Looking to replace an ISP (Verizon FIOS) router/extender setup. I have an idea where I want to be, but so much confusion surrounds it all!

[MOEB74]

First and foremost, Ive been lurking here for a long time on and off over the years, this is the first time Ive stumbled in my decision. I dont know if its because Im older and I tend to over analyze my decisions more, or Im just not getting it lol. So right now, I have Verizon ( USA ) Fios and I have their G3100 Router and E3200 Extender combo. I dont have real issues with the current setup and Im getting around 925/875 on my speeds. Usually the upload is a tad higher but generally I would say 900/900 for the speed. I have some hardwired devices so I need 4 ports on the router, plus I will need a wired back-haul extender/mesh ( I think thats what its called... ).

I was looking at the most common two routers the RT-AX88u Pro and the RT-AX86u Pro. I would prefer the AX86u Pro as the footprint would work a lot better where I would put it but I can do either one if need be. Next I would need another router for the extender/mesh to connect to the Ethernet and main router. Should I go with the same router as to not have any bottlenecks? If I were to go with a cheaper Asus router, would that cause the Wifi speeds to suffer if and when I connect to that "slower/cheaper" router? ( assuming the speeds are the same on each, albeit different routers )

I also would like to run AdGuardHome on my RPI 4 connect via Ethernet too. ( Im already accounting for one of the 4 ports for that RPI )

That being said, Im opened to whatever you guys think would work... Ive been all over the board on what to get/use and I kinda ended up on these two routers. I also plan on running Merlin ( as its my first time using it ), because there is no OpenWRT for these. I used OpenWRT MANY MANY years ago and haven't even dabbled in it, so that will be another learning experience again. Is the Merlin builds proving reliable for these? Would I honestly even really need to use Merlin? Im guessing I would at minimum get better security on the units, right?

In the end, I thank everyone for the help!!

 

[OzarkEdge]

Get either router and play with ASUSWRT OEM firmware... maybe all you'll need. If you need more coverage, add a wired AiMesh node (a another/backup router as node/AP).

Keep your current network available as needed.

OE

 

[Tech9]

I don't have real issues with the current setup and Im getting around 925/875 on my speeds

Plan A:
This one is easy - do nothing, enjoy life, make memories.

I also would like to run AdGuardHome on my RPI 4 connect via Ethernet too

Plan B:
Only if you really need to tinker and have extra money to spend - RT-AX86U Pro, Asuswrt-Merlin firmware, AdGuard Home add-on. No extra RPi needed, can run on the router. External SSD in USB enclosure* will be good to have, increases the reliability significantly. USB sticks fail quite often from read/write cycles and heat. If you have no issues with your current setup perhaps your Internet experience won't change much $200 later (single RT-AX86U Pro) or $400 later (2x RT-AX86U Pro in AiMesh). Why 2x RT-AX86U Pro? Because AiMesh works best with identical devices on the same firmware and updated at the same time plus 2x Pro models will allow you to use all the new Pro features** like Guest Network Pro and VLANs. AiMesh also works much better with Ethernet backhaul. You may enjoy speed tests after, but will have no memories. No one around you will really care about speed test numbers.

* - something like this:
https://www.snbforums.com/threads/usb-recommendations-for-diversion-skynet.84828/#post-838985

** - not available in Asuswrt-Merlin firmware at the moment, but work in progress. Will take some time.

 

[MOEB74]

Plan A:
This one is easy - do nothing, enjoy life, make memories.



Plan B:
Only if you really need to tinker and have extra money to spend - RT-AX86U Pro, Asuswrt-Merlin firmware, AdGuard Home add-on. No extra RPi needed, can run on the router. External SSD in USB enclosure* will be good to have, increases the reliability significantly. USB sticks fail quite often from read/write cycles and heat. If you have no issues with your current setup perhaps your Internet experience won't change much $200 later (single RT-AX86U Pro) or $400 later (2x RT-AX86U Pro in AiMesh). Why 2x RT-AX86U Pro? Because AiMesh works best with identical devices on the same firmware and updated at the same time plus 2x Pro models will allow you to use all the new Pro features** like Guest Network Pro and VLANs. AiMesh also works much better with Ethernet backhaul. You may enjoy speed tests after, but will have no memories. No one around you will really care about speed test numbers.

* - something like this:
https://www.snbforums.com/threads/usb-recommendations-for-diversion-skynet.84828/#post-838985

** - not available in Asuswrt-Merlin firmware at the moment, but work in progress. Will take some time.

Thanks for the post. This is kinda where I’m at. I wanted to use the raspberry pi with AdGuard home that I have with my g3100 but it seemed to not want to allow me to get it on my network. I assigned a static ip and pointed the traffic to it, maybe I missed something? Who knows.

