I just re contracted my home broadband to a 1Gbps plan, and felt I wasn’t getting all the features I wanted out of my existing router.
My primary concern was that I could not run OpenVPN on the router directly, and had to do it on a client by client basis. With the ongoing issues with OpenVPN, Windows 10 and IPV6, I prefer to have the client sit on the router instead, so that my entire home network is protected behind the VPN.
My VPN provider of choice is privateinternetaccess. The main reason I chose them is because they don’t store logs, and they are reasonably cheap. I’ve been using them for the better part of three years, and in that time, they’ve added more features, including a server in Singapore!
I strongly believe in the right to browse anonymously and privately, without your ISP or governments spying on you (hear that NSA?), so my best bet is to secure my home network from the primary point – the router.
Which brings us back to the RT-AC5300. My current ISP provided router was decent, but it could not support OpenVPN, so out it went. I looked at the latest routers, with Asus being the first (and only) port of call. I’ve had great experiences with Asus routers. I’ve owned the RT-N56u and the RT-N66u (which is still in use as a wifi extender), and love the GUI and the features of Asus WRT (which is a fork of DD-WRT). I particularly enjoy using Merlin’s firmware.
So when I read that the RT-AC5300 was the newest router from Asus, I knew I had to get my hands on it (being the gadget-freak that I am). My wife took a little convincing, but now, this monster is sitting on my console:
Design-wise, it looks like a facehugger. But that only makes me like it even more!
From a hardware perspective, it run’s on Broadcom’s newest 4×4 MU MIMO chip that is supposed to provide
1000 Mbps on the 2.4 GHz band and 2167 Mbps on each of the 5 GHz bands for a total of 5333 Mbps theoretical bandwidth (Anandtech)
What that basically means is that as of the end of 2015/start of 2016, this is the most sizzling-hot piece of networking hardware in the market. And it looks like a freaking alien!
The first thing I did when I got it was install Merlin’s firmware. Then I ran the Quick Internet Setup, which automatically detected my ISP’s settings. Lastly, I set up my wifi security password. I was online in under 2 minutes.
Like I said, OpenVPN is a priority for me, so I first went to VPN –> OpenVPN Clients, and entered the following details:
The tricky part for me was the Custom Configuration portion – there are a few different guides available online, but the one that finally worked for me was:
tls-client
remote-cert-tls server
reneg-sec 0
Now, with just 1 click, I can toggle on or off my VPN.
Of course, that wasn’t the end of the set up for the new router. I also had to do the following:
- Port forwarding (for Plex and other gaming servers)
- Disable WPS (best practice for home network security)
- Disable guest networks
- Set static IP pool for my server and other lan line devices
- Test IPV6 to make sure it works, but disabled it untill the OpenVPN issue is resolved
- AIProtection Security test: This is a new feature, which scans my router for potential vulnerabilities.
Today is the 3rd day I’ve had it running, and its been rock-stable ever since I turned it on. And as for the internet performance, here’s the first speedtest result once my new plan was activated:
Blistering!