(NOOB) Definition of "minimal and manual configuration"

[dave14305]

after you have disabled Adblock in Unbound (I don't think you need to fully uninstall Unbound to achieve that? @dave14305).

Better to ask @juched.

Unbound allows your router to be your own authoritative DNS server

To pick a nit, it's your own recursive DNS resolver.

 

[L&LD]

@Amwjujo you should select to use the new one.

 

[Amwjujo]

@Amwjujo you should select to use the new one.

Yeah ... I know but my wife and the kids will kill me if I'll let them out of internet now with this isolation- especially in the evening .
So, testing like this for the moment
Cheers.

 

[Alexv860]

Things change.

<This link> shows an older Asus. Halfway down is the B/G check box.

<And this link> shows a newer Asus. The check box is gone. Instead the pop down under wireless mode now contains "N only".

I'm not quite sure why the change. I'm guessing it's just a different way of saying either accommodate B/G or ignore B/G?

In response to a really old part of this thread: I just discovered this: If your router has Smart Connect enabled at the top of the wireless tab it won't show Optimize for XBox option.

 

[Hugga Wugga]

Thanks
Been investigating the forums, and basically came back with a few additional notes, and I put in setting locations, well as per latest Merlin firmware on an AC68U anyway.
...
11. Uncheck Xbox and B/G protection (Both bands). GUI > Advanced Settings > Wireless > General tab
...

Just been going through these settings on the stock firmware before I flash to merlin at some point in the next few days....

It seems that B/G protection can't be unticked when the wireless mode is set to 'auto' or 'N'. It only allows me to untick when set to Legacy. Whats the recommended option in this case?

 

[L&LD]

@Hugga Wugga suggested to leave it in Wireless Mode Auto.

 

[abc5]

Better to ask @juched.

To pick a nit, it's your own recursive DNS resolver.

does running unbound on the pihole.. eliminate the option boxes in pihole web interface for a upstream dns server?

 

[dave14305]

does running unbound on the pihole.. eliminate the option boxes in pihole web interface for a upstream dns server?

No, because you still need to point Pi-Hole to the Unbound instance also running on the RaspberryPi (e.g. 127.0.0.1#5453 or whatever configuration you use for Unbound). Pi-Hole isn’t really aware of Unbound otherwise. But you don’t want to use any public upstream except Custom (for Unbound).

 

[abc5]

ahhhh, noted thankyou Dave.

 

[geralds34]

Are all the recommendations made in post #3 still valid?

I have seen in other posts the recommendation to use 8 character SSIDs.
Is that just a personal preference or performance related?

 

[JT Strickland]

Are all the recommendations made in post #3 still valid?

I have seen in other posts the recommendation to use 8 character SSIDs.
Is that just a personal preference or performance related?

Part may have been revised here:

Best practice to uploading latest Merlin 386.1

I have a AX-86U with update factory firmware. As Merlin 386.1 stable is out, I like to upload it. Can anyone share the best practices to do that? Appreciate it.

www.snbforums.com

which will lead you to here

Would appreciate Wireless Professional Setting recommendations of AIMesh with AX88U as the root router

Hi, I am a new user. Great community here, very useful, so much knowledge, at times overwhelming but all around a great place! I have been an ASUS router user for as long as I remember, but only recently I went down the Merlin route. My current set-up is as follows: Root/Main Router: A new...

www.snbforums.com

see post 5

 

[L&LD]

@geralds34 welcome to the forums.

Yes, those suggestions are still valid. And the reasons are too if you want to have the most trouble-free network experience by following the best practice tips, I have picked up from the members here (particularly from when I first joined).

While they are a combination of personal preference (i.e. to have a 'standard') and for performance reasons (i.e. members have posted issues with shorter SSIDs, that simply giving a longer SSID solved), they are based on past observations and I believe are a must when changing from one class router to a newer/different one. (i.e. N class router to AC, AC class router to AX, etc.).

 

[TexasDave]

Thanks for this thread. I have just upgraded to the latest verison of MERLIN and this was less work that I expected and I feel much better about the upgrade.

One question: as part of the "Definition of "minimal and manual configuration" - would setting up the SSL for WebUI be included?

If so - when do most folks do this and how? I think there are several ways with many folks leverlaging the certs from pixelserv-tls?

Is there a link on the latest way to do this bit? I think there are some things built into AMTM for this? Or do you just follow this:

https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate

Which references Entware....Thanks!

​

 

[L&LD]

@TexasDave, I would not be going down that path you're considering. Particularly when pixelserv-tls is considered obsolete/abandoned and will more than likely be removed from the next Diversion release.

The point of 'minimal and manual' is that the router is at its most basic, broadest, and most stable/compatible state it can ever be. I don't think setting up SSL for the GUI would fit that 'ideal'.

This thread is still the basis of all I do for me and my customer's routers. But it is getting long in the tooth and needs updating soon. Along with the amtm Step-by-Step guide.

Downgrading to stock - things to consider?

