NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
mrfranc
Dec 25, 2020Apprentice
Orbi RBR50 Router Firmware Version V2.7.2.102
A new Router Firmware Version V2.7.2.102 installed automatically during the night. So far so good!
alokeprasad
Dec 30, 2020Mentor
CrimpOn wrote:
alokeprasad wrote:Can Anywhere Access be turned off at the RBR50's web interface? I don't want _anyone_ to have access to my Orbi's settings unless physically connected to my LAN.
Too bad that WiFi access to the settings cannot be disabled. Ideally, I'd turn off every access mode except by web interface using a wired Ethernet connected device on my LAN.
No, Anywhere Access can be turned off only on the Orbi "app". The web interface knows nothing about Anywhere Access.
Which is dumb. Anyone with access to my Netgear password (passwords do get leaked or guessed.. maybe not mine :smileyhappy: but there are people who use easy to guess passwords) can then turn it on and muck around with my network.
A number of people have expressed interest in restricting access to the Orbi web interface to only "wired" devices. With laptops no longer providing ethernet jacks, I fear this is not likely to happen.
Sadly, you are right. Thank goodness that the RBR and RBS's have ethernet ports at the back! Eero satellites don't, which is astounding for such an expensive product.
CrimpOn
Dec 30, 2020Guru
alokeprasad wrote:
CrimpOn wrote:No, Anywhere Access can be turned off only on the Orbi "app". The web interface knows nothing about Anywhere Access.
Which is dumb. Anyone with access to my Netgear password (passwords do get leaked or guessed.. maybe not mine :smileyhappy: but there are people who use easy to guess passwords) can then turn it on and muck around with my network.
I have never seen an explanation of how Anywhere Access works, but my impression is that it can be turned on only when the Orbi app is connected to the Orbi over the local LAN. I have a vague impression that the Orbi serial number is involved in the Cloud connection. So, a hacker knowing the Netgear login for someone could not load up the Orbi app and connect to the Orbi remotely.
- alokeprasadDec 31, 2020Mentor
CrimpOn wrote:
alokeprasad wrote:
CrimpOn wrote:No, Anywhere Access can be turned off only on the Orbi "app". The web interface knows nothing about Anywhere Access.
Which is dumb. Anyone with access to my Netgear password (passwords do get leaked or guessed.. maybe not mine :smileyhappy: but there are people who use easy to guess passwords) can then turn it on and muck around with my network.
I have never seen an explanation of how Anywhere Access works, but my impression is that it can be turned on only when the Orbi app is connected to the Orbi over the local LAN. I have a vague impression that the Orbi serial number is involved in the Cloud connection. So, a hacker knowing the Netgear login for someone could not load up the Orbi app and connect to the Orbi remotely.
You are correct.
I have Anywhere Access turned off. When switched to LTE connection on my iPhone, the Orbi app says that there are no registered Orbi devices available and asks me to connect locally to WiFi of my Orbi to make any changes. Or words to that effect.