Netgear SXK30B3 User Manual

Page 1
User Manual
Orbi Pro WiFi 6 Mini Dual-band Mesh System (SXK30)
Models
Orbi Pro WiFi 6 Mini Router Model SXR30 Orbi Pro WiFi 6 Mini Satellite Model SXS30
NETGEAR, Inc.
350 E. Plumeria DriveMay 2021 San Jose, CA 95134, USA202-12201-01
Page 2
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Support and Community
Visit netgear.com/support to get your questions answered and access the latest downloads.
You can also check out our NETGEAR Community for helpful advice at community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
CommentsPublish DatePublication Part
Number
First publication.May 2021202-12201-01
2
Page 3

Contents

Chapter 1 Overview
Supported Orbi Pro WiFi 6 models..................................................10
Orbi Pro WiFi 6 Mini router and satellite hardware overviews.....10
Orbi Pro WiFi 6 Mini router model SXR30 hardware................10
Orbi Pro WiFi 6 Mini satellite model SXS30 hardware..............11
LED behavior.......................................................................................12
Orbi Pro WiFi 6 Mini System LEDs...............................................12
Add-on Orbi Pro WiFi 6 Mini satellite LEDs................................13
Wall mount your Orbi Pro WiFi 6 Mini.............................................13
Orbi Pro WiFi 6 Mini router label and Orbi Pro Wifi 6 Mini satellite
label......................................................................................................16
Connect your Orbi Pro WiFi 6 Mini router......................................17
Place your Orbi Pro WiFi 6 Mini satellite.........................................17
Sync your Orbi Pro WiFi 6 Mini satellite..........................................17
Sync a satellite from an Orbi Pro WiFi 6 Mini system................18
Sync an add-on Orbi Pro WiFi 6 Mini satellite............................18
Add satellites to your network using the router web interface.19 Manage and monitor your Orbi network with NETGEAR Insight..21
Chapter 2 Connect to the Orbi Pro WiFi 6 Network and Access the Router
Connect to the network for initial configuration.............................23
Wired connection..........................................................................23
WiFi connection.............................................................................23
WiFi connection using WPS..........................................................24
Types of logins....................................................................................24
Use a web browser to access the router..........................................24
Use the interactive Internet setup process.................................25
Log in to the Orbi router web interface......................................26
Change the language........................................................................27
Resolve a browser security warning.................................................27
Chapter 3 Specify Your Internet Settings
Use the Internet Setup Wizard..........................................................30
Manually set up the Internet connection.........................................30
Specify an Internet connection without a login..........................30
3
Page 4
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Specify an Internet connection that uses a login.......................32
Manage an IPv6 Internet connection...............................................34
Requirements for entering IPv6 addresses.................................34
Specify IPv6 Internet connections................................................34
Use auto detection for an IPv6 Internet connection..................35
Use auto configuration for an IPv6 Internet connection...........36
Set up an IPv6 6to4 tunnel Internet connection.........................38
Set up an IPv6 6rd tunnel Internet connection...........................40
Set up an IPv6 pass-through Internet connection......................42
Set up an IPv6 fixed Internet connection....................................42
Set up an IPv6 DHCP Internet connection..................................44
Set up an IPv6 PPPoE Internet connection..................................46
Change the MTU size.........................................................................48
Chapter 4 Control Access to the Internet
Manage MAC access control lists for WiFi networks and the LAN.51
Enable a MAC ACL for a specific network..................................52
Add automatically detected devices to a MAC ACL.................53
Manually add, remove, or change the information for a device
on a MAC ACL................................................................................54
Disable a MAC ACL for a specific network.................................55
Manage the Orbi network access control list..................................56
Enable the network access control list and specify the access
rule...................................................................................................57
Manage the allowed devices on the network access control
list.....................................................................................................58
Manage the blocked devices on the network access control
list.....................................................................................................60
Use keywords to block Internet sites...............................................61
Delete keywords that are used to block Internet sites...................62
Prevent blocking on a trusted computer.........................................63
Block services from the Internet.......................................................64
Schedule when to block Internet sites and services......................65
Set up security event email notifications.........................................66
Chapter 5 Manage the WiFi Settings
Change the admin WiFi network settings.......................................69
Change the admin WiFi network name, channel, or VLAN......69
Change the admin WiFi password or security level..................71
Manage the employee WiFi network settings................................73
Enable the employee WiFi network and manage the settings.73
Change the employee WiFi password or security level............75
Manage the IoT WiFi network settings............................................78
Enable the IoT WiFi network and manage the settings............78
4
Page 5
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Change the IoT WiFi password or security level........................79
Set up a guest WiFi network and captive portal.............................82
Set up a guest WiFi network with open access or password
authentication.................................................................................83
Set up Facebook Wi-Fi..................................................................84
Set up a guest network with a captive portal.............................86
Manage the download bandwidth per SSID...................................88
Manage the advanced WiFi settings................................................89
Change the region of operation..................................................90
Enable or disable SSID broadcast for a radio............................90
Enable or disable 20/40 MHz coexistence for the 2.4 GHz
radio.................................................................................................91
Enable or disable Wi-Fi multimedia for a radio.........................92
Change the CTS/RTS threshold and preamble mode for a
radio.................................................................................................93
Change the transmission output power for a radio..................94
Generate a new backhaul password...........................................95
Enable or disable MU-MIMO........................................................96
Enable or disable fast roaming....................................................96
Enable or disable Protected Management Frames...................97
Chapter 6 Manage the LAN and WAN Settings
View or change WAN settings........................................................100
Manage Dynamic DNS.....................................................................101
Set up a new Dynamic DNS account.........................................102
Specify a DNS account that you already created.....................103
Change the Dynamic DNS settings...........................................104
Set up a default DMZ server............................................................104
Manage the LANs.............................................................................105
Change the default LAN 1 settings...........................................106
Change the employee LAN 2 settings......................................107
Change the IoT LAN 3 settings..................................................108
Change the guest LAN 4 settings..............................................110
Set custom settings for LAN 5....................................................111
Use the router as a DHCP server....................................................112
Set up a DHCP server for the default LAN 1.............................112
Set up a DHCP server for the employee LAN 2.......................113
Set up a DHCP server for the IoT LAN 3...................................114
Set up a DHCP server for the guest LAN 4...............................115
Set up a DHCP server for the custom LAN 5............................116
Disable a DHCP server feature in the router............................117
Manage reserved LAN IP addresses..............................................118
Reserve an IP address.................................................................118
Edit a reserved IP address..........................................................119
5
Page 6
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Delete a reserved IP address entry............................................120
Manage custom static routes..........................................................120
Set up a static route.....................................................................121
Change a static route..................................................................122
Delete a static route....................................................................123
Improve network connections with Universal Plug and Play......123
Manage the VLANs and port modes.............................................125
Change the port mode to Trunk mode or Access mode.......125
Add a new VLAN profile.............................................................127
Add a new VLAN profile for a LAN............................................128
Change the VLAN profile for an Ethernet port........................129
Change the VLAN profile for a LAN..........................................130
Enable, change, or disable the VLAN profile for a WiFi
network.........................................................................................131
Delete a VLAN profile..................................................................132
Manage link aggregation................................................................133
Add a link aggregation group...................................................133
Remove a link aggregation group.............................................134
Chapter 7 Manage and Monitor Your Orbi Pro System
Update the router and satellite firmware......................................137
Enable the automatic firmware update feature.......................137
Check for firmware updates.......................................................137
Manually update firmware..........................................................138
Manually update satellite firmware...........................................139
Manually update router firmware..............................................140
Change the admin password..........................................................140
Enable admin password reset........................................................141
Reset the admin password..............................................................142
View router status and usage information....................................143
Display Internet port statistics.........................................................143
Check the Internet connection status............................................144
Check your Internet bandwidth......................................................145
View satellites, WiFi devices, and wired devices connected to the
Orbi network.....................................................................................146
View the satellite status in the satellite web interface..................147
View and manage logs of router activity.......................................148
Set up a syslog server......................................................................149
Monitor Internet traffic.....................................................................150
Change the NTP server....................................................................151
Set your time zone manually...........................................................152
Manage the router configuration file.............................................153
Back up settings...........................................................................153
Manage the automatic backup options....................................153
6
Page 7
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Erase the current configuration settings...................................154
Restore configuration settings...................................................155
Set up remote management...........................................................156
Use remote access...........................................................................157
Use the router as a WiFi access point............................................157
Set up router mode..........................................................................159
Chapter 8 Customize Internet Traffic Rules for Ports
Manage port forwarding to a local server.....................................161
Set up port forwarding to a local server...................................161
Add a custom port forwarding service.....................................162
Edit a port forwarding service....................................................163
Delete a port forwarding entry..................................................164
Application example: Make a local web server public...........164
How the router implements the port forwarding rule.............165
Manage port triggering...................................................................165
Add a port triggering service.....................................................166
Enable port triggering................................................................167
Application example: Port triggering for Internet Relay Chat.168
Chapter 9 Use VPN to Access Your Network
Set up a VPN connection.................................................................170
Specify VPN service in the router...................................................170
Install OpenVPN software...............................................................171
Install OpenVPN software on your Windows-based computer.171
Install OpenVPN software on your Mac computer..................174
Install OpenVPN software on an iOS device............................175
Install OpenVPN software on an Android device....................176
Use a VPN tunnel on your Windows-based computer................177
Use VPN to access your Internet service at your business..........178
Set up VPN client Internet access in the router........................178
Block VPN client Internet access in the router.........................179
Use a VPN tunnel to access your Internet service at your
business........................................................................................180
Chapter 10 Troubleshooting
Quick tips...........................................................................................182
Sequence to restart your network.............................................182
WiFi settings.................................................................................182
Network settings..........................................................................182
The router and satellite do not sync..............................................182
You cannot log in to the router.......................................................184
You cannot access the Internet.......................................................184
Troubleshoot Internet browsing.....................................................185
7
Page 8
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Troubleshoot PPPoE........................................................................186
Troubleshoot WiFi connectivity......................................................187
Troubleshoot your network using the ping utility........................187
Test the LAN path to your router...............................................188
Test the path from your computer to a remote device...........188
Appendix A Supplemental Information
Factory settings.................................................................................191
Factory settings for Orbi Pro WiFi 6 Mini router model SXR30.191
Factory settings for Orbi Pro WiFi 6 Mini satellite model
SXS30............................................................................................194
Technical specifications...................................................................194
Technical specifications for Orbi Pro WiFi 6 Mini router model
SXR30............................................................................................194
Technical specifications for Orbi Pro WiFi 6 Mini satellite model
SXS30............................................................................................196
8
Page 9
1

Overview

The Orbi Pro WiFi 6 Mini Dual-band Mesh System (SXK30) creates dedicated high-speed WiFi connections to your Internet service. The Orbi Pro WiFi 6 Mini router connects to your modem or gateway. The Orbi Pro WiFi 6 Mini satellite extends the WiFi signal throughout your business, office, or home.
This chapter contains the following sections:
• Supported Orbi Pro WiFi 6 models
• Orbi Pro WiFi 6 Mini router and satellite hardware overviews
• LED behavior
• Wall mount your Orbi Pro WiFi 6 Mini
• Orbi Pro WiFi 6 Mini router label and Orbi Pro Wifi 6 Mini satellite label
• Connect your Orbi Pro WiFi 6 Mini router
• Place your Orbi Pro WiFi 6 Mini satellite
• Sync your Orbi Pro WiFi 6 Mini satellite
• Manage and monitor your Orbi network with NETGEAR Insight
For more information about the topics covered in this manual, visit the support website at netgear.com/support.
Note: This manual refers to the Orb Pro WiFi 6 Mini router as the router and refers to the Orbi Pro WiFi 6 Mini satellite as the satellite.
Note: The Orbi Pro WiFi 6 Mini router does not support and does not pair with Orbi Home satellites or Orbi Pro WiFi 5 satellites. The Orbi Pro WiFi 6 Mini satellite does not pair with an Orbi Home router or Orbi Pro WiFi 5 router.
9
Page 10
1 2 3 4 5 7
6
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Supported Orbi Pro WiFi 6 models

This user manual describes the following Orbi Pro WiFi 6 Mini models:
Orbi Pro WiFi 6 Mini Router (Model SXR30)
Orbi Pro WiFi 6 Mini Satellite (Model SXS30)
Note: To manage your Orbi Pro WiFi 6 Mini router and any Orbi Pro WiFi 6 Mini satellites that are connected to your Orbi Pro WiFi 6 network, you must manage them from your Orbi Pro WiFi 6 Mini router web interface.

Orbi Pro WiFi 6 Mini router and satellite hardware overviews

The following sections display and describe the hardware features of the Orbi Pro WiFi Mini 6 router (model SXR30) and Orbi Pro WiFi 6 Mini satellite (model SXS30).

