WiFi and Network Configurations for 3Gbps/5Gbps/6Gbps/10Gbps plan

[YWCLeeZeroSix]

If you use your RT-AX86U in router mode, then you have Double NAT. Depending on your use cases, you may or may not be affected by Doublt NAT.

My use cases are not affected by Double NAT so I use my RT-AX86U in router mode. That being said, I could not get Asus Instant Guard to work any more compared to last time when I was using ONT.

Double NAT:



One potential issue is that devices connected to the ONR may not be able to see devices connected to the RT-AX86U.

Thanks for your quick reply! It's really nice to have someone who can help me with questions in time.
I got it now, I haven't had any problems with double nat so far, but I'm wondering how can I set the ONR to bridge mode? Or can I just turn off the ONR's DHCP?

 

[xiaofan]

Thanks for your quick reply! It's really nice to have someone who can help me with questions in time.
I got it now, I haven't had any problems with double nat so far, but I'm wondering how can I set the ONR to bridge mode?

As of now it is not working for me. Previously it was easy.

You can refer to this thread. You can try it by yourself. Some users say the method is still working. YMMV.
https://forums.hardwarezone.com.sg/...radmin-password.6946718/page-9#post-153959569

username: support
password: reverse your XGS-GPON default password

Click the checkbox LAN 1 if your RT-AX86U is connected to LAN 1. Then see if you still got the internet access or not.

If still have internet access, congratualtions, you should be fine now. Check the WAN address of the Asus RT-AX86U and it should have a public IPv4 address now (and not 192.168.1.x). You can also reboot the Asus to play safe.

If no, I have the same issue. So just live with Double NAT in that case.

You may want to share your finding in that thread.

 

[xiaofan]

For Starhub issued Nokia XS-2426X-A, the super-admin password is generated during the installation. So the user needs to try to get the password during the installation stage. If not, no way to bridge it now.

On the other hand, for Starhub users, if you do not like to use ONR, then it is better to choose the ONT option during the sign-up stage. It is possibe to change the ONR to ONT after the installation but it is much troublesome and may take time for you to convince Starhub to agree with the change.

 

[nckeong88]

My own recent test results (yesterday and today).

1. Good WiFi speed with 1Gbps internet (wired speed is about 947Mbps download/upload).

Acer Swift 3 (Intel Core i5-1135G7 CPU, 16GB/512GB, built-in Intel AX201 WiFi 6 adapter), 4m away from Asus TUF-BE6500 router.

2. Good WiFi speed for my Singtel 5Gbps plan (wired speed is 5.6Gbps download and 4.9Gbps upload)

Acer Swift Go 14 OLED 2024 model, Intel Core Ultra 125H CPU and Intel Killer BE1750xWiFi 7 adapter (Intel BE200 chipset based).
Asus TUF-BE6500 dual band WiFi 7 router, close range (50 cm).

Xiaofan, can I know what is your home setup for 5gbps plan?

 

[nagase_4]

Hi @xiaofan as usual, great write up and thanks!!

Im currently using Asus AX11000 as my main node and 2x AX55 as my APs.

I just signed up for Starhub 5gbps ONT plan. Thinking it's time I replace my AX11000?

Can you recommend a Asus router that can support the following:
- support dual ISP
- Support the usage of 5gbps plan; Im thinking accepting 5gbps input and outputting at least 1gbps on each of its ports?

Thanks in advance!!

 

[xiaofan]

Hi @xiaofan as usual, great write up and thanks!!

Im currently using Asus AX11000 as my main node and 2x AX55 as my APs.

I just signed up for Starhub 5gbps ONT plan. Thinking it's time I replace my AX11000?

Can you recommend a Asus router that can support the following:
- support dual ISP
- Support the usage of 5gbps plan; Im thinking accepting 5gbps input and outputting at least 1gbps on each of its ports?

Thanks in advance!!

RT-BE88U if you do not need 6GHz band. China version is quite a bit cheaper than local version.

ROG GT-BE98U if you need 6GHz band.

 

[xiaofan]

Xiaofan, can I know what is your home setup for 5gbps plan?

Singtel 5Gbps plan.

