[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: RT-AC1900P and RT-AX86U Pro - issues with video calls

I work from home and have daily video calls using Microsoft Teams. I had been using an RT-AC1900P and started experiencing issues around July 1. My colleagues' camera feeds would sometimes freeze for 5 second intervals and my colleagues would report that I froze as well. Additionally, the audio would sometimes cut out for 8 seconds. These occurrences would happen multiple times over the course of a single video call. Performance is worse when my family is home using Netflix, YouTube, etc, but even when they aren't home I will occasionally experience these problems.

I replaced the RT-AC1900P with a RT-AX86U Pro and still had the same issues. I then connected an ethernet cable from my laptop to the RT-AX86U Pro and still had the same problem. However, when I connected the ethernet cable from my laptop to my cable modem the calls were fine.

It's strange that two different routers are producing the same issue, so I'm wondering if it related to a firmware update. And I don't want to buy a third router to fix this. Any idea what could be happening here? Are there any settings I can mess with to alleviate this?

[Assistant]
Have you tried using the QoS features of your ASUS router in order to given your laptop and/or that service higher priority? Because it sure sounds from your description that is the issue.

On Friday afternoon I turned on Adaptive QOS and prioritized Work From Home. But I still have the same issues. Prior to that I would occasionally limit the upload/download speeds of other devices on our network (TVs, iPads, etc), but that didn't help either.

What you might want to try is using ssh to access the router and run the top command to monitor the resources being used by the router at any given time. You *might* notice a trend, perhaps some other process(es) that is consuming excessive resources at the same time. By default, the output orders the processes from highest CPU usage to least.

At least that's where I would start my own investigation if faced w/ the same problem.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: AX88U-PRO, QoS Bandwidth Monitor/App Analysis On/Off?

Hi, just got me an AX88U Pro running latest Merlin fw, im using wireguard VPN (WARP+) and cake qos, and running ax56u as mesh, should i enable QoS Bandwidth Monitor/App Analysis or not? i want to maximize my vpn speed. my connection is 200/200 fiber. is the maximum speed for ax88u is 200mbps? thank you.

[Assistant]
Innocent said:
should i enable QoS Bandwidth Monitor/App Analysis or not?

Only if you want to. It will show the type of traffic to clients. Unrelated to your QoS or VPN.

Innocent said:
is the maximum speed for ax88u is 200mbps?

This router can do >200Mbps on VPN, but you are obviously limited by your ISP line speed.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Can't connect Widows 10 machine to ASUS RT-AX58U using IPSec

I have downloaded certificate to the PC and installed it and set up an IPSec client using windows built in function. Following the instruction at https://www.asus.com/support/faq/1044397/
I am using DDNS from Asus and use IKEv2 ( tried Automatic negotiation in the client also)
Error message in windows client Wrong parameter"

Log file in ASUS
ug 26 14:12:08 06[NET] received packet: from 77.xxx.229.252[51933] to 83.xxx.167.80[500] (1104 bytes)
Aug 26 14:12:08 06[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V V V ]
Aug 26 14:12:08 06[IKE] received MS NT5 ISAKMPOAKLEY v9 vendor ID
Aug 26 14:12:08 06[IKE] received MS-Negotiation Discovery Capable vendor ID
Aug 26 14:12:08 06[IKE] received Vid-Initial-Contact vendor ID
Aug 26 14:12:08 06[ENC] received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02
Aug 26 14:12:08 06[IKE] 77.xxx.229.252 is initiating an IKE_SA
Aug 26 14:12:08 06[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
Aug 26 14:12:08 06[IKE] remote host is behind NAT
Aug 26 14:12:08 06[IKE] sending cert request for "C=TW, O=ASUS, CN=ASUS RT-AX58U-5C48 Root CA"
Aug 26 14:12:08 06[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(FRAG_SUP) N(CHDLESS_SUP) N(MULT_AUTH) V ]
Aug 26 14:12:08 06[NET] sending packet: from 83.xxx.167.80[500] to 77.xxx.229.252[51933] (373 bytes)
Aug 26 14:12:38 07[JOB] deleting half open IKE_SA with 77.xxx.229.252 after timeout

Getting really frustrated, have earlier also tried the other available protocols but none has been working

[Assistant]
Just to confirm, this is a remote router yes? Not on LAN?

The ASUS router (VPN Host) is on my LAN/WAN and I try to connect a PC using the ASUS certificate and internet sharing from an Iphone.

In the mean time I managed to connect my Android phone to the VPN and access files on my LAN (after some firewall modifications on the PC I accessed files from.
Thus, it does not seem to be an ASUS issue.

I have Tele2 as ISP (Fiber) and for both phones. Most likely not relevant since I have used both phones to connect my work PC to work via VPN.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: UniFi Dream Router 7 vs Asus RT-BE88U

I am looking for replacement for RT-AX86U for 2Gbit/600Mbps (8/1 in future when I need it) fiber connection.
I am running 2.5Gbe connection to my macbook and NAS. I have 3 unmanaged switches (two gigabit and one 2.5Gbe + 2x SFP+)
Newly released Dream Router seems to be good competition at similar price.
Would you leave Asuswrt Melin for Unify ecosystem? The performance and capabilities look great, but I didn't have any past UniFi experience yet.
Review which made me consider it: https://nascompares.com/review/unif...ream_Router_7_Review_-_Conclusion_and_Verdict

UDR7 advantages:
- 6GHz radio,
- smaller form factor

RT-BE88U advantages:
- dual 10G
- I already have mesh repeaters bought

[Assistant]
szymko said:
Would you leave Asuswrt Melin for Unify ecosystem?

You are comparing apples and oranges. Asuswrt-Merlin is one man project dependent on upstream Asuswrt support and runs on limited number of popular Asus routers. UniFi ecosystem is multiple products from multiple categories backed up by big budget R&D. If you ask about Asus AiMesh vs multi-AP UniFi system performance and capabilities - sell your Asus routers right now.

Can't comment on a brand new product, but seems like it runs the same software like the system in my signature and it's excellent. I have received multiple PMs with questions about Asuswrt-Merlin vs UniFi and thinking about making features comparison list so the similarities and differences are clear for whoever is interested. In general UniFi hardware and software are more stable, but there are some potential deal breakers for home use. As always - what is better for particular user or use case depends on multiple factors.

Tech9 said:
I have received multiple PMs with questions about Asuswrt-Merlin vs UniFi and thinking about making features comparison list so the similarities and differences are clear for whoever is interested. In general UniFi hardware and software are more stable, but there are some potential deal breakers for home use.

Perhaps save time and just note the deal breakers for home use.

OE

szymko said:
Review which made me consider it

By the way, this review has specs errors. The specs listed on Ubiquiti website are different and most likely this is Qualcomm based device similar to UGC-Max + U7-Pro in All-In-One package. Not sure this MediaTek image has something to do with it and all 3x radios are 2-stream just like U7-Pro with exactly the same power per band. UDR7 has slightly higher gain antennas because of the use case this device was built around. The price is very attractive, can't deny this fact - $279 in the US.

szymko said:
I already have mesh repeaters bought

Don't count RT-AC68U as "mesh" node. It's the worst choice device for this role.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Want to move away from Asus routers, Ubiquiti? advice needed

I'm going to return my GT-BE98, and need some advice on what to go for. I want to move away from Asus if possible. Both myself and the Mrs work from home (zoom meetings etc), so a reliable, strong wifi is super important for that. She connects via a works VPN, and if our wifi has a hiccup, it disconnects her and she has to reboot. I have 5 wired devices at present, mostly 2.5gbe. My daughter does a bit of gaming, and her consumption of media, streaming and other online stuff is quite high, as are the rest of us. The house is not massive, but there are some thick walls, which do reduce the signal. We don't have any wifi 7 devices, but we will do in the next year or so. We do have a few 6e devices.

The BE98 is undoubtedly the best, strongest wifi we have ever had, but it is not reliable and there's no sign of a fix from Asus, and it is just too expensive not to be awesome. The split 5Ghz masquerading as dual 5Ghz is kind of irksome. The RT-BE88U was second choice previously, but having seen how poor the other, recent Asus routers have been for me, that's a last resort.

So, ideally, I want to move away from Asus, and have done a lot of researching and reading on here, but aside from Asus, the only other thing that kind of fits the bill, is Ubiquiti. The Cloud Gateway Fiber and the U6 enterprise AP would be cheaper than the BE98, but looks like a new learning curve, which I'm OK with. The 10gbe is overkill at the moment, but their lower models don't have enough 2.5gbe, of which I need 4. I have a question regarding the U6 enterprise. So they connect via ethernet cable, does the ethernet cable power them, too? Do they have fans in them? If so, are they noisy? Suitable for a bedroom?

Would these be a solid choice to move away Asus, or do Ubiquiti have their own fair share of issues? If not, can anyone recommend anything else to have a look at? Any advice is much welcome, thanks!

[Assistant]
user1234567890 said:
Any advice is much welcome, thanks!

Use UniFi Design Center to find out how many APs you may need and what type.
UniFi Design Center
Simulate a complete UniFi system with our powerful visualization and planning tool.
design.ui.com

If you draw your place accurately including wall materials the resulting heat map will be very close to expected real life results.