Orbi Pro WiFi 6 Mini router model SXR30 hardware

Figure 1. Orbi Pro WiFi 6 Mini router model SXR30, front and back views
1. Bar LED
2. Sync button (also used for WPS connection)
User Manual10Overview
Page 11
1
2 3
4 6
5
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
3. WAN Gigabit Ethernet port. Use this port for your Internet connection.
4. LAN Gigabit Ethernet ports 1–3. LAN ports 1 and 2 support link aggregation.
5. Power LED
6. DC Power connector
7. Reset button

Orbi Pro WiFi 6 Mini satellite model SXS30 hardware

Figure 2. Orbi Pro WiFi 6 Mini satellite model SXS30, front and back views
1. Bar LED
2. Sync button (also used for WPS connection)
3. LAN Gigabit Ethernet ports 1–4. LAN ports 2 and 3 support link aggregation.
4. DC Power connector
5. Power LED
6. Reset button
User Manual11Overview
Page 12
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

LED behavior

When you sync an Orbi Pro WiFi 6 Mini satellite to the Orbi Pro WiFi 6 Mini router, the LED behavior for a satellite that comes in an Orbi Pro WiFi 6 Mini system is different from the LED behavior for add-on Orbi Pro WiFi 6 Mini satellites.

Orbi Pro WiFi 6 Mini System LEDs

The following table describes the LED behavior for an Orbi Pro WiFi 6 Mini router (model SXR30) and Orbi Pro WiFi 6 Mini satellite (model SXS30) that are purchased together and come in the same package.
Table 1. Orbi Pro WiFi 6 Mini System router and satellite LED descriptions
LED BehaviorLED
Power LED
Router bar LED
Satellite bar LED
The Power LED is located adjacent to the power connector on the rear panel.
Solid green: Power is on.
Solid amber: The router or satellite is booting.
Blinking amber: The router or satellite is resetting to factory default settings.
Blinking red: The firmware is corrupted.
Off: Power is not supplied.
The bar LED is located on the front.
Pulsing white: The router is booting or someone pressed the Sync button.
Off: The router finished booting and is working normally.
Solid white: The router is resetting to factory default settings.
Solid magenta: The router cannot connect to the Internet. See You cannot access the
• Internet on page 184.
This satellite is included when you buy an Orbi router. The bar LED is located on the front.
Pulsing white: The satellite is booting.
Blue for three minutes: The connection between the satellite and the router is good.
Amber for three minutes: The connection between the satellite and the router is fair.
Magenta: The satellite failed to sync to the router. See The router and satellite do not
• sync on page 182.
Off: The satellite synced to the router and is working normally.
User Manual12Overview
Page 13
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Add-on Orbi Pro WiFi 6 Mini satellite LEDs

The following table describes the LED behavior for an add-on Orbi Pro WiFi 6 Mini satellite (model SXS30) that was purchased separately from the Orbi Pro WiFi 6 Mini System kit.
Table 2. Orbi Pro WiFi 6 Mini add-on satellite (model SXS30) LED description
LED BehaviorLED
Power LED
Add-on satellite bar LED
The Power LED is located adjacent to the power port on the rear panel.
Solid green: Power is on.
Solid amber: The satellite is rebooting.
Blinking amber: The satellite is resetting to factory default settings.
Blinking red: The firmware is corrupted.
Off: Power is not supplied.
Optional add-on satellites are sold separately and can be added to your Orbi network. The bar LED is located on the front.
Pulsing white: The satellite is booting.
Solid white: The satellite is ready to sync to the router (press the Sync button).
Blue for three minutes: The connection between the satellite and the router is good.
Amber for three minutes: The connection between the satellite and the router is fair.
Magenta: The satellite is not connected to the router or is not getting an IP address.
Off: The satellite synced to the router and is working normally.

Wall mount your Orbi Pro WiFi 6 Mini

Your package contains wall-mounting items:
Wall-mount bracket
Wall anchors
Screws
Attach the mount bracket to the wall, and then attach the mount base to your router or satellite.
User Manual13Overview
Page 14
2.5 in. (63mm)
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
To wall mount your router or satellite:
1. Locate the two mounting holes on the mounting bracket.
2. Mark the wall where you want to insert the provided anchors and screws, which must be 2.5 in. (63 mm) apart.
3. Drill two mounting holes in the wall.
4. Insert the supplied anchors and screws into the wall and tighten the screws with a No. 2 Phillips screwdriver, leaving about 0.25 in. (6 mm) of each screw protruding from the wall.
Note: When the screws are placed correctly, the holes at the back of the mounting bracket fit over the protruding screws, allowing you to slide the mounting bracket downward until the tops of the slots are resting on the screws.
5.
Thread the power connector through the opening at the bottom of the mount base. For the router, also thread the Ethernet cable through the opening in the mount base.
User Manual14Overview
Page 15
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
6. Connect the cables to your Orbi router or satellite, place your Orbi router or satellite on the mount base, and attach it to the base with the provided screws.
User Manual15Overview
Page 16
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Orbi Pro WiFi 6 Mini router label and Orbi Pro Wifi 6 Mini satellite label

The Orbi Pro WiFi 6 Mini router label shows the login information, the WiFi network name and password, the router’s MAC address, and the router’s serial number. The following is an example of what the router label might look like:
Figure 3. Orbi Pro WiFi 6 Mini router label
The Orbi Pro WiFi 6 Mini satellite label shows the WiFi network name and password, the satellite’s MAC address, and the satellite’s serial number. The following is an example of what the satellite label might look like:
Figure 4. Orbi Pro WiFi 6 Mini satellite label
User Manual16Overview
Page 17
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Connect your Orbi Pro WiFi 6 Mini router

If you want to connect your Orbi Pro WiFi 6 Mini router to an existing gateway, we recommend that you turn off your existing gateway’s WiFi.
To cable your router:
1.
Unplug your modem’s power, leaving the modem connected to the wall jack for your Internet service.
If your modem uses a battery backup, remove the battery, and then put the battery back in.
2. Plug in and turn on your modem.
3.
Connect your modem to the Internet port of your router with the Ethernet cable that came with your router.
4. Connect the power adapter to your router and plug the power adapter into an outlet.

Place your Orbi Pro WiFi 6 Mini satellite

Your satellites must be within range of your router’s WiFi signal in order for it to sync with the router. Use the satellite’s bar LED to help you determine where to place your satellite.

Sync your Orbi Pro WiFi 6 Mini satellite

The sync process for your Orbi Pro WiFi 6 Mini satellite depends on whether your satellite came with your Orbi Pro WiFi 6 Mini system, or if your satellite is an add-on satellite.
User Manual17Overview
Page 18
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Sync a satellite from an Orbi Pro WiFi 6 Mini system

The Orbi Pro WiFi 6 Mini system includes an Orbi Pro WiFi 6 Mini router and a Orbi Pro WiFi 6 Mini satellite. The Orbi Pro WiFi 6 Mini satellite that is packaged with an Orbi Pro WiFi 6 Mini router is preset to automatically find and sync to the router's WiFi signal.
To sync your Orbi Pro WiFi 6 Mini satellite:
1. Place your satellite. For more information, see Place your Orbi Pro WiFi 6 Mini satellite on page 17.
2. Connect the satellite to a power source. The satellite bar LED pulses white. The satellite automatically finds the router’s WiFi
signal and attempts to sync to the Orbi Pro WiFi 6 Mini router.
Note: The first time that you sync the satellite and the router, the sync process can take up to five minutes because the router might automatically update the satellite’s firmware.
The satellite bar LED lights one of the following colors for about three minutes and then turns off:
Blue: The router and satellite successfully synced, and the connection between
the router and satellite is good.
Amber: The router and satellite successfully synced, and the connection between
the router and satellite is fair. Consider moving the satellite closer to the router.
Magenta: The router and satellite failed to sync.
3.
If the satellite bar LED is magenta, move the satellite closer to the router and then sync the satellite to the router:
a.
Press the Sync button on the back of the router.
b.
Within two minutes, press the Sync button on the back of the satellite. The satellite attempts to sync to the router. The satellite bar LED lights blue,
amber, or magenta as described in Step 2 of this procedure and then turns off.

Sync an add-on Orbi Pro WiFi 6 Mini satellite

If you already set up an Orbi Pro WiFi 6 Mini router and satellite and you are adding an optional add-on Orbi Pro WiFi 6 Mini satellite (sold separately), follow the steps in this section.
User Manual18Overview
Page 19
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Note: When you purchase an Orbi Pro WiFi 6 Mini satellite separately from the Orbi
Pro WiFi 6 Mini router, the satellite has a different WiFi network name and password. However, after syncing the add-on satellite with the router, the satellite uses the same WiFi network name and password as the router.
To sync your add-on Orbi Pro WiFi 6 Mini satellite:
1. Place your satellite. For more information, see Place your Orbi Pro WiFi 6 Mini satellite on page 17.
2. Connect the satellite to a power source.
3.
Wait about two minutes for the satellite bar LED to light solid white.
4.
Press the Sync button on the back of the satellite and within two minutes, press the Sync button on the back of your Orbi WiFi 6 Mini router.
The satellite bar LED pulses white, then lights one of the following colors for about three minutes, and then turns off:
Blue: The router and satellite successfully synced, and the connection between
the router and satellite is good.
Amber: The router and satellite successfully synced, and the connection between
the router and satellite is fair. Consider moving the satellite closer to the router.
Magenta: The router and satellite failed to sync. Move the satellite closer to the
router and try again.
Note: The first time that you sync the satellite and the router, the sync process can take up to five minutes because the router might automatically update the satellite’s firmware.

Add satellites to your network using the router web interface

You can use the Orbi Pro WiFi 6 Mini router web interface to add a satellite to your Orbi network.
To add a satellite to your Orbi network using the router web interface:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
User Manual19Overview
Page 20
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Add Orbi Satellite. The Place Your Satellite page displays.
5. Follow the instructions about where to place your satellite in your house.
6. Connect the satellite to a power source.
7. Click the NEXT button.
8.
Wait about two minutes for the satellite’s bar LED to light solid white.
9. Press the Sync button on the satellite. The satellite’s bar LED pulses white.
10.
Click the SYNC button in the router web interface. The router attempts to sync with the satellite.
The satellite’s bar LED lights one of the following colors for about three minutes and then turns off:
Blue: The router and satellite successfully synced, and the connection between
the router and satellite is good.
Amber: The router and satellite successfully synced, and the connection between
the router and satellite is fair. Consider moving the satellite closer to the router.
Magenta: The router and satellite failed to sync. Move the satellite closer to the
router and try again.
Note: The first time that you sync the satellite and the router, the sync process can take up to five minutes because the router might automatically update the satellite’s firmware.
User Manual20Overview
Page 21
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Manage and monitor your Orbi network with NETGEAR Insight

If you are a NETGEAR Insight Premium or Pro subscriber, after you use the router web interface to set up your Orbi system, you can use NETGEAR Insight to manage and monitor your Orbi network remotely.
For more information about NETGEAR Insight, visit https://www.netgear.com/insight/.
User Manual21Overview
Page 22
2

Connect to the Orbi Pro WiFi 6 Network and Access the Router

To manage your Orbi Pro WiFi 6 Mini router and any Orbi Pro WiFi 6 Mini satellites that are connected to your Orbi Pro Wifi 6 network, you must manage them from your Orbi Pro WiFi 6 Mini router web interface.
This chapter contains the following sections:
• Connect to the network for initial configuration
• Types of logins
• Use a web browser to access the router
• Change the language
• Resolve a browser security warning
22
Page 23
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Connect to the network for initial configuration

You can connect to the Orbi network through a wired or WiFi connection.
Note: If you set up your computer to use a static IP address, change the settings so that it uses Dynamic Host Configuration Protocol (DHCP).

Wired connection

You can connect your computer to the router using an Ethernet cable and join the router’s local area network (LAN).
To connect your computer to the router with an Ethernet cable:
1. Make sure that the router is receiving power (its Power LED is lit).
2. Connect an Ethernet cable to an Ethernet port on your computer.
3.
Connect the other end of the Ethernet cable to one of the router’s Ethernet ports. Your computer connects to the LAN.

WiFi connection

When you install your Orbi router for the first time, you can connect to the router’s WiFi network by scanning the QR code on your router with the camera app on your mobile device. To scan the QR code with your camera app, your mobile device must have iOS version 11 or later, or Android version 10 or later.
You can also manually find and select the Orbi router’s WiFi network from your WiFi-enabled computer or mobile device.
To find and select the WiFi network:
1. Make sure that the router is receiving power (its Power LED is lit).
2.
On your WiFi-enabled computer or mobile device, find and select the WiFi network. The WiFi network name is on the router label.
3. Join the WiFi network and enter the WiFi password. The password is on the router or satellite label.
Your WiFi-enabled computer or mobile device connects to the WiFi network.
Network and Access the Router
User Manual23Connect to the Orbi Pro WiFi 6
Page 24
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

WiFi connection using WPS

You can connect to the router’s WiFi network with Wi-Fi Protected Setup (WPS) or you can find and select the WiFi network.
To use WPS to connect to the WiFi network:
1. Make sure that the router is receiving power (its Power LED is lit).
2.
Check the WPS instructions for your computer or WiFi device.
3. Press the Sync button on the router.
4. Within two minutes, on your WiFi-enabled computer or mobile device, press its WPS button or follow its instructions for WPS connections.
Your computer or mobile device connects to the WiFi network.

