User Guide TUF-AX3000 Dual Band Wi-Fi Router
E16964 First Edition August 2020 Copyright © 2020 ASUSTeK Computer Inc. All Rights Reserved. No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK Computer Inc. (“ASUS”).
Table of contents 1 1.1 1.2 1.3 1.4 1.5 1.6 Getting to know your wireless router 6 Welcome!.........................................................................................6 Package contents..........................................................................6 Your wireless router......................................................................7 Positioning your router...............................................................9 Setup Requirements....................................
Table of contents 3.6.3 3G/4G.........................................................................................46 3.7 Using AiCloud 2.0....................................................................... 48 3.7.1 Cloud Disk.................................................................................49 3.7.2 Smart Access............................................................................50 3.7.3 AiCloud Sync............................................................................
Table of contents 4.5.4 Network Services Filter........................................................83 4.6 Administration............................................................................ 85 4.6.1 4.6.2 4.6.3 4.6.4 4.7 5 5.1 5.2 5.3 Operation Mode.....................................................................85 System........................................................................................86 Firmware Upgrade.............................................................
1 Getting to know your wireless router 1.1 Welcome! Thank you for purchasing an ASUS TUF-AX3000 Wireless Router! The ultra-thin and stylish TUF-AX3000 features a 2.4GHz and 5GHz dual bands for an unmatched concurrent wireless HD streaming; SMB server, UPnP AV server, and FTP server for 24/7 file sharing; a capability to handle 300,000 sessions; and the ASUS Green Network Technology, which provides up to 70% power-saving solution. 1.
1.3 Your wireless router WAN (Internet) LED Red: No IP or no physical connection. On: Has physical connection to a wide area network (WAN). LAN 1~4 LED Off: No power or no physical connection. On: Has physical connection to a local area network (LAN). 5GHz LED Off: No 5GHz signal. On: Wireless system is ready. Flashing: Transmitting or receiving data via wireless connection. 2.4GHz LED Off: No 2.4GHz signal. On: Wireless system is ready. Flashing: Transmitting or receiving data via wireless connection.
WAN (Internet) port Connect a network cable into this port to establish WAN connection. WPS button This button launches the WPS Wizard. Reset button This button resets or restores the system to its factory default settings. NOTES: 8 • Use only the adapter that came with your package. Using other adapters may damage the device. • Specifications: DC Power adapter DC Output: +19V with max 1.
1.4 Positioning your router For the best wireless signal transmission between the wireless router and the network devices connected to it, ensure that you: • Place the wireless router in a centralized area for a maximum wireless coverage for the network devices. • Keep the device away from metal obstructions and away from direct sunlight. • Keep the device away from 802.11g or 20MHz only Wi-Fi devices, 2.
1.5 Setup Requirements To set up your wireless network, you need a computer that meets the following system requirements: • Ethernet RJ-45 (LAN) port (10Base-T/100Base-TX/ 1000BaseTX) • IEEE 802.11a/b/g/n/ac/ax wireless capability • An installed TCP/IP service • Web browser such as Internet Explorer, Firefox, Safari, or Google Chrome NOTES: 10 • If your computer does not have built-in wireless capabilities, you may install an IEEE 802.
1.6 Router Setup IMPORTANT! • Use a wired connection when setting up your wireless router to avoid possible setup problems. • Before setting up your ASUS wireless router, do the following: • If you are replacing an existing router, disconnect it from your network. • Disconnect the cables/wires from your existing modem setup. If your modem has a backup battery, remove it as well. • Reboot your cable modem and computer (recommended). 1.6.
To set up your wireless router via wired connection: 1. Insert your wireless router’s AC adapter to the DCIN port and plug it to a power outlet. 2. Using the bundled network cable, connect your computer to your wireless router’s LAN port. IMPORTANT! Ensure that the LAN LED is blinking. 3 Using another network cable, connect your modem to your wireless router’s WAN port. 4. Insert your modem’s AC adapter to the DCIN port and plug it to a power outlet. 1.6.
3. Insert your modem’s AC adapter to the DCIN port and plug it to a power outlet. 4. Install an IEEE 802.11a/b/g/n/ac/ax WLAN adapter on your computer. NOTES: • For details on connecting to a wireless network, refer to the WLAN adapter’s user manual. • To set up the security settings for your network, refer to the section Setting up the wireless security settings in Chapter 3 of this user manual.
2 Getting started 2.1 Logging into the Web GUI Your ASUS Wireless Router comes with an intuitive web graphical user interface (GUI) that allows you to easily configure its various features through a web browser such as Internet Explorer, Firefox, Safari, or Google Chrome. NOTE: The features may vary with different firmware versions. To log into the web GUI: 1. On your web browser, enter http://router.asus.com. 2. On the login page, key in the default user name (admin) and password (admin). 3.
2.2 Quick Internet Setup (QIS) with Autodetection The Quick Internet Setup (QIS) function guides you in quickly setting up your Internet connection. NOTE: When setting the Internet connection for the first time, press the Reset button on your wireless router to reset it to its factory default settings. To use QIS with auto-detection: 1. Log into the Web GUI. The QIS page launches automatically. NOTES: • By default, the login username and password for your wireless router's Web GUI is admin.
