Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.18SF-HW & v. 9.2.5.2.18.1SF-HW

[alceasan]

After testing the new init script, and mounting an internal partition like it was an USB disk, I cannot login with SSH again using password. Is there a nvram parameter to disable the forced cert auth on SSH? Can I put mi own sshd.conf file anywhere on overlay folder to change this behaviour?

 

[Skippy Bosco]

Thanks for you message
1- As stated I can only use in AP mode... router mode has never been activated
2/3 - already tried that ont 3 devices (all iOS)

It is your first message I've seen so I was not aware of that.

 

[iNeusch]

It is your first message I've seen so I was not aware of that.

No problem

I do not use the router mode of the Orbi, need to use my ISP router to get TV and phone

 

[digital10]

Just curious if the reset button/Erase function in this version of FW works like stock FW or do we still have to TFTP or revert back to stock FW to do a factory reset?

better not to try it
but if you do, please report back what happened

 

[Skippy Bosco]

better not to try it
but if you do, please report back what happened

Spoiler Alert: It soft bricks the devices.

 

[LJ H]

does anyone else explicitly set the txpower of their router/sat via telnet?

i usually customize these values to prevent my router from hogging the devices that are literally right next to the sat, but i can't set txpower on any of the 5ghz bands anymore

i usually set 5ghz txpower with: iwconfig ath1 txpower <???>mW

but i can't set this value over 630 mW any longer

it used to default to 794 mW

 

[Voxel]

Hey all

@Voxel thanks for the great work, would love to have this working on my setup

Unfortunately still have the same issues I had with previous build
Ethernet devices (ie connected to my ISP router work fine), but all devices connected to wifi cannot load websites

"Unable to establish secured connection" (translated from French)
When I try to consult the certificate used it points to the routerlogin.net certificate (NG's I presume ?)

I do not use the router mode of the Orbi, need to use my ISP router to get TV and phone

Here is what I did :

• Factory reset and Complete re-setup from latest official firmware
• Installation of Voxel's latest firmware Satellite then Router
• Waited for full reboot and settle down (everything is green)
• Rebooted my ISP router
• Forgot wifi network on iPhone and iPad, reselected it
• Cannot load any website via safari and apps (tested with reddit, outlook,...)
• Same on all WiFi connected devices

https://imgur.com/a/w5y0eRD
https://imgur.com/a/r9pJXlY

Any suggestion highly appreciated
Thanks

I do not understand how you could get this. Well. routerlogin.net certificate was really revoked by NG. So they (NG) are using self-signed certificate. But both of them are used to access https://routerlogin.net i.e. WebGUI of your Orbi. But not say google.fr. Maybe you have one of Safari tab with routerlogin.net opened? Maybe you should close all Safari sites and clear its cache.

I do not use Orbi in AP mode but I use R7800 in AP mode with the the same certificate. And I can access from my iPhone with Safari any other https site except except https://routerlogin.net.

Could you do experiment with "Overlay on USB" method? If you copy the file /etc/lighttpd/certs/server.pem as/overlay/etc/lighttpd/certs/routerlogin.pem to replace this "routerlogin.net" certificate by NG' original self-signed. As it is used in the stock firmware.

Voxel.

 

[Voxel]

After testing the new init script, and mounting an internal partition like it was an USB disk, I cannot login with SSH again using password. Is there a nvram parameter to disable the forced cert auth on SSH?

SSH login by password is still workable in this version. No nvram settings are used to disable/enable it.

Mounting internal partition. I hope you do not "umount" but just mount it using "bind" option?

Voxel.

 

[mith_y2k]

I was trying to use SCP, but it doesn’t seem to work out of the box in .17 release.

I was wondering if I can turn it on or maybe ask for this additional feature in the next release

 

[R. Gerrits]

Unfortunately still have the same issues I had with previous build
Ethernet devices (ie connected to my ISP router work fine), but all devices connected to wifi cannot load websites

"Unable to establish secured connection" (translated from French)
When I try to consult the certificate used it points to the routerlogin.net certificate (NG's I presume ?)

Just a wild guess: iirc, on R7800 after a factory reset, the router intercepts all http and https traffic and redirects it to the router itself (which has a certificate for routerlogin.net). Only after the initial setup, it starts functioning normal.
So it sounds like it still does that on your wifi devices.

question of course now is, why only on WiFi and not on wired. (if I had to do it, I'd use iptables on br0, but that would cover both wired and wireless)
And if this is the case, what nvram should it have set, to indicate setup is complete?