Types of logins

You must use different logins for different types of tasks:
Internet service login: The login information that your Internet service provider
• (ISP) gave you lets your router connect to your Internet service. Your service provider
gave you this login information in a letter or some other way. If you cannot find this login information, contact your ISP.
WiFi network login: Your router uses a preset WiFi network name (SSID) and
• password for WiFi access. This information is on the router label. During setup, you
can change the WiFi network name (SSID) and password for increased security.
Orbi Pro router login: The password that logs you in to the router interface from a
• web browser as the admin. The default password for initial login is password. During
setup or at initial login, you must specify a new password for increased security.

Use a web browser to access the router

When you connect to the network (either through WiFi or through an Ethernet cable), you can use a web browser to access the router to view or change the settings for the router and the satellites that you synced with the router.
The first time you log in to the router web interface, use the interactive Internet setup process to connect your router to your Internet service. You can also set up your router manually.
User Manual24Connect to the Orbi Pro WiFi 6
Network and Access the Router
Page 25
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Use the interactive Internet setup process

Before you start the interactive Internet setup process, get your ISP information and make sure that the computers and devices in the network use the settings described here.
When your Internet service starts, your Internet service provider (ISP) typically gives you all the information needed to connect to the Internet.
For DSL service, you might need the following information to set up your router:
The ISP configuration information for your DSL account
ISP login name and password
Fixed or static IP address settings (special deployment by ISP; this setting is rare)
If you cannot locate this information, ask your ISP to provide it.
The interactive Internet setup process takes about 10 minutes to complete.
To use the interactive Internet setup process:
1. Power on your router.
2. Make sure that your WiFi-enabled computer or mobile device is connected to the router with an Ethernet cable (wired) or wirelessly with the preset security settings listed on the label.
Note: If you want to change the router’s WiFi settings, use a wired connection so the WiFi device that you are using for setup is not disconnected when the new WiFi settings take effect.
3. Launch a web browser. If your browser displays a security message, see Resolve a browser security warning
on page 27.
The page that displays depends on whether you accessed the router before:
The first time that you set up the Internet connection for your router, the browser
goes to orbilogin.com, and the Orbi login page displays.
If you already set up the Internet connection, enter orbilogin.com in the address
field for your browser to start the installation process.
4. Follow the onscreen instructions. The router connects to the Internet.
If your browser does not display the web page or your router does not connect to the Internet, see the following troubleshooting suggestions.
User Manual25Connect to the Orbi Pro WiFi 6
Network and Access the Router
Page 26
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Your router does not connect to the InternetYour browser does not display the web page
Review your settings.Make sure that the computer is connected to the router
through one of the LAN Ethernet ports, or is connected
through WiFi.
Make sure that the router is receiving power, and that
its Power LED is lit
Close and reopen your browser or clear the browser
cache.
If your computer is set to a static or fixed IP address
(this setting is uncommon), change its settings to obtain
an IP address automatically from the router.
Make sure that you selected the correct options and
typed everything correctly.
Contact your ISP to verify that you are using the correct
configuration information.
Read the information in Troubleshooting on page 181.Browse to orbilogin.com.
If problems persist, register your NETGEAR product
and contact NETGEAR technical support.

Log in to the Orbi router web interface

When you log in to the Orbi, the browser displays the router web interface. You can use the router web interface to change the router or satellite settings.
To log in to your Orbi:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
User Manual26Connect to the Orbi Pro WiFi 6
Network and Access the Router
Page 27
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Change the language

By default, the language is set as Auto.
To change the language:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4.
In the upper right corner, select a language from the menu.
5.
When prompted, click the OK button to confirm this change. The page refreshes with the language that you selected.

Resolve a browser security warning

Access to the router web interface is encrypted through the Hyper Text Transfer Protocol Secure (HTTPS) protocol, instead of the Hyper Text Transfer Protocol (HTTP). The extra security of HTTPS requires your browser to verify that orbilogin.com (which is the same as 192.168.1.1) is safe. As a result, a security warning can display in your browser when you try to access that domain.
If such as security warning displays, you cannot proceed but must take one of the following actions, depending on the browser that you are using:
Google Chrome: If Google Chrome displays a Your connection is not private warning,
• click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe) link, in which x.x.x.x represents the domain or IP address of the Orbi.
Apple Safari: If Apple Safari displays a This connection is not private warning, click
• the Show Details button. Then, click the visit this website link. If a warning pop-up window displays, click the Visit Website button. If another pop-up window displays to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button.
User Manual27Connect to the Orbi Pro WiFi 6
Network and Access the Router
Page 28
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Mozilla Firefox: If Mozilla Firefox displays a Your connection is not secure warning,
• click the ADVANCED button. Then, click the Add Exception button. In the pop-up
window that displays, click the Confirm Security Exception button.
Microsoft Edge: If Microsoft Edge displays a There is a problem with this website’s
security certificate warning or a similar warning, select Details > Go on to the webpage.
Microsoft Internet Explorer: If Microsoft Internet Explorer displays a There is a
problem with this website’s security certificate warning, click the Continue to this website (not recommended) link.
Network and Access the Router
User Manual28Connect to the Orbi Pro WiFi 6
Page 29
3

Specify Your Internet Settings

Usually, the quickest way to set up the router to use your Internet connection is to allow Orbi to detect the Internet connection when you first access the router with a web browser. You can also customize or specify your Internet settings.
This chapter contains the following sections:
• Use the Internet Setup Wizard
• Manually set up the Internet connection
• Manage an IPv6 Internet connection
• Change the MTU size
29
Page 30
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Use the Internet Setup Wizard

You can use the Setup Wizard to detect your Internet settings and automatically set up your router.
To use the Setup Wizard:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup Wizard. The Setup Wizard page displays.
5. Select the Yes radio button. If you select No, you are taken to the Internet Setup page (see Manually set up the
Internet connection on page 30).
6. Click the Next button. The Setup Wizard searches your Internet connection for servers and protocols to
determine your ISP configuration and checks your operation mode.

Manually set up the Internet connection

You can view or change the router’s Internet connection settings.

Specify an Internet connection without a login

To specify the Internet connection settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com.
User Manual30Specify Your Internet Settings
Page 31
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Internet. The Internet Setup page.
5. Leave the Does your Internet connection require a login No radio button selected.
6.
If your Internet connection requires an account name or host name, type it in the Account Name (If Required) field.
7.
If your Internet connection requires a domain name, type it in the Domain Name (If Required) field.
For the other sections in this page, the default settings usually work, but you can change them.
8. Select an Internet IP Address radio button:
Get Dynamically from ISP: Your ISP uses DHCP to assign your IP address. Your
ISP automatically assigns these addresses.
Use Static IP Address: Enter the IP address, IP subnet mask, and the gateway IP
address that your ISP assigned. The gateway is the ISP router to which your router connects.
9. Select a Domain Name Server (DNS) Address radio button:
Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns this address.
Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
User Manual31Specify Your Internet Settings
Page 32
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
10. Select a Router MAC Address radio button:
Use Default Address: Use the default MAC address.
Use Computer MAC Address: The router captures and uses the MAC address
of the computer that you are now using. You must use the one computer that the ISP allows.
Use This MAC Address: Enter the MAC address that you want to use.
11. Click the Apply button. Your settings are saved.
12. Click the Test button to test your Internet connection.

Specify an Internet connection that uses a login

To view or change the basic Internet setup:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Internet. The Internet Setup page displays.
5. Select the Does your Internet connection require a login Yes radio button. The page adjusts.
6. From the Internet Service Provider menu, select the encapsulation method: The selections are PPPoE, PPTP, or L2TP.
7.
In the Login field, enter the login name your ISP gave you. This login name is often an email address.
8.
In the Password field, type the password that you use to log in to your Internet service.
User Manual32Specify Your Internet Settings
Page 33
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
9.
If your ISP requires a service name, type it in the Service Name (if Required) field.
10. From the Connection Mode menu, select Always On, Dial on Demand, or Manually Connect.
11.
To change the number of minutes until the Internet login time out, in the Idle Timeout (In minutes) field, type the number of minutes.
This is how long the router keeps the Internet connection active when no one on the network is using the Internet connection. A value of 0 (zero) means never log out.
12. Select an Internet IP Address radio button:
Get Dynamically from ISP: Your ISP uses DHCP to assign your IP address. Your
ISP automatically assigns these addresses.
Use Static IP Address: Enter the IP address, IP subnet mask, and gateway IP
address that your ISP assigned. The gateway is the ISP router to which your router connects.
13. Select a Domain Name Server (DNS) radio button:
Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns this address.
Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
14. Select a Router MAC Address radio button:
Use Default Address: Use the default MAC address.
Use Computer MAC Address: The router captures and uses the MAC address
of the computer that you are now using. You must use the one computer that the ISP allows.
Use This MAC Address: Enter the MAC address that you want to use.
15. Click the Apply button. Your settings are saved.
16. Click the Test button to test your Internet connection.
User Manual33Specify Your Internet Settings
Page 34
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Manage an IPv6 Internet connection

The router supports many different types of IPv6 Internet connections for which you can specify the settings manually.

Requirements for entering IPv6 addresses

IPv6 addresses are denoted by eight groups of hexadecimal quartets that are separated by colons. You can reduce any four-digit group of zeros within an IPv6 address to a single zero or omit it. The following errors invalidate an IPv6 address:
More than eight groups of hexadecimal quartets
More than four hexadecimal characters in a quartet
More than two colons in a row

Specify IPv6 Internet connections

You can set up an IPv6 Internet connection if the router does not detect it automatically.
To set up an IPv6 Internet connection:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. From the Internet Connection Type menu, select the IPv6 connection type:
If you are not sure, select Auto Detect so that the router detects the IPv6 type
that is in use.
If your Internet connection does not use PPPoE, DHCP, or fixed, but is IPv6, select
Auto Config.
User Manual34Specify Your Internet Settings
Page 35
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Your Internet service provider (ISP) can provide this information. For more information about IPv6 Internet connection, see the following sections:
Use auto detection for an IPv6 Internet connection on page 35
Use auto configuration for an IPv6 Internet connection on page 36
Set up an IPv6 6to4 tunnel Internet connection on page 38
Set up an IPv6 6rd tunnel Internet connection on page 40
Set up an IPv6 pass-through Internet connection on page 42
Set up an IPv6 fixed Internet connection on page 42
Set up an IPv6 DHCP Internet connection on page 44
Set up an IPv6 PPPoE Internet connection on page 46
6. Click the Apply button. Your settings are saved.

Use auto detection for an IPv6 Internet connection

To set up an IPv6 Internet connection through auto detection:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. From the Internet Connection Type menu, select Auto Detect. The page adjusts.
User Manual35Specify Your Internet Settings
Page 36
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The router automatically detects the information in the following fields:
Connection Type: This field indicates the connection type that is detected.
Router’s IPv6 Address on WAN: This field shows the IPv6 address that is acquired
for the router’s WAN (or Internet) interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
Router’s IPv6 Address on LAN: This field shows the IPv6 address that is acquired
for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
6. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
This setting specifies how the router assigns IPv6 addresses to the devices on your business network (the LAN).
7.
(Optional) Select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
8. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
9. Click the Apply button. Your settings are saved.

Use auto configuration for an IPv6 Internet connection

To set up an IPv6 Internet connection through auto configuration:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
User Manual36Specify Your Internet Settings
Page 37
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5.
From the Internet Connection Type menu, select Auto Config. The page adjusts.
The router automatically detects the information in the following fields:
Router’s IPv6 Address on WAN: This field shows the IPv6 address that is acquired
for the router’s WAN (or Internet) interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
Router’s IPv6 Address on LAN: This field shows the IPv6 address that is acquired
for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
6.
(Optional) In the DHCP User Class (If Required) field, enter a host name. If your ISP gave you a specific host name, enter it here. Otherwise, leave this field
blank.
7.
(Optional) In the DHCP Domain Name (If Required) field, enter a domain name. You can type the domain name of your IPv6 ISP. Do not enter the domain name for
the IPv4 ISP here. For example, if your ISP’s mail server is mail.xxx.yyy.zzz, type xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type it in this field. For example, Earthlink Cable might require a host name of home, and Comcast sometimes supplies a domain name.
8. In the IPv6 Domain Name Server (DNS) Address section, select a radio button:
Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns these addresses.
Use These DNS Servers. If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
User Manual37Specify Your Internet Settings
Page 38
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
9. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
10.
(Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
11. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
12. Click the Apply button. Your settings are saved.