U6-Enterprise 10-stream AP with 600 clients support... may be overkill for home application. Otherwise there is no cooling fan inside, they are PoE powered, but you have to select the right switch with enough PoE power budget. U6-Enterprise is a 22W PoE+ device. Multi-AP systems work best with more APs on low power. The difference in resulting Wi-Fi quality is described here.

I find Network Application in UniFi OS actually easier to manage than later complications in Asuswrt with better structured UI and Apple-like one button on/off options doing whatever you need automatically in background. It is made user-friendly enough and with some not too advanced networking knowledge an entire UniFi system can be setup quickly just using built-in help tips.

I wouldn't count phones/tablets as devices needing Wi-Fi 6E/7 connectivity. In my opinion paying extra for shorter range 6GHz band for eventual futureproofing increases significantly the project initial cost with minimal user experience improvements.

Whatever vendor you choose to go with - don't overpay for hardware. Latest and greatest - beta tester membership.

Look into mikrotik - they have some pretty impressive hardware at surprisingly good prices.
while their RouterOS is more complex to configure, once you've done that, it works transparently.

one of these as the router/base and one of these near each work station could possibly be exactly what you need, but you could add more, or go big

if you've a fiber optic connection with Gb+ speeds, this is the way to go with the "go big" option above


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: When running a router as a switch can the WAN port work as 5th LAN port?

Usually when i have an extra old or used router i set it up as a wired and wireless access point around a house;
I generally disable the DHCP server, set a known fixed IP so i can access it later, and use one of the LAN ports on it so it can act as a switch.

But i have this question in my mind; what happens to the WAN port? Can it function as a 5th port? It depends on the router (on some you can put it in switch mode). What happens if there is no dedicated mode available? Is there a solution if you need 5 LAN ports in a pinch and you have no other hardware on hand?

Also does the internal switching hardware affect the bandwidth? Example on my old RT-AC68U, while it has all 1gbps ports, in practice each of the 4 LAN ports maxes around 250mbps and only the WAN port can do a full gbps (or close to it).
Meaning if you are using it as a switch and the WAN port can act as LAN, you are better connecting that to the upstream network so you have proper distribution of bandwidth?

So many questions ;p

[Assistant]
TnF said:
What happens if there is no dedicated mode available?

In this case the WAN port remains as WAN port and can't be used for LAN switch purposes.

TnF said:
Example on my old RT-AC68U, while it has all 1gbps ports, in practice each of the 4 LAN ports maxes around 250mbps

All ports are the same up to Gigabit on this model. The uplink port bandwidth (any port can be used) is obviously shared between all other ports when they are used at the same time. Asus router in AP Mode turns the WAN port into LAN port.

As you have posted this in the non-specific "Routers" forum the answer is: It depends on the specific device.

Using the RT-AC68U as an example, yes you can do it. The best way would be to configure it to AP Mode and turn off the radios. All ports are capable of gigabit throughput. If you weren't getting that then I'd suggest your testing method was flawed.

Nothing notable to add on top of what the local gurus have added, aside from the fact that I was just setting this up yesterday on an old Netgear R7000. Many Netgear routers also support an "Access Point" mode, where the WAN port becomes a LAN port. It wouldn't surprise me that most major manufacturers have provided this on functionality on at least some of their routers.

I feel it essentially just gives you an extra LAN port on the built-in switch, as well as disables non-applicable settings in the firmware interface.

I will also state that my RT-AC56U (slightly older than the RT-AC68U) that I was using in Access Point mode for several years could definitely pull more than 250Mbps via the LAN ports.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Speedtest - Half speed from Lan

Hello,

I've an internet connection of 1G/350Mbps from ISP. The speed test from ASUS TUF-AX4200 UI show 1G/47Mbps ( Modem I've is S33v3 which supports ~ 47Mbps upload only ) which is fine. However, when I do a speed test from Lan,
I get about 400-500Mbps download speed and 47Mbps upload. I had similar situation with Synology RT2600ac. I wonder why I get about half of 1Gbps download speed on Lan. I wonder why is that.

Any idea?
Thanks

[Assistant]
Hard to tell without knowing details about how you test and with what client.

Right. I should have provided that info. I'm using Ookla speed test cli tool on Win 11 and on Ubuntu. I did iperf3 test on a few Lan 1Gb devices I've and each one of them showed speeds >900Mbps.

What about other speed tests?

Recently Ookla caps at around 300-400Mbps at my location, but OpenSpeedTest is showing my expected around Gigabit speeds.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Ubiquiti Dream 7 + Promox Adguardhome Setup...

Hey everyone!

I kind of jumped the gun and bought a Dream 7. I also picked up a Topton N100 running Proxmox, where I’ve installed AdGuard Home.

I’ve already set the IP of my AdGuard Home machine as the DNS for my LAN — is that all I need to do?

Is anyone else using a similar setup? How do you guys have it configured?

[Assistant]
There are multiple threads on Ubiquiti Community forums about setting up Pi-hole with UniFi gateways plus when running VLAN segmented network and with examples of DNS interception and redirection rules. Your AdGuard Home does exactly the same as Pi-hole, your UDR7 runs UniFi OS >4.1.xx and Network Application >9.x like everything else modern UniFi. In addition your UDR7 has built-in DNS encryption option, one click ad-blocking with DNS interception feature, configurable Suricata IDS/IPS, per application or category traffic filtering and monitoring, plus region blocking on top. Not sure why AdGuard Home complication is even needed.

Tech9 said:
There are multiple threads on Ubiquiti Community forums about setting up Pi-hole with UniFi gateways plus when running VLAN segmented network and with examples of DNS interception and redirection rules. Your AdGuard Home does exactly the same as Pi-hole, your UDR7 runs UniFi OS >4.1.xx and Network Application >9.x like everything else modern UniFi. In addition your UDR7 has built-in DNS encryption option, one click ad-blocking with DNS interception feature, configurable Suricata IDS/IPS, per application or category traffic filtering and monitoring, plus region blocking on top. Not sure why AdGuard Home complication is even needed.
Click to expand...

Thanks for your reply!

I'm just having some fun exploring my new toy For some reason, I am getting a high latency warning when using the default UniFi DNS service. However, the issue disappears when I switch to AdGuard Home running on Proxmox. I also prefer having full control over the ad-blocking lists I'm using.

With AdguardHome:

Without AdguardHome:

kuki68ster said:
default UniFi DNS service

The Internet monitoring is quite sensitive, but customizable.

In Network Application click on your gateway (UDR7 in your case) icon on top left, go to Settings, see Internet Verification Server and DNS Verification. The default is ping.ui.com and Auto. If you want quiet Internet verification set the server to the ISP gateway address upstream (trace something and it's the first hop you see in results) and for DNS verification select something faster in your area. If you want to disable it (workaround) set Internet verification to your DDNS name.

You'll still see the latency to common services on your main dashboard:


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: No WAN with Bell 4000 passthrough

I have my network setup with ASUS AiMesh, and I don’t want to loose it.

Bell Fibe as a ISP. Upgrade to 4000Giga. Before : no Bell route at all. Just the ONT box and 5e to n’y ASUS RT-AC3100. No need for FibeTV to run (I stream straight from appleTV).

With new setup : fibe to 4000, wifi off, dhcp off, random loggin for PPPoe, ethernet from LAN1 to my ASUS WAN, ISP PPPoe credential in ASUS, IPTV 35.

I’m never getting an IP or internet connection : (

Tried rebooting Many Times. Tried
Cloning Mac adress on ASUS.

Nothing works ???

What Am I doing wrong ???

Thx

[Assistant]
I am assuming your are trying for a pppoe pass through connection?

For me, the only way I could get this to work was to clone the MAC address in the ppppoe setup section. I used the MAC address that auto populated in the address field when you clicked "clone MAC address". Have had no issues since.

after a few try, I realize that my hardware is getting pretty old…. I’m not getting the speed I should. Decided to go with Bell4000 as main router and switch my ASUS as access points. I loose AiMesh but get real gigabytes speed. I guess there’s no way to put aimesh on access point to buy since they don’t handle the DHCP ?

You need a master ASUS node (router) to do that. i would just use the ISP wireless router and the asus as APs just like you have done. You could use your ASUS in router mode in double NAT behind the ISP router and turning off the wireless radios in one or the other. But you are likely to get only 2-300 Mb/s bandwidth with such an old router.
Not sure you will be able to get 4 GB/s on any wireless device or PC that is not equipped with a 10 Gb/s port and CPU that is fast enough.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Optimal LTE 4G MTU / WAN Packet Overhead

Mindful of, e.g.:

Quote:Over the Iu-ps interface 1400 byte will avoid fragmentation. This is a conservative value to accommodate the protocol layer header overheads. The possible overheads over the Iu-ps interface (GTP/UDP/lower-IP) are the following: GTP main header = 12 bytes GTP extension header = 4 bytes UDP header = 8 bytes IPv4 header = 20 bytes (without optional IPv4 fields), or IPv6 header = 40 bytes (without optional IPv6 headers). The maximum headers size is then 12+4+8+40=64 bytes. The MTU for IPv4 and IPv6 is 1500 bytes. So, the maximum SDU size would be 1500-64=1436 bytes. 1400 bytes is a safer value.
Click to expand...

https://www.etsi.org/deliver/etsi_tr/126...80000p.pdf

This makes me wonder: what is the optimal MTU set for a 4G LTE connection, to maximise throughput and avoid fragmentation? Should this value be the same in OpenVPN?