 

[iNeusch]

Maybe you have one of Safari tab with routerlogin.net opened? Maybe you should close all Safari sites and clear its cache.

OK will try this, but would not explain why apps can't load any content

Could you do experiment with "Overlay on USB" method? If you copy the file /etc/lighttpd/certs/server.pem as/overlay/etc/lighttpd/certs/routerlogin.pem to replace this "routerlogin.net" certificate by NG' original self-signed. As it is used in the stock firmware.

That's a new one for me ! I'll try to find info on the forum on this !

Thanks for the help

 

[iNeusch]

Just a wild guess: iirc, on R7800 after a factory reset, the router intercepts all http and https traffic and redirects it to the router itself (which has a certificate for routerlogin.net). Only after the initial setup, it starts functioning normal.
So it sounds like it still does that on your wifi devices.

Yup, sounds like an interesting theory !!

question of course now is, why only on WiFi and not on wired.

Because wired don't go through Orbi in my case
My router is connected to a switch on one side with wired devices
Orbi is also on the switch and all satellites are connected on the orbi main base via in-wall cables

Thanks

 

[e38BimmerFN]

Ok, I'll be your guinea pig.
As long as TFTP is working I can recover to stock fw if it doesn't work. I'll let you know

Well, I do not want ti experiment now with this. My family will be angry if I would do that

Voxel.

 

[e38BimmerFN]

Bad news, I had stock FW v16 loaded on the RBR50. Loaded Voxels v18SF version on top of stock FW. Waited for the RBR to load and reboot. After the reboot the RBR came to ready. I was able to access the RBR50's web page and also had internet access here. I then used the ERASE button feature under BACKUP. Selected the button and let the RBR do it's thing. I saw the top ring led begin to blink WHITE, then slowly pulsate WHITE. No IP address on the wired PC. Also this TFTP method isn't working to get stock FW back on for recovery:
https://kb.netgear.com/000059633/How-to-upload-firmware-to-a-NETGEAR-router-using-TFTP-client

Power LED in back is green all the time. I pressed the reset button in back until it started blinking AMBER. Once released it turned back to GREEN. The couple times I selected PUT on the TFTP program all I got was Block#0 and nothing else.

Hope Voxel or someone can let me know if I missed something to get the RBR50 recovered.

Well, I do not want ti experiment now with this. My family will be angry if I would do that

Voxel.

 

[Hammerfest]

Bad news, I had stock FW v16 loaded on the RBR50. Loaded Voxels v18SF version on top of stock FW. Waited for the RBR to load and reboot. After the reboot the RBR came to ready. I was able to access the RBR50's web page and also had internet access here. I then used the ERASE button feature under BACKUP. Selected the button and let the RBR do it's thing. I saw the top ring led begin to blink WHITE, then slowly pulsate WHITE. No IP address on the wired PC. Also this TFTP method isn't working to get stock FW back on for recovery:
https://kb.netgear.com/000059633/How-to-upload-firmware-to-a-NETGEAR-router-using-TFTP-client

Power LED in back is green all the time. I pressed the reset button in back until it started blinking AMBER. Once released it turned back to GREEN. The couple times I selected PUT on the TFTP program all I got was Block#0 and nothing else.

Hope Voxel or someone can let me know if I missed something to get the RBR50 recovered.

https://www.snbforums.com/threads/c...50-rbs50-v-9-2-5-1-11sf-hw.61541/#post-546061

Voxel should fix the factory reset failure once he is able, until then, he REALLY needs to put the HUGE notice in EVERY release thread saying DO NOT FACTORY RESET

Factory resetting is troubleshooting step #1 when things go sideways or you want to start fresh but you CANNOT do that with current Voxel firmware for the Orbi!

 

[Voxel]

Bad news, I had stock FW v16 loaded on the RBR50. Loaded Voxels v18SF version on top of stock FW. Waited for the RBR to load and reboot. After the reboot the RBR came to ready. I was able to access the RBR50's web page and also had internet access here. I then used the ERASE button feature under BACKUP. Selected the button and let the RBR do it's thing. I saw the top ring led begin to blink WHITE, then slowly pulsate WHITE. No IP address on the wired PC. Also this TFTP method isn't working to get stock FW back on for recovery:
https://kb.netgear.com/000059633/How-to-upload-firmware-to-a-NETGEAR-router-using-TFTP-client

Power LED in back is green all the time. I pressed the reset button in back until it started blinking AMBER. Once released it turned back to GREEN. The couple times I selected PUT on the TFTP program all I got was Block#0 and nothing else.

