Asus RT-AC68P setup questions

[RBJ32]

I can't get much from Asus so I'd really appreciate any input this forum has on the below questions for my Asus RT-AC68P router setup. I've run an old Linksys router for the past decade so I'm not that up on Asus setups.

(1) The Router had it's own Firewall enabled by default but when I look at all the tabs in that window it really isn't config'd to filter anything (DoS is OFF, and no URL filters etc). And unless I figure out what I should filter (if anything) I'm wondering if I should just turn the Router firewall off. (I have a software firewall running on all my laptops).

(2)Under WAN settings it has UPnP enabled, does that really need to be enabled (?) as I've read it can be a security risk.

(3)In Administration it has Auto Logout set at 30 mins. I'm wondering if this means 30 mins of inactivity or just plain 30 mins (?) like maybe if I were doing something like a firmware flash I should disable the Auto Log out (?)

(4) In the traffic manager the first tab is Enable Smart QoS but it says to get bandwidths from ISP. It was set to OFF, do I need this ON ? Do I have to call my ISP for bandwidth data or is there a way online to get it?

 

[OzarkEdge]

I can't get much from Asus so I'd really appreciate any input this forum has on the below questions for my Asus RT-AC68P router setup. I've run an old Linksys router for the past decade so I'm not that up on Asus setups.

(1) The Router had it's own Firewall enabled by default but when I look at all the tabs in that window it really isn't config'd to filter anything (DoS is OFF, and no URL filters etc). And unless I figure out what I should filter (if anything) I'm wondering if I should just turn the Router firewall off. (I have a software firewall running on all my laptops).

(2)Under WAN settings it has UPnP enabled, does that really need to be enabled (?) as I've read it can be a security risk.

(3)In Administration it has Auto Logout set at 30 mins. I'm wondering if this means 30 mins of inactivity or just plain 30 mins (?) like maybe if I were doing something like a firmware flash I should disable the Auto Log out (?)

(4) In the traffic manager the first tab is Enable Smart QoS but it says to get bandwidths from ISP. It was set to OFF, do I need this ON ? Do I have to call my ISP for bandwidth data or is there a way online to get it?

1. Leave the firewall enabled unless you want the Internet knocking on your LAN clients. Leave the default settings. And read the cursor pop-up help available on some settings.

2. Disable UPnP unless you need it. The ASUS implementation is not suppose to be vulnerable.

3. Leave the default setting. It won't bother you.

4. Leave the default settings unless you really need to solve a QoS issue... not likely.

Read my notes for some basic router configuration settings.

OE

 

[RBJ32]

1. Leave the firewall enabled unless you want the Internet knocking on your LAN clients. Leave the default settings. And read the cursor pop-up help available on some settings.

2. Disable UPnP unless you need it. The ASUS implementation is not suppose to be vulnerable.

3. Leave the default setting. It won't bother you.

4. Leave the default settings unless you really need to solve a QoS issue... not likely.

Read my notes for some basic router configuration settings.

OE

Thanks OzarkEdge, I'm copying this now to my router folder.

 

[RBJ32]

Also if OzarkEdge or Anyone would give any input on the following settings.

Same router in the USB Application section (the router has USB ports that can be used for various items)
The first selection category is Media Services and Servers
--
Tab 1 is Itunes Server, set to OFF, I left it OFF.
also another labeled, Media Server, this was set to ON, I set it OFF, I have no idea what it does but it has subtitles like Share All disks which didn't sound good to me.
--
Tab 2 is Network Place (Samba, Share/Cloud Disk). This was also set to ON, I set it to OFF, my windows 10 networking has not worked in any capacity since a Windows update last year. I don't use LAN networking.
--
Tab 3 is FTP Share, it was OFF by default, I left it OFF.
==========
2nd Category was Network Printer Server
It has 3 choices,
(a) Asus printer sharing download (and install)
(b) LPR Protocol to sharing printer (windows)
(c) LPR ... (Mac)

On my old router I think I used the LPR method where I set it up thru a TCP port giving it a static address (set on printer) outside the dhcp range.
I'm wondering which one I should choose here. Anybody set their Asus routers up with the Asus download ?
=========
The next Category is 3G/4G which is using USB mode for either a wireless dongle (which I don't use) OR an Android phone (which I do use) as a USB modem. Do I have to leave this set to ON in order for my phone to access the WIFI ?
(this selection if clicked, actually jumps to the actual setting under the WAN settings)

 

[ColinTaylor]

The changes you have made to tabs 1, 2 and 3 are correct. Well done . Only enable them if you specifically need them.

As for the other options, just ignore them. The network printer settings are only relevant if you want to plug a USB printer into the router and access it over the network. The 3G/4G options are only relevant if you want to use your mobile phone as an internet source for the router. That has no bearing on connecting your phone to the router's WiFi network.

 

[RBJ32]

The changes you have made to tabs 1, 2 and 3 are correct. Well done . Only enable them if you specifically need them.

As for the other options, just ignore them. The network printer settings are only relevant if you want to plug a USB printer into the router and access it over the network. The 3G/4G options are only relevant if you want to use your mobile phone as an internet source for the router. That has no bearing on connecting your phone to the router's WiFi network.

Thanks for the answers Colin. If you would be so kind I have a bit more curiosity on the USB printer option. Also just to be clear so far I've been configuring the Asus RT-AC68P router setup with it wired (ethernet) to a lone laptop, it's not on my LAN yet. My old Linksys router is still currently running my LAN albeit that will change soon.