2. The wireless router automatically detects if your ISP connection type is Dynamic IP, PPPoE, PPTP, L2TP, and Static IP. Key in the necessary information for your ISP connection type. IMPORTANT! Obtain the necessary information from your ISP about the Internet connection type.
for Static IP NOTES: • The auto-detection of your ISP connection type takes place when you configure the wireless router for the first time or when your wireless router is reset to its default settings. • If QIS failed to detect your Internet connection type, click Skip to manual setting and manually configure your connection settings. 3. Assign the wireless network name (SSID) and security key for your 2.4GHz and 5 GHz wireless connection. Click Apply when done. 4.
2.3 Connecting to your wireless network After setting up your wireless router via QIS, you can connect your computer or other smart devices to your wireless network. To connect to your network: 1. On your computer, click the network icon in the notification area to display the available wireless networks. 2. Select the wireless network that you want to connect to, then click Connect. 3. You may need to key in the network security key for a secured wireless network, then click OK. 4.
3 Configuring the General settings 3.1 Using the Network Map Network Map allows you to configure your network’s security settings, manage your network clients, and monitor your USB device.
3.1.1 Setting up the wireless security settings To protect your wireless network from unauthorized access, you need to configure its security settings. To set up the wireless security settings: 1. From the navigation panel, go to General > Network Map. 2. On the Network Map screen and under System status, you can configure the wireless security settings such as SSID, security level, and encryption settings. NOTE: You can set up different wireless security settings for 2.4GHz and 5GHz bands. 2.
4. From the WEP Encryption dropdown list, select the encryption method for your wireless network. IMPORTANT! The IEEE 802.11n/ac/ax standard prohibits using High Throughput with WEP or WPA-TKIP as the unicast cipher. If you use these encryption methods, your data rate will drop to IEEE 802.11g 54Mbps connection. 5. Key in your security passkey. 6. Click Apply when done. 3.1.2 Managing your network clients To manage your network clients: 1. From the navigation panel, go to General > Network Map tab. 2.
3.1.3 Monitoring your USB device The ASUS Wireless Router provides a USB port for connecting a USB device or a USB printer to allow you to share files and printer with clients in your network. NOTE: To use this feature, you need to plug a USB storage device, such as a USB hard disk or a USB flash drive, to the USB 3.0 port on the rear panel of your wireless router. Ensure that the USB storage device is formatted and partitioned properly. Refer to the Plug-n-Share Disk Support List at http://event.asus.
IMPORTANT! You first need to create a share account and its permission /access rights to allow other network clients to access the USB device via an FTP site/third-party FTP client utility, Servers Center, Samba, or AiCloud 2.0. For more details, refer to the section 3.6 Using the USB Application and 3.7 Using AiCloud 2.0 in this user manual. To monitor your USB device: 1. From the navigation panel, go to General > Network Map. 2.
Safely removing the USB disk IMPORTANT: Incorrect removal of the USB disk may cause data corruption. To safely remove the USB disk: 1. From the navigation panel, go to General > Network Map. 2. In the upper right corner, click > Eject USB disk. When the USB disk is ejected successfully, the USB status shows Unmounted.
3.2 Creating a Guest Network The Guest Network provides temporary visitors with Internet connectivity via access to separate SSIDs or networks without providing access to your private network. NOTE: TUF-AX3000 supports up to six SSIDs (three 2.4GHz and three 5GHz SSIDs). To create a guest network: 1. From the navigation panel, go to General > Guest Network. 2. On the Guest Network screen, select 2.4Ghz or 5Ghz frequency band for the guest network that you want to create. 3. Click Enable.
4. To configure additional options, click Modify. 5. Click Yes on the Enable Guest Network screen. 6. Assign a wireless name for your temporary network on the Network Name (SSID) field. 7. Select an Authentication Method. 8. Select an Encryption method. 9. Specify the Access time or choose Limitless. 10.Select Disable or Enable on the Access Intranet item. 11. When done, click Apply.
3.3 AiProtection AiProtection provides real-time monitoring that detects malware, spyware, and unwanted access. It also filters unwanted websites and apps and allows you to schedule a time that a connected device is able to access the Internet.
3.3.1 Network Protection Network Protection prevents network exploits and secures your network from unwanted access. Configuring Network Protection To configure Network Protection: 1. From the navigation panel, go to General > AiProtection. 2. From the AiProtection main page, click on Network Protection. 3. From the Network Protection tab, click Scan. When done scanning, the utility displays the results on the Router Security Assessment page.
IMPORTANT! Items marked as Yes on the Router Security Assessment page is considered to be at a safe status. Items marked as No, Weak, or Very Weak is highly recommended to be configured accordingly. 4. (Optional) From the Router Security Assessment page, manually configure the items marked as No, Weak, or Very Weak. To do this: a. Click an item. NOTE: When you click an item, the utility forwards you to the item’s setting page. b.
Malicious Sites Blocking This feature restricts access to known malicious websites in the cloud database for an always-up-to-date protection. NOTE: This function is automatically enabled if you run the Router Weakness Scan. To enable Malicious Sites Blocking: 1. From the navigation panel, go to General > AiProtection. 2. From the AiProtection main page, click on Network Protection. 3. From the Malicious Sites Blocking pane, click ON.