I have been experimenting with QoS-CAKE, in which ideally the 'WAN packet overhead' is ascertained.

Since I use a VPN, by using 'tcpdump -vpni' on 'eth0' vs 'tun11' interfaces, I have determined that the OpenVPN encapsulation adds 53 bytes to each packet.

But I need to enter the overhead associated with 4G LTE transmission. That is a harder number to determine.

Any idea of the 'WAN packet overhead' for use with 4G LTE? I mean, what is the WAN packet overhead in bytes associated with the 4G LTE encapsulation around the payload? Is it fixed?

[Assistant]
https://customer.cradlepoint.com/s/article/MTU-MSS-Design-Considerations

Here on 4g;

ping -f 8.8.8.8 -l 1500
Pinging 8.8.8.8 with 1500 bytes of data:
Packet needs to be fragmented but DF set.

ping -f 8.8.8.8 -l 1428
Pinging 8.8.8.8 with 1428 bytes of data:
Packet needs to be fragmented but DF set.

ping -f 8.8.8.8 -l 1420
Pinging 8.8.8.8 with 1420 bytes of data:

With my favorite ping sites via DNS I have to use 1300.

Does this technique still allow for 4G LTE overhead? Could it be that given 4G LTE overhead the packet is still fragmented and then reassembled during transmission? So the ping report reports no fragmentation but this is just because of reassembly?

Do we know how many bytes of overhead 4G LTE adds to each payload (whatever that maximum can truly be)?

Not at a low level such as 1300, the 4g overhead varies depending how traffic flows (which can alternate alot in a short time), as it varies the best value is lower then the optimum 4g (or 5g) may have at any given time.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: friend loaned me his gl-inet mt6000 to use until I get a new modem...one problem

I got it up and running with my only attachment was an opnsense box for wan and 1 computer attached to the lan.
No problems until I plugged in another device...I couldn't see it 1 device attached
I tried my computer in every port and it connected no problem. So let me try a NAS...nothing
I tried everything I could think of and nothing. ok DHCP problems...no its set up. no problems assigning an ip to the computer
one of their techs that didn't have much of a grasp of english said check the firewall
I am not expert with firewalls in this thing it has allow on lan
So maybe something else...
at that time he never replied to anything else maybe a time zone thing. I have to make a decision on a new router and give this thing back I was just hoping a simple setup to give me a few days to decide on a new router.

Has anyone got any ideas on what might be causing this? I tried 2.4 ghz with my phone and it got in and received an IP
and shows up as the second device. I tried a tablet same thing got an ip but anything on hard wired lan can't get anything from the dhcp server.
I drug my reolink security device in and plugged it into my old asus router and bing IP listed as device in dhcp.. plugged it into this device thru lan and nothing

[Assistant]
Did you do a factory reset before you started using it? See: https://docs.gl-inet.com/router/en/4/interface_guide/reset_firmware/.
After reset, do a manual configure. Note that if your NAS uses a static IP address you will need to modify the DHCP settings og the router to not interfere with the NAS IP address.
Did the "friend" have any clients plugged into the Ethernet ports? Many folks just use the WIFI and there could be a problem with the router that was never discovered

this is new. He got it to use as an entender of something. So I was the first use. I hard reset it anyway before updating it to latest firmware thinking may its a patched issue. Set it up and everything seems to be fine but it just allows one hard wired ip from the dhcp. Its ok I am seeing him tomorrow to give it back. I bet he will try and get it to run, if not he can return it. I know he will get a kick if it works and he will slam me for not seeing it LOL

So, out of curiosity, how do you have it set up in relation to the opensense box? An opensense firewall plugged into modem/ONT/PON is usually going to act as a firewall, so you'd then only need the router set up as an access point!


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: 16 to 24 port L2 Managed Switch Recommendation

First post here...

What are a few good 16-24 port gigabit L2 managed switches that are quiet/efficient to look for in the used market? I am redoing my home network to a new server closet with a rack and now need more capacity for making everything a homerun. I would really like to get a rack mountable used upper-grade switch but I don't want to get something that has noisy fans or draws way more power than I actually need. Using PFSENSE for router and No POE required and mainly just using VLANS and a NAS on network so needs are super simple. The OCD in me still wants it to look good though

[Assistant]
Lightweight with a decent warranty..

https://www.netgear.com/business/wired/switches/16-port-switch/

I have a Cisco SG350-28P. Bought it 2nd hand and extremely happy with it.

ddaenen1 said:
I have a Cisco SG350-28P. Bought it 2nd hand and extremely happy with it.
I just picked-up (for next to nothing from a friend) a slightly older, non-POE version of what you have. Seems to look and work like new really. I got a Cisco SG300-28. I don't believe there is anything the SG350 does over the SG300 that I personally need and the non-POE is fanless. Sure, it is EOL now, but my home network needs are small and outdated also!


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Troubleshooting 2.5 Gbps Network Speed Issue with NAS and RT-AX86U Router

I have a RT-AX86U router with one 2.5 Gbps port that I can configure either for WAN (internet) or LAN (internal network). In my setup, I want to connect it to a NAS server with Proxmox, which also has a 2.5 Gbps network card (FENVI 2.5G PCI-E) and SSD drives for faster file transfer. And that's exactly what I did.

When I ran tests with iperf3, it turned out that the connection only reaches a maximum of 1.46 Gbps, which is unsatisfactory to me.

Troubleshooting:
I assumed it was the fault of the Chinese network card in the NAS server, so I ordered the TX201 TP-Link, but the same issue occurred.
I tested the FENVI 2.5G PCI-E card from the NAS server in another computer running Windows, but the same issue happened.
I installed Windows 11 on the NAS server, and again, the same problem.
I replaced the cables with other CAT5e cables (tested 5 of them), but the same issue.
I ordered 3 flat CAT7 cables, and once again, the same issue.
I’m now at a loss. On the router, I can see that the port is operating at 2.5 Gbps. On the NAS server, when I run the command to check the speed ethtool enp1s0 | grep -i speed, I get the result: Speed: 2500Mb/s

I’m really stuck and don’t know what to do next.

[Assistant]
You may have discovered, as I have, that the 2.5 Gb port on the AX86U is less than optimal. Same with the 2.5Gb port on the AX86U Pro. I have tried to use those ports for Ethernet backhaul with tested CAT 5e cables and, in time, have had the connection fail. Even connecting the 2.5 Gb port to a 1 Gb port has caused connection issues never mind the data transfer rate.
So, best of luck with your endevors. I doubt that you will find a solution. May be better off to stick with using 1 Gb as this is sufficient for most home networks.

Running the iperf server on the router is not a valid test because iperf will become CPU limited. You need to test LAN to LAN transfers, which admittedly is quite difficult as you'd have to use multiple clients and aggregate the results.

You will also get better results from iperf if you use parallel streams, e.g. iperf3 -c 192.168.1.1 -t 120 -P 8

And if running iperf on windows, you should be using iperf 2 according to the developers. On linux and unix, iperf3 is appropriate.
Yes, you must use parallel streams to saturate the link.
You could also avoid the router all together by using a 2.5 GHz switch in place of the asus port. This would avoid loading up the router switch as well and is more likely to give you packet transfer at line speed. It would give all your devices a 2.5 GHz uplink to the router as well, although a new bottleneck will show up.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: News U.S. Weighs Ban on Chinese-Made Router in Millions of American Homes (TP-Link)

https://www.wsj.com/politics/national-security/us-ban-china-router-tp-link-systems-7d7507e6?mod=hp_lead_pos1

[Assistant]
I saw that in the news today as well. The fact that TP-Link equipment is less expensive and appears to be well supported is compelling, but I worry about products where the features are too good to be true for the price.

Here is a shorter article that summarizes the core security issues and the Chinese company not fixing known security flaws of the TP-Link routers.

Most popular home internet routers in US may be banned over security risks
The most popular home internet router brand in the US may be banned from sale in the country over fears...
9to5mac.com

Objects in Space said:
Here is a shorter article that summarizes the core security issues and the Chinese company not fixing known security flaws of the TP-Link routers.

More moral panic in the US over things "China" related at the moment... whether it's Huawei, ZTE, others - just earlier today, more sanctions against China Telecom doing business in the US - it's just a thing, and I get it.

Mixed feelings here, as there is legit concern for any consumer networking gear having security issues - the code is complex because of creeping features - e.g. let's do network VPN, filesharing, let's open up the code for third party scripts, etc...

TP_link isn't the only one there - and we've seen more that a fair share of issues with other vendors such as Netgear, Cisco, etc...

Some of the issues are upstream in the Chipset Vendor SDK's, others are inside the Vendor code, and of course, for more "open" devices, the third party scripts that are resistant to audits.

Again, as I say, Moral Panic - are they legit bugs, or are they intentional backdoors? If we go down that path of backdoor issues, then gear from every company is suspect...


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: I need some help with a new router and network card

Hi, I’ve just been contacted by my ISP and they’ve told me that I’m being forced to upgrade from 900mbit down and 100mbit up, to 2 gig down and 2 gig up.

They are going to give me an eeromax 7 and an eero pro 6e for free, now thats all cool, but my pc only has gigabit ports, I did plan on building a new pc in the summer, I’m just recouping as xmas bankrupted me, anyway, the problem I face is that I now need a new network card that will support the new speed and I don’t know where to start with network cards as the last time I had to buy one was 20+ years ago.

