Android Mobile Router App (have Asus ZenWiFi BT10)

[Brookie55]

I am coming from a Nest Pro Google Mesh system. What i am wondering is how to set up the Asus Mobile app for viewing my home network when away. With the Nest Pro viewing the Network from outside of it just worked without a complex setup.



I have been trying to find a guide to do this but nothing seems to be working for me. Not Network savvy either, I do find the Asus manual and guides kind of vague. I don't need a VPN as I have one already built into my Pixel 9 XL Pro. So I just want to open the Asus app and check the Network when away. Is this even possible?

Thanks...

 

[Tech9]

I don't need a VPN as I have one already built into my Pixel 9 XL Pro.

Asus App opens Access from WAN if you tell it you want remote connection. This is considered high risk with Asus routers. Preferable method is VPN connection back to your network and Asus App will work with it the same way as when you are connected locally to your router. The easier VPN option is Instant Guard. You have to start it on your router and install Instant Guard App on your phone. You first connect via the Instant Guard App and then open Asus App. Similar option is OpenVPN Server with OpenVPN Connect App. Does the same thing.

 

[Brookie55]

Asus App opens Access from WAN if you tell it you want remote connection. This is considered high risk with Asus routers. Preferable method is VPN connection back to your network and Asus App will work with it the same way as when you are connected locally to your router. The easier VPN option is Instant Guard. You have to start it on your router and install Instant Guard App on your phone. You first connect via the Instant Guard App and then open Asus App. Similar option is OpenVPN Server with OpenVPN Connect App. Does the same thing.

Okay, I can try that. What about this Account Binding thing when you go to install Instant Guard? Also, does remote access need to be enabled?

 

[Tech9]

I don't know about Account Binding thing, sorry. Perhaps @bbunge can provide more details about what is Account Binding used for with Instant Guard, he used to play with it. Asus App will offer you remote access after installation, decline it. This is what opens Access from WAN on the router and is not recommended for security reasons. Instant Guard is basically made easy IPSec VPN connection back to your router.

 

[Brookie55]

I don't know about Account Binding thing, sorry. Perhaps @bbunge can provide more details about what is Account Binding used for with Instant Guard, he used to play with it. Asus App will offer you remote access after installation, decline it. This is what opens Access from WAN on the router and is not recommended for security reasons. Instant Guard is basically made easy IPSec VPN connection back to your router.

Okay, thanks. This whole setup thing is kind of vague even with the instructions from Asus. Thanks for the clear instructions. It's working but I haven't gotten an offer to allow for remote access after installation. I guess I better check the settings to make sure that Port wasn't opened up.

Again, thanks for providing simple, clear, and concise instructions.

 

[Tech9]

Asus software is always in work-in-progress state and many of the features available on your router model are not even documented yet with more changes coming with next firmware updates. It’s quite different than your old Google system. It was in Easy Button category set and forget, made for users with no networking knowledge. You have to invest some time in your new ZenWiFi and be patient.

 

[Brookie55]

Asus software is always in work-in-progress state and many of the features available on your router model are not even documented yet with more changes coming with next firmware updates. It’s quite different than your old Google system. It was in Easy Button category set and forget, made for users with no networking knowledge. You have to invest some time in your new ZenWiFi and be patient.

Yes, that is what i want to do. 1 last question when you said "Asus App will offer you remote access after installation, decline it. This is what opens Access from WAN on the router and is not recommended for security reasons." Are you talking about this from my screenshot?

 

[bbunge]

No, you do not need Account Binding. I believe it has something to do with social media/accounts and I don't feel it is prudent to be associating a security device with a social account.
I can't find a screen like you show in your prior post. I run the Asus app on an Android tablet and an iPhone and there is nothing like it. My AX86U Pro GUI does not have that shot.
But, do not enable Web Access from the WAN! Use a VPN like Instant Guard, Wireguard or OpenVPN. Set one or all of those up on the router as servers and add a client to your phone. I do not use a commercial VPN when away from home but VPN back in to my home router and use it to access the internet. Instant Guard works well and is simple to set up but it has a two hour time limit then you need to disconnect and re-connect. Wireguard is the next easiest and works on just about any client from phones to tablets, iPods, laptops and desktops.