Infected Device Prevention and Blocking This feature prevents infected devices from communicating personal information or infected status to external parties. NOTE: This function is automatically enabled if you run the Router Weakness Scan. To enable Infected Device Prevention and Blocking: 1. From the navigation panel, go to General > AiProtection. 2. From the AiProtection main page, click on Network Protection. 3. From the Infected Device Prevention and Blocking pane, click ON.
3.3.2 Setting up Parental Controls Parental Control allows you to control the Internet access time or set the time limit for a client’s network usage. To go to the Parental Controls main page: 1. From the navigation panel, go to General > AiProtection. 2. From the AiProtection main page, click on the Parental Controls tab.
Web & Apps Filters Web & Apps Filters is a feature of Parental Controls that allows you to block access to unwanted web sites or applications. To configure Web & Apps Filters: 1. From the navigation panel, go to General > AiProtection. 2. From the AiProtection main page, click on the Parental Controls icon to go to the Parental Controls tab. 3. From the Enable Web & Apps Filters pane, click ON. 4. When the End Users License Agreement (EULA) message prompt appears, click I agree to continue. 5.
Time Scheduling Time Scheduling allows you to set the time limit for a client’s network usage. NOTE: Ensure that your system time is synchronized with the NTP server. To configure Time Scheduling: 1. From the navigation panel, go to General >AiProtection > Parental Controls > Time Scheduling. 2. From the Enable Time Scheduling pane, click ON. 3. From the Clients Name column, select or key in the client’s name from the drop down list box.
3.4 Using the Traffic Manager 3.4.1 Managing QoS (Quality of Service) Bandwidth Quality of Service (QoS) allows you to set the bandwidth priority and manage network traffic. To set up bandwidth priority: 1. From the navigation panel, go to General > Traffic Manager > QoS tab. 2. Click ON to enable QoS. Fill in the upload and download bandwidth fields. NOTE: Get the bandwidth information from your ISP. 3. Click Save. NOTE: The User Specify Rule List is for advanced settings.
4. On the user-defined QoS rules page, there are four default online service types – web surf, HTTPS and file transfers. Select your preferred service, fill in the Source IP or MAC, Destination Port, Protocol, Transferred and Priority, then click Apply. The information will be configured in the QoS rules screen. NOTES: • To fill in the source IP or MAC, you can: a) Enter a specific IP address, such as "192.168.122.1". b) Enter IP addresses within one subnet or within the same IP pool, such as “192.168.
5. On the User-defined Priority page, you can prioritize the network applications or devices into five levels from the userdefined QoS rules’ dropdown list. Based on priority level, you can use the following methods to send data packets: • Change the order of upstream network packets that are sent to the Internet. • Under Upload Bandwidth table, set Minimum Reserved Bandwidth and Maximum Bandwidth Limit for multiple network applications with different priority levels.
3.5 Traffic Analyzer The traffic monitor feature allows you to access the bandwidth usage and speed of your Internet, wired, or wireless networks. It allows you to monitor network traffic in real-time or on a daily basis. It also offers an option to display the network traffic within the last 24 hours. NOTE: Packets from the Internet are evenly transmitted to the wired and wireless devices.
3.6 Using the USB Application The USB Applications function provides AiDisk, Servers Center, Network Printer Server and Download Master submenus. IMPORTANT! To use the server functions, you need to insert a USB storage device, such as a USB hard disk or a USB flash drive, in the USB 3.0 port on the rear panel of your wireless router. Ensure that the USB storage device is formatted and partitioned properly. Refer to the ASUS website at http://event.asus.
3. Select the access rights that you want to assign to the clients accessing your shared data. 4. Create your domain name via the ASUS DDNS services, read the Terms of Service and then select I will use the service and accept the Terms of service and key in your domain name. When done, click Next. You can also select Skip ASUS DDNS settings then click Next to skip the DDNS setting. 5. Click Finish to complete the setting. 6.
3.6.2 Using Servers Center Servers Center allows you to share the media files from the USB disk via a Media Server directory, Samba share service, or FTP share service. You can also configure other settings for the USB disk in the Servers Center. Using Media Server Your wireless router allows DLNA-supported devices to access multimedia files from the USB disk connected to your wireless router. NOTE: Before using the DLNA Media Server function, connect your device to TUF-AX3000’s network.
To launch the Media Server setting page, go to General > USB application > Media Services and Servers > Media Servers tab. Refer to the following for the descriptions of the fields: • Enable iTunes Server?: Select ON/OFF to enable/disable the iTunes Server. • Media Server Status: Displays the status of the media server. • Media Server Path Setting: Select All Disks Shared or Manual Media Server Path.
2. Follow the steps below to add, delete, or modify an account. To create a new account: a) Click to add new account. b) In the Account and Password fields, key in the name and password of your network client. Retype the password to confirm. Click Add to add the account to the list. To delete an existing account: a) Select the account that you want to delete. b) Click . c) When prompted, click Delete to confirm the account deletion. To add a folder: a) Click .
3. From the list of folders, select the type of access permission that you want to assign for specific folders: • R/W: Select this option to assign read/write access. • R: Select this option to assign read-only access. • No: Select this option if you do not want to share a specific file folder. 4. Click Apply to apply the changes. Using the FTP Share service FTP share enables an FTP server to share files from USB disk to other devices via your local area network or via the Internet.