I do have my printer on my LAN. Even though it doesn't have an ethernet port, it does have the standard printer type USB port and it's own wifi card. With my old Linksys router the printer is on my LAN through my WIFI SSID and Passkey same as my Laptops. I had problems yrs ago getting the printer to always be available over the wifi. But I solved that by giving the printer a static IP outside my old Linksys router's dhcp range. When setting up a new laptop I add the printer using it's IP address or it's Hostname and windows setup assigns it a TCP port. In the past I would set the printer to LPR but on my last new Laptop I decided to experiment and I set it to Raw, didn't notice any change and haven't had problems printing with either LPR or Raw. But this way I still have to install the printer drivers on each laptop or device that wants to print.

However I've always curiously wondered (however naively) if it would have been better (for consistent access, speed and/or security) if I had the printer wired to the LAN instead of thru the WIFI. And with this new router's USB option I'm curious.

(1) What's your input on wired vs Wifi for the LAN printer?

(2) And your input on the Asus printer sharing download, vs just setting it up thru windows tcp port method?

 

[ColinTaylor]

Thanks for the answers Colin. If you would be so kind I have a bit more curiosity on the USB printer option. Also just to be clear so far I've been configuring the Asus RT-AC68P router setup with it wired (ethernet) to a lone laptop, it's not on my LAN yet. My old Linksys router is still currently running my LAN albeit that will change soon.

Trying to setup the router when it isn't connected to the internet can lead to some random problems. I'm not saying you will encounter this, just that you need to be aware that it's a possibility. Mostly the problems would be certain services not starting because they're waiting for the WAN interface to come up.

I do have my printer on my LAN. Even though it doesn't have an ethernet port, it does have the standard printer type USB port and it's own wifi card. With my old Linksys router the printer is on my LAN through my WIFI SSID and Passkey same as my Laptops. I had problems yrs ago getting the printer to always be available over the wifi. But I solved that by giving the printer a static IP outside my old Linksys router's dhcp range. When setting up a new laptop I add the printer using it's IP address or it's Hostname and windows setup assigns it a TCP port. In the past I would set the printer to LPR but on my last new Laptop I decided to experiment and I set it to Raw, didn't notice any change and haven't had problems printing with either LPR or Raw. But this way I still have to install the printer drivers on each laptop or device that wants to print.

I have my wireless printer and client PCs setup exactly the same way. In my experience it's better to not use IP addresses in each PC's port setup, try to use hostnames instead. It makes life much easier if you need to change your IP assignments in the future.

However I've always curiously wondered (however naively) if it would have been better (for consistent access, speed and/or security) if I had the printer wired to the LAN instead of thru the WIFI. And with this new router's USB option I'm curious.

(1) What's your input on wired vs Wifi for the LAN printer?

(2) And your input on the Asus printer sharing download, vs just setting it up thru windows tcp port method?

Personally I would stick with what you've got (I do). I see no point in having the inconvenience of running a USB cable to the router and being dependant on it's lpd daemon when the printer already has one (as well as the preferable "raw"). My printer has no problems staying connected to the router over wifi, if that isn't your case then you might want to consider the USB-router option.

 

[sdmf74]

When I first got my RT-AC86u recently I tried connecting my non-wifi printer using the asus EZ printer driver method & it kept causing bsod's. After much troubleshooting & headaches I determined that every time
malwarebytes did a scan, specifically for rootkits my pc would bsod. I have no idea why but Disconnecting the printer from the router & uninstalling the EZ printer driver resolved the issue.

 

[RBJ32]

Trying to setup the router when it isn't connected to the internet can lead to some random problems. . . . . . . . .

(-- Got in late yesterday and then let windows do 1809 amd64 update which took awhile. I should have probably waited for the bug dust to settle awhile before letting this update in. It did another patch install this morning. But other than time involved no real issues so far other than desktop icons moving around --)

Thanks again Colin, I guessed that might be the case, I'm mainly just trying to get the basic setup done and familiarize myself with the options before I have to transfer my LAN over to it. I will definitely put it online for the final setup and I surmise it has to be online to do the Asus firmware update. Hopefully after the update most of my settings will hold.

. . . .(on Printer) Personally I would stick with what you've got (I do). . . . .

When I first got my RT-AC86u recently I tried connecting my non-wifi printer using the asus EZ printer driver method & it kept causing bsod's. After much troubleshooting & headaches I determined that every time malwarebytes did a scan, specifically for rootkits my pc would bsod. I have no idea why but Disconnecting the printer from the router & uninstalling the EZ printer driver resolved the issue.

And thanks to both Colin and sdmf74 for the Asus print server replies.

After reading sdmf74's post I did some searches and appears the Asus Printer Sharing program installs a windows service tied to the Eltima driver that has issues causing blue screen. Colin's and dmf74's posts pretty much made it clear to me I don't need Asus for my Lan Printer.

So thanks to the experienced input from this forum I feel a lot more confident in putting my RT-AC68P router online sometime today or this evening depending on my other chores. Thanks to all of you.

 

[ColinTaylor]

If you're doing more protracted testing/playing before putting the router live you can always run an Ethernet cable between the router's WAN port and a LAN port on your upstream router. Obviously it will be on a different subnet (it should automatically adjust the IP range) but at least you will have functional internet access. Just make sure you're using different wireless SSID's to those on the upstream router.

You don't have to use the router's online firmware update option. You can just download the file from Asus' website and manually apply it through the web interface. That's what I've always done.

 

[JohnD5000]

Also if OzarkEdge or Anyone would give any input on the following settings.

--
Tab 2 is Network Place (Samba, Share/Cloud Disk). This was also set to ON, I set it to OFF, my windows 10 networking has not worked in any capacity since a Windows update last year. I don't use LAN networking.
--

Just a note:After a windows update a while ago, my NAS stopped working. I had to go to Turn Windows Features On/Off and turn on SMB 1.0/CIFS File Sharing Support and SMB 1.0/CIFS Client