My 2xRT-AC86U 3.0.0.4.386.41634 AiMesh 2.0 with SB6141 cable modem is on the middle/ground level with a
77' wireless backhaul. The house router covers (3) 1650 sq ft levels; the detached garage node covers 1750 sq ft; both cover a 2-acre lot; brick construction. The 5.0 backhaul PHY link rates dn/up are ~877/780 Mbps (3/3 and 3/4 bars). Roaming Assistant node steering is enabled with 2.4/5.0 RSSI thresholds of -55/-70 dBm. Smart Connect node band steering is disabled with different SSIDs per band and fixed, non-DFS channels. AiProtection is enabled.
This replaced 2xRT-AC68U with a 5.0 backhaul signal of 2/4 bars. Smart Connect is not supported on AC1900/AC68/AC66 B1; the SSIDs should be different.
Speedtest.net results...
My install notes:
o
ASUS AiMesh = router/AP + nodes = root node + remote nodes
Use the highest spec router as the root node.
A non-AiMesh router is used when the root node is in wired AP Mode.
Mixing routers/firmware, wired/wireless backhauls, and star (ideal)/daisy-chain topologies is permitted.
o
AC86U,
AC68U
o
Reset FAQ,
Reset Button/webUI Restore,
WPS Button Hard Reset
o
Lessons,
Insights,
Speeds,
Beam Forming,
Roaming/
Secrets,
Smart Connect, Troubleshooting/
Addendum,
WiFi6AX
o
Use a UPS to protect network and firmware upgrades
o Power OFF router and modem
o Wire router WAN to modem (
blue tape*), and router LAN to PC
o Power ON router and wait for it to settle (
power cycle/drain)
o
Hold router Reset until Power LED flashes slowly and wait (
factory default reset)
o Power ON modem and wait
o Browse to router.asus.com or 192.168.50.1 or 192.168.1.1 and login to router webUI when required (default credentials are
admin,
admin)
o
Perform router Quick Setup for firmware check/upgrade (see version link for release notes)
o
Perform router Restore w/Initialize and wait (
factory default reset w/initialization AFTER firmware upgrade)
Reset Button/webUI Restore clears settings in NVRAM; reboot restores factory defaults from CFE.
WebUI Restore w/Initialize also clears logged data in /jffs folder.
o Power OFF router and modem
o Repeat above for node except keep power ON for AiMesh install
o Disconnect node and place near router (77' works here)
o Wire router WAN to modem (
blue tape*), and router LAN to PC
o Power ON router and wait
o Power ON modem and wait
o
Perform router Quick Setup and configuration:
Disable Smart Connect and set different SSIDs per band and
fixed, least congested, non-DFS channels for more predictable/stable WiFi (avoids band contention and Auto/DFS channel disruption, and allows segmenting clients by WLAN).
Otherwise, enable Smart Connect with same SSIDs.
- set 2.4 WLAN to
SSID-24, n, 20 MHz, ch
1,6,11 (or 1,5,9,13), WPA2-AES*
- set 5.0 WLAN to
SSID-50, n/ac, 20/40/
80 MHz, ch
36-48 52-144 (DFS)
149-161 165, WPA2-AES*
- do not hide SSIDs (speeds client connection)
-
confirm ALL bands are broadcasting (required to add node)
- set Roaming Assistant 2.4 RSSI threshold to -55 dBm (2.4/5.0 defaults are -70/-70)
- disable Airtime Fairness per band (incompatible with some adapters)
- disable Universal (Implicit) Beamforming per band (proprietary/problematic)
- set router LAN static IP 192.168.1.1 and DHCP server pool 192.168.1.10-254 (router
manual IPs inside pool; client
static IPs outside pool)
- disable UPnP* (enable UPnP or forward ports, if required)
- set WAN DNS servers* (
Quad9 9.9.9.9 and 149.112.112.112)
- disable SIP Passthrough
- confirm firewalls are enabled*
- disable login Captcha
- set USB Mode 2.0 to shield 2.4 WLAN/range from USB 3.0 EMI
- set local Time Zone and DST (Mar 2nd Sun, Nov 1st Sun)
- confirm Telnet is disabled*
- confirm SSH is disabled*
- confirm Authentication Method is set to HTTP (required to add node?)