To use FTP Share service: NOTE: Ensure that you have set up your FTP server through AiDisk. For more details, refer to the section 3.6.1 Using AiDisk. 1. From the navigation panel, click General > USB application > Media Services and Servers > FTP Share tab. 2. From the list of folders, select the type of access rights that you want to assign for specific folders: • R/W: Select to assign read/write access for a specific folder. • W: Select to assign write only access for a specific folder.
3.6.3 3G/4G 3G/4G USB modems can be connected to TUF-AX3000 to allow Internet access. NOTE: For a list of verified USB modems, please visit: http://event.asus.com/2009/networks/3gsupport/.
To set up 3G/4G internet access: 1. From the navigation panel, click General > USB application > 3G/4G. 2. In the Enable USB Modem field, select Yes. 3. Set up the following: • Location: Select your 3G/4G service provider’s location from the dropdown list. • ISP: Select your Internet Service Provider (ISP) from the dropdown list. • APN (Access Point Name) service (optional): Contact your 3G/4G service provider for detailed information.
3.7 Using AiCloud 2.0 AiCloud 2.0 is a cloud service application that allows you to save, sync, share, and access your files. To use AiCloud 2.0: 1. From Google Play Store or Apple Store, download and install the ASUS AiCloud 2.0 app to your smart device. 2. Connect your smart device to your network. Follow the instructions to complete the AiCloud 2.0 setup process.
3.7.1 Cloud Disk To create a cloud disk: 1. Insert a USB storage device into the wireless router. 2. Turn on Cloud Disk. 3. Go to https://router.asus.com and enter the router login account and password. For better user experience, we recommend that you use Google Chrome or Firefox. 4. You can now start accessing Cloud Disk files on devices connected to the network.
3.7.2 Smart Access The Smart Access function allows you to easily access your home network via your router’s domain name. NOTES: 50 • You can create a domain name for your router with ASUS DDNS. For more details, refer to section 4.3.5 DDNS. • By default, AiCloud 2.0 provides a secure HTTPS connection. Key in https://[yourASUSDDNSname].asuscomm.com for a very secure Cloud Disk and Smart Access usage.
3.7.3 AiCloud Sync To use AiCloud Sync: 1. Launch AiCloud 2.0, click AiCloud Sync. 2. Select ON to enable AiCloud Sync. 3. Click Add new account. 4. Enter your ASUS WebStorage account password and select the directory that you want to sync with WebStorage. 5. Click Apply.
4 Configuring the Advanced Settings 4.1 Wireless 4.1.1 General The General tab allows you to configure the basic wireless settings. To configure the basic wireless settings: 1. From the navigation panel, go to Advanced Settings > Wireless > General tab. 2. Select 2.4GHz or 5GHz as the frequency band for your wireless network. 3. Assign a unique name containing up to 32 characters for your SSID (Service Set Identifier) or network name to identify your wireless network.
NOTE: You can assign unique SSIDs for the 2.4 GHz and 5GHz frequency bands. 4. In the Hide SSID field, select Yes to prevent wireless devices from detecting your SSID. When this function is enabled, you would need to enter the SSID manually on the wireless device to access the wireless network. 5. Select any of these wireless mode options to determine the types of wireless devices that can connect to your wireless router: • Auto: Select Auto to allow 802.11AC, 802.11n, 802.11g, and 802.
• WPA/WPA2/WPA3 Personal/WPA Auto-Personal: This option provides strong security. You can use either WPA (with TKIP), WPA2 (with AES) or WPA3. If you select this option, you must use TKIP + AES encryption and enter the WPA passphrase (network key). • WPA/WPA2/WPA3 Enterprise/WPA Auto-Enterprise: This option provides very strong security. It is with integrated EAP server or an external RADIUS back-end authentication server. • Radius with 802.
4.1.2 WPS WPS (Wi-Fi Protected Setup) is a wireless security standard that allows you to easily connect devices to a wireless network. You can configure the WPS function via the PIN code or WPS button. NOTE: Ensure that the devices support WPS. To enable WPS on your wireless network: 1. From the navigation panel, go to Advanced Settings > Wireless > WPS tab. 2. In the Enable WPS field, move the slider to ON. 3. WPS uses 2.4GHz by default.
NOTE: WPS supports authentication using Open System, WPA-Personal, WPA2-Personal and WPA3-Personal. WPS does not support a wireless network that uses a Shared Key, WPA-Enterprise, WPA2-Enterprise, WPA3-Enterprise and RADIUS encryption method. 3. In the WPS Method field, select Push Button or Client PIN code. If you select Push Button, go to step 4. If you select Client PIN code, go to step 5. 4. To set up WPS using the router’s WPS button, follow these steps: a.
4.1.3 Bridge Bridge or WDS (Wireless Distribution System) allows your ASUS wireless router to connect to another wireless access point exclusively, preventing other wireless devices or stations to access your ASUS wireless router. It can also be considered as a wireless repeater where your ASUS wireless router communicates with another access point and other wireless devices. To set up the wireless bridge: 1. From the navigation panel, go to Advanced Settings > Wireless > WDS tab. 2.
• HYBRID: Enables the Wireless Bridge feature and allows other wireless devices/stations to connect to the router. NOTE: In Hybrid mode, wireless devices connected to the ASUS wireless router will only receive half the connection speed of the Access Point. 4. In the Connect to APs in list field, click Yes if you want to connect to an Access Point listed in the Remote AP List. 5. In the Control Channel field, select the operating channel for the wireless bridge.