So my question to the knowledgeable masses out there is in two parts, what would be a good network card that would handle these speeds, but remembering my pc is only pcie x3. Can someone point me to a good reliable network card and it has to be a good reliable one as I get triggered if my internet craps out which it basically never does, but my entire life is built around my network and any problems would stroke me out so does anyone have any good suggestions ? and my second question is below.

The eeromax 7 and the eero pro6e, I’ve never heard of them before and I have no idea if they are good or not, does anyone have experience with them and if so are they any good ?

I already have an Asus mesh setup of an Asus GT-AX 11000 ROG Rapture and a RT AC86U, they work perfect and I’ve never had a problem with them, but since it only has a 1gig wan port it’s not enough to keep and use with the new speeds, the GT AX11000 does have a 2.5 port, but it!s sadly not a wan port.

So can anyone answer those two questions, name a good 2gig+ network card as I’m getting upgraded next Friday and I need to get something before then and is the free routers they are giving me any good ?

Thanks for reading

[Assistant]
wtfnub said:
They are going to give me an eeromax 7 and an eero pro 6e for free, now thats all cool, but my pc only has gigabit ports, I did plan on building a new pc in the summer, I’m just recouping as xmas bankrupted me, anyway, the problem I face is that I now need a new network card that will support the new speed and I don’t know where to start with network cards as the last time I had to buy one was 20+ years ago.
You don't need a new network card. The ports on the eero's are backward compatible with gigabit ethernet. Sure, you'll "only" be able to download at 1Gb to your PC but it'll still work.

The 2.5GbE port on the GT-AX11000 can be assigned to the LAN or the WAN, but you'll probably not need that if you use the eero's instead.

ColinTaylor said:
You don't need a new network card. The ports on the eero's are backward compatible with gigabit ethernet. Sure, you'll "only" be able to download at 1Gb to your PC but it'll still work.

Hi, thanks for replying.

Yes, I know the ethernet ports are backwards compatible, it’s just that I would like to take advantage of the new speeds and the only way I can do that is to get a new nic or wait until I can buy parts for a new pc and I don’t have the free cash to do that just now, sadly

I’m rocking a barely used, maybe 200 hour max built in 2015 i7 6700K with an m.2 ssd and some sata ssd’s and an rtx 3070ti that was bought a few years ago when they first came out and which has had like 5 hours of use.

My nuc gets more use than the pc, a completely silent intel i7 8559u with not one, not two but 18 hard drives connected to it just to see how stupid I could be, all powered via powered usb hubs or their own power supply. I use my phone or ipad to control it and ok the nuc is old now, but it’s a little beast of a thing and it never goes above 40oC which amazes me since it has no fan after I stuck it in to an akasa turin case.

Since you mentioned the eero, do you know if they are any good ? As I have no clue about that brand at all.

Thanks

if you decide to add a 2.5 or 10Gbit nic to the 6700k, make sure it comes with win7 drivers or linux drivers.. W10 drivers should not be an issue.
i run the same chip and have a hard time saturating a 1 gbit link except during testing with iperf.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: HTTPS issues in own LTE-network only

Hello everyone,
I have a configuration with 2 routers.
My first router is an LTE access point and router connected to LTE network Orange.
This router manages subnet 192.168.1.x (net1). This router is not wireguard capable. This router is also not bridge capable.

Within this subnet I have got a second router(192.168.1.100 in net 1, 192.168.8.1 in net 2) managing subnet 192.168.8.x (net 2)
192.168.8.x contains my full local network.

This second router build-up a connection to my VPN provider for getting a fixed IP and domain. All the traffic is routed to my NAS 192.168.8.200.
Port forward rules from the VPN client(192.168.8.1) to the NAS are working.

From outside(Internet) and from 192.168.1.x everything is working well. The NAS answers to the domain.

BUT if I try to access my NAS with any computer or smartphone connected to Orange network, connection to https(port 443) is blocked/refused.
Connection to ANY other customer port (500x) is ACCEPTED.

Just need help to understand why the certificate is refused in this configuration. Some wrong DNS setting ?

Thank you.

[Assistant]
steph072 said:
BUT if I try to access my NAS with any computer or smartphone connected to Orange network, connection to https(port 443) is blocked/refused.
Connection to ANY other customer port (500x) is ACCEPTED.

Just need help to understand why the certificate is refused in this configuration. Some wrong DNS setting ?

When you say "connected to orange" do you mean 192.168.1.XXX net or 192.168.8.XXX net?

Because you can't access the NAS at 192.168.8.200 from 192.168.1.XXX net because the VPN router has forwarded the port.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Router recommendation need.

Hi,
By the end of the week I should be on a fibre 900 package so I'm trying to work out what to do re my router.
Currently I'm running Opnsense and it does work very well but I'm not sure if the hardware will support the new connection. My plan is to test it but also have a backup in case my current server isn't capable.

My options are to buy a new server for opnsense or get a router.
My requirements are:
Support Full Fibre - FTTP 1800/120 to allow for future upgrade (PPPOE)
Port forwarding based on specific external IP addresses
IPsec VPN and restrict which Lan devices have access
Wireguard VPN and restrict which Lan devices have access
All the usual DHCP, NAT etc.

Has anyone any suggestions for this ?

Thanks

[Assistant]
zMaliz said:
Has anyone any suggestions for this ?

Upgrade your OPNsense appliance.

Tech9 said:
Upgrade your OPNsense appliance.
Thanks. I'm looking at an N100 based server but there are so many options, and I've no idea which are any good !

You never mentioned what you currently have so I have no idea what is going to be an upgrade for you.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Trying to get split tunneling to be more reliable on OPNsense.

I have an OPNsense with rules setup to route the majority of my traffic out through the gateway WAN_VPN, and the sites I specifically override out through WAN. I'm doing this by having unbound setup to forward specific site queries to dnsmasq.
in /usr/local/etc/dnsmasq.conf/dnsmasq-ipset.conf I have domains saved to the file like so:

Code:
ipset=/US-website.com/clearnet

no-resolv
server=1.1.1.1 // set to the same DNS as unbound

I then setup an external alias with the name clearnet in OPNsense, and set a firewall rule for 192.168.1.1 destined for clearnet domains to go out through WAN. This works about 80% of the time, but occasionally, I don't catch the site, and end up getting directed to the foreign site still.

Some example sites I'm having the issue with are Fidelity.com, interactivebrokers.com, bankofamerica.com.

I must be missing a few ip addresses those domains can resolve to.
How can I make this more accurate? Do I need to detect their foreign ips, and redirect those back to their US site?

[Assistant] Using Centralops I managed to find www.interactivebrokers.com.edgekey.net . I do I need to add that to my alias as well? Going to that URL just gives me an error message.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Two Routers Can't Get Bridge Mode Working on the GPON

I have two routers connected in series. One is a GPON with crap connectivity. It only supports 802.11 ac. It has a GPON but I can't get tech support for the life of me to give me the correct data to get PPPoE working over bridge mode.

Those issues aside - I have the external router set to give the internal router a static IP and DMZ to that IP. The internal router is showing Open NAT on my Xbox so no issues there. I only keep wifi access enabled on the external router in case I need to log in. Could I disable NAT on the external router or would that have some effect on the internal router? Not looking for pros or cons really, just can it be done without affecting internet that is being provided by the internal router.

[Assistant]
Apparently turning off NAT kills functionality. Kids are watching TV so I won't muss with it

Then what hardware is this?
I see that one of them is the gt-98be pro router, but what is the model number of the gpon router?


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Routers, CAT5 and electrical wiring

I'm about to upgrade my main panel to 200 amps. Since code requires that the meter and mast be located at the front of the house, the main feed will have to be routed to the main at the back of the house. Wire size is 2 aught (2.0).

I have a few options for routing the main wire, one of which is the attic, which will be the easiest. The (potential) problem is that I have several routers and cabling sitting on a shelf about a foot below the ceiling directly under the path the main wire would take. The ceiling is 5/8 sheetrock with R30 Roxul (specialized rockwool) insulation.

The question:

Will the wiring running a foot over the router shelf cause network interference?

Thanks for any info.

[Assistant]
Doubt it. The AC power will be 60 Hz or so, depending on where you live exactly. That's quite a few orders of magnitude different from the frequencies wifi uses.

testing123 said:
I'm about to upgrade my main panel to 200 amps. Since code requires that the meter and mast be located at the front of the house, the main feed will have to be routed to the main at the back of the house. Wire size is 2 aught (2.0).

I have a few options for routing the main wire, one of which is the attic, which will be the easiest. The (potential) problem is that I have several routers and cabling sitting on a shelf about a foot below the ceiling directly under the path the main wire would take. The ceiling is 5/8 sheetrock with R30 Roxul (specialized rockwool) insulation.

Thanks for any info.
Click to expand...
Should not cause any EMF interference. AC in parallel cables tend to cancel out any EMF. Your run will likely be three conductor with ground. The ground being strands wrapped around the conductors: two hot and a neutral. Make sure the run is connected to a ground rod at each end. Local codes are minimum requirements. And, for 200 AMPS you will need 4/0 aluminum cable which is less expensive than 2/0 copper.

Get a licensed electrician to do this job.

