Asus ax86u pro

[Sdr-99xrs]

Ok, first timer here and I thank you all in advance. I want to upgrade my router and have been eyeing the ax86u, but since the ax86u pro is newer, I am now eyeing that. Of course I was reading reviews and noticed the asus malware thread and am wondering few things… if I get the router, am I automatically going to be enabling this “malware” by setting it up with its current firmware from an out of box state, prior to running a firmware update? I hope that makes sense.

 

[bennor]

Asus has released updated firmware to supposedly plug the malware vulnerability with the AiCloud feature. The vulneratibly is generally just a broadband (WAN) exploitable hole. Its simple, don't enable AiCloud features when you first setup the router and before updating the firmware. Otherwise just setup the router as normal then update the firmware on it. If you are really worried about it, download the router firmware to a computer first, don't connect the broadband to the Asus router, connect the computer to the router then setup the router and perform a firmware upgrade. Then connect the WAN. Use the forum search if you haven't done so already. Plenty of discussion on the malware and ways to prevent it.

Malware damaging ASUS routers?

This malware damaging Asus routers has to be described in a sticky thread with a warning sign! Update: Asus is releasing patched firmware for multiple models. Check for firmware updates! The changelog for most firmware releases contains the following: 1. Strengthened input validation and data...

www.snbforums.com

Release - RT-AX86U_Pro : 3.0.0.6.102_34334 2024/11/06

ASUS RT-AX86U Pro Firmware version 3.0.0.6.102_34334 Version 3.0.0.6.102_34334 58.23 MB 2024/11/06 1. Strengthened input validation and data processing workflows to further protect information security. 2. Enhanced AiCloud password protection mechanisms, safeguarding...

www.snbforums.com

Release - Asuswrt-Merlin 3004.388.8_4 is now available

Asuswrt-Merlin 3004.388.8_4 is now available for all Wifi 6 models. 3004.388.8_4 (17-Nov-2024) - CHANGED: VPN killswitch will now only be active if the VPN client itself is enabled. If you stop/start the client yourself over SSH, you need to also...

www.snbforums.com

 

[Sdr-99xrs]

Thank you, I’ve read a lot about it on the other post but the info gets “lost “page after page! Normally I would connect to to the router, change admin credentials update firmware then reset it to factory, if that’s not enough that’s awful, I mean 95% of people wouldn’t even think about stuff like this and set it up from scratch.

I remember a windows desktop that would get popups immediately when connecting to the internet prior to updating to the latest service pack, hopefully this is not the case

 

[bennor]

Just boot the router, go through the QIS setup, then update the firmware to the latest on the router's GUI Administration > Firmware Update page. Generally the AiCloud features should be disabled by default when first setting up the router.

 

[OzarkEdge]

Normally I would connect to to the router, change admin credentials update firmware then reset it to factory

Good enough. I prefer to download the firmware in advance and upload it manually before fully configuring a new router for WAN duty.

I would avoid enabling any WAN remote access features on the router... find a better way.

OE

 

[Sdr-99xrs]

Thank you, please confirm what QIS setup is? And I’m going to quickly update firmware after connecting router to modem, then factory reset device(correct?) -sounds like that’s quick enough to avoid whatever we are talking about here which leads me to my final Q-is this malware considered a threat to other devices in the network, or something that just bricks a device? I guess I am less concerned with the latter as its always replaceable…

 

[bennor]

Thank you, please confirm what QIS setup is?

Quick Internet Setup...

[Wireless Router] How to use the QIS (Quick Internet Setup) to set up Router ? (Web GUI) | Official Support | ASUS Global

As indicated the AiCloud, which is what was assumed to be the intrusion point of the latest malware, is generally not enabled when one initially setups the router or performs a hard factory reset of the router.

PS: Security of your network should be multi layered. Your local computers and devices should have their own firewall and security program/software running in addition the security a router is supposed to provide. The malware discussed in the above link appears to be confined to the router.