Hi folks, I'm really sorry, but I don't see any other option anymore than to 'downgrade' to Asus stock firmware. Although it's technically switching, it feels like downgrade. It feels like forcing a winning race horse to join a local merry-go-round. I want to emphasize, this has nothing to do...

www.snbforums.com

 

[TexasDave]

@TexasDave, I would not be going down that path you're considering. Particularly when pixelserv-tls is considered obsolete/abandoned and will more than likely be removed from the next Diversion release.

That sounds like wise advice.

I did not know that (about Pixelserv) and have been looking at various "how to" articles and they span many years.

My system is now setup - pretty minimal (will just add Diversion on top) and keep it that way for some time. My main goal was to get the "new" aiMesh buld loaded on my two routers and that is working like a champ.

All is working weel enough and I just need to learn to leave well enough alone - Thanks!

 

[brownie112]

@TexasDave, I would not be going down that path you're considering. Particularly when pixelserv-tls is considered obsolete/abandoned and will more than likely be removed from the next Diversion release.

The point of 'minimal and manual' is that the router is at its most basic, broadest, and most stable/compatible state it can ever be. I don't think setting up SSL for the GUI would fit that 'ideal'.

This thread is still the basis of all I do for me and my customer's routers. But it is getting long in the tooth and needs updating soon. Along with the amtm Step-by-Step guide.

Downgrading to stock - things to consider?

Hi folks, I'm really sorry, but I don't see any other option anymore than to 'downgrade' to Asus stock firmware. Although it's technically switching, it feels like downgrade. It feels like forcing a winning race horse to join a local merry-go-round. I want to emphasize, this has nothing to do...

www.snbforums.com

Hey mate, was wondering if this M&M instructions still valid today (Oct2021)? I was doing a reset to troubleshoot an issue but noticed that latest firmware of Merlin already comes with amtm so that step could may be redundant?

 

[pirx73]

Uncheck Xbox and B/G protection (Both bands).

Regarding this. On my AX-68U B/G protection checkbox on 2.4GHz can only be unchecked when Wireless mode is set to Legacy.
For rest of the modes (Auto and N only) B/G protection checkbox is checked and greyed out.
For 5GHz mode B/G protection checkbox is not present. Would be weird if it would. B/G do not use 5GHz.
Xbox protection checkbox is always available for both bands in all modes and can be checked or unchecked as you please.

 

[L&LD]

Yes, the overall suggestions are still valid today, even if some specifics have changed (and they have been noted in other posts many times by myself already).

This is the latest that I have had the time to compile here for general use.

Fully Reset / Best Practice Setup / More

[Wireless] ASUS router Hard Factory Reset | Official Support | ASUS Global

Almost all L&LD Links

 

[machinist]

It means exactly what it says. Nothing more, nothing less. Only enable options that you need. And disable the options you don't need.

This is what I consider a base line.


Before flashing new firmware.

• Make a backup cfg file and label it with the firmware version currently running on the router. (I save this with the associated trx firmware file in a safe place, along with the next item, if needed).
• Save any custom settings to the jffs partition in a safe place.
• Remove all USB devices from the router.
• Reboot via the gui and let it settle for 5 minutes after it comes up again.

Flash new (or existing) firmware.

• Flash new firmware (and in some cases, re-flash the existing firmware if any random, unexplained glitches are still causing issues).
• Reset to factory defaults via the gui.
• After the router has rebooted (point above), do a hard reboot (pull the power plug), wait a couple of minutes and then power it up again.

After new firmware loaded.

• Use the wizard to connect to your ISP.
• Use new ssid's for all bands and radio's (most likely easier to do after the wizard completes for dual 5GHz band radio's capable routers). You can reuse the old passwords though.
• Disable media server.
• Disable network share.
• Disable NFSD.
• Disable FTP.
• Change device name (if needed), set Force as Master Browser and indicate the Work Group name (these steps are optional for some home users).
• Disable WPS.
• Disable WDS.
• Uncheck Xbox and B/G protection (Both bands).
• Wireless Mode: Auto (default).
• Control Channel: set manually after testing each channel.
• Preamble Type: Short.
• Spanning Tree Protocol: Disabled.
• IPv6: Disabled.
• Enable DoS protection: Disabled.
• Set time zone to your area.
• Format JFFS partition at next boot: Yes.

• Any other options not specified above is left at it's default setting following the above reset to factory defaults above.

At this point, reboot the router (via gui) twice, waiting 5 minutes before the second reboot (this allows the JFFS partition to be formatted and then available).

Now, if needed, Enable JFFS custom scripts and configs. Reboot and wait 5 minutes after the router comes up.

This is where I would create another cfg backup and name it with the firmware version just installed. Save this as the 'base default' (but remember that if you use it to use new ssid's and to format the JFFS partition again too).

At this point I will test different channels for each band (and /or radio) to find the best for that specific environment.

After finding the best channel and if things are stable at this point for an extended period (at least a week), other available router options may be introduced one at a time and added to as (and if) they prove stable.

To factory reset today, would this still be the way to go?

Do I still disable all the things mentioned, and are there more stuff to do in 2022?

 

[bbunge]

To factory reset today, would this still be the way to go?

Do I still disable all the things mentioned, and are there more stuff to do in 2022?

Just do a reset with initialize and you are ready to reconfigure. No need for fancy procedures!