In consternation - new firmware

[mario-sz]

Pardon my English, but seeing the new Asus firmware, I'm terrified that the device should be reset to factory settings after the new update.Many people say that the AX58u and others are consumer-grade routers, etc., but that's not entirely true, as they were recommended for small businesses https://www.asus.com/microsite/better-wifi-for-smb/ for years.

Does anyone really think that when the new firmware comes out, it will be restarted with six mesh points in different locations?

Someone must be crazy to want to configure everything for me. That's why I have a backup! And I read that I can't use this backup.

https://www.asus.com/microsite/better-wifi-for-smb/

 

[bennor]

... I'm terrified that the device should be reset to factory settings after the new update.

Why does resetting the router terrify you? Asus has explained why they suggest resetting the router. To apply new firmware security settings and changes. It is your choice to do so, or not to do so after you flash the new firmware. It is also your choice if you want to keep those new reset default router settings or change them to match your use case.

A router reset, to restore a router back to firmware default values, is a common process to perform for a number of valid reasons. There is nothing to be scared of. Just record any changes you made to the default settings of your router before updating and resetting the router, then manually apply those changes after the firmware update and reset.

 

[mario-sz]

Why does resetting the router terrify you? Asus has explained why they suggest resetting the router. To apply new firmware security settings and changes. It is your choice to do so, or not to do so after you flash the new firmware. It is also your choice if you want to keep those new reset default router settings or change them to match your use case.

A router reset, to restore a router back to firmware default values, is a common process to perform for a number of valid reasons. There is nothing to be scared of. Just record any changes you made to the default settings of your router before updating and resetting the router, then manually apply those changes after the firmware update and reset.

Hi. Thank you for your reply, but I disagree that this is standard practice. I also use a SonicWall 3700 at my company, and I can't imagine having to reinstall everything after a firmware update, as I'd have to shut down the company for a week. Firewall rules, NAT, objects, etc., aren't something you can implement in an hour or two.

 

[OzarkEdge]

Someone must be crazy to want to configure everything for me. That's why I have a backup! And I read that I can't use this backup.

Some more reading:

FW Reset FAQ

Reset button/webUI Restore/node removal clears settings in NVRAM; reboot restores fw defaults from CFE

Hard Reset via WPS button/webUI Restore+Initialize also clears data logged in /jffs partition

OE

 

[ColinTaylor]

It is a recommendation not a requirement that you perform a factory reset after updating the firmware. That recommendation is a blanket statement from Asus to cover all routers, in all circumstances, for users of all skill levels. You decide whether or not it is appropriate to do a factory reset on your devices.

Note that the recommendation appeared shortly after a recent security vulnerability resulted in malicious code being placed on the router. The fastest way to remove that code is to do a factory reset. Just installing a new firmware image will not do that. Your average user is not going to be able to SSH into the router, navigate the filesystem and identify code that shouldn't be there.

As you appear to be more than capable of securing your router (e.g. not enabling AiCloud or web access from WAN) I see no reason for you to do a factory reset. But as always check the firmware release notes for any specific requirement, e.g. moving from firmware branch 386 to 388.

 

[mario-sz]

It is a recommendation not a requirement that you perform a factory reset after updating the firmware. That recommendation is a blanket statement from Asus to cover all routers, in all circumstances, for users of all skill levels. You decide whether or not it is appropriate to do a factory reset on your devices.

Note that the recommendation appeared shortly after a recent security vulnerability resulted in malicious code being placed on the router. The fastest way to remove that code is to do a factory reset. Just installing a new firmware image will not do that. Your average user is not going to be able to SSH into the router, navigate the filesystem and identify code that shouldn't be there.

As you appear to be more than capable of securing your router (e.g. not enabling AiCloud or web access from WAN) I see no reason for you to do a factory reset. But as always check the firmware release notes for any specific requirement, e.g. moving from firmware branch 386 to 388.

THX

 

[bbunge]

Just let your devices upgrade themselves. Nothing in the operation will change. This is my plan as I disagree with the password policy. I recently canceled a medical portal because they were forcing a 12 digit password.

 

[mario-sz]

Just let your devices upgrade themselves. Nothing in the operation will change. This is my plan as I disagree with the password policy. I recently canceled a medical portal because they were forcing a 12 digit password.

I don't know my router login and passwords by heart because I use password safe. The login and password are each 32 characters long.