 

[OzarkEdge]

Thank you, please confirm what QIS setup is?

Quick Internet Setup is a built-in wizard that walks the user through a preliminary configuration to secure the router webUI and WLANs and to configure the WAN connection for the given ISP... just enough to get online. There is more configuration to complete... and you can fully configure the router without connecting the WAN first.

And I’m going to quickly update firmware after connecting router to modem, then factory reset device(correct?)

Your choice how you go about it, but definitely Reset/Hard Reset the installed firmware to its default settings before you configure it from scratch. Read up:

FW Reset FAQ

Reset button/webUI Restore/node removal clears settings in NVRAM; reboot restores fw defaults from CFE

Hard Reset via WPS button/webUI Restore+Initialize also clears data logged in /jffs partition

I prefer Hard Reset via the webUI Restore + Initialize setting... avoids futzing with hardware buttons.

Q-is this malware considered a threat to other devices in the network, or something that just bricks a device?

Malware that has exploited a vulnerability and compromised a router is assumed a threat to the entire LAN. The current AiCloud vulnerability has been patch in current firmware... AiCloud is a WAN remote access feature that you do not have to use... leave disabled and don't worry about it.

My configuration notes (not a tutorial) may help but will not mean much to you until you dive in, start learning, and have questions... a good outline for a basic configuration... I use it and improve it for myself (since the beginning of AiMesh/2018) and share it here... what I came here looking for and could not find in one place. Credit the forum membership.

OE

 

[Sdr-99xrs]

Thank you, lot of info here and I thank you both. I’m not sure how smart devices would have their own firewall/security program but that is another topic…?

Ozarkedge-“Quick Internet Setup is a built-in wizard that walks the user through a preliminary configuration to secure the router webUI and WLANs and to configure the WAN connection for the given ISP... just enough to get online. There is more configuration to complete... and you can fully configure the router without connecting the WAN first.”

If I follow QIS just to get the ISP connection to update firmware, then do a hard reset, and THEN fully finalize the setup, is that how you are describing “without connecting to the wan”?

 

[Sdr-99xrs]

I just realized I do not have ethernet ports on my laptop, is any of this still doable ? (Firmware updates/initial setup)?

 

[OzarkEdge]

Thank you, lot of info here and I thank you both. I’m not sure how smart devices would have their own firewall/security program but that is another topic…?

Me neither... cross that bridge when you come to it.

If I follow QIS just to get the ISP connection to update firmware, then do a hard reset, and THEN fully finalize the setup, is that how you are describing “without connecting to the wan”?

No... either use the new router to get the firmware (QIS) or get it with your old router ahead of time, store it on your hard drive, and then manually upload it to the new router without ever putting the new router online (WAN connection not required yet). Your choice.

Once the desired firmware is installed, Hard Reset it, and configure it from scratch... you are starting over here, NOT finalizing any previous QIS. In fact, you will be performing QIS everytime you boot an unconfigure/reset firmware.

Here is the Support for the AX86U Pro:

RT-AX86U Pro｜WiFi Routers｜ASUS USA

AX5700 Dual Band WiFi 6 Gaming Router, Mobile Game Mode, AiProtection Pro, WPA3, Parental Control, Mesh WiFi support, 2.5G Port, Gaming Port, Adaptive QoS, Port Forwarding

www.asus.com

Install firmware 34336, Hard Reset it, and configure it from scratch. You can do all of this without ever connecting the WAN to the ISP... follow the prompts.

OE

 

[OzarkEdge]

I just realized I do not have ethernet ports on my laptop, is any of this still doable ? (Firmware updates/initial setup)?

Yes, with a WiFi connection. Don't rush the router... give it time to process changes and update you with status. A WiFi connection will be more start and stop since the router will be restarting the radios from time to time... you will have to allow for your laptop to reconnect wirelessly. A wired connection just works as steady as you would expect.

