Page 1
User Manual Orbi Pro WiFi 6 AX5400 Tri-band WiFi System (SXK50) Models Orbi Pro WiFi 6 AX5400 Router Model SXR50 Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 NETGEAR, Inc. July 2022 350 E. Plumeria Drive 202-12551-04 San Jose, CA 95134, USA...
Page 2
See the regulatory compliance document before connecting the power supply. For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy. By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Page 3
We made minor changes, corrections, and improvements, including to the information in the appendix Supplemental Information on page 234. 202-12551-03 April 2022 We added NETGEAR Insight Business VPN on page 23. 202-12551-02 March 2022 We made minor corrections to Technical specifications for Orbi Pro WiFi 6 AX5400 router model SXR50 on page 239 and Technical specifications for Orbi Pro WiFi 6 AX5400 satellite model SXS50 on page 240.
Set up your satellite with a wired connection to your router..21 Set up and sync an Orbi Pro satellite over a wired connection.21 Ethernet backhaul connections for multiple satellites....22 Manage and monitor your Orbi Pro network with NETGEAR Insight....................23 NETGEAR Insight Business VPN............23...
Page 5
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Chapter 3 Specify Your Internet Settings Setup Wizard..................33 Manually set up the Internet connection.........33 Set up an Internet connection without a login......34 Set up an Internet connection with a login.........35 IPv6 Internet connections..............37 Requirements for entering IPv6 addresses.........37 Set up IPv6 Internet connections..........37...
Page 6
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 VLAN profiles..................75 Add a new VLAN profile..............75 Add a new VLAN profile directly to a LAN........77 Change the client isolation or network isolation for a VLAN profile....................79 Delete a VLAN profile..............80 VLAN membership for a LAN, WiFi network, or port.....81...
Page 7
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up a DHCP server for the guest LAN 4.......128 Set up a DHCP server for the custom LAN 5......129 Disable the DHCP server for a LAN...........131 Reserved LAN IP addresses............131 Reserve a LAN IP address............132 Edit a reserved LAN IP address..........133...
Page 8
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 View satellites, WiFi devices, and wired devices connected to the Orbi Pro network.................163 Check the Internet connection status or renew the connection..................165 Display port and radio statistics..........166 View and manage logs of router activity........167 Syslog server..................168 Traffic meter..................169...
Page 9
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Edit a port forwarding service............200 Delete a port forwarding entry..........201 Application example: Make a local web server public...201 How the router implements the port forwarding rule.....202 Port triggering..................203 Add a port triggering service.............203 Enable port triggering..............204...
Page 10
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Factory settings for Orbi Pro WiFi 6 AX5400 router model SXR50....................235 Factory settings for Orbi Pro WiFi 6 AX5400 satellite model SXS50....................238 Technical specifications..............239 Technical specifications for Orbi Pro WiFi 6 AX5400 router model SXR50....................239 Technical specifications for Orbi Pro WiFi 6 AX5400 satellite...
Overview and Setup The Orbi Pro WiFi 6 AX5400 Tri-band Mesh System (SXK50) creates dedicated high-speed WiFi connections to your Internet service. The Orbi Pro WiFi 6 AX5400 router (model SXR50) connects to your modem or gateway. You can use the router alone or let it support up to six Orbi Pro WiFi 6 AX5400 satellites (model SXS50), which can extend the WiFi signal throughout your business, office, or home.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Supported Orbi Pro WiFi 6 AX5400 models This user manual describes the following Orbi Pro WiFi 6 AX5400 models: • Orbi Pro WiFi 6 AX5400 Router (Model SXR50) •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. LAN Gigabit Ethernet ports 1–3. LAN ports 1 and 2 support link aggregation. 4. WAN Gigabit Ethernet port (with a yellow label). Use this port for your Internet connection.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 LED behavior When you sync an Orbi Pro WiFi 6 AX5400 satellite to the Orbi Pro WiFi 6 AX5400 router, the LED behavior for a satellite that comes in an Orbi Pro WiFi 6 AX5400 system is different from the LED behavior for add-on Orbi Pro WiFi 6 AX5400 satellites.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Add-on Orbi Pro WiFi 6 AX5400 satellite LEDs The following table describes the LED behavior for an add-on Orbi Pro WiFi 6 AX5400 satellite (model SXS50) that was purchased separately from the Orbi Pro WiFi 6 AX5400 System kit.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Figure 3. Orbi Pro WiFi 6 AX5400 Model SXR50 router label The Orbi Pro WiFi 6 AX5400 satellite label shows the WiFi network name and password, the satellite’s MAC address, and the satellite’s serial number.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To cable your Orbi Pro router: 1. Connect your Orbi Pro router to a modem or gateway that provides Internet. • If you use a modem, unplug the modem, remove and then reinsert the backup battery if it uses one, and plug the modem back in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Sync your Orbi Pro WiFi 6 AX5400 satellite The sync process for your Orbi Pro WiFi 6 AX5400 satellite depends on whether your satellite came with your Orbi Pro WiFi 6 AX5400 system, or if your satellite is an add-on satellite.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Sync an add-on Orbi Pro WiFi 6 AX5400 satellite If you already set up an Orbi Pro WiFi 6 AX5400 router and satellite and you are adding an optional add-on Orbi Pro WiFi 6 AX5400 satellite (sold separately), follow the steps in this section.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Add satellites to your network using the router web interface You can use the Orbi Pro WiFi 6 AX5400 router web interface to add a satellite to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Note: The first time that you sync the satellite and the router, the sync process can take up to five minutes because the router might automatically update the satellite’s firmware.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Ethernet backhaul connections for multiple satellites Your Orbi Pro WiFi 6 satellite automatically connects over WiFi to your Orbi Pro router or another Orbi Pro satellite to create a WiFi backhaul connection, or you can use an Ethernet cable to connect your satellite to your router or another satellite to create a wired backhaul connection.