 

[bennor]

Hi. Thank you for your reply, but I disagree that this is standard practice. I also use a SonicWall 3700 at my company, and I can't imagine having to reinstall everything after a firmware update, as I'd have to shut down the company for a week. Firewall rules, NAT, objects, etc., aren't something you can implement in an hour or two.

You are free to disagree, but it the reality and fact that many router manufacturers include the capability (even sometimes recommend) resetting their equipment to default for various reasons, particularly as a troubleshooting step if one is having issues. In this case Asus, for their own reasons, are recommending it to ensure the security updates are correctly applied post firmware update. As already indicated, you have the choice of performing the Asus recommended factory reset to apply the new security settings or not after firmware update. There has been discussion in other recent firmware Release topics in this subforum discussing this Asus firmware reset request with people making similar objections to your own. Do it or don't, your choice.

 

[Justinh]

I can't imagine having to reinstall everything after a firmware update, as I'd have to shut down the company for a week. Firewall rules, NAT, objects, etc., aren't something you can implement in an hour or two.

Your ASUS home router is not as sophisticated as your company hardware ... you probably won't have to shutdown your home network for a week, or even an hour.

 

[Tech9]

Many people say that the AX58u and others are consumer-grade routers, etc., but that's not entirely true, as they were recommended for small businesses

Common false advertisement. This model is nothing more than entry-level consumer grade router. The only Asus attempt in SMB is highly unpopular ExpertWiFi. They don't even have comparable to "C brand" and "N brand" products. Don't know what "L brand" is...

 

[fruitcornbread]

Don't know what "L brand" is

It's Linksys

 

[mario-sz]

Your ASUS home router is not as sophisticated as your company hardware ... you probably won't have to shutdown your home network for a week, or even an hour.

I'd like it to take an hour. After resetting the router, I'll need to create a new OPEN VPN certificate, VIREGUARD, etc.I have 16 clients, 10 of which are connecting from another country. And all of WIREGUARD, including 50 phones, need to be created.

 

[mario-sz]

Common false advertisement. This model is nothing more than entry-level consumer grade router. The only Asus attempt in SMB is highly unpopular ExpertWiFi. They don't even have comparable to "C brand" and "N brand" products. Don't know what "L brand" is... -

It may be consumer-grade, but it's been running flawlessly for four years with five mesh points (including AX58u), 50 computers, and a total of 150 devices. This includes all 16 OPENVPN and WIREGUARD tunnels, and everything works 24/7 without a single outage or downtime.

 

[Tech9]

I have 16 tunnels

You don't have 16 tunnels. You perhaps have up to 16 clients connecting to the single supported OpenVPN or WireGuard server in stock Asuswrt. All your devices are on a flat network because this model has no VLAN options. Definitely not the best option for SMB.

 

[mario-sz]

You don't have 16 tunnels. You perhaps have up to 16 clients connecting to the single supported OpenVPN or WireGuard server in stock

Thanks. I corrected it.

Definitely not the best option for SMB.

Nobody said he was good or even the best

 

[Squall Leonhart]

It is a recommendation not a requirement that you perform a factory reset after updating the firmware. That recommendation is a blanket statement from Asus to cover all routers, in all circumstances, for users of all skill levels. You decide whether or not it is appropriate to do a factory reset on your devices.

Note that the recommendation appeared shortly after a recent security vulnerability resulted in malicious code being placed on the router. The fastest way to remove that code is to do a factory reset. Just installing a new firmware image will not do that. Your average user is not going to be able to SSH into the router, navigate the filesystem and identify code that shouldn't be there.

As you appear to be more than capable of securing your router (e.g. not enabling AiCloud or web access from WAN) I see no reason for you to do a factory reset. But as always check the firmware release notes for any specific requirement, e.g. moving from firmware branch 386 to 388.

the recommendation in this case seems to be about the new defaults more than anything for upnp, passwords and their pointless https default which is really not needed within LAN.

 

[ColinTaylor]

the recommendation in this case seems to be about the new defaults more than anything for upnp, passwords and their pointless https default which is really not needed within LAN.

Those specific recommendations come from release notes for firmwares released in the last few weeks. Asus hasn't updated the firmware for the OP's model since May so it doesn't contain those changes or recommendations.

 

[Tech9]

After resetting the router, I'll need to create a new OPEN VPN certificate

You can export the existing certificate and import it after the reset. No need to create a new one and reconfigure the clients.