Hope Voxel or someone can let me know if I missed something to get the RBR50 recovered.

Try to use this article (I always use Windows standard TFTP client):

https://kb.netgear.com/000059634/How-to-upload-firmware-to-a-NETGEAR-router-using-Windows-TFTP

but not third party TFTP client.

1. Make sure you set IP of your PC as 192.168.1.10 (manually)
2. Use the stock e..g. 2.5.1.16 to put it by TFTP
3. Set Dynamic IP back after that.

My version could be flashed after that.

Voxel.

 

[Voxel]

https://www.snbforums.com/threads/c...50-rbs50-v-9-2-5-1-11sf-hw.61541/#post-546061

Voxel should fix the factory reset failure once he is able, until then, he REALLY needs to put the HUGE notice in EVERY release thread saying DO NOT FACTORY RESET

Factory resetting is troubleshooting step #1 when things go sideways or you want to start fresh but you CANNOT do that with current Voxel firmware for the Orbi!

Factory reset is temporary disabled in WebGUI. Use of warning or so is not a way. Always there will be people who will press the red button with the notice "Do not press the red button".

Because of my own reasons I cannot debug/trace/test this. No experiments with factory reset yet as I wrote before.

V9.2.5.1.18.1SF-HW

Voxel.

 

[Voxel]

I was trying to use SCP, but it doesn’t seem to work out of the box in .17 release.

I was wondering if I can turn it on or maybe ask for this additional feature in the next release

SCP is working by default since the very first release. I am using it very often. No special actions to enable it.

What problems? SCP on ORBI or SCP on remote client to/from ORBI?

Voxel.

 

[e38BimmerFN]

Voxel,

I'll try Windows TFTP. Just hoping that will work. Odd that the 3rd party client doesn't work. I guess some difference in programs.

Is there something to wait for on the RBR after turning it ON, before I hit PUT? When I turn it ON I only see the back power LED turn on GREEN then the top ring LED starts to blink WHITE.
Just trying to figure out where and when the best moment I should hit PUT to send the stock FW. Also that network even though set to static IP, I see disconnected after first turn ON. I presume I can't send anything until this changes to connected?

Try to use this article (I always use Windows standard TFTP client):

https://kb.netgear.com/000059634/How-to-upload-firmware-to-a-NETGEAR-router-using-Windows-TFTP

but not third party TFTP client.

1. Make sure you set IP of your PC as 192.168.1.10 (manually)
2. Use the stock e..g. 2.5.1.16 to put it by TFTP
3. Set Dynamic IP back after that.

My version could be flashed after that.

Voxel.

 

[Voxel]

Is there something to wait for on the RBR after turning it ON, before I hit PUT? When I turn it ON I only see the back power LED turn on GREEN then the top ring LED starts to blink WHITE.

Usually I do the following: I open two command prompt windows. First is waiting the pressing Enter with TFTP command, second is running the command:

ping -t 192.168.1.1

i.e. endless "ping" to router. When you see that ping is started and continues it means that time to press the Enter key for TFTP client. Router is ready for TFTP

Reply from 192.168.1.1: bytes=32 time=2ms TTL=64
Reply from 192.168.1.1: bytes=32 time=1ms TTL=64
Reply from 192.168.1.1: bytes=32 time=2ms TTL=64
Reply from 192.168.1.1: bytes=32 time=3ms TTL=64
Reply from 192.168.1.1: bytes=32 time=2ms TTL=64
Reply from 192.168.1.1: bytes=32 time=2ms TTL=64
Reply from 192.168.1.1: bytes=32 time=2ms TTL=64
Reply from 192.168.1.1: bytes=32 time=3ms TTL=64
Reply from 192.168.1.1: bytes=32 time=2ms TTL=64
Reply from 192.168.1.1: bytes=32 time=3ms TTL=64
. . .

Just when you follow this instruction

Power ON the router while holding down the reset button.

do not release reset button about 30 sec.

Voxel.