Manage and monitor your Orbi Pro network with NETGEAR Insight If you are a NETGEAR Insight Premium or Pro subscriber, after you use the router web interface to set up your Orbi system, you can use NETGEAR Insight to manage and monitor your Orbi Pro network remotely.
Page 24
Note: You cannot configure Insight Business VPN with the router web interface. You must use NETGEAR Insight. If you are a NETGEAR Insight Premium or Pro subscriber, you can purchase a Business VPN subscription. Each remote site requires a subscription. A main site does not require a subscription.
Page 25
Connect to the Orbi Pro WiFi 6 AX5400 Network and Access the Router To manage your Orbi Pro WiFi 6 AX5400 router and any Orbi Pro WiFi 6 AX5400 satellites that are connected to your Orbi Pro Wifi 6 network, you must manage them from your Orbi Pro WiFi 6 AX5400 router web interface.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Connect to the Orbi Pro network for initial configuration You can connect to the Orbi Pro network through a wired or WiFi connection. Note: If you set up your computer to use a static IP address, change the settings so that it uses Dynamic Host Configuration Protocol (DHCP).
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 WiFi connection using WPS You can connect to the router’s WiFi network with Wi-Fi Protected Setup (WPS) or you can find and select the WiFi network. To use WPS to connect to the WiFi network: 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Use the interactive Internet setup process Before you start the interactive Internet setup process, get your ISP information and make sure that the computers and devices in the network use the settings described here.
Read the information in Troubleshooting on page 218. If your computer is set to a static or fixed IP address If problems persist, register your NETGEAR product (this setting is uncommon), change its settings to obtain and contact NETGEAR technical support.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Change the language By default, the language is set as Auto. To change the language: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Page 31
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 pop-up window displays to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button. •...
Specify Your Internet Settings Usually, the quickest way to set up the router to use your Internet connection is to allow Orbi to detect the Internet connection when you first access the router with a web browser. You can also customize or specify your Internet settings. This chapter contains the following sections: •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Setup Wizard You can use the Setup Wizard to detect your Internet settings and automatically set up your router. To use the Setup Wizard: 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up an Internet connection without a login To set up an Internet connection that does not use a login: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 9. Select a Domain Name Server (DNS) Address radio button: • Get Automatically from ISP: Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns this address.
Page 36
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The page adjusts. 6. From the Internet Service Provider menu, select the encapsulation method: The selections are PPPoE, L2TP, and PPTP. 7. In the Login field, enter the login name your ISP gave you. This login name is often an email address.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 15. Click the Apply button. Your settings are saved. 16. Click the Test button to test your Internet connection. IPv6 Internet connections The router supports many different types of IPv6 Internet connections for which you can set the settings manually.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. From the Internet Connection Type menu, select the IPv6 connection type: • If you are not sure, select Auto Detect so that the router detects the IPv6 type that is in use.
Page 39
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. From the Internet Connection Type menu, select Auto Detect. The page adjusts. The router automatically detects the information in the following fields: •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Use auto configuration for an IPv6 Internet connection To set up an IPv6 Internet connection through auto configuration: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 field. For example, Earthlink Cable might require a host name of home, and Comcast sometimes supplies a domain name. 8. In the IPv6 Domain Name Server (DNS) Address section, select a radio button: •...
Page 42
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 9. (Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface. If you do not specify an ID here, the router generates one automatically from its MAC address.
Page 44
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 9. (Optional) Select the Use This Interface ID check box and specify the interface ID that you want to be used for the IPv6 address of the router’s LAN interface. If you do not specify an ID here, the router generates one automatically from its MAC address.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up an IPv6 fixed Internet connection To set up a fixed IPv6 Internet connection: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 7. In the LAN Setup section, select an IP Address Assignment radio button: • Use DHCP Server: This method passes more information to LAN devices, but some IPv6 systems might not support the DHCPv6 client function.
Page 48
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. From the Internet Connection Type menu, select DHCP. The page adjusts. The router automatically detects the information in the following fields: • Router’s IPv6 Address on WAN: This field shows the IPv6 address that is acquired for the router’s WAN (or Internet) interface.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If you do not specify an ID here, the router generates one automatically from its MAC address. 11. Select an IPv6 Filtering radio button: •...
