MY WIFI SECURITY.

[Crazyiscrazydos]

Ok i come here ever now and then hoping I will get the hang of how it works and get some answers. I realize the fault is most likely mine. But I have been having an issue with my wifi for almost a year now. and it gets worse as time gos on.  1st it was just an issue with slow speeds and drops all the time.  Now its progressed to my devices no longer connecting to the 5.0 channel which I know for a fact at least two of them use to.  then suddenly I got devices with odds ip addresses that do not and have never shown on the xfi app. I personal think the app isn't wroth the time. But Xfinity has left me with no other option in some areas.  I have been telling Xfinity for at least 6 mons that my admin tool has security issues. and they tell my is my browser don't worry about it.  Well i ts hard to not worry when u have devices on your network you can not identify and the certificate for your admin tool tells you it dose not match site 

This server could not prove that it is 10.0.0.1; its security certificate is from webui-xb3-cpe-srvr.xcal.tv. This may be caused by a misconfiguration or an attacker intercepting your connection.

Proceed to 10.0.0.1 (unsafe)

I have no idea who or what webui-xb3....... is  maybe my gateway? But   the  .tv has me wondering? I only have  Internet service.  And even if there i s a reasonable  explanation for ALL this. Still why is the certificate not matching? Its all very frustrating. 

thanks for reading hope you know whats going on and can help.

[EG · Accepted solution]

Yes. It's your gateway. Your browser is being a hypochondriac. 

webui = web, user interface xb3 = xb3 is the model number / type of Comcast gateway device cpe = consumer premises equipment srvr = the built -in web server xcal.tv is the Comcast RDK login portal;

https://www.google.com/search?q=xcal+tv&rlz=1C1SQJL_enUS782US782&oq=xcal+tv&aqs=chrome..69i57j35i39j...

Some tips for improving WiFi performance;

http://corporate.comcast.com/comcast-voices/10-ways-you-might-be-killing-your-home-wi-fi-signal

http://forums.xfinity.com/t5/Your-Home-Network/Improve-Your-Wireless-Gateway-Home-Network/td-p/26276...

https://www.xfinity.com/support/articles/improve-your-wireless-home-network

There are other options. Google for WiFi repeaters / range extenders, WiFi mesh systems / pods, powerline ethernet adapters, MoCA adapters. Good luck !

[Crazyiscrazydos]

Ok so my browser is telling me that this is an unsafe site and certificates dont match when in reality they are ok? Why dose it happen no matter what i use? Like explorer or firefox ext. And can you tell me why Im seeing 2 gateways? I mean normally I would think its just showing me the same gateway twice for what ever reason. But what it tells me is I have two gateways with 2 different ips and mac address. Aren't mac address supposed to be unique to the device?
And thank you so much for your response.

[darkangelic]

---

@Crazyiscrazydos wrote:
Ok so my browser is telling me that this is an unsafe site and certificates dont match when in reality they are ok? Why dose it happen no matter what i use? Like explorer or firefox ext. 

---

The problem is with the browser. 

The way secure browsing works is that when you connect securely to a site, the site is supposed to present a Security Certificate, and that Security Certificate is compared to what's stored on a known, trusted public server.

However, since you're looking at an internal, private IP address (in this case, your gateway), you can't have a valid public, security certifcate becauser that address is not on the public internet - anyone can use the address ranges 10.0.0.1 - 10.255.255.255 for an internal network and thus you can't have a security cerificate unique to that particular site. But somehow, the browser thinks there's an error here. 

To reiterate: it's absolutely not possible to have a public secure certificate for a private IP address. 

---

@Crazyiscrazydos wrote:
 And can you tell me why Im seeing 2 gateways? I mean normally I would think its just showing me the same gateway twice for what ever reason. But what it tells me is I have two gateways with 2 different ips and mac address. Aren't mac address supposed to be unique to the device?
And thank you so much for your response.

Well, this is the first time you've brought this up. You'll have to show us exactly what you're seeing if you expect us to explain why. 

[Crazyiscrazydos]

Im am sorry I am just now replying to your last answer to my question about 2 routers I never check my comcast email and did not know that I was receving my answers there.  So I have attached 2 files showing the info on the routers connected to my network and the mac address on my router dose not match either one my mac add is F8A0977437DF

[jpeterson274]

I can give you a close answer. I noticed today my dhcp leases address 10.0.0.2 - 253, so i wondered where 254 is since the router is 1. I am almost positive it is just being used as a reserve for NAT, i could completely wrong according to "experts" but if i am wrong, then the answer is it is for your home ip phone and it will have a different mac address even though it is plugged into the same router it is just an additional interface. Routers and switches typically have multiple interfaces and they will all have different mac-addresses. Hope that may ease your mind for now. I am betting you might be likely to find your "mystery" mac-address in your connected devices menu option in your router admin page.

network and the mac address on my router dose not match either one my mac add is F8A0977437DF

---

[Crazyiscrazydos]

Yeah but that would mean I need a phone line for that am I correct in what you are saying? The only thing I have plugged into my router is my Samsung TV. And that mac address dose not mach either. I have also noticed you can open my admin tool page by typing in a few different addresses you can even get to it when you are not on my network is that normal and would that have anything to do with the mac address's not matching?

[BmneCol]

I am probably wrong, but someone brought up a similar issue in another forum and the numerous people said it was due to the two bands your gateway allows you to connect to (2.4, 5.0). But I don't think the IPs would be so drastically different if this was the case. Just thought I would pass that along, but don't consider it conclusive evidence, rather a different avenue to investigate.

[CCAndrew]

Year old dead thread closed