Set up an IPv6 6to4 tunnel Internet connection

The remote relay router is the router to which your router creates a 6to4 tunnel. Make sure that the IPv4 Internet connection is working before you apply the 6to4 tunnel settings for the IPv6 connection.
To set up an IPv6 Internet connection by using a 6to4 tunnel:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
User Manual38Specify Your Internet Settings
Page 39
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
5. From the Internet Connection Type menu, select 6to4 Tunnel. The page adjusts.
The router automatically detects the information in the Router’s IPv6 Address on LAN field. This field shows the IPv6 address that is acquired for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
6. Select a Remote 6to4 Relay Router radio button:
Auto: Your router uses any remote relay router that is available on the Internet.
This is the default setting.
Static IP Address: Enter the static IPv4 address of the remote relay router. Your
IPv6 ISP usually provides this address.
7. In the IPv6 Domain Name Server (DNS Address), select a radio button:
Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns this address.
Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
8. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
This setting specifies how the router assigns IPv6 addresses to the devices on your business network (the LAN).
9.
(Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
10. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
11. Click the Apply button.
User Manual39Specify Your Internet Settings
Page 40
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Your settings are saved.

Set up an IPv6 6rd tunnel Internet connection

The 6rd protocol makes it possible to deploy IPv6 to sites using a service provider’s IPv4 network. 6rd uses the service provider’s own IPv6 address prefix. This limits the operational domain of 6rd to the service provider’s network and is under direct control of the service provider. The IPv6 service provided is equivalent to native IPv6. The 6rd mechanism relies on an algorithmic mapping between the IPv6 and IPv4 addresses that are assigned for use within the service provider’s network. This mapping allows for automatic determination of IPv4 tunnel endpoints from IPv6 prefixes, allowing stateless operation of 6rd.
With a 6rd Tunnel configuration, the router follows the RFC5969 standard, supporting two ways to establish a 6rd tunnel IPv6 WAN connection:
Auto Detect Mode: In IPv6 Auto Detect mode, when the router receives option 212
• from the DHCPv4 option, auto detect selects the IPv6 as 6rd Tunnel setting. The
router uses the 6rd option information to establish the 6rd connection.
Manual Mode: Select 6rd. If the router receives option 212, the fields are
• automatically completed. Otherwise, you must enter the 6rd settings.
To set up an IPv6 6rd Tunnel Internet connection:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. In the Internet Connection Type menu, select 6rd. The page adjusts.
User Manual40Specify Your Internet Settings
Page 41
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The router can automatically detect the information in the following sections:
6rd (IPv6 Rapid Development) Configuration: The router detects the service
provider’s IPv4 network and attempts to establish an IPv6 6rd Tunnel connection. If the IPv4 network returns 6rd parameters to the router, the page adjusts to display the correct settings in this section.
Router’s IPv6 Address on LAN: This field shows the IPv6 address that is acquired
for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
6.
If the router does not automatically detect the information in the 6rd (IPv6 Rapid Development) Configuration section, specify the 6rd prefix, 6rd prefix length, 6rd IPv4 border relay address, and 6rd IPv4 address mask length that the router must use.
7. In the IPv6 Domain Name Server (DNS) Address section, select a radio button:
Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns this address.
Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
8. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
This setting specifies how the router assigns IPv6 addresses to the devices on your business network (the LAN).
9.
(Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
10. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
11. Click the Apply button.
User Manual41Specify Your Internet Settings
Page 42
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Your settings are saved.

Set up an IPv6 pass-through Internet connection

In pass-through mode, the router works as a Layer 2 Ethernet switch with two ports (LAN and WAN Ethernet ports) for IPv6 packets. The router does not process any IPv6 header packets.
To set up a pass-through IPv6 Internet connection:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. From the Internet Connection Type menu, select Pass Through. The page adjusts, but no additional fields display.
6. Click the Apply button. Your settings are saved.

Set up an IPv6 fixed Internet connection

To set up a fixed IPv6 Internet connection:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
User Manual42Specify Your Internet Settings
Page 43
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. From the Internet Connection Type menu, select Fixed. The page adjusts.
6.
In the WAN Setup section, configure the fixed IPv6 addresses for the WAN connection:
IPv6 Address/Prefix Length: The IPv6 address and prefix length of the router
WAN interface.
Default IPv6 Gateway: The IPv6 address of the default IPv6 gateway for the
router’s WAN interface.
Primary DNS Server: The primary DNS server that resolves IPv6 domain name
records for the router.
Secondary DNS Server: The secondary DNS server that resolves IPv6 domain
name records for the router.
Note: If you do not specify the DNS servers, the router uses the DNS servers that are configured for the IPv4 Internet connection on the Internet Setup page. (See Manually set up the Internet connection on page 30.)
7. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
This setting specifies how the router assigns IPv6 addresses to the devices on your business network (the LAN).
8.
In the IPv6 Address/Prefix Length fields, specify the static IPv6 address and prefix length of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
User Manual43Specify Your Internet Settings
Page 44
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
9. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
10. Click the Apply button. Your settings are saved.

Set up an IPv6 DHCP Internet connection

To set up an IPv6 Internet connection with a DHCP server:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. From the Internet Connection Type menu, select DHCP. The page adjusts.
The router automatically detects the information in the following fields:
Router’s IPv6 Address on WAN: This field shows the IPv6 address that is acquired
for the router’s WAN (or Internet) interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
Router’s IPv6 Address on LAN: This field shows the IPv6 address that is acquired
for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
6.
(Optional) In the User Class (If Required) field, enter a host name.
User Manual44Specify Your Internet Settings
Page 45
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Most people can leave this field blank, but if your ISP gave you a specific host name, enter it here.
7.
(Optional) In the Domain Name (If Required) field, enter a domain name. You can type the domain name of your IPv6 ISP. Do not enter the domain name for
the IPv4 ISP here. For example, if your ISP’s mail server is mail.xxx.yyy.zzz, type xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type it in this field. For example, Earthlink Cable might require a host name of home, and Comcast sometimes supplies a domain name.
8. In the IPv6 Domain Name Server (DNS Address), select a radio button:
Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns this address.
Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
9. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
This setting specifies how the router assigns IPv6 addresses to the devices on your business network (the LAN).
10.
(Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
11. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
12. Click the Apply button. Your settings are saved.
User Manual45Specify Your Internet Settings
Page 46
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Set up an IPv6 PPPoE Internet connection

To set up a PPPoE IPv6 Internet connection:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
5. From the Internet Connection Type menu, select PPPoE. The page adjusts.
The router automatically detects the information in the following fields:
Router’s IPv6 Address on WAN: This field shows the IPv6 address that is acquired
for the router’s WAN (or Internet) interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
Router’s IPv6 Address on LAN: This field shows the IPv6 address that is acquired
for the router’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available.
6.
If already you set up your IPv4 ISP connection for PPPoE and want to use the same login information for IPv6, select the Use the same Login information as IPv4 PPPoE check box.
To manually configure the PPPoE settings for IPv6, specify the following settings:
Login: Enter the login name that your ISP gave you. This is usually the name that
you use in your email address. For example, if your main mail account is JerAB@ISP.com, you would type JerAB in this field. Some ISPs (like Earthlink) require that you use your full email address when you log in. If your ISP requires your full email address, type it in this field.
User Manual46Specify Your Internet Settings
Page 47
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Password. Enter the password for the ISP connection.
Service Name (if Required). Enter a service name. If your ISP did not provide a
service name, leave this field blank.
Note: The default setting of the Connection Mode field is Always On to provide a steady IPv6 connection. The router never terminates the connection. If the connection is terminated, for example, when the modem is turned off, the router attempts to reestablish the connection immediately after the PPPoE connection becomes available again.
7. In the IPv6 Domain Name Server (DNS Address), select a radio button
Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers.
Your ISP automatically assigns this address.
Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also.
8. In the LAN Setup section, select an IP Address Assignment radio button:
Use DHCP Server: This method passes more information to LAN devices, but
some IPv6 systems might not support the DHCPv6 client function.
Auto Config: This is the default setting.
This setting specifies how the router assigns IPv6 addresses to the devices on your business network (the LAN).
9.
(Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface.
If you do not specify an ID here, the router generates one automatically from its MAC address.
10. Select an IPv6 Filtering radio button:
Secured: In secured mode, which is the default mode, the router inspects both
TCP and UDP packets.
Open: In open mode, the router inspects UDP packets only.
11. Click the Apply button. Your settings are saved.
User Manual47Specify Your Internet Settings
Page 48
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Change the MTU size

The maximum transmission unit (MTU) is the largest data packet a network device transmits. When one network device communicates across the Internet with another, the data packets travel through many devices along the way. If a device in the data path uses a lower MTU setting than the other devices, the data packets must be split or “fragmented” to accommodate the device with the smallest MTU.
The best MTU setting for NETGEAR equipment is often the default value. In some situations, changing the value fixes one problem but causes another. Leave the MTU unchanged unless one of these situations occurs:
You experience problems connecting to your ISP or other Internet service, and the
• technical support of either the ISP or NETGEAR recommends changing the MTU
setting. These web-based applications might require an MTU change:
-
A secure website that does not open, or displays only part of a web page
- Yahoo email
- MSN portal
You use VPN and experience severe performance problems.
You used a program to optimize MTU for performance reasons, and now you are
• experiencing connectivity or performance problems.
Note: An incorrect MTU setting can cause Internet communication problems. For example, you might not be able to access certain websites, frames within websites, secure login pages, or FTP or POP servers.
To change the MTU size:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
User Manual48Specify Your Internet Settings
Page 49
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays.
5.
In the MTU Size field, enter a value from 64 to 1500.
6. Click the Apply button. Your settings are saved.
If you suspect an MTU problem, a common solution is to change the MTU to 1400. If you are willing to experiment, you can gradually reduce the MTU from the maximum value of 1500 until the problem goes away. The following table describes common MTU sizes and applications.
Table 3. Common MTU sizes
ApplicationMTU
The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN,
1500
and is the default value for NETGEAR routers, adapters, and switches.
Used in PPPoE environments.1492
Maximum size to use for pinging. (Larger packets are fragmented.)1472
Used in some DHCP environments.1468
Used in PPTP environments or with VPN.1436
Typical value to connect to dial-up ISPs.576
User Manual49Specify Your Internet Settings
Page 50
4

Control Access to the Internet

The router comes with a built-in firewall that helps protect your business network from unwanted intrusions from the Internet.
This chapter includes the following sections:
• Manage MAC access control lists for WiFi networks and the LAN
• Manage the Orbi network access control list
• Use keywords to block Internet sites
• Delete keywords that are used to block Internet sites
• Prevent blocking on a trusted computer
• Block services from the Internet
• Schedule when to block Internet sites and services
• Set up security event email notifications
50
Page 51
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Manage MAC access control lists for WiFi networks and the LAN

A MAC access control list (ACL) for a WiFi network (that is, an SSID) or the wired network (that is, the LAN) allows or denies a device access to the network based only on the MAC address of the device. If you block a device for one WiFi network or for the wired network, the device is blocked only for that WiFi network or for the wired network. You can set up an independent MAC ACL for each WiFi network and for the wired network. (The router supports multiple MAC ACLs.) With a MAC ACL, you can allow or deny access to a device on a specific WiFi network or the wired network.
Note: A MAC ACL differs from the network access control list (see Manage the Orbi network access control list on page 56). The network access control list is not specific to a particular WiFi network or to the wired network but is based on both WiFi and wired devices that the router detects on the entire Orbi network. To allow or deny access to a device on a specific WiFi network or the wired network, use a MAC ACL. MAC ACLs and the network access control list are mutually exclusive. Use either MAC ACLs or the network access control list.
If you set up a MAC ACL with a policy that allows access to a specific network, devices on the MAC ACL are an exception to the default policy:
A device for which you place the MAC address on the MAC ACL is denied access to
• that network.
All other devices are allowed access to that network.
If you set up a MAC ACL with a policy that denies access to a specific network, devices on the MAC ACL are an exception to the default policy:
A device for which you place the MAC address on the MAC ACL is allowed access
• to that work.
All other devices are denied access to that network.
A blocked device can still get an IP address from the router but cannot communicate with other devices on the network or connect to the Internet.
Note: Each network device owns a MAC address, which is a unique 12-character physical address, containing the hexadecimal characters 0–9, a–f, or A–F (uppercase or lowercase) only, and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC address is on the label of a device. If you cannot see the label, you can display the MAC address using the network configuration utilities of a computer. You might also find the MAC addresses on Attached Devices page of the router (see View satellites, WiFi devices, and wired devices connected to the Orbi network on page 146).
User Manual51Control Access to the Internet
Page 52
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Enable a MAC ACL for a specific network