Page 50
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available. 6.
MTU setting than the other devices, the data packets must be split or “fragmented” to accommodate the device with the smallest MTU. The best MTU setting for NETGEAR equipment is often the default value. In some situations, changing the value fixes one problem but causes another. Leave the MTU unchanged unless one of these situations occurs: •...
Page 52
Table 3. Common MTU sizes Application 1500 The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN, and is the default value for NETGEAR routers, adapters, and switches. 1492 Used in PPPoE environments. 1472 Maximum size to use for pinging.
Control Access to the Internet The router comes with a built-in firewall that helps protect your business network from unwanted intrusions from the Internet. This chapter includes the following sections: • MAC access control lists • Network access control list •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 MAC access control lists A MAC access control list (ACL) for a WiFi network (that is, an SSID) or the wired network (that is, the LAN) allows or denies a device access to the network based only on the MAC address of the device.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Enable a MAC ACL for a specific network When you enable a MAC ACL for a specific network, you must specify the default policy for that network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 7. From the Default Policy menu, select one of the following options: • Allow: The policy is to allow all devices access except for the devices that you add to the MAC ACL.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 6. If the Enable MAC Access Control Disabled button displays for the specific network, click the Disabled button. The button changes to the green Enabled button. 7.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 4. Select ADVANCED > Security > MAC ACL. The MAC ACL page displays. 5. Go to the section for the network for which you want to manage the MAC ACL. 6.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To disable a MAC ACL for a specific network: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If you set up a network ACL with an access rule that allows access to the Orbi Pro network, devices on the network ACL are an exception to the access rule: •...
Page 61
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The BASIC Home page displays. 4. Select ADVANCED > Security > Access Control. The Access Control page displays. 5. Select the Turn on Access Control check box. You must select this check box before you can specify an access rule and use the Allow and Block buttons.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Manage the allowed devices on the network access control list If you set up an access list that blocks all new devices from accessing the Orbi Pro network, you must specify which devices are allowed to access the Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The device is removed from the allowed list. 8. To change the information for a device on the allowed list, do the following: a.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Click the View list of blocked devices not currently connected to the network link. The Access Control page displays. A table displays the detected device name, MAC address, and connection type of the devices that are not connected and are blocked from accessing the Orbi Pro network.
Page 65
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To block Internet sites: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network. 2.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Delete keywords that are used to block Internet sites To delete keywords that are used to block Internet sites: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To specify a trusted computer: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network. 2.
Page 68
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The user name is admin. The password is the one that you set the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Your settings are saved. The Block Services page displays again and the added service displays in the table. 11. Click the Apply button. Your settings are saved.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Your settings are saved. Email notifications for security events The router can email you its logs of router activity. The log records router activity and security events such as attempts to access blocked sites or services.
Page 71
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 9. If your outgoing email server requires authentication, select the My Mail Server requires authentication check box and do the following: • In the User Name field, type the user name for the outgoing email server. •...
Manage the VLANs This chapter includes the following sections: • About VLANs in general • About VLANs on the router • How the router organizes LANs, VLANs, and WLANs • VLAN profiles • VLAN membership for a LAN, WiFi network, or port •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 About VLANs in general A local area network (LAN) maps network devices together based on physical or geographic location. A virtual local area network (VLAN) maps network devices together on a basis other than physical or geographic location, for example, by department, type of user, level of security clearance, or primary application.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 4. Preset VLAN profiles on the router VLAN ID VLAN Profile Name Default Employee Guest Note: The router also supports a special VLAN with the profile name *IPTV and VLAN ID 1 (the same VLAN ID as the Default VLAN profile).
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 5. Default organization of the LANs, VLANs, and WLANs LAN ID Ethernet Ports Preset VLAN Profile Name WLAN Name WLAN Usage VLAN ID LAN 1 All LAN ports and Default...
Page 76
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your router is part of a network with switches and access points, VLAN traffic segregation works only if the VLAN is defined on all other network components, excluding end devices such as computers and WiFi clients.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 (Continued) Field Description Client Isolation Client isolation prevents hosts and clients in the VLAN from reaching ports, hosts, and clients in the same VLAN, thereby increasing security. Select the check box to enable this option.
Page 78
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The VLAN profile is added. 10. To assign the new VLAN profile to the LAN, select it from VLAN Profile menu. 11. Click the Apply button. Your settings are saved.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 6. To change the client isolation settings, select or clear the check box in the Client Isolation column. Selecting the check box enables client isolation, which prevents hosts and clients in the VLAN from reaching ports, hosts, and clients in the same VLAN, thereby increasing security.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The VLAN / Bridge Settings page displays. 5. Select the radio button next to the custom VLAN you want to delete. 6. Click the DELETE button. The VLAN profile is removed from the table.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To change the VLAN profile for a LAN: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 A login window displays. If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To assign a port to another VLAN profile on the router (also referred to as the Base in this context) or satellite: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Page 85
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The router includes a default VLAN tag group, which is a VLAN profile with the name *IPTV and VLAN ID 1. You can select this VLAN profile for a LAN port, allowing the VLAN profile to function as a bridge between the WAN port and the LAN port.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Port mode: Trunk mode or Access mode By default, all Ethernet ports (the WAN port and the LAN ports) on the router and any satellites function in Trunk mode, but they can also function in Access mode: •...
