What's new

Best Practice/Settings for Current ASUS BE Firmware....

jzchen

Very Senior Member
I have recently set up a GT-BE98 Pro as primary router at home. It was already on the latest ASUSwrt firmware and was trying to help someone with their new setup. I find it interesting how firmware/implementation has changed over the last 2 years and 1 1/2 months. It's still a bit to handle even for the well initiated, let alone those figuring out how things work on ASUSwrt 5.0 or 6.0 from 4.0, and probably the worst for those who are completely new.

MLO is by default off. I was asked how TP-Link and ASUS compare by my contact, who I now consider a friend, over there at ASUS. TP-Link's products just work with default settings, was what pretty much what sums up my experience. After upgrading an RT-AC68U to a GT-AXE11000, then adding/upgrading to a GT-AXE16000, I had no 6E devices in the household for I'm guessing half a year. When we did get my son's MacBook Pro M2 MAX, 6 GHz did not work right out of the box. So, a month or so in, I bought a TP-Link RE815XE, and behold, it worked. Copied over the settings that were different and behold ASUS 6E worked!

I'm not sure I'm in full agreement with the default settings as provided, therefore this thread. In the beginning WiFi 7 channels were not backwards compatible with older standards, the difference AES vs AES+GCMP256. Also 6 GHz requires WPA3 (unless you want Enhanced Open which I never tried to be honest). I don't know exactly when it happened, but WiFi 7 was made backwards compatible to at least WiFi 6, if not even older. For example, even though the setting is set to WPA2/WPA3-Personal on the GT-BE19000Ai, when I go to my OnePlusOpen WiFi the security listed is WPA/WPA2/WPA3-Personal on the unique SSID I set up for it. Someone over on the ROG forum that I know has two GT-BE98 Pros running, and I guess that was prepared especially for him because he had a WPA requiring printer....

It is hard to make a blanket statement this is how best to configure the SSIDs, but I can confirm that if you Smart Connect 2.4 GHz, 5 GHz, and 6 GHz the proper WPA2/WPA3 is applied to 2.4 and 5 GHz, while WPA3 is applied to 6 GHz. You don't want WPA2 on 6 GHz, because no device running on 6 GHz uses that encryption.

If you're going to combine/aka SmartConnect all channels, then also want/enable MLO for fronthaul, at least in my opinion, move all non-WiFi 7 clients to your IoT SSID. Meaning switch Main the default WPA2/WPA3-Personal to WPA3-Personal. Change AES to AES+GCMP256. On the IoT SSID, change WPA2-Personal to WPA2/WPA3-Personal, and leave AES. You may also add 6 GHz for 6E clients for the IoT SSID...

One_SSID_for_all_BE98_Pro.jpg
 

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top