BE88U: Remove hidden wireless networks?

[Viktor Jaep]

So it's been an Asus-specific WPA3 bug going on 3 years now? <sigh>

 

[visortgw]

So it's been an Asus-specific WPA3 bug going on 3 years now? <sigh>

Bug or implementation? It all depends on who you ask...

 

[Viktor Jaep]

Bug or implementation? It all depends on who you ask...

Guess it could be, but it seems messy. Maybe it's a workaround or something to help with compatibility.

 

[visortgw]

Guess it could be, but it seems messy. Maybe it's a workaround or something to help with compatibility.

The long, "random" hexadecimal SSID seems much too intentional.

 

[Ripshod]

If I run

nvram get apm1_ssid

On my RT-BE88U it returns the hex ssid. What is APM?
Try it on yours.
........ moment of deja vu.

 

[Tech9]

Must be something ASUS specific, can't tell bug or feature. As long as no one can connect there - not an issue. I tested a WPA3-only network on my UniFi setup and don't see related to it hidden network appearing. I know about other hidden networks in UniFi though not present with ASUS.

 

[Viktor Jaep]

From the Googles...

In the context of modern ASUS WiFi 6 and WiFi 7 routers, APM (often seen in NVRAM as apm1, apm2, etc.) stands for Action Plan Manager or Action Plan Mode. This is a backend system used to manage complex wireless features like AiMesh backhaul, Guest Network Pro, and IoT networks.

Why you see a random SSID
When you see a hidden or random-character SSID tied to an apm value, it is typically a dedicated backhaul or system-level network used for internal communication between nodes.

• AiMesh Backhaul: Newer routers use these SSIDs to create a "hidden" wireless link between a main router and its nodes. This is essential for maintaining a stable connection even if you haven't manually configured a wireless backhaul.
• WiFi 7 Multi-Link Operation (MLO): On WiFi 7 routers (like the RT-BE96U), apm values may be tied to the management of multiple frequency bands (2.4, 5, and 6 GHz) used simultaneously for a single connection.
• WPA3 Requirements: WiFi 7 and WPA3 strictly require certain management frames (PMF) to be active. The apm system ensures these security protocols are enforced on these hidden system networks to prevent unauthorized access to the mesh backbone.

Technical Context (NVRAM)

• apm1/apm2: These NVRAM variables store the "Action Plan" settings, which include the specific encryption (WPA3), SSID names, and radio power levels for these hidden system networks.
• Persistence: These SSIDs often reappear after a reboot or firmware update because the router's internal code (firmware) automatically recreates them in NVRAM if it detects they are missing, as they are considered "necessary behavior" for mesh functionality.

If you are not using AiMesh and find these SSIDs bothersome, they can sometimes be disabled by turning off AiMesh features or specific Smart Home/IoT master networks in the router's WebGUI.

 

[bennor]

That hidden WiFi network has been discussed before. In part or in whole its likely for AiMesh. Some past threads:

Asus XT9 Hidden Networks

Hi, I'm new here and also newbie with Asus routers. I have a trio of Asus XT9, one set as router and two as wired nodes. Everything is fine exept the fact that I see two Asus hidden networks. The nodes are set exclusively as wired, but I suspect that those hidden network have something to do...

www.snbforums.com

Any way to disable the ASUSTek Hidden Networks?

I am using various ASUS routers in AP mode since I gave up on Aimesh. I noticed all these AP's now have 5ghz hidden network broadcasting. I already went to each AP in the aimesh page and enabled ethernet backhual mode. but it appears to have not done anything. Does anyone know of a nvram...

www.snbforums.com

 

[Zamula]

I used a TamperMonkey script to unhide all hidden elements on the Wireless General page, and this is what it looks like. You could probably also use developer tools to unhide.

This is for the RT-BE92U.

 

[Tech9]

hidden elements

Most hidden elements are hidden because don't apply to the specific model router though.

 

[KevTech]

I used a TamperMonkey script to unhide all hidden elements on the Wireless General page

You can accomplish the same thing by just viewing the page with no style.

 

[Shonk]

Its a hidden ssid not "strange ssid" also the mac address is the same as the main ssid but one digit off xx:xx:xx:xx:xa vs xx:xx:xx:xx:xb for example

 

[mmjlmjl]

This feature is related to using WPA2/WPA3 mixed mode. Setting it to WPA3 or WPA2 only the phantom ssid disapears

 

[Ripshod]

This feature is related to using WPA2/WPA3 mixed mode. Setting it to WPA3 or WPA2 only the phantom ssid disapears

Not on the RT-BE88U running Merlin.

 

[Ripshod]

And just to round things of (for me) I'm currently connected to the hidden network (details from nvram) and everything network and internet is running just fine for me.