Page 87
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The VLAN / Bridge Settings page displays. For the router (Base) and each satellite, the ports display on the page: • Blue: The ports are connected to devices that are turned on. •...
Manage the WiFi Networks This chapter includes the following sections: • About the WiFi networks • admin (default) WiFi network • Employee WiFi network • Internet of things WiFi network • Guest WiFi network and captive portal For information about advanced WiFi features, see Manage the Advanced WiFi Settings on page 185.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 About the WiFi networks The router supports four WiFi networks, also referred to as WiFi local area networks (WLANs) or wireless networks. These WiFi networks can operate simultaneously, but by default, only the Wireless 1 network is operationally enabled.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 admin (default) WiFi network Your Orbi Pro WiFi 6 router and satellite come preset with the same admin WiFi network name (SSID) and WiFi network key (password). You can find the admin SSID and password on the router label and on the satellite label.
Page 91
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The name can be up to 32 characters long and it is case-sensitive. If you did not change the SSID during the setup process, the default SSID is shown. (The default SSID is randomly generated and is on the router label.) If you change the name, make sure to write down the new name and keep it in a safe place.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If you are using a WiFi connection and you changed the SSID, you are disconnected from the network. 10. Make sure that you can connect to the WiFi network with its new settings. If you cannot connect using WiFi, check the following: •...
Page 93
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Under Security Options, select a WiFi security option: • WPA2-PSK [AES]: The WPA2 option uses AES encryption. This type of security allows only WiFi devices that support WPA2 or WPA3 to join the network. When you select this option, the Password (Network Key) field displays.
Page 94
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server. •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 When you select this option, the Password (Network Key) field displays. Do the following: a. In the Password (Network Key) field, enter the network key (password) that you want to use.
Page 96
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 4. Select Wireless > Wireless 2. The WiFi settings for the Wireless 2 network display on the page. 5. To enable the Wireless 2 network, select the Enable Wireless 2 network check box. By default, the Wireless 2 network is disabled.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 c. To change when the WiFi signal is broadcast during a day, move the round icons on the blue bar to the desired starting and ending times for the day. The period that the WiFi signal is broadcast during that day displays to the left of the blue bar.
Page 98
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 4. Select Wireless > Wireless 2. The WiFi settings for the wireless 2 network display on the page. 5. Under Security Options, select a WiFi security option: •...
Page 99
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 c. In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 When you select this option, the Password (Network Key) field displays. Do the following: a. In the Password (Network Key) field, enter the network key (password) that you want to use.
Page 101
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The user name is admin. The password is the one that you set the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 10. A WLAN schedule can turn WiFi broadcast off to block network access during days and times when it is not needed and to save energy. To enable and configure a WLAN schedule for the admin WiFi network, do the following: a.
Page 103
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 A login window displays. If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Page 104
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 be configured on the RADIUS server and authenticated against the RADIUS server. The router functions as the authenticator between the WiFi client and the RADIUS server, which provides the actual authentication.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 c. In the Shared Secret field, enter the password that the router must use to communicate with the RADIUS server. This password must be configured on the RADIUS server. This password is used to authenticate the router (not a WiFi client) against the RADIUS server.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up a guest WiFi network with open access or password authentication The router web interface calls the guest WiFi network the Guest Portal network. To set up a guest WiFi network with open access or local password authentication: 1.
Page 107
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 For more information about VLANs, see Manage the VLANs on page 72, including How the router organizes LANs, VLANs, and WLANs on page 74. 9.
Page 108
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 10. A WLAN schedule can turn WiFi broadcast off to block network access during days and times when it is not needed and to save energy. To enable and configure a WLAN schedule for the admin WiFi network, do the following: a.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up Facebook Wi-Fi for the guest WiFi network You can set up Facebook Wi-Fi on your Orbi WiFi network to offer your customers free WiFi access if they check in to your existing Facebook business page.
Page 110
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 8. Although the preset Guest VLAN profile for the Guest Portal WiFi network works well for most situations, if you want to change the VLAN profile, select the VLAN Profile check box, and select another VLAN profile from the menu.
Page 111
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The WiFi network can accept both clients that support OWE and clients that do not. For clients that do not support OWE, traffic is not encrypted. 10.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 d. To select the period after which users are automatically logged out, click the Session length icon, and select a period. e. To add terms of service to the Facebook check-in page, select the option to add terms of service and type or copy your terms of service.
Page 113
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Select the Enable Guest Portal Network check box. 6. Leave the Enable SSID Broadcast check box selected. Allowing the router to broadcast its WiFi network name (SSID) makes it easier to find your network and connect to it.