We cannot advise on this forum for electrical and code issues. This was talked about years ago here. It is a liability issue for the forum.

General advice -
You do not want nominal 200 amp cabling running through your attic without protection if you have need for mechanical access in the attic - HVAC, storage, etc. Likely should be in conduit.
Lightning hit on power line - i would rather have the drop outside in conduit or underground in conduit. Preferably underground. Put in a lightning surge supressor (MOVs) box at the main panel while you are at it. Make sure they do all conductor pairings.

Get a licensed electrician to design and install your upgrade.
@thiggins


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Before digging down into s/w

I wanted to thank one of your senior members for his very wise/oldschool words. I had a lot of bad stuff with my Asus router 68u not send out properly from my pc. I had recently had to reset my router cos I was trying to set up a mesh wifi - thats another story. With all my messing about I started having probs - If it aint broke dont fix it KWIM
days wasted - then came here - hours wates trying to register new name - eventually got thru to admin here - reported on here.

Sadly - although I had a name registered I was not manually approved yet - board problem. But while I could browse some useful topics, the board didnt remember where I had been, nor did I. So Ive lost the place to say thanks to the member for his advice

Silly but simple - turned out my problem was the old ethern cable between modem and router - short 1m but it looked like a cheapo kit with a twisted rj45 plug one end. So I put in a new one 2m long cat 6 - and most problems went away.
As the member said - when your network plays up - start with basics. unplug all cables power cycle modem (unplug router) - the plug in router and power up, the log in pc. plug in devices (hope I have the right order pls advise).

Now I have to get my W11 into stable order as a recent upgrade to 24H2 has left me uncomfortable - pc is slower startup from sleep and browser Opera freezes up - didnt do that before. So that what meddling has done for me.

So to the member I cant find - but sure you will know who you are as your were VIP? Thanx 10^6

[Assistant]
All your previous posts are in this thread:

that was hard work
trying to register on this board took up ca 1 hour. Your system sent me to my email to confirm which then sent me back to your board said "oop we cant confirm your email" I retried for 6 times over an hour and eventually your system woke up and confirmed my email (I dont have problems with this...
www.snbforums.com

robintes said:
Now I have to get my W11 into stable order as a recent upgrade to 24H2 has left me uncomfortable - pc is slower startup from sleep and browser Opera freezes up - didnt do that before. So that what meddling has done for me.
Just a small word of advice: don't use Opera as a browser. My Godson recently contacted me as the PC i bought for him was hacked and his game accounts blocked by some Russian a-hole. Eventually, i figured out that Opera was among the responsible of all the crap he had on there with tons of spyware and stuff. Stick to what works well, Chrome, Firefox or even Edge if you can't help yourself.

Thats very alarming as I had started using Opera cos FF was extremely slow in starting up (I shutdown my workspace every night cos W11 insists on doing things in the bg when it detects inactivity. I have had incidents when the m/c had restarted and hung as it needed permissions.
If I had say a dozen tabs open and then shutdown, next morning it might take 15mins to reload all the previous pages. I wonder if it has improved?

Can you or anyone else give more instances of Opera vulnerability (I thought it was based of FF engine anyway?


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: cant seem to find a good router..

i need a good wired router suggestion for a 1.5gig internet connection( multiple 2.5gig ports) . I'm not really interested in asus,netgear,tplink or anything of that nature. id like ubiquiti, but they seem to be limited on 2.5gig ethernet ports and the one device i found runs extremely hot and caps at 1.5gig MAX on a good day.. is there any good easy to setup with a web interface routers out there that will suit my needs.

[Assistant]
Maybe something running pfSense or OPNsense?

You can bring your own mini-PC-type hardware, or if you're not into figuring out exactly what will work, I'd recommend one of Netgate's pfSense "appliance" boxes. I bought their 4200 a few months ago and have been quite pleased.

That's an option if it's easy to setup. Home based residential routers are just so easy but feel like they lack in power and speed.. Asus still the number 1 home router ??

redbeard916 said:
That's an option if it's easy to setup.
Well, easy is in the eye of the beholder maybe. Netgate's documentation is quite complete, and for my taste miles ahead of the docs from Asus, Ubiquiti, or anything else I've worked with in this space. But it might be a bit of a shock if you've never set up individual firewall rules before. (OTOH, if you aren't trying to provide network servers the defaults are likely just fine.)


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Pro-sumer WiFi 6/6E routers with support for VLAN, VPN, SSH, and some custom firmware

I wanted a replacement to Ubiquity's UniFi Dream Machine (non-Pro), which was a pro-sumer router with support for many customizations, VLAN's, SSH access, VPN's, and allowed use of custom on-boot scripts, but it suffered from some major deal-breaker issues.

I ended up with ASUS AX86U Pro, which supported most of what I wanted with the latest 3.0.0.6 firmware, but that was my choice because I wasn't able to find an alternative within $200 range. Most routers that include features I want are expensive enterprise business routers and I wasn't able to handle pfSense as advised in another thread I made. DD-WRT stopped supported newer routers. ASUS was the only alternative I could find.

Are there any WiFi 6/6E routers within $200 range that at least support VLAN, VPN, and SSH CLI commands?

[Assistant]
Check GL.iNet GL-MT6000. It's currently $123 on Anazon US. Runs OpenWrt base firmware and has vanilla OpenWrt image available.

Flint 2 (GL-MT6000) | High-Performance VPN Router
Experience blazing-fast VPN speeds and full OpenWrt customization with Flint 2, our best Wi-Fi 6 router yet. A new realm of power, freedom, and security.
www.gl-inet.com

New hardware on MediaTek Filogic ARMv8 SoC inside, 2x 2.5GbE ports, two 2.4GHz/5GHz 4-stream radios, 1GB RAM with 8GB eMMC.

I have one GL-MT2500 gateway with similar firmware, by the way. Plenty of options and nice UI on top of OpenWrt base. Used as VPN exit point in another country currently, no complaints about speed and stability, uptime in months. Mine runs on stock firmware, good enough for the use case.

Thanks!

Do they support Secure Boot and similar technologies? Secure Boot and locked firmware are some of the main reasons DD-WRT and OpenWRT stopped supporting newer WiFi 6 routers.

This is what they use:
GL-MT6000 - uboot source
Couple of folks were concerned... Discussed with the GL-Inet folks, so here's the u-boot source code... https://github.com/gl-inet/mt798x-boot For devs, feel free to review the source...
www.snbforums.com

OpenWrt support page:
[OpenWrt Wiki] GL.iNet GL-MT6000
openwrt.org


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Using pfSense with a L3 core switch

I've been running pfSense with a TP-Link T1600G-28TS in managed L2 mode as my core switch for a while now where interVLAN routing including mDNS is managed by the pfSense box. Since that switch has L3 capabilities, I'd like to learn how to use them should the day arise when video streams need to cross between VLANs and the pfSense struggles with it.

From several posters here, it seems that pfSense does not play well with L3 switches and that extreme care should be taken setting up a network with L3 switches. Where could I read more about the issues and possible solutions?

If this is too dangerous to attempt in my "production" home network, I could run pfSense on my ESXi server and could borrow a Juniper EX2300-C-12P L3 switch to create an isolated homelab network and use that as the learning vehicle.

Though I may soon realize that this is too much work to solve what is today a non-existing problem

Thanks

[Assistant]
I suggest you buy a Cisco SG350 or a SG350X switch if you want help. I have already posted how to do it with examples. Just follow the examples. I would not count on TP-Link really working. The 1 device I used of TP-Link the coding was not very good.

unmesh said:
Though I may soon realize that this is too much work to solve what is today a non-existing problem

You most likely will. What hardware your pfSense firewall runs on? On a home network for routing between VLAN's I would rather increase the bandwidth between the firewall and the switch. Anything i5 2nd Gen and above can route multi-gigabit, if you have proper NIC's to transport the bits in and out.

It is only a fanless Intel 1.5GHz 2-core Rangeley box with two i354 integrated NICs and two i211 NICs.

iperf3 shows it can forward at about 900Mbps between any two ports or between VLANs on the same port. Lightweight pfBlockerNG-devel config running but not much else.

CPU is usually at 15%


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Archer AX11000 not getting full speed (TP-Link)

I currently have the Archer AX11000 with firmware version 2.1.6 Build 20230907 rel.65510(4555) and 1Gig download from my provider. I can't get the full speed of my ISP or even close to it without a switch/a 2.5gbps network card, because even with Qos off and changing the duplex speed to 2.5gbps i still only get about 500/600mbps through the router. A friend of mine lent me the switch, card and brand new ethernet cables and the highest i can get through them is 940mbps. TP-Link support said about factory resetting the router, which i did this morning and it's still the same. The speed through my ISP hub alone is over a gig, so the ISP isn't the issue. Am i missing something? Thanks.

[Assistant]
Not very clear what the switch and the 2.5GbE card are used for. This router can do easily Gigabit, but it has single 2.5GbE WAN port. Wired devices will be limited to 940Mbps, wireless devices - depends on client capabilities and environment factors, 500-600Mbps is very good.

940 Mbps sounds about right for speed, if your ISP isn't over-provisioning. I get about same speed on my 1 Gbps plan here, using a MikroTik router. Even if WAN is 2.5 Gbps, you won't get more than a Gbps on wired LAN due to LAN ports being only 1 Gbps. If you have a very fast AX wifi, you can pull more than a Gbps assuming your ISP plan is more than 1 Gbps.