4.1.4 Wireless MAC Filter Wireless MAC filter provides control over packets transmitted to a specified MAC (Media Access Control) address on your wireless network. To set up the Wireless MAC filter: 1. From the navigation panel, go to Advanced Settings > Wireless > Wireless MAC Filter tab. 2. Tick Yes in the Enable Mac Filter field. 3. In the MAC Filter Mode dropdown list, select either Accept or Reject. • Select Accept to allow devices in the MAC filter list to access to the wireless network.
4.1.5 RADIUS Setting RADIUS (Remote Authentication Dial In User Service) Setting provides an extra layer of security when you choose WPAEnterprise, WPA2-Enterprise, WPA3-Enterprise or Radius with 802.1x as your Authentication Mode. To set up wireless RADIUS settings: 1. Ensure that the wireless router’s authentication mode is set to WPA-Enterprise, WPA2-Enterprise, WPA3-Enterprise or Radius with 802.1x. NOTE: Please refer to section 4.1.
4.1.6 Professional The Professional screen provides advanced configuration options. NOTE: We recommend that you use the default values on this page. In the Professional Settings screen, you can configure the following: • Frequency: Select the frequency band that the professional settings will be applied to. • Enable Radio: Select Yes to enable wireless networking. Select No to disable wireless networking. • Enable wireless scheduler: You can choose clock format as 24-hour or 12-hour.
• Set AP isolated: The Set AP isolated item prevents wireless devices on your network from communicating with each other. This feature is useful if many guests frequently join or leave your network. Select Yes to enable this feature or select No to disable. • Multicast rate (Mbps): Select the multicast transmission rate or click Disable to switch off simultaneous single transmission. • Preamble Type: Preamble Type defines the length of time that the router spent for CRC (Cyclic Redundancy Check).
• RTS Threshold: Select a lower value for RTS (Request to Send) Threshold to improve wireless communication in a busy or noisy wireless network with high network traffic and numerous wireless devices. • DTIM Interval: DTIM (Delivery Traffic Indication Message) Interval or Data Beacon Rate is the time interval before a signal is sent to a wireless device in sleep mode indicating that a data packet is awaiting delivery. The default value is three milliseconds.
4.2 LAN 4.2.1 LAN IP The LAN IP screen allows you to modify the LAN IP settings of your wireless router. NOTE: Any changes to the LAN IP address will be reflected on your DHCP settings. To modify the LAN IP settings: 1. From the navigation panel, go to Advanced Settings > LAN > LAN IP tab. 2. Modify the IP address and Subnet Mask. 3. When done, click Apply.
4.2.2 DHCP Server Your wireless router uses DHCP to assign IP addresses automatically on your network. You can specify the IP address range and lease time for the clients on your network. To configure the DHCP server: 1. From the navigation panel, go to Advanced Settings > LAN > DHCP Server tab. 2. In the Enable the DHCP Server field, tick Yes.
3. In the Domain Name text box, enter a domain name for the wireless router. 4. In the IP Pool Starting Address field, key in the starting IP address. 5. In the IP Pool Ending Address field, key in the ending IP address. 6. In the Lease Time field, specify in seconds when an assigned IP address will expire. Once it reaches this time limit, the DHCP server will then assign a new IP address. NOTES: • We recommend that you use an IP address format of 192.168.50.
4.2.3 Route If your network makes use of more than one wireless router, you can configure a routing table to share the same Internet service. NOTE: We recommend that you do not change the default route settings unless you have advanced knowledge of routing tables. To configure the LAN Routing table: 1. From the navigation panel, go to Advanced Settings > LAN > Route tab. 2. On the Enable static routes field, choose Yes. 3.
4.2.4 IPTV The wireless router supports connection to IPTV services through an ISP or a LAN. The IPTV tab provides the configuration settings needed to set up IPTV, VoIP, multicasting, and UDP for your service. Contact your ISP for specific information regarding your service.
4.3 WAN 4.3.1 Internet Connection The Internet Connection screen allows you to configure the settings of various WAN connection types. To configure the WAN connection settings: 1. From the navigation panel, go to Advanced Settings > WAN > Internet Connection tab. 2. Configure the following settings below. When done, click Apply. • WAN Connection Type: Choose your Internet Service Provider type. The choices are Automatic IP, PPPoE, PPTP, L2TP or fixed IP.
• Enable NAT: NAT (Network Address Translation) is a system where one public IP (WAN IP) is used to provide Internet access to network clients with a private IP address in a LAN. The private IP address of each network client is saved in a NAT table and is used to route incoming data packets.
• MAC Address: MAC (Media Access Control) address is a unique identifier for your networking device. Some ISPs monitor the MAC address of networking devices that connect to their service and reject any unrecognized device that attempt to connect. To avoid connection issues due to an unregistered MAC address, you can: • Contact your ISP and update the MAC address associated with your ISP service.
4.3.2 Port Trigger Port range triggering opens a predetermined incoming port for a limited period of time whenever a client on the local area network makes an outgoing connection to a specified port. Port triggering is used in the following scenarios: • More than one local client needs port forwarding for the same application at a different time. • An application requires specific incoming ports that are different from the outgoing ports. To set up Port Trigger: 1.