Page 114
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 When you select this option, the Password (Network Key) field displays. Do the following: a. In the Password (Network Key) field, enter the network key (password) that you want to use.
Page 115
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 13. To set an expiration time for how long users can access the Internet, select a time from the Expiration menu. After guests are authenticated, they can access the Internet for that period of time. After the period expires, guests are redirected to the Terms and Conditions page.
Manage the LANs This chapter includes the following sections: • About the LANs • LAN settings • DHCP servers • Reserved LAN IP addresses • Multicast DNS gateway...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 About the LANs A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end devices. Endpoints can communicate with each other without the need for a router such as an Orbi Pro router.
Note: The IP settings for LAN 1 can be automatically changed if the Orbi Pro WiFi 6 router detects a double NAT condition. (For more information about double NAT, visit https://kb.netgear.com/30186/What-is-double-NAT-and-why-is-it-bad.) The router can detect this condition during the setup process if you select router mode even though another router is already present in your network.
Page 119
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The user name is admin. The password is the one that you set the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Change the employee LAN 2 settings By default, LAN 2 is assigned to the Employee VLAN profile with ID 20. If you use this LAN and associated VLAN, you can separate employee traffic from other types of traffc on your router.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 For more information about VLANs, see Manage the VLANs on page 72, including How the router organizes LANs, VLANs, and WLANs on page 74. For information about adding a new VLAN to a LAN, see Add a new VLAN profile directly to a LAN on page 77.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 7. In the IP Subnet Mask, type the subnet mask of the router. The IP address and subnet mask identifies which addresses are local to a specific device and which must be reached through a gateway or router.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The user name is admin. The password is the one that you set the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 A login window displays. If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up a DHCP server for the default LAN 1 The DHCP IP addresses for the default LAN 1 must be part of the same IP address subnet as the router’s default LAN IP address.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The router delivers the following parameters to any LAN device that requests DHCP: • An IP address from the range that you defined •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 This IP address must be in the same subnet as the router. The default ending IP address is 192.168.20.254. 7. In the lease time hour(s) field, set the duration of the IP address lease in hours. By default, the lease expires after one day (24 hours), after which the WiFi client must renew the lease.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. If you previously disabled the DHCP server feature, select the Use Router as DHCP Server check box. 6. Specify the range of IP addresses that the router assigns: a.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Page 130
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To set up the DHCP server for the custom LAN 5: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Disable the DHCP server for a LAN By default, the router acts as a DHCP server. The router assigns IP, DNS server, and default gateway addresses to all computers connected to the LAN.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Reserve a LAN IP address To reserve an IP address: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Edit a reserved LAN IP address To edit a reserved address entry: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Page 135
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 the source VLAN. Or, the type of shared service can be Chromecast and can apply to all devices that can receive Chromecast transmissions on the source VLAN. •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • Source VLAN: From the Source VLAN menu, select the VLAN that includes as members the type of shared devices or service that you select from the Source VLAN menu.
Page 137
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Do one of the following: • To change a policy, change the name, shared service, source VLAN, or destination VLAN, or a combination of these. •...
Manage the WAN and other Network Settings This chapter includes the following sections: • WAN settings • Dynamic DNS • DMZ server • Static routes • Universal Plug and Play • Link aggregation...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 WAN settings You can view or configure wide area network (WAN) settings for the Internet port. You can set up a DMZ (demilitarized zone) server, change the maximum transmit unit (MTU) size, and enable the router to respond to a ping to its WAN (Internet) port.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 proxying is disabled. If you clear the check box, IGMP proxying is enabled and you can select which type of IGMP messages are forwarded by the router: Auto: The router automatically detects the supported protocol (IGMPv3 or IGMPv2) and forwards the message accordingly.
Internet. Set up a new Dynamic DNS account NETGEAR offers you the opportunity to set up and register for a free Dynamic DNS account. To set up Dynamic DNS and register for a free NETGEAR account: 1.
A message displays the Dynamic DNS status. Specify a DNS account that you already created If you already own a Dynamic DNS account with NETGEAR, no-IP, or Dyn, you can set up the router to use your account. To set up Dynamic DNS if you already created an account: 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 11. Click the Apply button. Your settings are saved. 12. To verify that your Dynamic DNS service is enabled in the router, click the Show Status button.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The router usually detects and discards incoming traffic from the Internet that is not a response to one of your local computers or a service that you configured on the Port Forwarding/Port Triggering page of the router web interface (see Customize Internet Traffic Rules for Ports on page 197).
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 As an example of when a static route is needed, consider the following case: • Your main Internet access is through a cable modem to your ISP. The cable modem is connected to your Orbi Pro WiFi 6 router.
