Post on 28-Jan-2021
ASUS router Hard Factory Reset
ASUS router Hard Factory Reset
To reset your router to the factory default settings, you can Press and Hold the Reset button on
your router. However, in some cases, this may not successfully reset the router to the default
status. ASUS recommends that you try the Hard Factory Reset before attempting any advanced
troubleshooting.
The methods to do a Hard Factory Reset will vary between different router models. We 've listed
all the different methods in the links shown below:
Method 1 (Click this link)
Applicable models: Bluecave
BRT-AC828
4G-AC68U/ 4G-AC53/ 4G-AC55
RT-AC5300/ RT-AC3200/ RT-AC88U/ RT-AC3100
RT-AC87U/ RT-AC87R/ RT-AC87W
RT-AC68U/ RT-AC68R/ RT-AC68RW/ RT-AC68UF/ RT-AC68W/ RT-AC1900/ RT-
AC1900P/ RT-AC68U_White/ RT-AC68P
RT-AC1900U/ RT-AC67U/ RT-AC66U_B1/ RT-AC1750_B1/ RT-N66U_C1
RT-AC56S
RT-AC66U/ RT-AC66R/ RT-AC66W/ RT-AC66U_WHITE/ RT-AC1750/ RT-N66U/ RT-
N66W/ RT-N66R
RT-AC51U/ RT-AC750/ RT-AC51U+/ RT-AC52U_B1/ RT-AC52U/ RT-AC53/ RT-AC750GF/
RT-AC54U/ RT-AC55UHP/ RT-AC58U/ RT-AC1300GPLUS/ RT-ACRH13/ RT-AC1300UHP
RT-AC1200G/ RT-AC1200G+/ RT-AC1200HP/ RT-AC1200/ RT-AC1200E/ RT-AC1200GU
RT-N11P_B1/ RT-N12VP B1/ RT-N12+ B1/ RT-N12+ PRO/ RT-N12E C1/ RT-N300 B1/ RT-
N12_D1/ RT-N12HP_B1/ RT-N14UHP/ RT-N18U/ RT-N800HP
DSL-AC68U/ DSL-AC68R
RP-AC68U/ RP-AC53
Method 2 (Click this link)
Applicable models: RT-AX88U/ GT-AX11000/ RT-AX92U/ RT-AC86U/ RT-AC2900/ GT-AC5300
Method 3 (Click this link)
Applicable models: Lyra/ Lyra Trio
https://www.asus.com/support/FAQ/1039077https://www.asus.com/support/FAQ/1039078https://www.asus.com/support/FAQ/1039080
Method 4 (Click this link)
Applicable models: Lyra Voice
Method 5 (Click this link)
Applicable models:
DSL-AC52U/ DSL-AC55U/ DSL-N55U_C1/ DSL-AC56U
DSL-N17U/ DSL-N12U_C1/ DSL-N12E_C1
How to make my router more secure?
General Setting
1. Set your wireless network encryption as WPA2-AES
After QIS (Quick Internet Setup), the system sets WPA2-AES as your default encryption.
Although the system provides multiple encryptions, we suggest you keep your system in WPA2-
AES encryption if there is no special
requirement.
2. Set up separate passwords for your wireless network and Web GUI
In QIS, we will ask users to set up a password for your wireless network and an admin password.
Please use two different passwords to prevent someone who knows the wireless network
password from logging in Web GUI.
3. Use long and more complex passwords
Use passwords with more than 8 characters mixed with capitalized letters, numbers, and special
characters to increase the security level of your devices. Do not use passwords with consecutive
numbers or letters, such as 12345678, abcdefgh, or qwertyuiop.
4. Update your router to the latest firmware
New version of firmware usually includes new security fixes. Check if there is any new firmware
available via Web GUI or ASUS Router app.
5. Enable the firewall
https://www.asus.com/support/FAQ/1039082https://www.asus.com/support/FAQ/1039083
Firewall setting page is in Advanced Settings. The default value is enabled. Please do not disable
the firewall if there is no special requirement.
6. Enable AiProtection
Enable AiProtection if your device supports this function. It protects your router and LAN
devices from potential threats and increases the security level.
For more information ,please visit https://www.asus.com/AiProtection/
7. Disable the access from WAN Access from WAN allows you to access your router from the Internet. The default value of this
function is disabled. Do not enable this function if there is no special requirement. Visit
https://www.asus.com/AiProtection/
Advanced Settings-> Administration -> Remote Access Config for configuration.
8. Disable Telnet and SSH
Telnet and SSH allow you to use Linux commands to control your router. The default value of
this function is disabled. Do not enable this function if there is no special requirement. Go
to Advanced Settings -> Administration-> Service for configuration.
9. Do not enable DMZ
If your LAN devices need to provide service to other external devices such as FTP servers, video
servers and file servers, please set up Port Forwarding rules for each service. Do not enable this
function if there is no special requirement to do so. Some P2P software forums suggest users add
PC IP to DMZ, but it increases the risk of getting attacked. We highly suggest not to do so.