• Trigger Port: Specify a trigger port to open the incoming port. • Protocol: Select the protocol, TCP, or UDP. • Incoming Port: Specify an incoming port to receive inbound data from the Internet. • Protocol: Select the protocol, TCP, or UDP. NOTES: • When connecting to an IRC server, a client PC makes an outgoing connection using the trigger port range 66660-7000. The IRC server responds by verifying the username and creating a new connection to the client PC using an incoming port.
4.3.3 Virtual Server/Port Forwarding Port forwarding is a method to direct network traffic from the Internet to a specific port or a specific range of ports to a device or number of devices on your local network. Setting up Port Forwarding on your router allows PCs outside the network to access specific services provided by a PC in your network.
2. Configure the following settings below. When done, click Apply. • Enable Port Forwarding: Choose Yes to enable Port Forwarding. • Famous Server List: Determine which type of service you want to access. • Famous Game List: This item lists ports required for popular online games to work correctly. • FTP Server Port: Avoid assigning the port range 20:21 for your FTP server as this would conflict with the router’s native FTP server assignment. • Service Name: Enter a service name.
• Local IP: Key in the client’s LAN IP address. NOTE: Use a static IP address for the local client to make port forwarding work properly. Refer to section 4.2 LAN for information. • Local Port: Enter a specific port to receive forwarded packets. Leave this field blank if you want the incoming packets to be redirected to the specified port range. • Protocol: Select the protocol. If you are unsure, select BOTH.
4.3.4 DMZ Virtual DMZ exposes one client to the Internet, allowing this client to receive all inbound packets directed to your Local Area Network. Inbound traffic from the Internet is usually discarded and routed to a specific client only if port forwarding or a port trigger has been configured on the network. In a DMZ configuration, one network client receives all inbound packets. Setting up DMZ on a network is useful when you need incoming ports open or you want to host a domain, web, or e-mail server.
4.3.5 DDNS Setting up DDNS (Dynamic DNS) allows you to access the router from outside your network through the provided ASUS DDNS Service or another DDNS service. To set up DDNS: 1. From the navigation panel, go to Advanced Settings > WAN > DDNS tab. 2. Configure the following settings below. When done, click Apply. • Enable the DDNS Client: Enable DDNS to access the ASUS router via the DNS name rather than WAN IP address. • Server and Host Name: Choose ASUS DDNS or other DDNS.
• Enable wildcard: Enable wildcard if your DDNS service requires one. NOTES: DDNS service will not work under these conditions: • When the wireless router is using a private WAN IP address (192.168. x.x, 10.x.x.x, or 172.16.x.x), as indicated by a yellow text. • The router may be on a network that uses multiple NAT tables. 4.3.6 NAT Passthrough NAT Passthrough allows a Virtual Private Network (VPN) connection to pass through the router to the network clients.
4.4 IPv6 This wireless router supports IPv6 addressing, a system that supports more IP addresses. This standard is not yet widely available. Contact your ISP if your Internet service supports IPv6. To set up IPv6: 1. From the navigation panel, go to Advanced Settings > IPv6. 2. Select your Connection Type. The configuration options vary depending on your selected connection type. 3. Enter your IPv6 LAN and DNS settings. 4. Click Apply.
4.5 Firewall The wireless router can serve as a hardware firewall for your network. NOTE: The Firewall feature is enabled by default. 4.5.1 General To set up basic Firewall settings: 1. From the navigation panel, go to Advanced Settings > Firewall > General tab. 2. On the Enable Firewall field, select Yes. 3. On the Enable DoS protection, select Yes to protect your network from DoS (Denial of Service) attacks though this may affect your router’s performance. 4.
To set up a URL filter: 1. From the navigation panel, go to Advanced Settings > Firewall > URL Filter tab. 2. On the Enable URL Filter field, select Enabled. 3. Enter a URL and click the button. 4. Click Apply. 4.5.3 Keyword filter Keyword filter blocks access to webpages containing specified keywords. To set up a keyword filter: 1. From the navigation panel, go to Advanced Settings > Firewall > Keyword Filter tab. 2. On the Enable Keyword Filter field, select Enabled.
3. Enter a word or phrase and click the Add button. 4. Click Apply. NOTES: • The Keyword Filter is based on a DNS query. If a network client has already accessed a website such as http://www.abcxxx.com, then the website will not be blocked (a DNS cache in the system stores previously visited websites). To resolve this issue, clear the DNS cache before setting up the Keyword Filter. • Web pages compressed using HTTP compression cannot be filtered. HTTPS pages also cannot be blocked using a keyword filter.
To set up a Network Service filter: 1. From the navigation panel, go to Advanced Settings > Firewall > Network Service Filter tab. 2. On the Enable Network Services Filter field, select Yes. 3. Select the Filter table type. Black List blocks the specified network services. White List limits access to only the specified network services. 4. Specify the day and time when the filters will be active. 5. To specify a Network Service to filter, enter the Source IP, Destination IP, Port Range, and Protocol.
4.6 Administration 4.6.1 Operation Mode The Operation Mode page allows you to select the appropriate mode for your network. To set up the operating mode: 1. From the navigation panel, go to Advanced Settings > Administration > Operation Mode tab. 2. Select any of these operation modes: • Wireless router mode (default): In wireless router mode, the wireless router connects to the Internet and provides Internet access to available devices on its own local network.