Page 146
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 A login window displays. If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Change a static route To edit a static route: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The user name is admin. The password is the one that you set the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 not allow any device to automatically control router resources, such as port forwarding. 6. Type the advertisement period in minutes. The advertisement period specifies how often the router broadcasts its UPnP information.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Add a link aggregation group You can add a link aggregation group (LAG) between the router and a satellite, between two satellites, between the router and a switch, or between the satellite and a switch. The switch must support 802.3ad link aggregation for static LAGs.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The ports are bound in a LAG. The ports now share a single VLAN Profile menu and Mode menu, that is, they share the same VLAN and port mode. 8.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Set up a LAG connection between an Orbi Pro WiFi 6 AX5400 satellite and router You can connect the Orbi Pro WiFi 6 AX5400 satellite over a LAG connection to the Orbi Pro WiFi 6 AX5400 router.
Page 153
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Manage and Monitor Your Orbi Pro System This chapter describes the router settings for administering, maintaining, and monitoring your Orbi Pro system The chapter includes the following sections: • Firmware for the router and satellite • admin password • Monitor the router, satellite, and Orbi Pro network •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Firmware for the router and satellite You can use the router web interface to check if new firmware is available and update your router and satellite, or you can manually update the firmware for your router and satellite.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To manually update the firmware on your Orbi router and satellite, follow these high level steps: 1. Visit netgear.com/support and download the firmware for both your Orbi router and satellite. 2. Update the firmware on your Orbi satellite.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 8. Click the Browse button. 9. Locate and select the satellite firmware file that you downloaded. The firmware file name ends in .img or .chk. 10.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Click the Browse button. 6. Locate and select the router firmware file you downloaded. The firmware file name ends in .img or .chk. 7.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 7. Click the Apply button. Your settings are saved. Reset the admin password If you set up the password reset feature, you can reset your router admin password if you forgot it.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Monitor the router, satellite, and Orbi Pro network You can monitor the behavior and many of the features of your router, satellite, and Orbi Pro network View router status and usage information To view router status and usage information:...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Page 164
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • Association Time: The period in hours, minutes, and seconds that the device is connected to the WiFi network. • Link Status: The quality and strength in dBm of the WiFi connection of the device. 5.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • Lease Obtained: The date and time when the lease was obtained. • Lease Expires: The date and time that the lease expires. 6.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 satellite. For each port and radio, and for the backhaul connection, the window displays the following information: Status: The link status of the port. TxPkts: The number of packets transmitted on this port since reset or manual clear.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 4. Select ADVANCED > Administration > Logs. The Logs page displays the following information: • Date and time: The date and time the log entry was recorded. •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To enable the syslog function and specify the syslog server: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Start the traffic meter without traffic restrictions You can monitor the traffic volume without setting a limit on the volume or connection time. To start or restart the traffic meter without configuring traffic volume or connection time restrictions: 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Restrict Internet traffic by volume You can record and restrict the traffic by volume in MB. This is useful when your ISP measures your traffic volume. To record and restrict the Internet traffic by volume: 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 12. To enable the router to disconnect and disable the Internet connection when the limit is reached, select the Disconnect and disable the Internet connection button. 13.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 9. In the Traffic Control section, enter a period in minutes to specify when the router issues a warning message before the monthly limit in hours is reached. This setting is optional.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The information is updated. 7. To display more information about the data traffic and to change the polling interval, click the Traffic Status button. The Traffic Status pop-up windows displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 NTP server By default, the router uses the NETGEAR Network Time Protocol (NTP) server to sync the network time. You can change the NTP server to your preferred NTP server.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Click the Back Up button. 6. Specify a location on your network. A copy of the current settings is saved in the location you specified. Manage the automatic backup options You can let the router automatically back up configuration settings before a firmware upgrade.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Erase the current configuration settings You can erase the current configuration and restore the factory default settings. You might want to do this if you move the router to a different network. To erase the configuration settings: 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The BASIC Home page displays. 4. Select ADVANCED > Administration > Backup Settings. The Backup Settings page displays. 5. Click the Browse button to find and select the .cfg file. 6.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 6. In the Allow Remote Access By section, specify the external IP addresses to be allowed to access the router’s remote management. Note: For enhanced security, restrict access to as few external IP addresses as is practical.
Page 181
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 router features are disabled to prevent any conflict with the other router or gateway on the network. For example, you can use the Orbi router as a WiFi access point that connects to a gateway or modem router that you already use for your Internet service.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Note: To prevent interference with other WiFi routers or WiFi gateways in your network, we recommend that you use different WiFi settings on each WiFi routers or WiFi gateway.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 7. Log back in to the router to go through the interactive Internet setup process (see Use the interactive Internet setup process on page 28). Sync button security You can disable the physical Sync button on the router, satellite, or both.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Manage the Sync button on the satellite By default, the physical Sync button on the satellite is enabled. You can disable the button for security reasons. If you press the Sync button and the satellite’s LED bar pulses magenta, this LED behavior indicates that the Sync button is disabled.