TP-Link 2.5 Gigabit PCI Express was the card and the switch was a Brostrend one from Amazon. I've seen people have this issue on the TP link forum and they managed to fix it, i tried those fixes and nothing worked for me. Prior to my ISP hub dying i did get a gig or just over through my router, since it's been replaced i can't get that speed and it's only possible through my ISP hub. I have also seen people being able to get 1gig on my ISP through a router on the forums, but maybe they have a better router etc but i don't really understand it. Thanks for the replies .


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: FTTC Router - ISP router or opnsense ?

Hello.

I'm currently on a UK 80/20 FTTC using a small microPC running opnsense.
This is working well, but I can now get FTTP upto 1600 Mbps so I'm looking at my options.

I'm planning on a 900 Mbps connection and am wondering if I should use the ISP router which is a TP Link EX820V, or upgrade my opnsense server to support 1 - 2 Gbps.

Anyone any thoughts or suggestions on this ?
If opnsense is the better option, does anyone have any advise on a suitable server that will run these speeds via PPPOE ?

Thanks

[Assistant]
If the new service comes with VoIP - you may have to use the ISP provided gateway. EX820V is a modem/router/VoIP device.

Thanks for the reply.
They are quoting with Voice, but I'm trying to find out if they can provide it with out.
I run a SIP phone from home to an online server, and I have a local test PBX that I need to work.

zMaliz said:
Any one any advice on this ? Thanks

Use their GW...

For WiFi coverage you can always look at access points...


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Does the Default Gateway Matter?

Asus router came with 192.168.50.1. I'm used to the old Linksys gateway of 192.168.1.1. I changed the Asus gateway to 192.168.0.1, since that's what I thought the majority of home routers/networks were. I understand it's all a local network either way, but was wonder if I was missing anything that I should know about.

[Assistant]
The subnet can be more or less anything, within reason. That being that it has to be one of the address ranges reserved for private use. So it could be 192.168.0.0/24, or 192.168.1.0/24, or 192.168.50.0/24, 10.0.1.0/22, etc.

Within the subnet you decide to use the gateway address can be any of the available host addresses. So if your subnet was 192.168.0.0/24 your gateway's address could be anything from 192.168.0.1 to 192.168.0.254 (but it can't be .0 or .255).

So the short answer is, it doesn't really matter. I'm guessing that Asus changed to using 192.168.50.0/24 to avoid conflicting with other equipment that often use 192.168.0.0/24 and 192.168.1.0/24.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: DIY Router with Supermicro X10SLH-N6-ST031

A long time ago I got tired of store bought routers malfunctioning on me, so I started to use PCs as my router as was exposed with this concept a long time ago in the field.
One day while I was surfing around on ebay, I came across a server recycler "The Server Store" who I remembered seeing back in the days of the IT/Tech swap meets in the 1990s.

The Supermicro X10SLH-N6-ST031

This $60 find was hard to pass up.
3 x 10Gb with one interface having a 4 port switch, for a total of 6 10Gb ports plus 1 1Gb and RJ45 serial for out of band management.
I also went on their web site and purchased a 1U bare bones with power supply version ($160) so I can experiment with lower wattage CPUs that are available for the socket 1150. But eventually, I will put it into a PC case because I'm not a fan of the server fan noise.

Putting this board in a regular case took some looking around, as I had to find something that could handle the "Flex ATX" size board (9.6"x12").
CPU cooling was necessary to update but that is a non-issue since this heat sink profile was used on the socket 1151 intel processors.
Selecting a low cost power supply was not easy, as reading the manual I needed 3A of standby USB power so I ended up with a 650W power supply. Since I am not putting a graphics card in it, the power supply will initially start at 150W. Looking at how much power supply I have left also came into mind of adding and external 12V power block to power the cable modem, wireless access point, a raspberry pi server and switches.

[Assistant]
That will make one hell of a pfSense or OPNSense firewall/router

ddaenen1 said:
That will make one hell of a pfSense or OPNSense firewall/router
I'm sure its not going to be a disappointment. I'm going to run IPfire on it with the tweaked network driver settings that I obtained by a tech in the hosting sector. He laugh when I told him I was going to turn it into a router and put a 2.5G nic card in for my cable modem. Even though this is pretty aged in tech (4 Gen I-core or 3/4 gen Xenon) it still cooks.

My choice for a new gateway server that I was going to get was cool too, but at $60 for the board (with processor), I couldn't pass that up.

X12SDV-8C-SPT8F
not bad, Originally I was thinking about Router/Nas server with this, but I might get one of these one day and make a really nice NAS with it:

Intel® Xeon® Processor D-2733NT, CPU TDP 80W, Intel Quick Assist Technology
Up to 256GB Registered ECC RDIMM, DDR4-2667MHz; Up to 512GB LRDIMM LRDIMM, DDR4-2667MHz, in 4 DIMM slots
1 PCIe 4.0 x16
2 PCIe 4.0 NVMe x8 SlimSAS Internal Port
1 OCuLink Connector (4 SATA/PCIe 3.0 x4)
1 M.2 M-Key 2242/2280 (SATA/PCIe 3.0 x4)
Quad 1G RJ45 with Intel® I350-AM4
Dual 25G SFP28 with Intel SoC
Dual 10Gbase-T RJ-45 with Intel® Ethernet Controller X550-AT2

Make sure to either change out that heatsink or have it in a 1U case with proper fans...


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: How does Netfilter handle BROUTE chain Link Layer data in Network Layer?

There is a way to use Netfilter EBTables BROUTE chain to force Link Layer data to go directly to Network Layer for filtering, but Link Layer can filter frames that Network Layer cannot. If I use BROUTE for LLDP frames, then what does Network Layer do with such frames? IPTables only works with Layer 3 packets and ARP. What can it possibly do with LLDP frames or any other Layer 2 information it receives? Here's the diagram:

[Assistant]
Recall that LLDP is typically over the LAN only, and not forwarded...

It's a security risk to do so otherwise.

Yes, it is, and for a very long time UniFi Dream Machine developers forced LLDP over WAN. Crazy...


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Least expensive wired-only gigabit router? (TP-Link Festa FR205? Others?)

I use a separate VLAN and network ID for the LAN side of my DSL modem. (Why? Because assigning the LAN side of the DSL modem an address on my "main" network does not work: The LAN side of the DSL modem is not pingable and results in weird connectivity problems. The fix was to put the LAN side of the DSL router on a separate VLAN and network ID. The DSL modem is in transparent bridge mode.)

Currently I use an old TP-Link TL-R402M wired router to route between my "main" network and the network on the LAN side of the DSL modem, but I want to replace it because A) It's way past end-of-life and B) it's not gigabit (it's a potential future bottleneck).

TLDR: I'm looking for the least expensive wired-only gigabit router that accepts static IP addresses on both the WAN and LAN interfaces.

From a quick bit of research, it looks like the TP-Link Festa FR205 will meet this requirement.

Questions:

1) Has anyone used the FR205 that can comment on it?

2) Any other suggestions?

Thanks!

[Assistant]
Bill_Stewart said:
1) Has anyone used the FR205 that can comment on it?

This is a brand new line of products not available to purchase yet in many countries. Based on description seems like Omada with cloud controller and more user friendly UI.

TP-Link do not have a reputation for long-lived device support. If "it's way past EOL" is a top-of-mind concern for you, I'd suggest shopping elsewhere.
Omada is the same company, but it's their business-focused division, and that product line has better street cred on this point.
Other brands to think about: Ubiquiti, Zyxel, MikroTik. Or you could buy a generic mini-PC and run pfSense or opnSense on it.

tgl said:
TP-Link do not have a reputation for long-lived device support.

This new product is from business series. Perhaps closer to Omada support and development cycle than to consumer Archer/Deco. I’m personally interested. One more alternative at least.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Notification of New WIFI Device

I would like to find a free or cheap PC utility that will simply notify me whenever a new MAC connects to my home network. Any suggestions?

Thanks

[Assistant]
Use the router log notification abilities ? Usually can direct at least to a local email server on your lan and look at on your phone.

I know the Deco (TP-Link) and Asus Android apps can push notifications for this when set up.

TPerk100 said:
I would like to find a free or cheap PC utility that will simply notify me whenever a new MAC connects to my home network. Any suggestions?

Thanks

Would this reporting be ambiguous when clients are using randomized MACs?

OE


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: How can I successfully change the CR1000A router PW?

Can't figure out what forum this should go in.

How can I successfully change the CR1000A router PW?

Are there password configuration requirements for the CR1000A Router? …like no special characters etc.? If so, what are they?

Under Advanced, System Settings, User Settings, using the PW Generator in Bitwarden PW Manager, I changed the PW from the factory default to a more complex one. I applied the changes, then logged out of the router.

Trying to log back in, the router would not accept the new password, NOR would it accept the factory PW. So I had to push factory re-set button on rear of router for 15 seconds. After the router came back up, it would not accept the factory default PW. Tried numerous times. Would not accept my “new” PW either. Not knowing what else to do, I factory re-set the router again. Now is does accept the factory PW.

However, copying and pasting the PW would not work! I had to enter the PW one character at a time. I had not tried this after the first re-set.

How can I successfully change the router PW?

