Follow

Is the firmware in newer TP-Link routers any less of a security nightmare than the old ones? I have a lust for beam forming, and have my eye on the AX1500 or AX3000 WiFi 6 units.

I own 3 of their Archer C7 AC1750 802.11ac stationed around the house as APs, flashed with DD-WRT for security and tweak-ability.

No DD-WRT, Open WRT, or Tomato is available for the new ones though, and that's the only thing holding me back.


@voltronic

not an answer to your actual question...but I switched away from TP-Link APs a few years ago and have been using EnGenius stuff since and been pretty happy with em...

@opie
Thanks. Not a brand I was familiar with. They look like they are a direct competitor with Ubiquity.

Is there a particular model you recommend? I need coverage for two floors, about 2500 sq ft total. Right now I need the 3 APs for full 5 GHz coverage, but I'm thinking with beam forming I could knock that back to 1, or 2 at most. Been trying to keep it under $100 or so per AP, as I only have a handful of WiFi devices.

@opie
Well, it looks like I'd need a new switch or standalone PoE injector for any of their ax hardware. The 4x4 11ax unit is the one that I think could cover my whole house, but it's quite a bit more than I want to spend just to be future proof.

I don't even own any ax devices yet, nor do I have a gigabit connection. Just gear lusting.

I might spend the money on a 43-inch TV for my main workstation instead.

@voltronic

the model I'm considering is the EAP1250 which is $85 on their site...it's not ax, it's af...but def comes with an AC adapter for regular ole wall juice...no PoE required

@opie
I definitely did not see that one. Looks like it has beam forming too, which is what I really was after.

Thank you; I'm marking this for future purchase.

@voltronic

yeah, ya gotta scroll a bit to see the regular "EnSky" vs "EnSky Pro" models...I was specifically looking for the EAP1250, as it's kinda the new generation of what I have now

@opie
I see that Amazon carries these too, for a bit cheaper. A few reviewers there had some setup / config issues, but I suppose that's to be expected.

@voltronic

they have a zillion config options, so they're def not "plug n play" but that's why I use them

for example, I have 6 SSIDs here each mapped to a VLAN tag riding an 802.1q trunk to the firewall...most plug n play APs don't support features like that

@opie
6 SSIDs? Surely this is at work and not your home network, right?

I have 4, but that's just 2.4 and 5 main plus two more for guest.

@opie
I'm not intimidated by the config options. DD-WRT gets pretty deep if you want to; I only use a fraction of what it can do.

Do these allow manual adjustment of channel width? That's been a big help in the crowded RF neighborhood where I am.

@voltronic

oops...only 5...6 *would* be overkill...😁

internal
phone
cast
work
guest

all use station isolation except internal and cast

it is 10 if I have to count both 2.4 & 5Ghz

MarahNet is...robust...?

🤔

@opie
That's a lot. I don't have the need for all that isolation, though I understand why it's safer. I don't understand the need for all those SSIDs though. Couldn't you accomplish the same thing with IP filtering and different VLANs & DMZs?

@voltronic

yeah, that is what I'm doing...each SSID maps to a separate VLAN and is a separate layer3 subnet

an SSID is just a layer2 broadcast domain

@opie
Oh, you did kind of say that before. Sorry, just got off a difficult meeting and brain is mush.

@voltronic All I can say for sure is they're doing a better job of getting their security patches out in a timely fashion.

@voltronic I got an AC 1900 to flash with DD-WRT, but it won't take it - v 5 IIRC. Want to use it as AP, but it sits for now. Replaced it with a LinkSys WRT 1900 acs. It's still got OEM software, but I can flash it with DD-WRT I believe. Just haven't gotten to it yet.

@FireMonkey
Have you ever successfully flashed DD-WRT before? It's not always easy. My 1750s required more steps to get it done than my old Linksys routers did.

The flashing procedures can sometimes require arcane rituals and incantations. For my current routers, I had to 30/30/30 reset, flash an intermediate firmware, reset, flash an older DD-WRT version, reset, then flash an updated version.

@voltronic no, that's why I haven't done it yet. I need a wand, dead chicken, and some toad scales as I understand it. Wanting to try on a non essential unit.

@FireMonkey
There's good info on the forums, where people discuss which are the most stable versions for specific chipsets.

If you ever want to try again, I would be happy to lend a hand.

Sign in to participate in the conversation

CounterSocial is the first Social Network Platform to take a zero-tolerance stance to hostile nations, bot accounts and trolls who are weaponizing OUR social media platforms and freedoms to engage in influence operations against us. And we're here to counter it.