I was under the assumption that a router that I would buy would end up being more secure from intrusions etc, or are they all secure about the same?

Does Merlin add more security or again, is it about the same level as OEM or my ISP routers security?

I was unaware I could run AdGuard home on the router, that doesn’t take resources away from the normal routing it does? Is it able to be added natively, or is it a Merlin add on?

 

[MOEB74]

Get either router and play with ASUSWRT OEM firmware... maybe all you'll need. If you need more coverage, add a wired AiMesh node (a another/backup router as node/AP).

Keep your current network available as needed.

OE

Yeah like I said to the other poster, that’s kind where I’m at. The Asuswrt is what comes installed on the router, correct?

 

[Tech9]

I was under the assumption that a router that I would buy would end up being more secure from intrusions etc

Don't count on this too much. The more firmware features you have the greater the chance some vulnerability will be discovered. ISP provided devices are locked down pretty tight. ISPs don't like service calls. Security depends on you mostly. Most security breaches originate from inside the network and after user error. Use updated devices, modern browsers have Safe Browsing, don't click on links randomly, don't download from shady sources... you'll be fine. If you don't follow basic security rules no router will save you. AdGuard Home, Pi-hole, etc. - right, DNS blockers with easy bypass and limited functionality, one more device for you to maintain. The more complex your network is the more time you'll need to maintain it. Want to work as home sysadmin? Then with tools available obsessions come - monitoring, blocking, user control. As some say - careful what you wish for.

If you want to play - go ahead. If it's about security - unlikely to be improved significantly. Also keep in mind own equipment means own responsibility. If something stops working - your problem. You can't count on ISP support anymore. What happens when you are not there? Keep it simple.

 

[MOEB74]

Don't count on this too much. The more firmware features you have the greater the chance some vulnerability will be discovered. ISP provided devices are locked down pretty tight. ISPs don't like service calls. Security depends on you mostly. Most security breaches originate from inside the network and after user error. Use updated devices, modern browsers have Safe Browsing, don't click on links randomly, don't download from shady sources... you'll be fine. If you don't follow basic security rules no router will save you. AdGuard Home, Pi-hole, etc. - right, DNS blockers with easy bypass and limited functionality, one more device for you to maintain. The more complex your network is the more time you'll need to maintain it. Want to work as home sysadmin? Then with tools available obsessions come - monitoring, blocking, user control. As some say - careful what you wish for.

If you want to play - go ahead. If it's about security - unlikely to be improved significantly. Also keep in mind own equipment means own responsibility. If something stops working - your problem. You can't count on ISP support anymore. What happens when you are not there? Keep it simple.

Interesting take on that and I get what you’re saying… you have me thinking of staying with what I have.

 

[Tech9]

Well... you have no issues and great speeds already. There is nothing much to improve there.

 

[MOEB74]

Just the ease of connecting my PI to the router. That’s the main issue. I’m going to see if I can find some info online about it. I know someone has had to do it before lol

 

[Tech9]

I assigned a static ip and pointed the traffic to it, maybe I missed something?

You don't point the traffic to the RPi with AdGuard Home. The IP it has is your local DNS server. The issue with this setup - reliability. The SD card on the RPi dies and you have no Internet. Your upstream DNS servers end on the community blocklists by mistake and you have no Internet. You block too much, something stops working for your wife and... you may have Internet only. If you implement a blocker you have to take the responsibility what it blocks, how disruptive it is to others and you have to know how to fix it when there is a problem. Why implementing network wide blocking in first place? It's like limiting everyone else on your network based on your ideas and without asking.

How it usually goes read here:

Skynet - Is default firewall good enough?

Sorry if this has been asked before, I just wanted opinions. Do you think the default AX86U firewall, combined with the usual windows firewall is good enough, and is there any real advantage in using Skynet? We also all have malwarebytes premium installed, trendnet on and adguard with all...

www.snbforums.com

 

[MOEB74]

You don't point the traffic to the RPi with AdGuard Home. The IP it has is your local DNS server. The issue with this setup - reliability. The SD card on the RPi dies and you have no Internet. Your upstream DNS servers end on the community blocklists by mistake and you have no Internet. You block too much, something stops working for your wife and... you may have Internet only. If you implement a blocker you have to take the responsibility what it blocks, how disruptive it is to others and you have to know how to fix it when there is a problem. Why implementing network wide blocking in first place? It's like limiting everyone else on your network based on your ideas and without asking.

How it usually goes read here:

Skynet - Is default firewall good enough?

Sorry if this has been asked before, I just wanted opinions. Do you think the default AX86U firewall, combined with the usual windows firewall is good enough, and is there any real advantage in using Skynet? We also all have malwarebytes premium installed, trendnet on and adguard with all...

www.snbforums.com

Generally speaking I know my way around more than the guy that’s doesn’t, so I get some of what I read lol. I’m not good by any means but also not totally blind if that makes sense.