When you enable a MAC ACL for a specific network, you must specify the default policy for that network. The default policy determines whether devices that you add to the MAC ACL are allowed or denied access to that specific network.
You can set up an independent MAC ACL for each of the WiFi networks and for the wired network. That is, the router supports multiple MAC ACLs.
To enable a MAC ACL for a specific network:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > MAC ACL. The MAC ACL page displays.
5.
Go to the section for the network for which you want to set up a MAC ACL.
6.
For the specific network, click the Enable MAC Access Control Disabled button. The button changes to the green Enabled button.
Note: If you enabled the network access control list (see Enable the network access control list and specify the access rule on page 57), you cannot enable any MAC ACLs. The network access control list and MAC ACLs are mutually exclusive. Use either the network access control list or MAC ACLs.
7.
From the Default Policy menu, select one of the following options:
Allow: The policy is to allow all devices access except for the devices that you
add to the MAC ACL. Devices on the MAC ACL are denied access to the specific network.
Deny: The policy is to deny all devices access except for the devices that you
add to the MAC ACL. Devices on the MAC ACL are allowed access to the specific network.
User Manual52Control Access to the Internet
Page 53
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
You can now add and manage devices on the MAC ACL. For more information, see the following sections:
Add automatically detected devices to a MAC ACL on page 53
Manually add, remove, or change the information for a device on a MAC ACL on
• page 54

Add automatically detected devices to a MAC ACL

After you set up a MAC ACL for a network and specify the default policy for the MAC ACL, the router automatically detects devices that are connected or were connected to the network for which you set up the MAC ACL.
You can select one or multiple devices from the detected list and add them to the MAC ACL.
To add automatically detected devices to a MAC ACL:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > MAC ACL. The MAC ACL page displays.
5.
Go to the section for the network for which you want to manage the MAC ACL.
6. Click the ADD DEVICE button. The Manual Access Management pop-up window opens.
7.
Select the check boxes for the devices that you want to add to the MAC ACL.
8. Click the ADD button.
User Manual53Control Access to the Internet
Page 54
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The devices are added to the MAC ACL on the MAC ACL page. Devices on the MAC ACL are an exception to the default policy:
If the default policy of the MAC ACL is to allow access, the added devices are
denied access.
If the default policy of the MAC ACL is to deny access, the added devices are
allowed access.

Manually add, remove, or change the information for a device on a MAC ACL

After you set up a MAC ACL for a network and specify the default policy for the MAC ACL, you can manually add a device, remove a device, or change the name (but not the MAC address) for a device on the MAC ACL.
By manually adding a device, you can proactively control access for a device that is not or not yet detected, or that was not detected by the router.
To manually add, remove, or change the name for a device on a MAC ACL:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > MAC ACL. The MAC ACL page displays.
5.
Go to the section for the network for which you want to manage the MAC ACL.
6.
To manually add a device to the MAC ACL, do the following: a. Click the MANUAL button.
The Manual Access Management pop-up window opens.
b.
Enter the MAC address and device name for the device that you want to add.
c. In the Manual Access Management pop-up window, click the ADD button.
User Manual54Control Access to the Internet
Page 55
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The device is added to the MAC ACL on the MAC ACL page. Devices on the MAC ACL are an exception to the default policy:
If the default policy of the MAC ACL is to allow access, the added device is
• denied access.
If the default policy of the MAC ACL is to deny access, the added device is
• allowed access.
7.
To remove a device from the MAC ACL, do the following: a.
Select the check box for the device.
b. Click the REMOVE DEVICE button.
The device is removed from the MAC ACL.
8.
To change the name for a device on the MAC ACL, do the following: a. Next to the device in the table., click the EDIT button.
The Manual Access Management pop-up window opens.
b. Change the device name.
c. In the Manual Access Management pop-up window, click the EDIT button.
The device name is changed in the MAC ACL on the MAC ACL page.

Disable a MAC ACL for a specific network

You can disable a MAC ACL that you already set up. The devices are not removed from the MAC ACL, but all devices on the MAC ACL can connect to the network for which you setup the MAC ACL, even if the default policy of the MAC ACL is to deny access to the devices.
To disable a MAC ACL for a specific network:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com.
A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password.
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
User Manual55Control Access to the Internet
Page 56
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The BASIC Home page displays.
4. Select ADVANCED > Security > MAC ACL.
The MAC ACL page displays.
5.
Go to the section for the network for which you want to disable the MAC ACL.
6.
For the specific network, click the Enable MAC Access Control Enabled button. The button changes to the gray Disabled button. The MAC ACL is disabled.

Manage the Orbi network access control list

You can use the network access control list (ACL) to block or allow access to the entire Orbi network. An ACL functions with the MAC addresses of WiFi and wired devices that the router detects on the Orbi network and that you can either allow access to your network or deny access to your network. That is, the router can detect the MAC addresses of devices that are or were connected to the Orbi network and list the MAC addresses of these devices.
Note: The network access control list differs from a MAC ACL (see Manage MAC access control lists for WiFi networks and the LAN on page 51). A MAC ACL is specific to a particular WiFi network or to the wired network but is not based on devices that the router detects on the entire Orbi network. With a MAC ACL, you can allow or deny access to a device on a specific WiFi network or the wired network. The network access control list and MAC ACLs are mutually exclusive. Use either the network access control list or MAC ACLs.
If you set up a network ACL with an access rule that allows access to the Orbi network, devices on the network ACL are an exception to the access rule:
A device for which you place the MAC address on the network ACL is denied access
• to the Orbi network.
All other devices are allowed access to the Orbi network.
If you set up a network ACL with an access rule that denies access to the Orbi network, devices on the network ACL are an exception to the access rule:
A device for which you place the MAC address on the network ACL is allowed access
• to the Orbi network.
All other devices are denied access to the Orbi network.
User Manual56Control Access to the Internet
Page 57
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Note: Each network device owns a MAC address, which is a unique 12-character physical
address, containing the hexadecimal characters 0–9, a–f, or A–F (uppercase or lowercase) only, and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC address is on the label of a device. If you cannot see the label, you can display the MAC address using the network configuration utilities of a computer. You might also find the MAC addresses on Attached Devices page of the router (see View satellites, WiFi devices, and wired devices connected to the Orbi network on page 146).

Enable the network access control list and specify the access rule

When you enable network access control, you must select whether new devices are allowed to access the Orbi network or are blocked from accessing the network. By default, connected devices are allowed access to the Orbi network, but you can also block these devices from accessing the Orbi network.
To enable and manage the network access control list for the entire Orbi network:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control. The Access Control page displays.
5. Select the Turn on Access Control check box. You must select this check box before you can specify an access rule and use the
ALLOW and BLOCK buttons. When the Turn on Access Control check box is cleared, all devices are allowed to connect, even if a device is in the list of blocked devices.
Note: If you enabled one or more MAC ACLs (see Enable a MAC ACL for a specific network on page 52), you cannot use the ALLOW and BLOCK buttons. MAC ACLs and the network access control list are mutually exclusive. Use either MAC ACLs or the network access control list.
User Manual57Control Access to the Internet
Page 58
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
6. Click the Apply button. Your settings are saved.
7.
Select an access rule for new devices:
Allow all new devices to connect: With this setting, if you add a new device, it
can access the Orbi network. You do not need to enter its MAC address on this page. We recommend that you leave this radio button selected.
Block all new devices from connecting: With this setting, if you add a new
device, before it can access the Orbi network, you must enter its MAC address for an Ethernet connection and its MAC address for a WiFi connection in the allowed list. For more information, see .
The access rule does not affect previously blocked or allowed devices. It applies only to devices joining the Orbi network in the future after you apply these settings.
8.
To manage access for devices that are connected or were connected to the Orbi network, do the following:
If you blocked all new devices from connecting, to allow the device that you are currently using to continue to access the Orbi network, select the check box next to your computer or device in the table, and click the ALLOW button.
To either continue to allow or to block other computers and devices that are
connected or were connected, select the check box next to the device in the table, and click either the ALLOW button or the BLOCK button.
9. Click the Apply button. Your settings are saved.

Manage the allowed devices on the network access control list

If you set up an access list that blocks all new devices from accessing the Orbi network, you must specify which devices are allowed to access the Orbi network.
You can add a device, remove a device, or edit the information for a device.
To manage devices that are allowed to access to Orbi network:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
User Manual58Control Access to the Internet
Page 59
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control. The Access Control page displays.
5.
Click the View list of allowed devices not currently connected to the network link.
A table displays the detected device name, MAC address, and connection type of the devices that are not connected but allowed to access the Orbi network.
6.
To add a device to the allowed list, do the following: a. Click the ADD button.
The Add Allowed Device page displays.
b.
Enter the MAC address and device name for the device that you want to allow.
c. On the Add Allowed Device page, click the Apply button.
The device is added to the allowed list on the Access Control page.
7.
To remove a device from the allowed list, do the following: a.
Select the check box for the device.
b. Click the REMOVE FROM THE LIST button.
The device is removed from the allowed list.
8.
To change the information for a device on the allowed list, do the following: a.
Select the check box for the device.
b. Click the EDIT button.
The Edit Allowed Device page displays.
c. Change the access rule, MAC address, or device name.
d. On the Edit Allowed Device page, click the Apply button.
The device is changed on the allowed list on the Access Control page.
9. Click the Apply button. Your settings are saved.
User Manual59Control Access to the Internet
Page 60
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Manage the blocked devices on the network access control list

If you set up an access list that allows all new devices to access the Orbi network but you want to block some devices from accessing the Orbi network, you must specify the devices that you want to block.
You can add a device, remove a device, or change the information for a device.
To manage devices that are blocked from accessing the Orbi network:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control. The Access Control page displays.
5.
Click the View list of blocked devices not currently connected to the network link.
The Access Control page displays.
A table displays the detected device name, MAC address, and connection type of the devices that are not connected and are blocked from accessing the Orbi network.
6.
To add a device to the blocked list, do the following: a. Click the ADD button.
The Add Blocked Device page displays.
b.
Enter the MAC address and device name for the device that you want to block.
c. On the Add Blocked Device page, click the Apply button.
The device is added to the blocked list on the Access Control page.
User Manual60Control Access to the Internet
Page 61
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
7.
To remove a device from the blocked list, do the following: a.
Select the check box for the device.
b. Click the REMOVE FROM THE LIST button.
The device is removed from the blocked list.
8.
To change the information for a device on the blocked list, do the following: a.
Select the check box for the device.
b. Click the EDIT button.
The Edit Blocked Device page displays.
c. Change the access rule, MAC address, or device name.
d. On the Edit Blocked Device page, click the Apply button.
The device is changed on the blocked list on the Access Control page.
9. Click the Apply button. Your settings are saved.

Use keywords to block Internet sites

You can use keywords to block certain Internet sites from your network. You can use blocking all the time or based on a schedule.
To block Internet sites:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Block Sites. The Block Sites page displays.
User Manual61Control Access to the Internet
Page 62
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
5. Select a keyword blocking option:
Per Schedule: To block the keywords based on a schedule, select the Per
Schedule radio button. For information about how to set the schedule, see Schedule when to block Internet sites and services on page 65.
Always: To block the keywords all the time, select the Always radio button..
6.
In the Type keyword or domain name here field, enter a keyword or domain that you want to block.
For example:
Specify XXX to block http://www.badstuff.com/xxx.html.
Specify .com if you want to allow only sites with domain suffixes such as .edu or
.gov.
Enter a period (.) to block all Internet browsing access.
7. Click the Add Keyword button. The keyword is added to the keyword list. The keyword list supports up to 32 entries.
8. Click the Apply button. Keyword blocking takes effect.

Delete keywords that are used to block Internet sites

To delete keywords that are used to block Internet sites:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Block Sites.
User Manual62Control Access to the Internet
Page 63
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The Block Sites page displays.
5.
Do one of the following:
To delete a single word, select it and click the Delete Keyword button.
The keyword is removed from the list.
To delete all keywords on the list, click the Clear List button.
All keywords are removed from the list.
6. Click the Apply button. Your settings are saved.

Prevent blocking on a trusted computer

You can exempt one trusted computer from blocking. The computer that you exempt must be assigned a fixed IP address. You can use the reserved IP address feature to specify the IP address. See Manage reserved LAN IP addresses on page 118.
To specify a trusted computer:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Block Sites. The Block Sites page displays.
5. Scroll down and select the Allow trusted IP address to visit blocked sites check box.
6.
In the Trusted IP Address field, enter the IP address of the trusted computer.
7. Click the Apply button. Your settings are saved.
User Manual63Control Access to the Internet
Page 64
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Block services from the Internet

You can block Internet services on your network based on the type of service. You can block the services all the time or based on a schedule.
To block services:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Block Services. The Block Services page displays.
5.
Specify when to block the services:
Per Schedule: To block the services based on a schedule, select the Per Schedule
radio button. For information about how to set the schedule, see Schedule when to block Internet sites and services on page 65.
Always: To block the services all the time, select the Always radio button.
6. Click the Add button. The Block Services Setup page displays.
7. To add a service that is in the Service Type list, select the application or service. The settings for this service automatically display in the fields.
User Manual64Control Access to the Internet
Page 65
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
8.
To add a service or application that is not the list, select User Defined. a.
If you know that the application uses either TCP or UDP, select the appropriate protocol.
Otherwise, select TCP/UDP (both).
b. Enter the starting port and ending port numbers.
If the service uses a single port number, enter that number in both fields.
To find out which port numbers the service or application uses, you can contact
• the publisher of the application, ask user groups or newsgroups, or search on the Internet.
9.
To specify how to filter the services, select one of the following radio buttons:
Only This IP Address: Block services for a single computer.
IP Address Range: Block services for a range of computers with consecutive IP
• addresses on your network.
All lP Addresses: Block services for all computers on your network.
10. Click the Add button.
Your settings are saved. The Block Services page displays again and the added service displays in the table.
11. Click the Apply button.
Your settings are saved.

