NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
rax54
6 TopicsNetgear router models are RAX45-100NAS and RAX54-100NAS
Hi, Allen_non here. I'm a competent computer user, also able to set up MAC filtering, and similar level operations on routers, but am lost in the weeds when it comes to ports, channels, etc inside the guts of router magic. I have a similar situation as So-Tired. Set-up: ISP is ATT fiber, going to a provided ATT router. The ATT router "feeds: my 2 Netgear routers via ethernet. Netgear router models are RAX45-100NAS and RAX54-100NAS. On the RAX45, I have my office desktops and similar more secure devices, most connected via ethernet, very few wifi connections. On the RAX54, I have all my smart switches, wifi cameras, thermostats, etc. Both routers are pretty well locked down, with MAC filtering only allowing address already programmed into the router's device list. All routers are set to automatically update their firmware, and I did verify that all are up to date. As for other router settings, I don't change much if I don't understand the magic behind the setting, so things are fairly stock. Narrative: Starting about 6 weeks ago, every Tuesday at 12:26 PM, my wifi drops on both Netgear routers. The ATT router still has internet connection, which I can access by switching my phone to the ATT router wifi. Rebooting the Netgear routers restores their connection, and afterwards everything runs fine. Until the next Tuesday. I pulled the logs from the NG routers and right at the time of signal loss, there are about 300 log lines of attack descriptions. Examples from today's attack (Tuesday 05-Aug) are: [DoS attack: Fraggle Attack] from source UNKNOWN,port 68 Tuesday, Aug 05, 2025 11:29:52 [DoS attack: NetBiosReplyDrop] from source 10.0.0.3,port 137 Tuesday, Aug 05, 2025 11:29:49 [DoS attack: TCP SYN Flood] from source 192.168.1.254,port 38200 Tuesday, Aug 05, 2025 16:23:37 The vast majority of the lines are the TCP SYN Flood. I also have an old NG R7000 that is connected by ethernet to my RAX45 in my office. I use it to segregate my 3D printer from any other routers. My 3DP is turned off, only on when I'm actively printing. But, I use my phone to access the R7000 to see if it still has internet connection during these attacks, and it stays connected. I can do a brute force fix by putting a timer on each router that cuts/ restores power around 12:30P every Tuesday to reboot the NG routers, but that is not really a fix. Thanks in advance for any guidance you can provide. ~ AllenTCP SYN Flooding on RAX54v2 Router, Please help!
Hello all, i REALLY need help with stopping massive TCP SYN Floods to my home router. What has happened thus far: I got this router about 2 months ago ,(upgrading from a very old TP-link which i had no problems with, EVER. However, it was slowing down my speeds very badly and not utilizing the new speed I started paying for so, had to change ol'faithful.) and ever since I've been getting DoS UNKNOWN's on every port. I looked it up and most people said to not worry, so i ignored it. About a week later my internet goes out for about 3 mins. Comes back, I thought it was odd, checked and TCP SYN Flood attack up the wazoo! 100s of entries in the router logs. This has now been happening EVERY DAY and I am so tired of it. I first started by changing some settings in the Router: Turning off remote access, Activating IPV6, Turning on WAP3 protocols on both WiFi signals, Set up Access Control, turning off UPNP, Disabled port forwarding, changed Passwords, and updated farmwear. Nothing worked. So, as you do, i look up how to stop them....no one knows how to stop them on a Netgear router it seemed and the work arounds i've found have not helped because most are out-dated or do not work for a Netgear router. It also seems like the router has NO protection from SYN flooding and cant make SYN Cookies OR edit firewall rules OR block IPs in a range (even though you can go to the Block Services tab and try to enter it, it ALLWAYS comes up as 'Invalid IP entered' even though you enter the same IPs that are flooding you.) OR stealth ports. Router logs do not even state if these SYN packets are dropped, blocked or any status whatsoever. Just that they have happened. I've even signed up for Netgear Armor by Bitdefender and it does not do anything. It has no abilities to stop SYN floods, DoS attacks or stealth ports. I Thought it would AT LEAST tell me it blocked something but, nope. I also contacted my ISP, changed IP address by un-plugging router and modem for a few hours, factory reset and set back up everything, and nothing has stopped it. Now I'm reaching out here to try and figure this out. I attached a pic of what one of the attacks looks like. I want to stealth my ports. I want the SYN floods to stop. How do I stop them? Mitigate them? Anyone else having this issue? Any help would be SO very apricated. Thank you all.SolvedReadyshare unstable/disconnects drive when in use for 2-3 minutes (RAX54v2)
Running V1.1.4.28_2.1.26 version on RAX54v2. WiFi is rock solid. My router settings are pretty vanilla. Have a single drive hooked up to the USB port. Readyshare sees the drive, shows all the files, I can read and write data no problem. But if I use Readyshare with an application that needs to read and write for longish periods (e.g., music player), the shared drive disappears/stops functioning for a second or two every 3-5 minutes. Screws up applications, results in partial file rewrites. Nothing very interesting in the logs, except maybe when DHCP or NTP have something to do, it's coincident with the temporary drive disappearance. Anybody else seeing this?Nighthawk RAX54 Not Broadcasting Wifi
Router's 2.4 and 5 GHz lights went out today suddenly. The power, internet, and wifi lights are solid white but the router isn't broadcasting any signal. I tried using the Nighthawk app to see if I'm missing a firmware update but the app couldn't find the router since it isn't broadcasting. I've tried a factory reset and the problem persists. What can I do?