4.6.2 System The System page allows you to configure your wireless router settings. To set up the System settings: 1. From the navigation panel, go to Advanced Settings > Administration > System tab. 2. You can configure the following settings: • Change router login password: You can change the password and login name for the wireless router by entering a new name and password. • WPS button behavior: The physical WPS button on the wireless router can be used to activate WPS.
4.6.3 Firmware Upgrade NOTE: Download the latest firmware from the ASUS website at http://www.asus.com. To upgrade the firmware: 1. From the navigation panel, go to Advanced Settings > Administration > Firmware Upgrade tab. 2. In the New Firmware File field, click Browse to locate the downloaded file. 3. Click Upload. NOTES: • When the upgrade process is complete, wait for some time for the system to reboot.
4.7 System Log System Log contains your recorded network activities. NOTE: System log resets when the router is rebooted or powered off. To view your system log: 1. From the navigation panel, go to Advanced Settings > System Log. 2.
5 Utilities NOTES: • Download and install the wireless router's utilities from the ASUS website: • Device Discovery v1.4.7.1 at http://dlcdnet.asus.com/pub/ASUS/ LiveUpdate/Release/Wireless/Discovery.zip • Firmware Restoration v1.9.0.4 at http://dlcdnet.asus.com/pub/ ASUS/LiveUpdate/Release/Wireless/Rescue.zip • Windows Printer Utility v1.0.5.5 at http://dlcdnet.asus.com/pub/ ASUS/LiveUpdate/Release/Wireless/Printer.zip • The utilities are not supported on MAC OS. 5.
5.2 Firmware Restoration Firmware Restoration is used on an ASUS Wireless Router that failed during its firmware upgrading process. It uploads the firmware that you specify. The process takes about three to four minutes. IMPORTANT: Launch the rescue mode on the router before using the Firmware Restoration utility. NOTE: This feature is not supported on MAC OS. To launch the rescue mode and use the Firmware Restoration utility: 1. Unplug the wireless router from the power source. 2.
3. Set a static IP on your computer and use the following to set up your TCP/IP settings: IP address: 192.168.1.x Subnet mask: 255.255.255.0 4. From your computer’s desktop, click Start > All Programs > ASUS Utility > Wireless Router > Firmware Restoration. 5. Specify a firmware file, then click Upload. NOTE: This is not a firmware upgrade utility and cannot be used on a working ASUS Wireless Router. Normal firmware upgrades must be done through the web interface.
NOTE: The print server function is supported on Windows® XP, Windows® Vista, and Windows® 7. To set up the EZ Printer sharing mode: 1. From the navigation panel, go to General > USB Application > Network Printer Server. 2. Click Download Now! to download the network printer utility. NOTE: Network printer utility is supported on Windows® XP, Windows® Vista, and Windows® 7 only. To install the utility on Mac OS, select Use LPR protocol for sharing printer. 3.
4. Follow the onscreen instructions to set up your hardware, then click Next. 5. Wait a few minutes for the initial setup to finish. Click Next. 6. Click Finish to complete the installation. 7. Follow the Windows® OS instructions to install the printer driver.
8. After the printer’s driver installation is complete, network clients can now use the printer.
5.3.2 Using LPR to Share Printer You can share your printer with computers running on Windows® and MAC operating system using LPR/LPD (Line Printer Remote/ Line Printer Daemon). Sharing your LPR printer To share your LPR printer: 1. From the Windows® desktop, click Start > Devices and Printers > Add a printer to run the Add Printer Wizard. 2. Select Add a local printer and then click Next.
3. Select Create a new port then set Type of Port to Standard TCP/IP Port. Click New Port. 4. In the Hostname or IP address field, key in the IP address of the wireless router then click Next.
5. Select Custom then click Settings. 6. Set Protocol to LPR. In the Queue Name field, key in LPRServer then click OK to continue.
7. Click Next to finish setting up the standard TCP/IP port. 8. Install the printer driver from the vendor-model list. If your printer is not in the list, click Have Disk to manually install the printer drivers from a CD-ROM or file.
9. Click Next to accept the default name for the printer. 10. Click Finish to complete the installation.
5.4 Download Master Download Master is a utility that helps you download files even while your laptops or other devices are switched off. NOTE: You need a USB device connected to the wireless router to use Download Master. To use Download Master: 1. Click General > USB application > Download Master to download and install the utility automatically. NOTE: If you have more than one USB drive, select the USB device you want to download the files to. 2.
5. Use the navigation panel to configure the advanced settings. 5.4.1 Configuring Bit Torrent download settings To configure BitTorrent download settings: 1. From Download Master’s navigation panel, click Bit Torrent to launch the Bit Torrent Setting page. 2. Select a specific port for your download task. 3. To prevent network congestion, you can limit the maximum upload and download speeds under Speed Limits. 4.
5.4.2 NZB settings You can set up a USENET server to download NZB files. After entering USENET settings, Apply.
6 Troubleshooting This chapter provides solutions for issues you may encounter with your router. If you encounter problems that are not mentioned in this chapter, visit the ASUS support site at: https://www.asus.com/support/ for more product information and contact details of ASUS Technical Support. 6.1 Basic Troubleshooting If you are having problems with your router, try these basic steps in this section before looking for further solutions. Upgrade Firmware to the latest version. 1.