Schedule when to block Internet sites and services

When you schedule blocking, the same schedule is used to block sites and to block services. For information about how to specify what you want the router to block, see Use keywords to block Internet sites on page 61 and Block services from the Internet on page 64.
To schedule blocking:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com.
A login window displays.
User Manual65Control Access to the Internet
Page 66
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password.
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Schedule.
The Schedule page displays.
5.
Specify when to block keywords and services:
Days to Block: Select the check box for each day that you want to block the
• keywords or select the Every Day check box, which automatically selects the
check boxes for all days.
Time of Day to Block: Select a start and end time in 24-hour format, or select
• All Day for 24-hour blocking.
6. Click the Apply button.
Your settings are saved.

Set up security event email notifications

The router can email you its logs of router activity. The log records router activity and security events such as attempts to access blocked sites or services.
To set up email notifications:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com.
A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password.
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > E-mail.
User Manual66Control Access to the Internet
Page 67
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The E-mail page displays.
5.
Select the Turn Email Notification On check box.
6.
In the Primary E-mail Address field, enter the email address to which logs and alerts are sent.
This email address is also used for the From address. If this field is blank, log and alert messages are not sent.
7.
In the Your Outgoing Mail Server field, enter the name of your ISP outgoing (SMTP) mail server (such as mail.myISP.com).
You might be able to find this information in the configuration window of your email program. If you leave this field blank, log and alert messages are not sent.
8.
In the Outgoing Mail Server Port Number field, enter your mail server’s port number.
You might be able to find this information in the configuration window of your email program.
9.
If your outgoing email server requires authentication, select the My Mail Server requires authentication check box and do the following:
In the User Name field, type the user name for the outgoing email server.
In the Password field, type the password for the outgoing email server.
10. To send alerts immediately, select the Send Alerts Immediately check box.
Email alerts are sent immediately when someone attempts to visit a blocked site.
11.
To send logs based on a schedule, specify these settings:
From Send logs according to this schedule menu, select the schedule type.
From the Day menu, select the day.
From the Time menu, select the time, and select the a.m. or p.m. radio button.
12. Click the Apply button.
Your settings are saved.
Logs are sent automatically. If the log fills before the specified time, it is sent. After the log is sent, it is cleared from the router memory. If the router cannot email the log and the log buffer fills, the router overwrites the log.
User Manual67Control Access to the Internet
Page 68
5

Manage the WiFi Settings

This chapter includes the following sections:
• Change the admin WiFi network settings
• Manage the employee WiFi network settings
• Manage the IoT WiFi network settings
• Set up a guest WiFi network and captive portal
• Manage the download bandwidth per SSID
• Manage the advanced WiFi settings
68
Page 69
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Change the admin WiFi network settings

You can set up four WiFi networks for your Orbi Pro WiFi 6 network: one for administrative access, one for employee access, one for Internet of things (IoT) devices, and one for guest access.
Your Orbi Pro WiFi 6 router and satellite come preset with the same admin WiFi network name (SSID) and WiFi network key (password). You can find the admin SSID and password on the router label and on the satellite label. The preset WiFi settings on the labels are for your admin WiFi network. When you log in to the router and change the WiFi settings, the router automatically sends the new settings to the satellite.
Note: The router web interface calls the admin WiFi network the Wireless 1 network.

Change the admin WiFi network name, channel, or VLAN

If you change your WiFi settings, make a note of the new settings and store it in a safe place where you can easily find it.
If your computer or mobile device is using a WiFi connection when you change the network name (SSID) or other WiFi security settings, you are disconnected when you click the Apply button. To avoid this problem, use a computer with a wired connection to access the router.
Note: The router web interface calls the admin WiFi network the Wireless 1 network.
To change the admin WiFi settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com.
A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password.
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless.
The Wireless settings for the Wireless 1 network display on the page.
User Manual69Manage the WiFi Settings
Page 70
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
5. To change the admin network name (SSID), type a new name in the Name (SSID)
field. The name can be up to 32 characters long and it is case-sensitive. If you did not
change the SSID during the setup process, the default SSID is shown. (The default SSID is randomly generated and is on the router label.) If you change the name, make sure to write down the new name and keep it in a safe place.
6.
To change a 2.4 GHz or 5 GHz WiFi channel, select a channel from the Channel menu.
The channels that are available depend on your country or region. Do not change the channel unless you experience interference (shown by lost connections or slow data transfers). If this happens, experiment with different channels to see which channel works best for your.
When you use multiple WiFi routers, access points, WiFi gateways, satellites, and extenders in your network, you experience less interference if adjacent devices use different channels. For example, for the 2.4 GHz radio band, we recommend a channel spacing with a minimum of four channels between adjacent devices (for example, use channels 1 and 5, or 6 and 10).
7.
To change the VLAN profile, select the VLAN Profile check box, and select a VLAN profile from the menu.
By default, the VLAN profile is set to Default(1) for the Wireless 1 network.
8. Click the Apply button.
Your settings are saved. The router sends the new settings to the satellite.
If you are using a WiFi connection and you changed the SSID, you are disconnected from the network.
9. Make sure that you can connect to the WiFi network with its new settings. If you cannot connect using WiFi, check the following:
Is your WiFi-enabled computer or mobile device connected to another WiFi
network in your area? Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
Is your computer or WiFi device trying to connect to your network with its old
settings (before you changed the settings)? If so, update the WiFi network selection in your computer or WiFi device to match the current settings for your network.
User Manual70Manage the WiFi Settings
Page 71
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Change the admin WiFi password or security level

We recommend that you do not disable security for your WiFi network.
Note: The router web interface calls the admin WiFi network the Wireless 1 network.
To change the admin WiFi password or WPA settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless. The Wireless settings for the Wireless 1 network display on the page.
5. Under Security Options, select a WiFi security option:
WPA2-PSK [AES]: The WPA2 option uses AES encryption. This type of security
allows only WiFi devices that support WPA2 or WPA3 to join the network. When you select this option, the Password (Network Key) field displays. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 63 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA-PSK [TKIP] + WPA2-PSK [AES]: If your network includes legacy devices
(devices that support only WPA), select this radio button. This option, which uses AES and TKIP encryption, allows WiFi devices that support WPA, WPA2, or WPA3 to join the network.
User Manual71Manage the WiFi Settings
Page 72
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
When you select this option, the Password (Network Key) field displays. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 63 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA2 Enterprise: If your network is connected to a RADIUS server that can
provide authentication and your network includes WPA2 and WPA3 devices, select this radio button. WPA2 Enterprise can provide a high level of security and allows WPA2 and WPA3 devices to connect to the network. (WPA devices cannot connect.) Before a WiFi client can connect to the network, the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication. When you select this option, additional fields display so that you can specify the RADIUS server. Do the following:
a.
In the IP address field, enter the IP address of the RADIUS server to which the router must connect.
b.
In the Port field, enter the port number that the router must use to communicate with the RADIUS server. By default, the port number is 1812.
c.
In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
WPA3-Personal [SAE]: This is the most secure personal authentication option.
WPA3 uses SAE encryption and allows only WiFi devices that support WPA3 to connect to the network. WiFi devices that support WPA or WPA2 cannot connect to the network. When you select this option, additional fields display so that you can add a key. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 127 characters.
b.
Write down the new password and keep it in a secure place for future reference.
User Manual72Manage the WiFi Settings
Page 73
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
WPA3 Enterprise: If your network is connected to a RADIUS server that can
provide authentication and your network includes WPA3 devices only, select this radio button. WPA3 Enterprise can provide the highest level of security but WPA and WPA2 devices cannot connect. Before a WiFi client can connect to the network, the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication. When you select this option, additional fields display so that you can specify the RADIUS server. Do the following:
a.
In the IP address field, enter the IP address of the RADIUS server to which the router must connect.
b.
In the Port field, enter the port number that the router must use to communicate with the RADIUS server. By default, the port number is 1812.
c.
In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
6. Click the Apply button. Your settings are saved.

Manage the employee WiFi network settings

You can set up four WiFi networks for your Orbi Pro WiFi 6 network: one for administrative access, one for employee access, one for Internet of things (IoT) devices, and one for guest access.
When employee devices connect to the employee WiFi network, they cannot see other devices that are connected to the network and cannot access the local area network (LAN).
Note: The router web interface calls the employee WiFi network the Wireless 2 network.

Enable the employee WiFi network and manage the settings

Before you can set up the employee WiFi network, you must enable it. You must be connected to the admin network to enable the employee WiFi network and change the settings.
User Manual73Manage the WiFi Settings
Page 74
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
When employee devices connect to the employee WiFi network, they cannot see other devices that are connected to the network and cannot access the local area network (LAN).
Note: The router web interface calls the employee WiFi network the Wireless 2 network.
To enable the employee WiFi network and manage the WiFi settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Wireless 2. The WiFi settings for the Wireless 2 network display on the page.
5. To enable the Wireless 2 network, select the Enable Wireless 2 network check box. By default, the Wireless 2 network is disabled.
6. To broadcast the Wireless 2 network SSID, select the Enable SSID Broadcast check box.
By default, the broadcast is enabled.
7.
To separate the single SSID for the Wireless 2 network in an SSID for the 2.4 GHz band and another SSID for the 5 GHz band, select the Enable SSID separation for
2.4G/5GHz check box. For each band, a Wireless 2 Network Name (SSID) field displays. The SSID for the 5
GHz band is appended with _5G, but you can also type another name.
By default, the Wireless 2 network provides a single SSID for both bands.
8. To change the Wireless 2 network name (SSID), type a new name in the Wireless 2 Network Name (SSID) field.
The name can be up to 32 characters long and it is case-sensitive. The default SSID is derived from the randomly generated SSID that is on the router’s label. If you change the name, make sure to write down the new name and keep it in a safe place.
User Manual74Manage the WiFi Settings
Page 75
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
9.
To change the VLAN profile, select the VLAN Profile check box, and select a VLAN profile from the menu.
By default, the VLAN profile is set to Employee(20) for the Wireless 2 network.
10. Click the Apply button. Your settings are saved. The router sends the new settings to the satellite.
11. Make sure that a user can connect to the WiFi network with its new settings. If you cannot connect using WiFi, check the following:
Is your WiFi-enabled computer or mobile device connected to another WiFi
network in your area? Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
Is your computer or mobile device trying to connect to your network with its old
settings (before you changed the settings)? If so, update the WiFi network selection in your computer or WiFi device to match the current settings for your network.

Change the employee WiFi password or security level

You must be connected to the admin network to change the employee password and security level.
Note: The router web interface calls the employee WiFi network the Wireless 2 network.
To change the employee WiFi network password or WPA settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Wireless 2. The WiFi settings for the wireless 2 network display on the page.
User Manual75Manage the WiFi Settings
Page 76
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
5. Under Security Options, select a WiFi security option:
WPA2-PSK [AES]: The WPA2 option uses AES encryption. This type of security
allows only WiFi devices that support WPA2 or WPA3 to join the network. When you select this option, the Password (Network Key) field displays. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 63 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA-PSK [TKIP] + WPA2-PSK [AES]: If your network includes legacy devices
(devices that support only WPA), select this radio button. This option, which uses AES and TKIP encryption, allows WiFi devices that support WPA, WPA2, or WPA3 to join the network. When you select this option, the Password (Network Key) field displays. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 63 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA2 Enterprise: If your network is connected to a RADIUS server that can
provide authentication and your network includes WPA2 and WPA3 devices, select this radio button. WPA2 Enterprise can provide a high level of security and allows WPA2 and WPA3 devices to connect to the network. (WPA devices cannot connect.) Before a WiFi client can connect to the network, the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication. When you select this option, additional fields display so that you can specify the RADIUS server. Do the following:
a.
In the IP address field, enter the IP address of the RADIUS server to which the router must connect.
b.
In the Port field, enter the port number that the router must use to communicate with the RADIUS server. By default, the port number is 1812.
c.
In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server.
User Manual76Manage the WiFi Settings
Page 77
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
WPA3-Personal [SAE]: This is the most secure personal authentication option.
WPA3 uses SAE encryption and allows only WiFi devices that support WPA3 to connect to the network. WiFi devices that support WPA or WPA2 cannot connect to the network. When you select this option, additional fields display so that you can add a key. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 127 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA3 Enterprise: If your network is connected to a RADIUS server that can
provide authentication and your network includes WPA3 devices only, select this radio button. WPA3 Enterprise can provide the highest level of security but WPA and WPA2 devices cannot connect. Before a WiFi client can connect to the network, the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication. When you select this option, additional fields display so that you can specify the RADIUS server. Do the following:
a.
In the IP address field, enter the IP address of the RADIUS server to which the router must connect.
b.
In the Port field, enter the port number that the router must use to communicate with the RADIUS server. By default, the port number is 1812.
c.
In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
6. Click the Apply button. Your settings are saved.
User Manual77Manage the WiFi Settings
Page 78
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Manage the IoT WiFi network settings

You can set up four WiFi networks for your Orbi Pro WiFi 6 network: one for administrative access, one for employee access, one for Internet of things (IoT) devices, and one for guest access.
When IoT devices connect to the IoT WiFi network, they cannot see other devices that are connected to the network and cannot access the local area network (LAN).
Note: The router web interface calls the IoT WiFi network the Wireless 3 network.

