@Hucklebury you can keep using the same SSIDs and passphrases. Just make sure that they are long enough and random enough to be secure. Personal opinion, they should both be random and long enough to fill both fields, 32 characters for the SSID and 63 or 64 characters for the passphrase. Entering a long passphrase into a phone or ipod, etc can be a bit of a pain, but, it will be secure. You can use the following page to generate secure SSIDs and passphrases:
https://www.grc.com/passwords.htm
Refreshing the page will result in new character strings.
Just to note, you don't have to enable IPV6. You can keep it disabled and run IPV4 only if you determine that IPV6 is still causing problems for your local network. If so, disable IPV6 and after that setting is complete, log back into the router and reboot it.
Ensure that the IPV6 firewall is enabled. On the IPV6 settings tab, if you disable, the setting to "Connect to DNS Server automatically" that brings up a secondary set of entry windows to enter an IPV6 DNS server. At that point you can enter something else such as Google or OpenDNS.
The Google Public DNS IPv6 addresses are as follows:
2001:4860:4860::8888
2001:4860:4860::8844
The OpenDNS IPv6 Sandbox IPs are:
2620:0:ccc::2
2620:0:ccd::2
On the Advanced Settings WAN tab, if you disable the:
Connect to DNS Server automatically: (set to no) , you can also enter the DNS server of your choice:
Open DNS
208.67.222.222
208.67.220.220
8.8.8.8
8.8.4.4
Note that with the Broadcom based Asus router, there are other functions that can automatically disable the NAT Acceleration (CTF), possibly without warning. These include any form of Traffic monitoring, where the CPU has to do something with the data before it exits the router. You would know right away as the throughput speeds with the NAT Accelaration disabled would drop to somewhere around 250 Mb/s.
The AI Protection doesn't hurt the IPV4 throughput, but, from my observations, it will drop the IPV6 throughput. So, that is another reason why you might not want to run IPV6 if in fact you want to use the AI Protection, which is what I do for now, use AI protection and disable IPV6.
Fwiw, I was running a few tests yesterday with stateful IPV6 enabled and ended up with pingtest failure after about 5 minutes of running the pingtest. Thats more than a little unusual, so, if you decide to use IPV6, either stateless or stateful, keep an eye out for possible IPV6 problems, specifically issues with your cell phones, or problems accessing google or yahoo sites.
Personal opinion, unless you need access sites that are IPV6 only, disable IPV6 and when that is set, log back into the router and reboot it. If you run an XBox One, then running IPV6 would be useful. So, it just depends on what you need to do. Get the router up and running with IPV4 properly and then add IPV6 in slow time.
PM sent. Check your message in box. You can leave the IPV6 Firewall enabled and disable the IPV6 service. They are set on two different tabs.
The 1900P is an Asus designation. If you're running gigabit service and looking for an all in one off the shelf router, you should be looking for routers that have a 1.4 Ghz processor as a minimum, preferrably faster if possible and within your budget. The RT-AC68U, which is essentially the first iteration of this router only has an 800 Mhz processor. The 1900P has a 1.4 Ghz processor. Just for interests sake, the brand new Asus BRT-AC828 business router only has a 1.8 Ghz processor and claims to run an aggregated data rate of 2 Gb/s using dual WAN ports. I'd really be interested in seeing IPV6 speed test results with the AI Protection enabled. I doubt that it would run 2 Gb/s, more likely well under 1 Gb/s. The question that users should be asking these days is, whats required to run gigabit speeds and run security measures such as packet scans, intrusion detection and others.
You should be able to find the 1900P at Best Buy.
https://www.asus.com/Networking/RT-AC1900P/overview/
https://www.asus.com/Commercial-Networking/BRT-AC828/overview/
Fwiw, for gigabit speeds and faster, my opinion at the present time to look for something like a PfSense, OpenSense, Sophos router, which can be built with a much faster processor and then loaded with the any one of those operating systems. The benefit is that the faster processor will keep up to gigabit speeds and allow you to run packet scans, intrusion detection, etc, keeping your system secure, and in theory, not suffer from speed losses thru the router. Drawback, you need a wifi router or access point to support wifi in the home unless you add wifi capability to the router, which can be done. To run gigabit speeds with adequate security, you're looking at something like a 2 Ghz processor as a minimum from what I understand. I think the combination of something like the RT-AC68U/1900P with a PfSense, OpenSense, Sophos router would make a lot of sense for gigabit speeds and beyond.
PfSense just brought out a small micro-router which would probably be okay for 250/20 plans, just speculating. If you wanted to learn about running something like a PfSense router, this is a fairly cheap investment and it can be used simultaneously with another router as the modem will support two devices for both IPV4 and IPV6 addresses for the foreseeable future. Not sure when dual IPV4 support will disappear as there is some Rogers product out in the wild that uses/requires two IPV4 addresses. Apparently there is no limit on the number of IPV6 addresses that can be used.
https://www.netgate.com//products/sg-1000.html
To run gigabit speeds, you would need something along this idea:
https://www.netgate.com//products/sg-4860.html
Or you could go whole hog and run a router with 10Gb/s ports. Expensive, but, that would probably be the last router that you ever buy.
https://www.netgate.com//products/xg-2758-1u.html
I suspect that a person could build a 10Gb/s capable router for less money.
-
167385 views
-
51 Likes
-
-
