will I just be told to go buy a new one? I’ll add a photo of the event log errors at the top of the list since it seems I can only add one attachment. Thank You.Solved331Views0likes9CommentsIssues streaming to twitch, using video chat is discord or anything that requires high upload
Suddenly after rebuilding some cables and attempted to set up another router for more wifi coverage my CAX80 is having issues with uploading things for video chats or when streaming. Anyone know where I can look to try and fix this? I upgraded to latest firmware but otherwise nothing else changed.142Views0likes1Comment