- confirm Web Access from WAN is disabled always*
- if using a wired backhaul, set AiMesh node Connection Priority to 1G WAN first
- if using ALL wired backhauls, enable AiMesh Ethernet Backhaul Mode to release all WiFi for client use
- set guest1 WLANs to
SSID-24/50 Guest, WPA2-AES*, disable intranet access*, sync to all nodes
Guest2,3 WLANs broadcast from root node only (an AP Mode guest WLAN is NOT isolated).
- enable
AiProtection\Network Protection*
Administration\Privacy Withdraw will disable all Trend Micro features.
- disable Media Server and Network Place (SAMBA) Share on all nodes
- reboot router
- search/add AiMesh node (node must be in reset state; will enable WPS)
Removing a node will reset the node.
- disable WPS after adding node*
- wait a bit for new network to settle
- record inbuilt QoS Internet Speed test
*security-related
o
Power OFF/ON router and browse to
GRC Shields UP! to test WAN security
o Deploy node(s)
high, central, in the clear, and within range of the router's 5.0 band, even if using a wired backhaul (alternate backhauls enable self-healing); or daisy-chain node(s)
within range of another node's 5.0 band
The Wireless Log lists RSSI values and Tx/Rx rates for a node's wireless backhaul MACs. Adjust channel and backhaul distance/path for a signal of 4 bars or RSSI greater/more positive than -68 dBm and least interference. Tighten and face antennas
\ | / (tilted donut pattern and 3 dBi coverage).
o Install wired backhaul from router LAN to node WAN for full-duplex Ethernet;
other scenarios
o Relocate node to adjust band coverage/overlap to affect node steering (not too near, not too far) and/or reduce Tx power
o Raise (less negative) Roaming Assistant RSSI threshold per band to roam sooner to remote node
o Adjust Smart Connect rules to affect node band steering (not likely)
o Confirm the integrity of all cabling (Cat5e or better)
o Reboot network infrastructure/clients to clear lingering conditions
o Configure client side wireless properties to improve client band steering; forget wireless connections to clear lingering conditions; update OEM wireless drivers
o Disable unnecessary WiFi Direct APs in wireless printers and media boxes that may interfere
o Install
WiFi Analyzer Classic or
similar app to monitor WiFi signals
o Avoid ASUS Router app (mobile platforms are fragile/insecure)
o Live with a new network a while before adding features
o
Use webUI to upgrade firmware:
Run
WinMD5 to verify downloaded file MD5 checksum value.
o Check/Upgrade/Upload nodes, then router (stop here for dirty upgrade)
o Remove/eject any USB storage
o Remove nodes to reset; Restore w/Initialize router to reset
- Configure router from scratch as before
o
Power OFF/ON router and test WAN security.
o Mount and scan any USB storage
o 3.0.0.4.384.21140
x 32797,9 node client connection/speed degrades
x 45149 TM crashes
o 45713,7 excessive Auto ch scanning; TM consumes memory
x 81039 PULLED; excessive Auto ch scanning; webUI lock up; erratic CPU; new RA defaults
o 81049 excessive Auto ch scanning
o 81351,2
o 81369
o 81792 PULLED; SC allows fixed channels
o 81858
o 81918,30
o 81992 enabled auto updating!
o 82072 auto updated
o 3.0.0.4.386.40451 AiMesh 2.0
o 41634 adds Fullcone NAT; disables CPU wait state (higher temp)
AiMesh 2.0 uses performance routers with features including
Asuswrt-Merlin, extends LAN/WLANs, improves roaming, centralizes management, maintains fast/dedicated wired/wireless backhauls, and can be incrementally purchased/upgraded. Next: Tri-band WiFi 6e with dedicated higher-speed wireless backhauls.
My 2018 China 86Us died 2/20 and 8/20 with half-lit LAN4 LED; replaced with 2020 Vietnam 86Us.
OE