1. Simplified version:
Singtel ZTE F8648P ONR --> Hasivo S600W-4GT-1SX-1XGT-SE 2.5G/10G switch 10G RJ45 port

Hasivo switch 10G SFP+ port --> DAC cable --> 10G wired device (Intel N100 mini PC with dual 10G SFP+ port)

Hasivo switch 2.5G LAN port 1 --> OpenWRT or pfSense virtual router (running on Intel N100 Mini PC with Proxmox PVE 8.2), Double NAT --> Asus TUF-BE6500 AP (or ZTE BE7200 Pro+ AP)

Hasivo switch 2.5G LAN port 2 --> Not used

Hasivo switch 2.5G LAN port 3 --> RT-AX86U in router mode, Double NAT

Hasivo switch 2.5G LAN port 4 --> Not used

2. Picture of the setup:
Similar to the following original setup, but the top right switch has been changed from the smaller S600W-4GT-2SX-S (dual SFP+ ports and quad 2.5G ports) to the bigger S600W-4GT-1SX-1XGT-SE (one SFP+ port, one 10G RJ45 port and quad 2.5G ports). No more hot SFP+ 10G RJ45 module.

ZTE BE7200 Pro+ an TUF-BE6500 are not shown in the picture as they are about 2m away from RT-AX86U.

3. More detailed version:
https://forums.hardwarezone.com.sg/threads/singtel-5gbps-enhanced.7030365/page-8#post-153561903

Changed the Hasivo 2.5G/10G switch from the smaller S600W-4GT-2SX-S (dual SFP+ ports and quad 2.5G ports) to the bigger S600W-4GT-1SX-1XGT-SE (one SFP+ port, one 10G RJ45 port and quad 2.5G ports).

No need to use the hot SFP+ copper module in the setup now (will still use them in other places, I got 4 SFP+ copper modules from Ganwen, model GW-SFP-10G-T-113).

1) Singtel F8648P ONR 10Gbps LAN port --> new Hasivo Switch 10G RJ45 port

2) Hasivo Switch 2nd 10G SFP+ port --> DAC Cable --> Miniroute R1 Intel N100 Mini PC 10G SFP+ port

3) Hasivo switch 2.5G port 1 --> CWWK Intel N100 mini PC with quad 2.5G ports running PVE and virtual
OpenWRT (Double NAT) along with some Linux containers and Linux/BSD VMs -- ZTE BE7200 Pro+ (or Asus TUF-6500) in AP mode.

4) Hasivo switch 2.5G port 3 --> Asus RT-AX86U in router mode using 2.5G port as WAN (Double NAT).

5) Hasivo switch 2.5G port 2/4 --> not used.

6) ZTE BE7200 Pro+ 2.5G LAN port -->Another CWWK Intel N100 mini PC with dual 2.5G ports running PVE and a few Linux contaniners and Linux/BSD VMs.

7) Asus RT-AX86U 1G LAN port --> TP-Link TL-SH1008 8-ports 2.5G switch --> 2.5G LAN port of the two CWWK mini PC and the Miniroute R1 mini PC. This is used as PVE admin access port when I connect my laptop to the Asus RT-AX86U router using wireless. I also use it to SSH/xrdp into the Ubuntu 24.04 Linux installation of the Miniroute R1 N100 mini PC.

 

[nagase_4]

RT-BE88U if you do not need 6GHz band. China version is quite a bit cheaper than local version.

ROG GT-BE98U if you need 6GHz band.

Thanks!! May I know the difference between the local and China version?

 

[nckeong88]

Singtel 5Gbps plan.

1. Simplified version:
Singtel ZTE F8648P ONR --> Hasivo S600W-4GT-1SX-1XGT-SE 2.5G/10G switch 10G RJ45 port

Hasivo switch 10G SFP+ port --> DAC cable --> 10G wired device (Intel N100 mini PC with dual 10G SFP+ port)

Hasivo switch 2.5G LAN port 1 --> OpenWRT or pfSense virtual router (running on Intel N100 Mini PC with Proxmox PVE 8.2), Double NAT --> Asus TUF-BE6500 AP (or ZTE BE7200 Pro+ AP)

Hasivo switch 2.5G LAN port 2 --> Not used

Hasivo switch 2.5G LAN port 3 --> RT-AX86U in router mode, Double NAT

Hasivo switch 2.5G LAN port 4 --> Not used

2. Picture of the setup:
Similar to the following original setup, but the top right switch has been changed from the smaller S600W-4GT-2SX-S (dual SFP+ ports and quad 2.5G ports) to the bigger S600W-4GT-1SX-1XGT-SE (one SFP+ port, one 10G RJ45 port and quad 2.5G ports). No more hot SFP+ 10G RJ45 module.