Manage the Advanced WiFi Settings This chapter includes the following sections: • Download bandwidth per SSID • Region of operation • SSID broadcast for a radio • 20/40 MHz coexistence for the 2.4 GHz radio • Wi-Fi multimedia for a radio •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Download bandwidth per SSID You can set up four WiFi networks for your Orbi Pro WiFi 6 network: one for administrative access, one for employee access, one for Internet of things (IoT) devices, and one for guest access.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Note: Even though this is the page for the admin WiFi settings, the bandwidth ratios that you specify on this page apply to the admin WiFi network, employee WiFi network, IoT WiFi network, and guest WiFi network.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To change the region of operation: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network. 2.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The user name is admin. The password is the one that you set the first time that you logged in. The user name and password are case-sensitive. The BASIC Home page displays.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The Advanced Wireless Settings page displays. 5. Select or clear the Enable 20/40 MHz Coexistence check box. Selecting this check box enables 20/40 MHz coexistence and clearing this check box disables 20/40 MHz coexistence.
(In general, these settings are intended for WiFi testing.) CAUTION: Do not change these settings unless directed by NETGEAR support or unless you are sure what the consequences are. Incorrect settings might disable the WiFi function of a radio unexpectedly.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. In the CTS/RTS Threshold (1-2347) field for a radio, enter a value from 1 to 2437. The default value is 2347. CAUTION: Incorrect settings might disable the WiFi function for the selected radio unexpectedly.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 3. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The router generates a new backhaul password. Generating a new password might cause the Orbi satellite to lose connection from the Orbi router. To reconnect, use the Sync button. MU-MIMO Multiuser multiple input, multiple output (MU-MIMO) improves performance when multiple MU-MIMO-capable WiFi clients transfer data at the same time.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Protected Management Frames Protected Management Frames (PMF), according to the 802.11w standard, is a security feature that protects unicast and multicast management frames from being intercepted and changed for malicious purposes.
Page 196
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 6. Click the Apply button. Your settings are saved. Manage the Advanced WiFi User Manual Settings...
Customize Internet Traffic Rules for Ports You can use port forwarding and port triggering to set up rules for Internet traffic. You need networking knowledge to set up these features. This chapter includes the following sections: • Port forwarding to a local server •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Port forwarding to a local server If your business network includes a server, you can allow certain types of incoming traffic to reach the server. For example, you might want to make a local web server, FTP server, or game server visible and available to the Internet.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 9. In the Server IP Address field, enter the IP address of the computer that will provide the service. 10. Click the Add button. The service displays in the list.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 11. Specify the internal ports by one of these methods: • Leave the Use the same port range for Internal port check box selected. •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • For the internal ports, leave the Use the same port range for Internal port check box selected or enter the ports in the Internal port range field. •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To make a local web server public: 1. Assign your web server either a fixed IP address or a dynamic IP address using DHCP address reservation.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Port triggering Port triggering is a dynamic extension of port forwarding that is useful in these cases: • An application must use port forwarding to more than one local computer (but not simultaneously).
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 7. In the Service Name field, type a descriptive service name. 8. In the Service User menu, select Any, or select Single address and enter the IP address of one computer: •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Select the Port Triggering radio button. The page adjusts. 6. Clear the Disable Port Triggering check box. If this check box is selected, the router does not use port triggering even if you specified port triggering settings.
Page 206
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 6. When your router receives the incoming message to destination port 33333, it checks its session table to see if a session is active for port number 33333. Finding an active session, the router restores the original address information replaced by NAT and sends this reply message to your computer.
• Install OpenVPN software on a VPN client • Use VPN to access your Internet service at your business Note: If you are a NETGEAR Insight Premium or Pro subscriber, you can enable and configure another VPN feature on your router: Business VPN. You cannot enable and configure this feature in the router web interface;...
• To use a DDNS service, register for a DDNS account with a host name. You use the host name to access your business network. The router supports these DDNS accounts: NETGEAR, No-IP, and Dyn. For more information, see Dynamic DNS on page 140.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If both networks use the same LAN IP scheme, when the VPN tunnel is established, you cannot access your business router or your business network with the OpenVPN software. For information about changing the LAN settings on the router, see Manage the LANs on page 116.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 The default protocol for TUN mode is UDP. • To change the TUN mode service port, type the port number that you want to use in the field.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Note: If you later change the OpenVPN configuration in the router (for example, you change the TUN or TAP port number), you must download and install the .ovpn configuration file again on each client, depending on its operating system.
10. Unzip the OpenVPN configuration files and copy them to the folder in which you installed the OpenVPN client utility. 11. Modify the VPN interface name to NETGEAR-VPN: a. If your computer is running Windows 10, select Control Panel > Network and Sharing Center >...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 4. Enter the admin user name and password. The user name is admin. The password is the one that you set the first time that you logged in.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If your browser does not display a login window but displays a security warning and does not let you proceed, see What to do if you get a browser security warning on page 30.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Allow VPN client Internet access in the router By default, the router is set up to allow VPN connections only to your business network (referred as the home network in the following procedure), but you can change the settings to allow Internet access.
Page 217
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To allow VPN clients to access only your business network and block them from using your business Internet service: 1. Launch a web browser from a computer or mobile device that is connected to your Orbi Pro network.
This chapter provides information to help you diagnose and solve problems you might experience with your Orbi router or satellite. If you do not find the solution here, check the NETGEAR support site at support.netgear.com for product and contact information. This chapter includes the following sections: •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Quick tips This section describes tips for troubleshooting some common problems. Sequence to restart your network When you restart your network, follow this sequence: 1.