To use your router as a VPN server it will need to be set up with a URL via DDNS. Asus DDNS works most of the time. I use noip.com which has a free service that has to be verified monthly.

 

[Tech9]

Are you talking about this from my screenshot?

Yes, keep this Web Access from WAN disabled, use the VPN network access options discussed above instead. You can disable HTTPS access and use HTTP only from your LAN. Encryption of your own LAN communication is not really needed and it may slow down your WebUI.

 

[Brookie55]

Yes, keep this Web Access from WAN disabled, use the VPN network access options discussed above instead. You can disable HTTPS access and use HTTP only from your LAN. Encryption of your own LAN communication is not really needed and it may slow down your WebUI.

Thank you.

 

[Brookie55]

No, you do not need Account Binding. I believe it has something to do with social media/accounts and I don't feel it is prudent to be associating a security device with a social account.
I can't find a screen like you show in your prior post. I run the Asus app on an Android tablet and an iPhone and there is nothing like it. My AX86U Pro GUI does not have that shot.
But, do not enable Web Access from the WAN! Use a VPN like Instant Guard, Wireguard or OpenVPN. Set one or all of those up on the router as servers and add a client to your phone. I do not use a commercial VPN when away from home but VPN back in to my home router and use it to access the internet. Instant Guard works well and is simple to set up but it has a two hour time limit then you need to disconnect and re-connect. Wireguard is the next easiest and works on just about any client from phones to tablets, iPods, laptops and desktops.

To use your router as a VPN server it will need to be set up with a URL via DDNS. Asus DDNS works most of the time. I use noip.com which has a free service that has to be verified monthly.

I might try using the router as a VPN server later. (do you mean for all clients attached?) I am taking baby steps. Thanks for your help

 

[bbunge]

I might try using the router as a VPN server later. (do you mean for all clients attached?) I am taking baby steps. Thanks for your help

No, only for clients that connect from the WAN. You can use the router VPN client feature to connect to a remote VPN provider to hide your surfing.
Take your time learning what you can do with your router. Get it in a workable stable configuration and take a backup of the settings. Then if it gets messed up you can do an easy recovery.

 

[Brookie55]

No, only for clients that connect from the WAN. You can use the router VPN client feature to connect to a remote VPN provider to hide your surfing.
Take your time learning what you can do with your router. Get it in a workable stable configuration and take a backup of the settings. Then if it gets messed up you can do an easy recovery.

Thanks again, I am about to make a backup of my settings now.

 

[Tech9]

do you mean for all clients attached?

You are mixing up VPN Server and VPN Client. VPN Server is what you are going to be eventually using for secure access back to your network. VPN Client - you better use it on client devices and only if/when needed. Otherwise your fantastic speeds will disappear the moment you enable VPN Client on the router. WAN-to-LAN performance of this router with VPN is ~0.5Gbps on WireGuard and ~0.25Gbps on OpenVPN. The limitation comes from the CPU processing capabilities. The hardware inside is similar to Raspberry Pi.

 

[Brookie55]

You are mixing up VPN Server and VPN Client. VPN Server is what you are going to be eventually using for secure access back to your network. VPN Client - you better use it on client devices and only if/when needed. Otherwise your fantastic speeds will disappear the moment you enable VPN Client on the router. WAN-to-LAN performance of this router with VPN is ~0.5Gbps on WireGuard and ~0.25Gbps on OpenVPN. The limitation comes from the CPU processing capabilities. The hardware inside is similar to Raspberry Pi.

Okay, I understand that now. Possibly I'm the least knowledgeable person on this forum as far as networks go...I like to tinker though.

 

[wrink]

Possibly I'm the least knowledgeable person on this forum as far as networks go...I like to tinker though.

Here's two good, well-cited and data-driven resources for learning about home Wifi:

Understanding Wi-Fi 4/5/6/6E/7 (802.11 n/ac/ax/be)

Dong Knows Tech

That is if you check out the website to see what tech it is and how Dong really knows it. Otherwise, well, it's only good for somebody else!

dongknows.com

There are several theory, statistics and math based fundamentals behind wireless technologies, having inclinations to understand the fundamentals definitely helps. Smallnetbuilder.com used to be an excellent resource, too bad its not there anymore.

 

[Brookie55]

Thank for this. I will definitely look at this.