Enable the IoT WiFi network and manage the settings

Before you can set up the IoT WiFi network, you must enable it. You must be connected to the admin network to enable the IoT WiFi network and change the settings.
When IoT devices connect to the IoT WiFi network, they cannot see other devices that are connected to the network and cannot access the local area network (LAN).
Note: The router web interface calls the IoT WiFi network the Wireless 3 network.
To enable the IoT WiFi network and manage the WiFi settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Wireless 3. The WiFi settings for the Wireless 3 network display on the page.
5. To enable the Wireless 3 network, select the Enable Wireless 3 network check box. By default, the Wireless 3 network is disabled.
6. To broadcast the Wireless 3 network SSID, select the Enable SSID Broadcast check box.
User Manual78Manage the WiFi Settings
Page 79
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
By default, the broadcast is enabled.
7.
To separate the single SSID for the Wireless 3 network in an SSID for the 2.4 GHz band and another SSID for the 5 GHz band, select the Enable SSID separation for
2.4G/5GHz check box. For each band, a Wireless 3 Network Name (SSID) field displays. The SSID for the 5
GHz band is appended with _5G, but you can also type another name.
By default, the Wireless 3 network provides a single SSID for both bands.
8. To change the Wireless 3 network name (SSID), type a new name in the Wireless 3 Network Name (SSID) field.
The name can be up to 32 characters long and it is case-sensitive. The default SSID is derived from the randomly generated SSID that is on the router’s label . If you change the name, make sure to write down the new name and keep it in a safe place.
9.
To change the VLAN profile, select the VLAN Profile check box, and select a VLAN profile from the menu.
By default, the VLAN profile is set to IoT(30) for the Wireless 3 network.
10. Click the Apply button. Your settings are saved. The router sends the new settings to the satellite.
11. Make sure that an IoT device can connect to the WiFi network with its new settings. If you cannot connect using WiFi, check the following:
Is your WiFi-enabled computer or mobile device connected to another WiFi
network in your area? Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
Is your computer or mobile device trying to connect to your network with its old
settings (before you changed the settings)? If so, update the WiFi network selection in your computer or WiFi device to match the current settings for your network.

Change the IoT WiFi password or security level

You must be connected to the admin network to change the IoT password and security level.
Note: The router web interface calls the IoT WiFi network the Wireless 3 network.
User Manual79Manage the WiFi Settings
Page 80
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
To change the IoT WiFi network password or WPA settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Wireless 3. The WiFi settings for the wireless 3 network display on the page.
5. Under Security Options, select a WiFi security option:
WPA2-PSK [AES]: The WPA2 option uses AES encryption. This type of security
allows only WiFi devices that support WPA2 or WPA3 to join the network. When you select this option, the Password (Network Key) field displays. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 63 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA-PSK [TKIP] + WPA2-PSK [AES]: If your network includes legacy devices
(devices that support only WPA), select this radio button. This option, which uses AES and TKIP encryption, allows WiFi devices that support WPA, WPA2, or WPA3 to join the network. When you select this option, the Password (Network Key) field displays. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 63 characters.
b.
Write down the new password and keep it in a secure place for future reference.
User Manual80Manage the WiFi Settings
Page 81
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
WPA2 Enterprise: If your network is connected to a RADIUS server that can
provide authentication and your network includes WPA2 and WPA3 devices, select this radio button. WPA2 Enterprise can provide a high level of security and allows WPA2 and WPA3 devices to connect to the network. (WPA devices cannot connect.) Before a WiFi client can connect to the network, the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication. When you select this option, additional fields display so that you can specify the RADIUS server. Do the following:
a.
In the IP address field, enter the IP address of the RADIUS server to which the router must connect.
b.
In the Port field, enter the port number that the router must use to communicate with the RADIUS server. By default, the port number is 1812.
c.
In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
WPA3-Personal [SAE]: This is the most secure personal authentication option.
WPA3 uses SAE encryption and allows only WiFi devices that support WPA3 to connect to the network. WiFi devices that support WPA or WPA2 cannot connect to the network. When you select this option, additional fields display so that you can add a key. Do the following:
a.
In the Password (Network Key) field, enter the network key (password) that you want to use. It is a text string from 8 to 127 characters.
b.
Write down the new password and keep it in a secure place for future reference.
WPA3 Enterprise: If your network is connected to a RADIUS server that can
provide authentication and your network includes WPA3 devices only, select this radio button. WPA3 Enterprise can provide the highest level of security but WPA and WPA2 devices cannot connect. Before a WiFi client can connect to the network, the WiFi client must be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication.
User Manual81Manage the WiFi Settings
Page 82
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
When you select this option, additional fields display so that you can specify the RADIUS server. Do the following:
a.
In the IP address field, enter the IP address of the RADIUS server to which the router must connect.
b.
In the Port field, enter the port number that the router must use to communicate with the RADIUS server. By default, the port number is 1812.
c.
In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
6. Click the Apply button. Your settings are saved.

Set up a guest WiFi network and captive portal

You can set up a guest WiFi network (guest portal), which allows visitors to access the Internet using a dedicated SSID. You can also set up a captive portal for the guest portal. With a captive portal, when visitors connect to the guest portal and open a browser to access the Internet, they are redirected to a splash page where they must agree to the Terms of Conditions before they can access Internet.
By default, visitors do not need to enter a password to connect to the guest portal and data is not encrypted. Open access without security might be a good option for a coffee shop. For situations in which authentication is required, you can use Facebook Wi-Fi or set a password.
When using this network, visitors cannot see other devices that are connected to the guest portal (or any other WiFi network on the router) and they cannot access the local area network (LAN).
User Manual82Manage the WiFi Settings
Page 83
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Set up a guest WiFi network with open access or password authentication

A guest WiFi network is also referred to as a guest portal.
To set up a guest network with open access or password authentication:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Guest Portal. The WiFi settings for guest access display on the page.
5. To enable the guest portal, select the Enable Guest Portal Network check box. By default, the guest portal is disabled.
6. Leave the Enable SSID Broadcast check box selected. Allowing the router to broadcast its WiFi network name (SSID) makes it easier to find
your network and connect to it. If you clear this check box, that creates a hidden network.
7. To change the network name, type a new name in the Guest Portal Network Name (SSID) field.
The name can be up to 32 characters long and it is case-sensitive. The default SSID is the randomly generated SSID that is on the router’s label, but appended with
-GUEST. If you change the name, make sure to write down the new name and keep it in a safe place.
8.
To change the VLAN profile, select the VLAN Profile check box, and select a VLAN profile from the menu.
By default, the VLAN profile is set to Guest(40) for the guest WiFi network.
User Manual83Manage the WiFi Settings
Page 84
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
9.
Scroll down to the Authentication Options section and either specify an open network or set an authentication password by doing one of the following:
None: To specify an open network without authentication, select the None radio
button.
Password Authentication: To set an authentication password, select the
Password Authentication radio button and specify a password in the field. The password must be a minimum of 8 characters and can be a maximum of 64 characters.
Note: In order for visitors to access the Internet, they must enter this password in the guest portal.
10.
To set an expiration time for how long visitors can access the Internet, select a time from the Expiration menu. After visitors are authenticated, they can access the Internet for that period of time.
If you select Never from the menu, visitor access time is not restricted to any period.
11. Click the Apply button. Your settings are saved. The router sends the new settings to the satellite.

Set up Facebook Wi-Fi

You can set up Facebook Wi-Fi on your Orbi WiFi network to offer your customers free WiFi access if they check in to your existing Facebook business page.
ATTENTION: If a user attempts to access a website over HTTP (by default, over port
80), the user is directed to the Facebook Login page. If a user attempts to accesses a
secure website over HTTPS (by default, over port 443), a Security Waning window opens in their web browser. The user must click the Allow button on the Security Warning window to see the see the Facebook Login page.
To set up Facebook Wi-Fi:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password.
User Manual84Manage the WiFi Settings
Page 85
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The user name is admin. The password is the one that you specified the first time that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Guest Portal. The WiFi settings for guest access display on the page.
5. Select the Enable Guest Portal Network check box.
6. Select the Enable SSID Broadcast check box. By default, this check box is selected. Allowing the router to broadcast its WiFi
network name (SSID) makes it easier to find your network and connect to it. If you clear this check box, that creates a hidden network.
7. To change the network name, type a new name in the Guest Portal Network Name (SSID) field.
The name can be up to 32 characters long and it is case-sensitive. If you change the name, make sure to write down the new name and keep it in a safe place.
8. In the Authentication Mode section, select the Facebook Wi-Fi radio button. The page adjust and displays the Add Page button.
9. Click the Add Page button. The Facebook Login page displays.
10. Log in to your Facebook business account. The Facebook Wi-Fi Configuration page displays.
11.
On the Facebook Wi-Fi Configuration page, do the following: a. From the Select a Page menu, select a Facebook business page.
b. Select the bypass mode option:
Skip check-in link. To allow customers to skip check-in, select the Skip
check-in link radio button. If you enable this option, users can either check in to the selected Facebook business page or skip the check-in.
Require Wi-Fi code. To require users to enter a WiFi code before they can
gain WiFi access, select the Require Wi-Fi code radio button and type a WiFi code in the field that displays. If you enable this option, users can either check in to the selected Facebook business page or skip the check-in by using the WiFi code.
c.
From the Session Length menu, select the period after which users are automatically logged out.
User Manual85Manage the WiFi Settings
Page 86
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
d.
To add terms of service to the Facebook check-in page, select the Terms of Service check box and type or copy the terms of service.
e. Click the Save Settings button.
The Facebook Wi-Fi settings are saved.
The name of the selected Facebook business page displays in the Facebook Page field in the router web interface along with the Change Page button, which lets you replace the selected Facebook business page with another one.
f. Return to the Guest Portal Settings page in the router web interface.
12.
On the page with the WiFi settings for guest access, click the Apply button. Your settings are saved.

Set up a guest network with a captive portal

A captive portal is an entry to a guest network that requires guests to view a splash page and agree to terms and conditions before using the network. When using captive portal guest networks visitors cannot see other devices that are connected and they cannot access the local area network (LAN).
To set up a guest network with a captive portal:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless > Guest Portal. The WiFi settings for guest access display on the page.
5. Select the Enable Guest Portal Network check box.
6. Leave the Enable SSID Broadcast check box selected.
User Manual86Manage the WiFi Settings
Page 87
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
Allowing the router to broadcast its WiFi network name (SSID) makes it easier to find your network and connect to it. If you clear this check box, that creates a hidden network.
7. To change the network name, type a new name in the Guest Portal Network Name (SSID) field.
The name can be up to 32 characters long and it is case-sensitive. The default SSID is the randomly generated SSID that is on the router’s label, but appended with
-GUEST. If you change the name, make sure to write down the new name and keep it in a safe place.
8.
To change the VLAN profile, select the VLAN Profile check box, and select a VLAN profile from the menu.
By default, the VLAN profile is set to Guest(40) for the guest WiFi network.
9. Scroll down to the Authentication Options section and set a guest portal password by selecting the Password Authentication radio button and entering a password in the field.
The password must be a minimum of 8 characters and can be a maximum of 64 characters.
Note: In order for visitors to access the Internet, they must enter this password in the guest portal and click the AGREE button to accept terms and conditions.
10.
To set an expiration time for how long users can access the Internet, select a time from the Expiration menu.
After visitors are authenticated, they can access the Internet for that period of time. After the period expires, visitors are redirected to the Terms and Conditions page.
11.
In the Portal Customization section, configure the following settings:
To include a custom Terms and Conditions page, do the following: .
a. On the Terms and Conditions subsection, click the Browse button.
b.
Locate and select the terms and conditions file on your computer. The file must be a .txt file, encoded in UTF8 format, and can be up to 1 MB.
To include a custom logo file, do the following:
a. In the Logo subsection, click the Browse button.
b.
Locate and select the logo file on your computer. The file must be a .jpg, .jpeg, .gif, or .png file. The file size can be up to 10 MB and the dimensions must be 200 x 200 pixels.
User Manual87Manage the WiFi Settings
Page 88
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
12. To preview the guest portal, click the Preview button. To preview the Terms and Conditions page, either the terms and conditions and
logo files must both be set to Default or you must upload new files for both. You cannot preview the Terms and Conditions page if one file is set to Default.
13.
To set up a redirect URL, select the URL radio button and enter the URL for the page to which you want to redirect users to in the field.
After visitors agree to the terms and conditions, they are redirected to this page.
14. Click the Apply button. Your settings are saved.