ZTE BE7200 Pro+ an TUF-BE6500 are not shown in the picture as they are about 2m away from RT-AX86U.

3. More detailed version:
https://forums.hardwarezone.com.sg/threads/singtel-5gbps-enhanced.7030365/page-8#post-153561903

Thanks for this.

If I were to go the ONT route, how should the connection sequence be? ONT-->mini pc with pfsence---> switch----> wireless AP, wired desktops? I intend to sign up for the starhub 5gbps ONT plan.

I am debating whether to go the wired router route or take the shortcut and just buy the china Asus BE88U and use with my GT AX6000 and AX88U.

 

[xiaofan]

Thanks!! May I know the difference between the local and China version?

Same HW/FW, different hard-coded country code. The country code can not be changed and will decide the minor differences in terms of functions. For typical users, they are the same.

Main difference is the lack of local warranty.

China version -->
Got English / Chinese Web UI, you can change to English.
Got NetEase NetEase UU Boost Accelarator (you can just ignore that)
Use www.baidu.com for Web monitoring for WAN, but you can change to use Ping and then any target you like.
Use China region as the default region for Wireless, but you can change to Asia region.

 

[xiaofan]

Thanks for this.

If I were to go the ONT route, how should the connection sequence be? ONT-->mini pc with pfsence---> switch----> wireless AP, wired desktops?

I am debating whether to go the wire router route or take the shortcut and just buy the china Asus BE88U and use with my GT AX6000 and AX88U.

Yes, you can do that.

Either way is fine.

Mini PC with pfSense will have a bit of learning curve but it is not so difficult to get the basic functions working, especially if you use bare metal setup and not virtualized.

Using Asus will be a bit easier.

I use both.

 

[nckeong88]

Yes, you can do that.

Either way is fine.

Mini PC with pfSense will have a bit of learning curve but it is not so difficult to get the basic functions working, especially if you use bare metal setup and not virtualized.

Using Asus will be a bit easier.

I use both.

wired router as I find it a hassle to keep changing wirelss router to keep up with new wireless standards, I can just change cheaper wireless APs when there is a need

 

[xiaofan]

Last time 2.5Gbe capable router and switches were rare, so the users will either go with gigabit Ethernet based home network, or go with 10Gbe home network (CAT 6 cable, or mixed CAT6 cable plus Fibre).

Now 2.5Gbe capable router (wired or wireless, with 2/3/4 2.5Gbe ports), switches and devices (2.5Gbe USB adapter or PCI-E or Mini PCI-E adapters) are very common, so a pure mixed 2.5G/10G home network makes sense.

More about 2.5G Home Network here (including discussion of 2.5Gbe switch with 10G SFP+ or 10G RJ45 uplinks).
https://forums.hardwarezone.com.sg/threads/2-5-gbps-wired-home-network.6347648/

 

[xiaofan]

5Gbe capable routers are quite rare even though TP-Link starts to offer them (eg: Deco BE65 Pro). It is probably better to skip them. 5Gbe switch does not seem to exist.

But there are now cheaper 5Gbe network adapters (USB, PCI-E) so you can consider 5Gbe network adapters as a lower power alternative to 10G NICs if you go with 5Gbps/6Gbps Fibre Internet plans.

 

[xiaofan]

1. If if you do not want to buy 10G capable wireless APs due to higher cost, there is nothing wrong to use 1Gbps capable wireless solutions.

This is especially true for ONR users since the XGS-PON ONR from ST/WC/SH has only one 10G LAN port and a few 1G LAN ports,

1) Example for ST/WC ZTE F8648P ONR (no wireless function).