Thanks

[Assistant]
Quoting from the CR1000A user manual:

7.1b/ HOW DO I CHANGE THE PASSWORD ON MY VERIZON ROUTER UI?
To change the password:
1. On the main screen, select Advanced, then select Users in the Utilities section.
2. Click the Edit in the Action column. The User Settings page displays.
3. Edit the user name and set a new password.

Perhaps this is out of date (my CR1000A is offline so I can't check), but it doesn't square with what you said you did.

As for password contents ... dunno. I've been using a password that has letters and numbers, but no special characters. I wonder whether your super-duper password generator made something that was longer than the router likes.

tgl said:
Quoting from the CR1000A user manual:

7.1b/ HOW DO I CHANGE THE PASSWORD ON MY VERIZON ROUTER UI?
To change the password:
1. On the main screen, select Advanced, then select Users in the Utilities section.
2. Click the Edit in the Action column. The User Settings page displays.
3. Edit the user name and set a new password.

Perhaps this is out of date (my CR1000A is offline so I can't check), but it doesn't square with what you said you did.

As for password contents ... dunno. I've been using a password that has letters and numbers, but no special characters. I wonder whether your super-duper password generator made something that was longer than the router likes.
Click to expand...

Tgl, thanks for your response.

I have the same user manual and instructions, and attempted to follow them, however they are indeed out of date. There is now no Utilities section under Advanced. Did a net search to find out that one has to use the procedure I described. User Settings is under Advanced, System, System Settings. See Attached Screenshots.

I have 45 devices that I have re-named. I had made some other changes also. Right before changing PW, I did a Router Settings Backup to a local file. I had to use this to restore my settings after the Factory Re-set. Am not too eager to Backup Settings again, and then change PW again until I am sure of what’s going on here.

Get this….Having to type Factory PW character by character was weird. I just now decided to “test” this again. I logged out of the Router, and tried to log back in with Bitwarden PW Manager. ( I have 894 PWs in manager and manager fills them in on 893 sites, as expected ). It would not accept the PW. So, I copied and pasted PW from PW manager and again it would not accept the PW. SO…………I typed the factory PW from PW manager in character by character and it worked!! What the heck is this about? Never heard of such a thing. I bet that if I had typed my “new” PW in, it would have taken it, but I did not think to try this. After the Re-set, I only tried typing factory PW in as a desperate last resort.

When I logged in, I selected, forgot exact words, but it was something like “Keep me Logged In.” So. for the last few days, if I close the browser, I can click my desktop shortcut for the router and it brings Chrome page for Router back up…logged in.

I don’t know how important it really is to change the factory PW. Maybe I will change PW again to something different but not very complex. I don’t want to stay logged in, but I don’t look forward to typing in a 15 character complex PW.

I put this very same post on the Verizon Community, and on another Router Forum 3 days ago. So far, I have received no response other than yours.
Thanks again.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Router low performance wifi on AP Mode

Hello,
i have an Asus be98 router and wanted to use it in AP Mode so i can use a firewall gateway before it, i tested everything using a 1gbps pppoe connection. After i set it up i realized wireless is not as stable as in router mode, so i started debugging.

After speedtest i have realized that in router mode i get about 850mbps download, in ap mode with the same setup and same place for device test, i get 350mbps max (sometimes even lower), every time, i have used an iphone for test mainly but i have tested other wifi devices and had same results, on lan there is no difference in performance, just wireless is the one messed up, and only download so badly, upload not so much, it almost gets to the right speed for download, but rapidly always falling to the same low values.

So i continued debugging, tested the cables, they are brand new and they test fine running benchmarks on all the cables half a meter cat 7 & 8 anyway overkill, started testing all lan port inside the router maybe that was problem, still nothing, then even tested different gateways for inbound internet inside the ap, i tested a pfsense, an opnsense machine and even an asus axe16000 router to give internet to be98 that was in ap mode.
I have tested the devices with dhcp and static ip in ap mode, i have even tested everything in router mode but with dhcp, firewall and wan disabled, and just connected the gateway on lan ports.
(And yes on devices like be98 after changing to ap mode, i have re-enabled wifi7, and made sure all tests were made with the same wifi settings all the time, even tested all wifi settings combinations possible, hoped something there was at fault as a bug, but to no difference).
The same problem manifests itself on all bands 2.4, 5hghz and 6ghz so it isn't band specific, and tested last 2 firmwares from asus and last 2 from merlin/gnuton on both of them.

I then tested everything on axe16000 as well, to check if it's something device specific, even if it has a different speed from the start as its a different device, i still see the same behavior of low performance in ap mode or any method i try to use the external gateway.

So what gives? are both routers with ap mode with performance problems? even though i am an experienced dev, did i omit doing something like a noob? i mean im no network engineer; Or do i have wrong expectations from such a device? Did anyone hit anything like this and knows any solution? I wanted to use this router as it would be a fenomenal AP on paper compared to an actual AP.
Thanks.

[Assistant]
Well, I am sure others will chime in with buying hardware for its intended use (a router should be used as a router not an access point) and beta testing WIFI 7 devices. And, don't use a phone for bandwidth (speed) tests!

(I thought this forum was for wired-only routers?)

bbunge said:
Well, I am sure others will chime in with buying hardware for its intended use (a router should be used as a router not an access point) and beta testing WIFI 7 devices. And, don't use a phone for bandwidth (speed) tests!
Like i've said speedtest was the same with phone or laptop so why would you say phones are bad, just because cheap phones may have problems for a simple gigabit test? well i have tested on wifi7 and 6e as well, so i needed phones as well, and the problem was the performance on acces point mode that this routers have, i hoped others would know about this problem as well, so thanks for the advice, i'l remember phones are not to be used and routers with vlan tagging and acces point mode as well.

At least i got here as much help as from the company's support, the lesson, don't ever buy consumer hardware or ask consumer brands for help or other consumers, everything open source.
P.S. it may be in the wrong thread, sadly i can't delete this thread, i'l try by deleting account though if i can, or if anyone can help me at least delete this thread and account, thanks you very much and sorry for the fuss.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Strange DNS Issue w/ RT6600ax

I have a strange DNS issue with my network. There is no real impact because I have a workaround and it only affects some devices.

ISP: Comcast (Bay Area, CA)
Router: Synology RT6600ax
DNS: 9.9.9.9

For some reason this configuration has some sort of problem on iOS and iPad OS resolving some names. In particular, it has trouble resolving https://www.americastestkitchen.com - something particularly useful to me during this time of year! Every single other device in the house including MacOS, Windows, Android and Chrome have no trouble with this configuration. This is not the end of the world, there are other DNS servers out there, but I like Quad9 for security and privacy. Plus as somebody who always taps the "Did you check DNS?" sign in the office when things happen, I feel like the DNS spirits are out to get me.

Problem persists in every browser as well as the ATK app.
Problem resolves itself after changing to any other DNS I have tested (Google, OpenDNS, CloudFlare, ISP)
Problem persists no matter which safe browsing settings (hide my ip, etc) are disabled
Admittedly, I haven't exhausted all options because my alternative is to use Control-D. But wondering if anybody has seen anything similar to this in their home setup.

[Assistant]
Mokers said:
For some reason this configuration has some sort of problem on iOS and iPad OS resolving some names. In particular, it has trouble resolving https://www.americastestkitchen.com - something particularly useful to me during this time of year!

iCloud private-reley enabled?

Mokers said:
I have a strange DNS issue with my network. There is no real impact because I have a workaround and it only affects some devices.

ISP: Comcast (Bay Area, CA)
Router: Synology RT6600ax
DNS: 9.9.9.9

For some reason this configuration has some sort of problem on iOS and iPad OS resolving some names. In particular, it has trouble resolving - something particularly useful to me during this time of year! Every single other device in the house including MacOS, Windows, Android and Chrome have no trouble with this configuration. This is not the end of the world, there are other DNS servers out there, but I like Quad9 for security and privacy. Plus as somebody who always taps the "Did you check DNS?" sign in the office when things happen, I feel like the DNS spirits are out to get me.

Admittedly, I haven't exhausted all options because my alternative is to use Control-D. But wondering if anybody has seen anything similar to this in their home setup.
Click to expand...
FWIW, that site is not blocked by Quad9.

It intermittently fails to resolve on Quad9 however.
Code:
root@router:~# dig @9.9.9.9 www.americastestkitchen.com.

; <<>> DiG 9.20.0 <<>> @9.9.9.9 www.americastestkitchen.com.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 749
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.americastestkitchen.com.   IN      A

;; ANSWER SECTION:
www.americastestkitchen.com. 4  IN      A       52.223.46.195
www.americastestkitchen.com. 4  IN      A       3.33.193.101
www.americastestkitchen.com. 4  IN      A       15.197.246.237
www.americastestkitchen.com. 4  IN      A       99.83.183.127

;; Query time: 20 msec
;; SERVER: 9.9.9.9#53(9.9.9.9) (UDP)
;; WHEN: Fri Nov 29 23:43:59 EST 2024
;; MSG SIZE  rcvd: 120

root@router:~# dig @9.9.9.9 www.americastestkitchen.com.

