Netgear Orbi discussion thread

[DanH]

So do any of you guys have the Orbi in AP mode with a guest network, and have figured out how to keep people on the guest network from accessing your LAN (i.e. only allow them on the internet, but not all up in your junk). I suspect I need to create a VLAN on my ERL and somehow tie it to the Orbi guest network, but I feel like I am missing some key info.

 

[Ronv42]

So do any of you guys have the Orbi in AP mode with a guest network, and have figured out how to keep people on the guest network from accessing your LAN (i.e. only allow them on the internet, but not all up in your junk). I suspect I need to create a VLAN on my ERL and somehow tie it to the Orbi guest network, but I feel like I am missing some key info.

When in AP mode your upstream router does all the routing including access controls. The AP mode is MAC layer 2 so unless you write some MAC layer transport VLAN tagging for the clients identified on the guest network there isn't anything native that I can think of.

 

[DanH]

When in AP mode your upstream router does all the routing including access controls. The AP mode is MAC layer 2 so unless you write some MAC layer transport VLAN tagging for the clients identified on the guest network there isn't anything native that I can think of.

So you don't think they gave the guest network a vlan id like the apple airport does for its guest network? i have heard of people using the AirPort Extreme like I suggested with the ERL assigning a vlan to the the guest networks pre-associated vlan id (which is 1003 in that case). See here:
https://blog.gruby.com/2015/07/05/s...work-with-the-edgerouter-lite/comment-page-1/


I would really love to do something similar with the Orbi

 

[Ronv42]

So you don't think they gave the guest network a vlan id like the apple airport does for its guest network? i have heard of people using the AirPort Extreme like I suggested with the ERL assigning a vlan to the the guest networks pre-associated vlan id (which is 1003 in that case). See here:
https://blog.gruby.com/2015/07/05/s...work-with-the-edgerouter-lite/comment-page-1/


I would really love to do something similar with the Orbi

It's possible and I think the same question was asked on the Netgear site also by your clone Dan_H I don't have a good way anymore to capture packets to and from Orbi to check vlan like I did at the office to validate. Does your internet router have a packet capture utility such as TCPDUMP? If so you could capture some packets and decode them for vlan tag.

 

[DanH]

It's possible and I think the same question was asked on the Netgear site also by your clone Dan_H I don't have a good way anymore to capture packets to and from Orbi to check vlan like I did at the office to validate. Does your internet router have a packet capture utility such as TCPDUMP? If so you could capture some packets and decode them for vlan tag.

Never heard of him....

I will have to see if I can figure that out when I get home. I'm not really versed in that stuff, but I can usually figure anything out given google and enough time. If I find anything out, I'll post back here and I might even let Dan_H know as well.

 

[DanH]

I tried capturing using tcpdump from the edgerouter and couldn't really get anything useful.

So I went to the debug page for orbi, and grabbed the log from there.
The Orbi gives the guest network its own interface in my case it assigns ath2 and ath11 to the guest network (2.4ghz and 5ghz respectively) it also gives each one of them a mac address. It gives the normal network ath0 and ath1, the hidden backhaul gets ath2 and ath01.

So I am just going to go ahead and try and assign those two mac addresses to a vlan on the ERL ( or maybe on my managed switch) and see if that works. Seeing how I know absolutely nothing about this stuff, it could take awhile. report back when I am done I guess to see if it is possible.

 

[Ronv42]

So I went to the debug page for orbi, and grabbed the log from there.
The Orbi gives the guest network its own interface in my case it assigns ath2 and ath11 to the guest network (2.4ghz and 5ghz respectively) it also gives each one of them a mac address. It gives the normal network ath0 and ath1, the hidden backhaul gets ath2 and ath01.

Yes every adapter both wired and wireless has a MAC but that is for the Orbi not the computer. You can try but I don't think it will work.

 

[DanH]

OK, i have temporarily given up on that, until this weekend. In the meantime, I have a device on my network (my wife's S7Edge specifically) that is having some issues when on the satellite.

1. I cant rename it, it always shows up as "S7Edge<"
2. It shows up as blocked
3. The mac address shows up as /OrbiDevName1>
4. It says it is connected "Wired"

Weird

I tried assigning it a different IP address, and that still didn't fix it.

When it is on the router and not on the satellite, it is fine:

 

[Ronv42]

OK, i have temporarily given up on that, until this weekend. In the meantime, I have a device on my network (my wife's S7Edge specifically) that is having some issues when on the satellite.

1. I cant rename it, it always shows up as "S7Edge<"
2. It shows up as blocked
3. The mac address shows up as /OrbiDevName1>
4. It says it is connected "Wired"

Weird

This is a known issue it's not really blocked. I have one of my devices showing blocked when I gave I a name but it still accesses the internet.

 

[sm00thpapa]

Anyone with the Orbi system gaming on the PS4 or Xbox One? If so what is your NAT like? Is it a constant Open NAT?

 

[Ronv42]

Anyone with the Orbi system gaming on the PS4 or Xbox One? If so what is your NAT like? Is it a constant Open NAT?

On Xbox One it's "Open NAT".

 

[sm00thpapa]

On Xbox One it's "Open NAT".

Thanks for the reply that's what I wanted to hear.

 

[sm00thpapa]

Ok which band is the 5GHz backhaul?

AC3000 (1733 + 866 + 400Mbps)

 

[Ronv42]

Ok which band is the 5GHz backhaul?

AC3000 (1733 + 866 + 400Mbps)

Here is a couple of articles:

http://www.smallnetbuilder.com/wireless/wireless-reviews/33028-netgear-orbi-reviewed

http://www.smallnetbuilder.com/wire...s/33023-don-t-get-caught-in-the-wireless-mesh

Since the client access can only by 36-48 in 5 GHzI would expect all the other channels are leveraged for backhaul to the satellites.

 

[thiggins]

Ok which band is the 5GHz backhaul?

AC3000 (1733 + 866 + 400Mbps)

Backhaul radio is dedicated 4 stream, so 1733 Mbps, 5 GHz high band.

 

[Vandergraff]

Confirming Acrylic WiFi professional see the backhaul as 'hidden' network on 149, 153, 157, 161.

The 5 Ghz client networks in my case are on 36, 40, 44, 48

 

[pege63]

Confirming Acrylic WiFi professional see the backhaul as 'hidden' network on 149, 153, 157, 161.

The 5 Ghz client networks in my case are on 36, 40, 44, 48

Thats CH for the 20 MHz on N 5GHz.

 

[pege63]

Ok which band is the 5GHz backhaul?

AC3000 (1733 + 866 + 400Mbps)

I think i have write down the hidden CH that is the backhaul on the Orbi.
Type http://192.168.1.1/RST_statistic.htm its shows some info there

 

[Vandergraff]

I think i have write down the hidden CH that is the backhaul on the Orbi.
Type http://192.168.1.1/RST_statistic.htm its shows some info there

Which shows

Port Status

WLAN b/g/n 400M

WLAN a/n/ac 866M

WLAN Backhaul 1733M

Now is the status the actual connection link speed or theoretical max link speed?

My wireless adapter does think its connected to the Orbi at the 866 Mbps link speed

 

[Vandergraff]

Thats CH for the 20 MHz on N 5GHz.

Looks like you are right - however Acrylic says channel width is 80Mhz for both the backhaul and client 5GHz?

Max rates are reported by Acrylic as 1733.7 and 866.7 respectively?