Manage the download bandwidth per SSID

You can set up four WiFi networks for your Orbi Pro WiFi 6 network: one for administrative access, one for employee access, one for Internet of things (IoT) devices, and one for guest access. You can manage the download bandwidth per WiFi network (SSID) by assigning a percentage of the total bandwidth (100 percent) to each SSID. The available download bandwidth on an SSID determines the network priority for devices connected to the SSID.
If the download bandwidth usage on an SSID exceeds the assigned bandwidth for the SSID, the router limits the bandwidth on the SSID, which might affect the download speed for devices connected to the SSID.
In setting the download bandwidth ratio for an SSID, consider the number and type of devices that connect to the SSID and the typical download bandwidth usage for those devices. For example, more devices might connect to the IoT WiFi network than to the employee network, but the typical bandwidth usage for IoT devices might be lower than for employee devices.
Note: The router does not control the uplink bandwidth, that is, the bandwidth from devices to the router.
To set the download bandwidth ratios for the SSIDs:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
User Manual88Manage the WiFi Settings
Page 89
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select Wireless. The Wireless Settings page displays the admin WiFi settings.
Note: Even though this is the page for the admin WiFi settings, the bandwidth ratios that you specify on this page apply to the admin WiFi network, employee WiFi network, IoT WiFi network, and guest WiFi network. (All bandwidth ratios together must add up to 100 percent.) Similarly, if you specify bandwidth ratios on the employee WiFi settings page, IoT WiFi settings page, or the guest WiFi network page, they also apply to all other WiFi networks.
5. Select the Enable Bandwidth per SSID check box. In the Bandwidth per SSID graphic, the colored icons are enabled.
6.
Specify the bandwidth ratios by moving the icons on the bandwidth line. The icons represent the following WiFi networks:
Blue: Admin WiFi network (Wireless 1).
Green: Employee WiFi network (Wireless 2).
Purple: IoT WiFi network (Wireless 3).
Gray: Guest WiFi network.
As you move an icon, the bandwidth ratio for the WiFi network changes and the percentage displays in the icon.
All bandwidth ratios together add up to 100 percent of the available download bandwidth. If you change one ratio, the ratio for another WiFi network might also change.
7. Click the Apply button. Your settings are saved. The router sends the new settings to the satellite.

Manage the advanced WiFi settings

Depending on the advanced WiFi setting, the setting applies either to all WiFi networks on a radio or to all WiFi networks on the router. That is, these settings do not apply to one individual WiFi network only.
User Manual89Manage the WiFi Settings
Page 90
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

Change the region of operation

You can change the region of operation, which is region in which you operate the router. For some countries or regions, such as North America, you cannot change the region because it is preset.
Note: Make sure the country is set to the location where the device is operating. You are responsible for complying within the local, regional, and national regulations set for channels, power levels, and frequency ranges.
WARNING: It might not be legal to operate the router in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government agency.
To change the region of operation:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. From the Region menu, select the region in which the router must operate.
6. Click the Apply button. Your settings are saved. The router restarts with the settings for the new region.

Enable or disable SSID broadcast for a radio

By default, the router broadcasts its WiFi network names (SSIDs) so that WiFi clients can detect them in their scanned network lists. Turning off the SSID broadcast provides additional WiFi security, but users must know an SSID to be able to join its WiFi network.
For each 2.4 GHz and 5 GHz radio individually, you can enable or disable SSID broadcast, which then applies too all WiFi networks that use the radio.
User Manual90Manage the WiFi Settings
Page 91
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
To enable or disable SSID broadcast:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. For a radio, select or clear the Enable SSID Broadcast check box. When this check box is selected (which it is by default), the router broadcasts its
SSIDs on the radio so that they display when you scan for local WiFi networks on your computer or WiFi device.
6. Click the Apply button. Your settings are saved.

Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio

20/40 coexistence allows a 20 MHz and 40 MHz channel width to be supported simultaneously. By default, 20/40 MHz coexistence is enabled on the 2.4 GHz radio to prevent interference between WiFi networks in your environment at the expense of the WiFi speed. If no other WiFi networks are present in your environment, you can disable 20/40 MHz coexistence to increase the WiFi speed on the 2.4 GHz radio to the maximum supported speed for the WiFi mode.
20/40 MHz coexistence does not apply to the 5 GHz radio.
To enable or disable 20/40 MHz coexistence for the 2.4 GHz radio:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
User Manual91Manage the WiFi Settings
Page 92
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5.
Select or clear the Enable 20/40 MHz Coexistence check box. Selecting this check box enables 20/40 MHz coexistence and clearing this check
box enables 20/40 MHz coexistence. By default, 20/40 MHz coexistence is enabled and the check box is selected.
6. Click the Apply button. Your settings are saved. The 2.4 GHz radio restarts and WiFi clients might need to
reconnect.

Enable or disable Wi-Fi multimedia for a radio

Wi-Fi multimedia (WMM) prioritizes WiFi voice and video traffic over the WiFi link. By default, WMM is enabled for all radios on the router.
WMM prioritizes WiFi data packets from different applications based on four access categories: voice, video, best effort, and background. For an application to receive the benefits of WMM, WMM must be enabled for both the application and the client running that application. Legacy applications that do not support WMM and applications that do not require WMM are assigned to the best effort category, which receives a lower priority than voice and video.
For each 2.4 GHz and 5 GHz radio individually, you can enable or disable WMM, which then applies too all WiFi networks that use the radio.
Note: We recommend that you do not disable the WMM settings. If you disable the WMM settings for a radio, the maximum link rate that your router can reach on the radio is 54 Mbps.
To enable or disable WMM:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com.
User Manual92Manage the WiFi Settings
Page 93
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. For a radio, select or clear the Enable WMM (Wi-Fi multimedia) settings check box.
When this check box is selected (which it is by default), WMM is enabled.
6. Click the Apply button. Your settings are saved.

Change the CTS/RTS threshold and preamble mode for a radio

For most WiFi networks, the clear to send/request to send (CTS/RTS) threshold and preamble mode work fine and we recommend that you do not change the settings. (In general, these settings are intended for WiFi testing.)
CAUTION: Do not change these settings unless directed by NETGEAR support or
unless you are sure what the consequences are. Incorrect settings might disable the WiFi function of a radio unexpectedly.
To change the CTS/RTS threshold and preamble mode for a radio:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
User Manual93Manage the WiFi Settings
Page 94
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5.
In the CTS/RTS Threshold (1-2347) field for a radio, enter a value from 1 to 2437. The default value is 2347.
CAUTION: Incorrect settings might disable the WiFi function for the selected radio
unexpectedly.
6.
From the Preamble Mode menu for a radio, select Automatic, Long Preamble, or
Short Preamble.
Long Preamble: A long transmit preamble might provide a more reliable
connection or a slightly longer range.
Long Preamble: A short transmit preamble might give better performance.
Automatic: The automatic option (which is the default option) lets the router
process both long and short preambles.
CAUTION: Incorrect settings might disable the WiFi function for the selected radio
unexpectedly.
7. Click the Apply button. Your settings are saved.

Change the transmission output power for a radio

By default, the transmission output power of the router is set at the maximum. If two or more WiFi routers, access points, WiFi gateways, or combination of these WiFi devices are operating in the same area and on the same channel, interference can occur. In such a situation, you might want to decrease the transmission output power for one or both radios.
Make sure that you comply with the regulatory requirements for total radio frequency (RF) output power in your country.
To change the transmission output power for a radio:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
User Manual94Manage the WiFi Settings
Page 95
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. From the Transmit Power Control menu , select 100%, 50%, or 25%. The default setting is 100%.
6. Click the Apply button. Your settings are saved. The radio restarts and WiFi clients might need to reconnect.

Generate a new backhaul password

The backhaul password is a security key that is used in WiFi communication between the router and the satellite. You can generate a new backhaul password. After you generate a new backhaul password, you must use the Sync button to build a new backhaul connection so that the router and satellite can communicate with each other using WiFi.
To generate a new backhaul password:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. In the Backhaul Password section, click the GENERATE button.
User Manual95Manage the WiFi Settings
Page 96
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
The router generates a new backhaul password.
Generating a new password might cause the Orbi satellite to lose connection from the Orbi router. To reconnect, use the Sync button.

Enable or disable MU-MIMO

Multiuser multiple input, multiple output (MU-MIMO) improves performance when multiple MU-MIMO-capable WiFi clients transfer data at the same time. With MU-MIMO, the router can transmit to multiple clients simultaneously using the same channel. MU-MIMO is used in the downstream direction and requires the WiFi clients to be capable of 802.11ac or 802.11ax.
To enable or disable MU-MIMO:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. Select or clear the Enable MU-MIMO check box. By default, the check box is selected, and MU-MIMO is enabled.
6. Click the Apply button. Your settings are saved. WiFi clients might need to reconnect.

Enable or disable fast roaming

If your Orbi network includes WiFi clients that must be able to roam from Orbi Pro device to another Orbi Pro device, enable fast roaming so that certain client applications can quickly reassociate with the new Orbi Pro device.
User Manual96Manage the WiFi Settings
Page 97
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
To enable or disable fast roaming:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5. Select or clear the Enable Fast Roaming check box. By default, the check box is cleared. and fast roaming is disabled.
6. Click the Apply button. Your settings are saved.

Enable or disable Protected Management Frames

Protected Management Frames (PMF), according to the 802.11w standard, is a security feature that protects unicast and multicast management frames from being intercepted and changed for malicious purposes.
The PMF feature is disabled by default, but you can enable it as a requirement for management frames. However, some legacy devices might not be capable of supporting PMF and might not be able to connect. As a solution, you can enable PMF as optional, which lets the router activate PMF based on whether devices can support PMF.
Make sure that you understand the technology before enabling this feature.
Note: If you enable PMF, some incompatible client devices might disconnect. If you use the combined WPA-PSK [TKIP] + WPA2-PSK [AES] security option and configure PMF as a requirement, PMF might not take effect.
User Manual97Manage the WiFi Settings
Page 98
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30
To enable or disable PMF:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings. The Advanced Wireless Settings page displays.
5.
At the bottom of the page, make one of the following selections from the Protected
Management Frames (802.11w) menu:
Disabled: PMF is disabled. This is the default settings.
Optional: PMF is optional for all WiFi networks.
Required: PMF is required.
Your selection applies to all WiFi networks on the router and satellites.
6. Click the Apply button. Your settings are saved.
User Manual98Manage the WiFi Settings
Page 99
6

Manage the LAN and WAN Settings

This chapter includes the following sections:
• View or change WAN settings
• Manage Dynamic DNS
• Set up a default DMZ server
• Manage the LANs
• Use the router as a DHCP server
• Manage reserved LAN IP addresses
• Manage custom static routes
• Improve network connections with Universal Plug and Play
• Manage the VLANs and port modes
• Manage link aggregation
99
Page 100
Orbi Pro WiFi 6 Mini Router SXR30 and Orbi Pro WiFi 6 Mini Satellite SXS30

View or change WAN settings

You can view or configure wide area network (WAN) settings for the Internet port. You can set up a DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable the router to respond to a ping to its WAN (Internet) port.
To view the WAN settings:
1.
Launch a web browser from a computer or mobile device that is connected to your Orbi network.
2. Enter orbilogin.com. A login window displays.
If your browser does not display a login window but displays a security warning and does not let you proceed, see Resolve a browser security warning on page 27.
3. Enter the admin user name and password. The user name is admin. The password is the one that you specified the first time
that you logged in. The user name and password are case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > WAN Setup The WAN Setup page displays.
5.
View or change the following settings:
Disable Port Scan and DoS Protection. DoS protection protects your LAN against
denial of service attacks such as Syn flood, Smurf Attack, Ping of Death, and many others. Select this check box only in special circumstances.
Default DMZ Server. This feature is sometimes helpful when you are playing
online games or videoconferencing, but it makes the firewall security less effective. See Set up a default DMZ server on page 104.
Respond to Ping on Internet Port. This feature allows your router to be
discovered. Use this feature only as a diagnostic tool or if you have a specific reason.
Disable IGMP Proxying. IGMP proxying allows a client on a LAN or WiFi network
to receive the multicast traffic it is interested in from the Internet. By default, IGMP
Settings
User Manual100Manage the LAN and WAN
Loading...