Page 220
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To sync the router and the satellite: 1. Place the satellite in the same room as the Orbi Prorouter. Use this satellite location only during the sync process. 2.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 10. If the satellite’s bar LED lights magenta, the satellite did not resync with the router. If they successfully synced when they were placed in the same room, do one of the following: •...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 5. Check that an IP address is shown for the Internet port. If 0.0.0.0 is shown, your router did not obtain an IP address from your Internet service provider (ISP).
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Reboot the computer and verify that the router address (orbilogin.com) is listed by your computer as the default gateway address. • You might be running login software that is no longer needed. If your ISP provided a program to log you in to the Internet, you no longer need to run that software after installing your router.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Troubleshoot WiFi connectivity If you are experiencing trouble connecting to the Orbi WiFi network, try to isolate the problem: • Does the WiFi-enabled computer or mobile device that you are using find your WiFi network? If you disabled the router’s SSID broadcast, then your WiFi network is hidden and does not display in the list of networks that your computer or WiFi device finds.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 To ping the router from a Windows-based computer: 1. From the Windows toolbar, click the Start button and select Run. 2. In the field provided, type ping followed by the IP address of the router, as in this example: ping orbilogin.com 3.
Page 226
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 If you do not receive replies, check the following: • Check to see that the IP address of your router is listed as the default gateway for your computer.
How to Use VLANs in Your Network On an Orbi Pro WiFi 6 router, you can manually configure a VLAN by creating a VLAN profile (basically, and VLAN ID with a VLAN name) and assigning the VLAN to one or more network interfaces, such as WiFi networks (also referred to as WLAN or SSIDs) and Ethernet ports.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 VLAN use case 1: Orbi Pro WiFi 6 router in a home environment This use case describes how to configure the VLANs on an Orbi Pro WiFi 6 router and satellite in a home environment.
Page 229
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Note: LANs (networks) and LAN ports are two different concepts. By default, all LAN ports and the WAN port on the router and all LAN ports on any connected satellites are Ethernet ports in the same physical network segment (LAN 1) and members of VLAN 1.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 VLAN use case 2: Orbi Pro WiFi 6 router in a business environment This use case describes how to configure the VLANs on an Orbi Pro WiFi 6 router and satellite in a business environment.
Page 231
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • Sets the port mode for the following LAN ports to Access mode: Router LAN port 2. This port is cabled to a desktop that is used for admin tasks such accessing the router web interface.
Page 232
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • Add VLAN 40 with the name Guest. As tagged members of VLAN 40, add the switch port (port 1 in the diagram) that is cabled to the network router as a trunk port, and do the same for the switch port (port 2 in the diagram) that is cabled to the Orbi Pro WiFi 6 router.
Page 233
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 • Satellite LAN port 1: Cabled to the router’s LAN 1 port. • Satellite LAN port 2: Cabled to a desktop that is used for admin access. 7.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Factory settings The following factory settings information are for the Orbi Pro WiFi 6 AX5400 router (model SXR50) and the Orbi Pro WiFi 6 AX5400 satellite (model SXS50). You can return the Orbi Pro WiFi 6 AX5400 router or satellite to its factory settings.
Page 236
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 9. Factory default settings for the router (Continued) Feature Default Setting LAN 1 DHCP server Enabled LAN 1 DHCP range 192.168.1.2 to 192.168.1.254 LAN 1 DHCP starting IP address 192.168.1.2 LAN 1 DHCP ending IP address...
Page 237
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 9. Factory default settings for the router (Continued) Feature Default Setting LAN 5 subnet mask 255.255.255.0 LAN 5 DHCP server Enabled LAN 5 DHCP range 192.168.50.2 to 192.168.50.254 LAN 5 DHCP starting IP address 192.168.50.2...
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 9. Factory default settings for the router (Continued) Feature Default Setting Hong Kong Singapore Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput can vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Technical specifications The following are the technical specifications for Orbi Pro WiFi 6 AX5400 router (model SXR50) and Orbi Pro WiFi 6 AX5400 satellite (SXS50). Technical specifications for Orbi Pro WiFi 6 AX5400 router model SXR50 The following table shows the technical specifications for the router.
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 11. Technical specifications for the router (Continued) Feature Description Maximum number of concurrent devices in the Orbi Pro network Operating frequency range 2.4 GHz (US) 2.412–2.462 Operating frequency range 2.4 GHz (Europe ETSI) 2.412–2.472 GHz...
Page 241
Orbi Pro WiFi 6 AX5400 Router Model SXR50 and Orbi Pro WiFi 6 AX5400 Satellite Model SXS50 Table 12. Technical specifications for the satellite (Continued) Feature Description Weight 1.6 lb (0.72 kg) Operating temperature 0° to 40°C (32º to 104ºF) Operating humidity 90% maximum relative humidity, noncondensing 4 Ethernet LAN ports with RJ-45 receptacles.