I’m running a sata drive to USB on the RPi, so reliability is there. The blocking is the same lists we’re using on our phones. And AdGuard home seems easy enough to manipulate what you need to when you need to.

 

[OzarkEdge]

Yeah like I said to the other poster, that’s kind where I’m at. The Asuswrt is what comes installed on the router, correct?

You've got homework to do.

OE

 

[MOEB74]

You've got homework to do.

OE

While true, it was just a question based on the post. I will continue to read for sure

 

[jerry6]

First and foremost, Ive been lurking here for a long time on and off over the years, this is the first time Ive stumbled in my decision. I dont know if its because Im older and I tend to over analyze my decisions more, or Im just not getting it lol. So right now, I have Verizon ( USA ) Fios and I have their G3100 Router and E3200 Extender combo. I dont have real issues with the current setup and Im getting around 925/875 on my speeds. Usually the upload is a tad higher but generally I would say 900/900 for the speed. I have some hardwired devices so I need 4 ports on the router, plus I will need a wired back-haul extender/mesh ( I think thats what its called... ).

I was looking at the most common two routers the RT-AX88u Pro and the RT-AX86u Pro. I would prefer the AX86u Pro as the footprint would work a lot better where I would put it but I can do either one if need be. Next I would need another router for the extender/mesh to connect to the Ethernet and main router. Should I go with the same router as to not have any bottlenecks? If I were to go with a cheaper Asus router, would that cause the Wifi speeds to suffer if and when I connect to that "slower/cheaper" router? ( assuming the speeds are the same on each, albeit different routers )

I also would like to run AdGuardHome on my RPI 4 connect via Ethernet too. ( Im already accounting for one of the 4 ports for that RPI )

That being said, Im opened to whatever you guys think would work... Ive been all over the board on what to get/use and I kinda ended up on these two routers. I also plan on running Merlin ( as its my first time using it ), because there is no OpenWRT for these. I used OpenWRT MANY MANY years ago and haven't even dabbled in it, so that will be another learning experience again. Is the Merlin builds proving reliable for these? Would I honestly even really need to use Merlin? Im guessing I would at minimum get better security on the units, right?

In the end, I thank everyone for the help!!

I can only give my experience , I will not suggest a router . On my system the ISP router modem would not cover my house ISP solution , rent some pods , no thanks , so I went and bought a router put the ISP modem/router in bridge mode , new router covers the house , no pods . I keep it simple as few add ons as possible less chance of things going bad me pulling my hair out trying to figure out where the problem is . So far never had a problem , does China or North Korea run my router ? don't think so . Lock things down and put children and guests on a guest network .
Good luck

 

[MOEB74]

I can only give my experience , I will not suggest a router . On my system the ISP router modem would not cover my house ISP solution , rent some pods , no thanks , so I went and bought a router put the ISP modem/router in bridge mode , new router covers the house , no pods . I keep it simple as few add ons as possible less chance of things going bad me pulling my hair out trying to figure out where the problem is . So far never had a problem , does China or North Korea run my router ? don't think so . Lock things down and put children and guests on a guest network .
Good luck

So a guest network secures the other IP addresses? Why did you bring up who runs your router? Just curious

 

[Tech9]

Why did you bring up who runs your router? Just curious

Conspiracy theories are common on SNB Forums. China communist party watching you, local government watching you, etc. Don't use Google, don't use Apple, avoid Microsoft, don't even think about IoT devices. Be afraid all the time and constantly spend more money on security upgrades.

 

[MOEB74]

Conspiracy theories are common on SNB Forums. China communist party watching you, local government watching you, etc. Don't use Google, don't use Apple, avoid Microsoft, don't even think about IoT devices. Be afraid all the time and constantly spend more money on security upgrades.

lol!!

 

[Tech9]

Forgot, sorry - don't watch YouTube, Amazon Prime Video, Netflix, etc. propaganda BS, never use commercial VPNs no matter what your use case is even simple IP change to watch sports game, never run stock Asuswrt for more than a minute... Also avoid forum members with grumpy cat avatar.

They will destroy your peaceful life with MON-itoring ideas. I am one of the victims of this cat.

 

[MOEB74]

Came back with a redeux lol

 

[jerry6]

So a guest network secures the other IP addresses? Why did you bring up who runs your router? Just curious

China and north Korea is just a joke I'm not paranoid , run a simple system and lock it down tight . yes guest network will keep infected gevices away from the main network , in theory . Works for me I am no longer in the business of setting up and maintaining networks . Retired years ago . There is plenty of good advice here
Good luck