OE

 

[Sdr-99xrs]

Yes, with a WiFi connection. Don't rush the router... give it time to process changes and update you with status. A WiFi connection will be more start and stop since the router will be restarting the radios from time to time... you will have to allow for your laptop to reconnect wirelessly. A wired connection just works as steady as you would expect.

OE

Ok so do QIS setup while connected to my current routers WiFi? And let it update that way , then disconnect old router and setup the new ?

 

[OzarkEdge]

Ok so do QIS setup while connected to my current routers WiFi? And let it update that way , then disconnect old router and setup the new ?

No and No. Take a timeout and review and think about it.

You asked how do I connect my laptop to my new router... the laptop doesn't have Ethernet? Answer: Use the laptop WiFi instead... connect to the new router's WiFi, which you have to manage. Read the instructions that came with your router and use the ASUS Support FAQs online to find more help.

OE

 

[bennor]

Don't overthink setting up the router. It really isn't that difficult or complicate, and shouldn't take more than a few minutes for the initial setup and initiate a firmware update.

I just realized I do not have ethernet ports on my laptop, is any of this still doable ? (Firmware updates/initial setup)?

The RT-AX86U Pro came with a ASUS RT-AX86U Pro QSG (Quick Start Guide) which included a method of initially setting up the router using a mobile device (Google or Apple) and the Asus Router app that can be downloaded and installed to that mobile device.
Android: https://play.google.com/store/apps/details?id=com.asus.aihome&hl=en
Apple iOS: https://apps.apple.com/us/app/asus-router/id1033794044

[Wireless Router] How to update the firmware of your router to the latest version via ASUS Router App? | Official Support | ASUS Global

If you have misplaced or lost that quick setup guide see the Asus support website's manual section for the ASUS RT-AX86U Pro QSG (Quick Start Guide). It is available in several languages. The full user manual for the RT-AX86U Pro can also be downloaded from that same Asus support link.
https://www.asus.com/supportonly/rt-ax86u pro/helpdesk_manual/
ASUS RT-AX86U Pro QSG (Quick Start Guide) for English

The following Asus video gives general steps for router setup using the mobile.

Once the router is setup you can connect your computer to it using WiFi and then access the router GUI with a web browser to make further configuration changes including disabling WAN and AiCloud access to the router if they somehow become enabled while using the mobile app to initially setup the router..

Edit to add:

 

[gp-se]

Yesterday I purchased an AX86U Pro, I connected my Modem to the WAN port, then used WiFi to run the QIS. After setting the SSID and log in info I used the web GUI to update the firmware. After confirming the latest firmware was installed I did a Restore+Initialize in the GUI. I then set everything up.

Don't be concerned about getting infected with Malware on the initial setup, you need to enable remote access and Asus Ai features for the malware, but those settings are disabled on initial setup.

 

[Tech9]

Asus AI features

Asus doesn't have any AI features. They have marketing names starting with Ai for some of the features.

 

[Justinh]

I just realized I do not have ethernet ports on my laptop, is any of this still doable ? (Firmware updates/initial setup)?

Or get an Ethernet to USB adapter - common, cheap.

 

[Tech9]

Ethernet is not needed, computer is not needed. The default setup procedure is over Wi-Fi. Most users do it with the Asus App.

 

[Sdr-99xrs]

Yesterday I purchased an AX86U Pro, I connected my Modem to the WAN port, then used WiFi to run the QIS. After setting the SSID and log in info I used the web GUI to update the firmware. After confirming the latest firmware was installed I did a Restore+Initialize in the GUI. I then set everything up.

Don't be concerned about getting infected with Malware on the initial setup, you need to enable remote access and Asus Ai features for the malware, but those settings are disabled on initial setup.

Thank you, Ozarkedge and gp-se. I think I went down a rabbit hole . seems easy enough, the part where I got worried was updating firmware+ then wiping. But I think I got it. Restore +initialize (tick mark) will give me the reset type I need after updating firmware, vs doing just restore (initialize unchecked) , correct?