; <<>> DiG 9.20.0 <<>> @9.9.9.9 www.americastestkitchen.com.
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 58045
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
; EDE: 22 (No Reachable Authority): (delegation americastestkitchen.com)
;; QUESTION SECTION:
;www.americastestkitchen.com.   IN      A

;; Query time: 140 msec
;; SERVER: 9.9.9.9#53(9.9.9.9) (UDP)
;; WHEN: Fri Nov 29 23:44:01 EST 2024
;; MSG SIZE  rcvd: 96


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: 10GB wired router options

Hi. So I currently have two WAN lines coming in and I have been using an ASUS wireless router for dual WAN. The dual WAN failover/load balance is not amazing so I am looking to replace with separate units. I have been looking at the TPlink Omada gear but I am a bit confused. It appears that the ER8411 is the top of the line and has dual 10GB ports and the rest 1GB. One of my lines is 1.1GB and the other is 1GB so currently I could use one 10GB port for the 1.1GB line and one of the 1GB ports for the other 1GB WAN and then use the other 10GB to a 10GB PoE switch to feed WiFi 7 APs.

I am trying to future proof things and I don't want to buy kit that needs swapping out in a few years time. It is likely that my WAN connections will go up in speed, at least over, say the next couple of years so even if my 1GB line goes up to 1.1GB then does it not render this router obsolete?

Can anybody point me in the direction of anything that would be suitable? Is a router with at least three 10GB ports a big ask for less than £500? Ideally I don't want to build my own I want something fully managed. Cheers.

[Assistant]
How about this? It has three 10 Gbps ports and six 2.5 Gbps ports.
QHora-322 | Next-Generation three-port 10GbE SD-WAN Router, providing a secure networking experience for NAS and IoT environments
The QHora-322 enables high-speed connection with 3 x 10GbE and 6 x 2.5GbE ports, while also providing enterprise-grade Mesh VPN networking. You can achieve multi-site LAN development via the cloud through QuWAN Orchestrator, with full software-controlled routing to build a next-generation...
www.qnap.com
Someone else in the forums got one. It also fits your budget.

I wouldn't overpay now for features I won't be using any time soon. By the time I need 10GbE WAN this router will be EoL/EoS already.

MimiC808 said:
buy kit that needs swapping out in a few years time.
DIY then. Take a PC and turn it into a router and you can swap out parts as needed. If you wanted you could get a dual 2.5GE for under $50 and solve your dual WAN issue. If you need 5GE then you can swap in a nic for that as well or go to the other extreme and put a 100GE into it. The options are endless and cheaper than dealing with plastic boxes you can't modify to fit your needs. You can go cheap and grab an old PC and put the cards in that you need or go custom and build a box from scratch if you have other functions you want to add.

All you need is Linux for the OS and a few modules to make it work. No more crappy FW updates to deal with. Stable connection. Tighter control on the firewall.

If all you wan to do is use it for routing then you don't need much horsepower on the CPU to accomplish is. Mine sits at under 1%. You can use it as a NAS as well if you throw some drives into it and add samba to the mix.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Asus AiMesh ethernet backhaul lan aggregation

Hello!

I have an ASUS RT-AX88U and an ASUS RT-AC5300 router. Both of them support the link aggregation, and both of them are supported by AsusWRT Merlin.

I'd like to make an Aimesh system, where AX88U is the primary router and AC5300 is the node. There is a lot of wall between the two routers, so for this reason, I only want to connect the two routers in a wired way (Ethernet only backhaul).

My question is, it is possible to use the Link aggregation to make 2Gbps bandwidth between the routers instead of 1Gbps?

Thanks in the advance!

[Assistant]
No. You can use WAN port only for wired backhaul.

[AiMesh] Can I set up wired connection between AiMesh routers (Ethernet backhaul)? | Official Support | ASUS Global

Tech9 said:
No. You can use WAN port only for wired backhaul.

[AiMesh] Can I set up wired connection between AiMesh routers (Ethernet backhaul)? | Official Support | ASUS Global
Can anyone provide more info on this? For example, why wouldn't you be able to use LAN LA on a gt-ax6000 (router) to WAN LA on a rt-ax86s satellite in aimesh?

You have no access to node settings. How you are going to configure the link aggregation there?


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: Can I connect to wireless networks?

Here's what I currently have -

Router #1 which connects to the internet. This is my ISP router. It has its own SSID that most of my home devices are connected to (TV, Amazon devices, laptops, etc). It's network is 192.168.12.1

Router #2 has its own SSID and is not connected to the internet. Its network is 192.168.1.1. I'm using this to connect a digital mixer and any devices I'll use to control the mixer (tablet, laptop, etc). This router is a distance away from router #1, so there will be no wired connection between the 2.

Is there a way I can have router #2 and any devices connected to it get to the internet through router #1?

[Assistant]
On router #1 set an fixed IP address for router #2 and set the router #2 in Access Point (AP) mode.

Ledvedder said:
This router is a distance away from router #1, so there will be no wired connection between the 2.

Is there a way I can have router #2 and any devices connected to it get to the internet through router #1?
If there is no possibility of a wired connection between the two routers then your options are limited to powerline adapters or a wireless bridge (I'm assuming MoCA is not an option for you).

Ledvedder said:
Is there a way I can have router #2 and any devices connected to it get to the internet through router #1?

Ideally, configure router2 as a wired Access Point (if capable) and wire it to router1 LAN using Ethernet or another wire technology like MoCA using coax cable. An Access Point is wired and can connect wired and wireless clients.

Otherwise, configure router2 as a wireless Repeater (if capable) of a router1 WLAN. A Repeater's WiFi capacity is shared between its wireless connection to router1 and its wireless connection to clients, so not as capable as a wired Access Point and more susceptible to WiFi issues. A Repeater uses a 'shared wireless backhaul' to router1 and can connect wired and wireless clients.

Another wireless option... if router2 can be configured as a Wireless/Media Bridge to a router1 WLAN, all router2 WiFi will be dedicated to the wireless backhaul connection to router1, and then only wired LAN clients can be connected to router2... no wireless clients. A Wireless/Media Bridge uses a 'dedicated wireless backhaul' to router1 and can only connect wired clients... useful for connecting wired media center clients to a distant router, wirelessly.

These options can depend on what modes of operation router2 supports. What's the make and model of router2?

OE


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: [tools] Waveform Bufferbloat Test

Here's another site that offers Bufferbloat Testing

Bufferbloat and Internet Speed Test - Waveform
Is bufferbloat causing issues with your internet connection? Run this test to find out.
www.waveform.com

[Assistant]
I don't trust online bufferbloat tests. Waveform shows me inaccurate up/down speeds (up to 50Mbps above my actual ISP speed) all the time. None of online bufferbloat tests is even close to real Internet use conditions. It's enough to set a speed limiter below ISP speeds and possible bufferbloat condition disappears. I use simple ping testing under load, nothing else. As long as ISP line is not saturated, ping tests are always low. Online bufferbloat tests only freak out people with no good understanding what bufferbloat is and when it may happen.

Worked quite well. Consistent results as compared to DSL Reports Speed Test. Waveform sure gives more info about test results and how to improve results.

I use fast.com then after the first auto run I changed settings to test loaded ping and upload. I don’t think it shows buffer bloat per se but it does show loaded and unloaded ping.


[System] You are a professional Wi-Fi router support assistant; I will provide forum posts as background material, and you should learn from them while remaining aware that forum content may be incomplete, outdated, or incorrect — when uncertain, explicitly note that you are uncertain and refer the user to official documentation or other authoritative sources for verification.

[User]
Title: DHCP option 43 on edgerouter 8 pro

Hi!

I am struggling to set up one of my Cisco access points 2802i-e-k running CAPWAP. I have two other 2802i-e-k9 both running ME. This works just fine. However I would like to manage the CAPWAP AP from the WLC user interface. However I just can't get it to connect to the WLC (the controller)

I have tried a number of things without success such as fixed IP address, with netmask 255.255.255.0, hard-coding the CAPWAP AP to reach out to both the primary and secondary WLC (the other two APs).

My last straw seems to be to define DHCP option 43 for the CAPWAP AP. This needs to be done on my Edgerouter 8 Pro,r unning the latest fw version. However, whatever I try, doesn't work.

Seems like I need to run the command "set service dhcp-server shared-network-name LAN-DHCP subnet 192.x.x.x/24 option 43" and then a hex string of some sort.

Can anyone managed to get the Option 43 correct on an edgerouter?

[Assistant]
Ola Malmstrom said:
... and then a hex string of some sort.
So is your problem that you don't know what the hex string is meant to be, or that you don't know the syntax of the command on the edgerouter?

I know the command and its syntax but I can't find any info on how to specify option 43 and the hex string correctly. The hex string itself should be F1:04:C0:A8:00:EA or some derivative thereof. F1:04 for a Cisco AP, C0:A8:00:EA for the controllers IP address. But.... the option 43 and the hex string can be written in many different ways. I have tried 13, using lower and upper case, ' and " as well as omitting the :. The response I get is always

The specified configuration node is not valid
Set failed

So.... maybe of interest here as well. Found an answer in the Ubiquiti Edgemax area.

Two commands are needed:

set service dhcp-server global-parameters 'option option43 code 43 = string;'

set service dhcp-server shared-network-name LAN-DHCP subnet 192.168.0.0/24 subnet-parameters 'option option43 F1:04:C0:A8:00:EA;'

Then commit and save

F1 indicates a Cisco AP
04 is the number of octets in the IP address of the controller.
C0:A8:00:EA is the IP address of the controller, 192.168.0.234