Help me with remote access to my router

[DalleV]

All I primarily want is to access my router with the Asus app so i can manage parental controls. I want to access my router in a secure way.

I have followed those guides i've found, but still haven't managed to get it working. Can someone please help me, explain to me like i'm 5.

I run Asus XT8 with the latest Merlin/Gnuton firmware.
I have a private IP, whatever that means. It says so in the VPN section in the router GUI. And I recently enabled Asus DDNS hoping it would make wireguard run, it didn't.

I successfully make wireguard Server run and setup my client, which is my cellphone. I scan the QR-code and so on. But when trying to connect from my phone it doesn't work.

If there is some other method beside wireguard please guide me. Total noob here. As said this is primarily for me to manage parental controls on the go. But if it grants other features aswell that would be great. Like using my network at home from work, so my workplace cant se what i'm doing

 

[ColinTaylor]

I have a private IP, whatever that means.

It means you cannot directly connect to your router from the internet. For that you need a public IP address.

What is your XT8's WAN port connected to? A cable modem? Another router?

 

[DalleV]

It's connected to a fiber modem. And I believe i have to pay extra for a public ip, if i am not mistaken

 

[ColinTaylor]

And I believe i have to pay extra for a public ip, if i am not mistaken

Then that's what you'll have to do if you want to use the router's VPN server.

Alternative ways to remotely access your router might be IPv6 if your ISP provides that, or routing through a third party proxy server like Tailscale.

 

[DalleV]

Ah. So going the enable remote access through WAN route is a severe security risk then? As that would be the only option if i dont pay up extra for public ip?

 

[ColinTaylor]

Ah. So going the enable remote access through WAN route is a severe security risk then? As that would be the only option if i dont pay up extra for public ip?

Remote "Web Access from WAN" (Administration - System) is a massive security risk, and will also not work without a public IP address.

 

[DalleV]

Ok. I just chatted with my ISP, and they fixed it. I will have to restart my router in 15min or so they said. Free of charge.

Funny thing, i had a orbi mesh previous to the xt8 and that I could reach from outside with the orbi app. And I dont remember having a public ip then.

Anyhow...should I run DDNS from Asus or not? Is DDNS necessary or in some way beneficial for me? What does it do?

 

[bbunge]

Yes, you will need to use DDNS unless your ISP provided a static IP address. Asus DDNS usually works but from time to time does have issues. No-IP.com has a free service that will require you to verify your free account every 30 days. But it is free and does work.
Set up the DDNS before configuring the VPN. Also, Asus Instant Guard works well from a phone (iOS or Android).

 

[DalleV]

Is instant guard preferable over wireguard in my case. Or is it just different tools that do the same thing