Restart your network in the following sequence: 1. Turn off the modem. 2. Unplug the modem. 3. Turn off the router and computers. 4. Plug in the modem. 5. Turn on the modem and then wait for 2 minutes. 6. Turn on the router and then wait for 2 minutes. 7. Turn on computers. Check if your Ethernet cables are plugged properly. • When the Ethernet cable connecting the router with the modem is plugged in properly, the WAN LED will be on.
• Some cable modem service providers require you to use the MAC address of the computer initially registered on the account. You can view the MAC address in the web GUI, Network Map > Clients page, and hover the mouse pointer over your device in Client Status.
6.2 Frequently Asked Questions (FAQs) I cannot access the router GUI using a web browser • If your computer is wired, check the Ethernet cable connection and LED status as described in the previous section. • Ensure that you are using the correct login information. The default factory login name and password is “admin/admin”. Ensure that the Caps Lock key is disabled when you enter the login information. • Delete the cookies and files in your web browser. For Internet Explorer, follow these steps: 1.
The client cannot establish a wireless connection with the router. NOTE: If you are having issues connecting to 5Ghz network, make sure that your wireless device supports 5Ghz or features dual band capabilities. • Out of Range: • Move the router closer to the wireless client. • Try to adjust antennas of the router to the best direction as described in section 1.4 Positioning your router. • DHCP server has been disabled: 1. Launch the web GUI.
• SSID has been hidden. If your device can find SSIDs from other routers but cannot find your router’s SSID, go to Advanced Settings > Wireless > General, select No on Hide SSID, and select Auto on Control Channel. • If you are using a wireless LAN adapter, check if the wireless channel in use conforms to the channels available in your country/area. If not, adjust the channel, channel bandwidth, and wireless mode.
Internet is not accessible. • Check if your router can connect to your ISP’s WAN IP address. To do this, launch the web GUI and go to General> Network Map, and check the Internet Status. • If your router cannot connect to your ISP’s WAN IP address, try restarting your network as described in the section Restart your network in following sequence under Basic Troubleshooting. • The device has been blocked via the Parental Control function.
• If there is still no Internet access, try to reboot your computer and verify the network’s IP address and gateway address. • Check the status indicators on the ADSL modem and the wireless router. If the WAN LED on the wireless router is not ON, check if all cables are plugged properly. You forgot the SSID (network name) or network password • Setup a new SSID and encryption key via a wired connection (Ethernet cable).
Firmware upgrade failed. Launch the rescue mode and run the Firmware Restoration utility. Refer to section 5.2 Firmware Restoration on how to use the Firmware Restoration utility.
Cannot access Web GUI Before configuring your wireless router, do the steps described in this section for your host computer and network clients. A. Disable the proxy server, if enabled. Windows® 1. Click Start > Internet Explorer to launch the browser. 2. Click Tools > Internet options > Connections tab > LAN settings. 3. From the Local Area Network (LAN) Settings screen, untick Use a proxy server for your LAN. 4. Click OK when done.
MAC OS 1. From your Safari browser, click Safari > Preferences > Advanced > Change Settings... 2. From the Network screen, deselect FTP Proxy and Web Proxy (HTTP). 3. Click Apply Now when done. NOTE: Refer to your browser's help feature for details on disabling the proxy server. B. Set the TCP/IP settings to automatically obtain an IP address. Windows® 1. Click Start > Control Panel > Network and Sharing Center, then click the network connection to display its status window.
2. Click Properties to display the Ethernet Properties window. 3. Select Internet Protocol Version 4 (TCP/IPv4) or Internet Protocol Version 6 (TCP/IPv6), then click Properties. 4. To obtain the IPv4 IP settings automatically, tick Obtain an IP address automatically. To obtain the IPv6 IP settings automatically, tick Obtain an IPv6 address automatically. 5. Click OK when done.
MAC OS 1. Click the Apple icon located on the top left of your screen. 2. Click System Preferences > Network > Configure... 3. From the TCP/IP tab, select Using DHCP in the Configure IPv4 dropdown list. 4. Click Apply Now when done. NOTE: Refer to your operating system’s help and support feature for details on configuring your computer’s TCP/IP settings. C. Disable the dial-up connection, if enabled. Windows® 1. Click Start > Internet Explorer to launch the browser. 2.
Appendices GNU General Public License Licensing information This product includes copyrighted third-party software licensed under the terms of the GNU General Public License. Please see The GNU General Public License for the exact terms and conditions of this license. All future firmware updates will also be accompanied with their respective source code. Please visit our web site for updated information. Note that we do not offer direct support for the distribution.
When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things.
Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone’s free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. Terms & conditions for copying, distribution, & modification 0.
You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2.
These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works.
offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it.
Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions.
on consistent application of that system; it is up to the author/ donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8.
NO WARRANTY 11 BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.
ASUS Contact information ASUSTeK COMPUTER INC. Address 1F., No. 15, Lide Rd., Beitou Dist., Taipei City 112, Taiwan Telephone +886-2-2894-3447 Fax +886-2-2890-7798 Web site https://www.asus.com Technical Support Telephone Online support +86-21-38429911 https://www.asus.com/support/ ASUS COMPUTER INTERNATIONAL (America) Address Telephone Fax Web site 48720 Kato Rd., Fremont, CA 94538, USA +1-510-739-3777 +1-510-608-4555 https://www.asus.