ST/WC ONR 10G LAN port --> 2.5G/5G/10G capable wired device
ST/WC ONR 1G LAN port 1 --> 1G capbable wireless AP 1
ST/WC ONR 1G LAN port 2 --> 1G capbable wireless AP 2 if necessary
ST/WC ONR 1G LAN port 3 --> 1G capbable wired device
ST/WC ONR 1G LAN port 4 --> 1G capbable wired device if any

2) Example for SH Nokia XS-2642X-A ONR with AX6000 wireless

SH ONR 10G LAN port --> 2.5G/5G/10G capable wired device
SH ONR 1G LAN port 1 --> 1G capbable wireless AP 1, eg: Nokia Beacon 2
SH ONR 1G LAN port 2 --> 1G capbable wireless AP 2 if necessary, eg: Nokia Beacon 2
SH ONR 1G LAN port 3 --> 1G capbable wired device, if any

2. But if you want to upgrade, then you can add a cheap 2.5G/10G switch to add quad 2.5G LAN ports. Then you can use 2.5G capable wireless APs.

3. If you have higher budget, then it is of course good to go with a wireless AP with dual 10G LAN ports, like TP-Link EB810v for Starhub users, TP-Link HB810v for SIngtel users, Asus ZenWiFi BT10 for M1 users, TP-Link Archer BE805 for MR/M1 users and Amazon eero Max 7 for VQ/SIMBA users.

Nothing wrong to go with better 10G capable WiFi 7 routers or Mesh Solutions if you are willing to pay either: like TP-Link Deco BE85 and Asus ZenWiFI BQ16.

 

[xiaofan]

1. Speed:
WAN Speed -- Internet speed
LAN speed -- internal home network speed.

2. Last time many people havs 1Gbps ready home network and then <=1Gbps Fibre Internet plan. More adavnced users will have 2.5G/10G internal network. But then they still use <=1Gbps Fibre internet. That is normal for most the users in the world: WAN speed <= LAN speed

3. Now due to the push for 10Gbps, many people here in Singapore sign up the 5Gbps/6Gbps/10Gbps, yet their internal home network and devices are mostly 1Gbps or 2.5Gbps capable only. Now we have kind of abnormal situation that WAN speed > LAN speed.

4. And take note people often go to 5Gbps/6Gbps/10Gbps (Fibre Internet only plan or with contents bundle) because it can be actually more cost effective than their current 1Gbps / 2Gbps (Fibre Internet only plan or with contents bundle).

5. Interesting video:
1) most users will be fine with 500Mbps/1Gbps (say 99%) Fibre internet now.
2) most of users will only have 1Gbps/2.5Gbps capable devices. They should be fine with 1Gbps or better 2.5Gbps home network.
3) WiFi 7 will not really reach 10Gbps.

 

[YWCLeeZeroSix]

As of now it is not working for me. Previously it was easy.

You can refer to this thread. You can try it by yourself. Some users say the method is still working. YMMV.

username: support
password: reverse your XGS-GPON default password

Click the checkbox LAN 1 if your RT-AX86U is connected to LAN 1. Then see if you still got the internet access or not.

If still have internet access, congratualtions, you should be fine now. Check the WAN address of the Asus RT-AX86U and it should have a public IPv4 address now (and not 192.168.1.x). You can also reboot the Asus to play safe.

If no, I have the same issue. So just live with Double NAT in that case.

You may want to share your finding in that thread.

Can I just click ONT's checkbox?

 

[xiaofan]

Can I just click ONT's checkbox?

If you want to brick the ONR, go ahead.
https://forums.hardwarezone.com.sg/...zte-f8648p-superadmin-password.6946718/page-7

Try before. Turn into brick. Must hard reset using the button and then must fill in FTTH ID all that to recover into ONR mode, also first config the DHCP on lan is disabled so its a even bigger pain in a55

Please go to that thread to talk about bridging stuff if you want to have further discussion on the bridging topic. Thanks.

 

[YWCLeeZeroSix]

Is this mean that ONT functionality is completely unavailable?

 

[YWCLeeZeroSix]

I can use bridge port. Now do I need do to anything else?