Advanced Setting
1. Enable https to log in ASUSWRT
Https is a standard HTTP protocol covered with a layer of SSL/TLS encryption when you are
using WPA-AES encryption. ASUSWRT with WPA-AES encryption default connects you with
http considering its ease-of-use. You can visit Advanced Settings-> Administration-> System-
> Local Access Config to change Authentication Method to https. After enabling https,
remember to manually input https:// in the beginning of the URL, and add port number
8443(default port) at the end of the URL (https://router.asus.com:8443).
Because routers use self-signed certificates, the browser will show the warning message as
shown in the following screenshot. You can ignore the warning because your router is a trusted
device. Please click Advanced and visit ASUSWRT.
*When you see this warning with connecting to other websites instead of ASUSWRT,
please stay alert. This might be a dangerous website.
2. Only allow specified IP address to log in ASUSWRT
Go to Advanced Settings-> Administration-> System-> Specified IP Address to allow
specific IP to login to the ASUSWRT. This will increase the security level for your network.
3. Disable UPnP
Some devices use the UPnP for the ease-of-use. For compatibility, ASUSWRT default enables
UPnP. Users can visit Advanced Settings-> WAN -> Basic Config -> Enable UPnP to disable
UPnP. You can keep UPnP disabled if there is no trouble that occurs after disabling it.
4. Setting up the Wireless MAC Address Filter for your wireless network
If your connecting client does not always change, you can set up a white list in the Wireless
MAC Address Filter that only allows the specified MAC address to get connected to your router.
Visit Advanced Settings -> Wireless -> Wireless MAC Filter -> Change MAC filter mode to
Accept and add specific MAC address to your list. Only those devices in the list are allowed to
connect to your router.
Failed Internet access through router
1. Please confirm your router has a correct WAN connection. Refer to the steps below :
To set up your wireless router via wired connection:
a. Connect your wireless router’s AC adapter to the DC-IN port and into a power outlet.
b. Using the bundled network cable, connect your computer to your wireless router’s LAN port.
Note: Ensure that the LAN LED is blinking.
c. Using another network cable, connect your modem to your wireless router’s WAN port.
d. Connect your modem’s AC adapter to the DC-IN port and into a power outlet.
To set up your wireless router via wireless connection:
a.Connect your wireless router’s AC adapter to the DC-IN port, then connect the other end into
a power outlet.
b Using the bundled network cable, connect your modem to your wireless router’s WAN port.
c.Connect your modem’s AC adapter to the DC-IN port, then connect the other end into a power
outlet
d.Install an IEEE 802.11a/b/g/n/ac WLAN adapter on your computer.
2. Please make sure your adapter is set to obtain IP automatically.
Set the TCP/IP settings to automatically obtain an IP address.
Example: Windows® 7
a). Click Start > Control Panel > Network and Internet > Network and Sharing Center >
Manage network connections.
b). Select Internet Protocol Version 4 (TCP/IPv4) or Internet Protocol Version 6 (TCP/IPv6),
then click Properties.
c). To obtain the IPv4 IP settings automatically, select Obtain an IP address automatically.
To obtain the IPv6 IP settings automatically, select Obtain an IPv6 address
automatically.
d). Click OK when done.
Note: Refer to your operating system’s help and support feature for details on configuring your
computer’s TCP/IP settings.
3. Confirm that your computer can access the Internet through other network environments.
4. Please confirm your ISP Internet settings and related information
Example: Taiwan - Chunghwa Telecom
Internet connection type:PPPoE / Static IP Chunghwa Telecom PPPoE account is 8 numerical +@hinet.net
5. Please check that your computer can connect to the Internet via the network cable provided by
the ISP
6. Please confirm that the router has the latest firmware version.
* [FAQ] How to enter the GUI of router? (ASUSWRT)
7. Restore your router to default setting
a). The Reset button is on the back of the router. When the router is powered on, press and
hold the Reset button (approximately 5 secs) until the Power LED starts flashing, then release
Reset button for it to reboot.
※Notice:If router is restored to default ststus, then you need to reset your information
b). Finish entering your settings through QIS
https://www.asus.com/support/FAQ/1005263/
If you cannot resolve your problem with the above solution, please contact ASUS Product
Support for further assistance and information.
How to set up an Internet Connection?
1. Enter the IP address of your device in the browser, followed by your username and
password to login to your ASUS networking device.
ASUS Wireless Routers use a web-based user interface that allows you to configure the router
by any web browser, such as Internet Explorer, Mozilla Firefox, Apple Safari, or Google
Chrome.
If you cannot find the IP address, type: http://router.asus.com in your browser for ASUS router
models. [FAQ] How to enter the GUI of router? (ASUSWRT)
https://www.asus.com/support/callushttps://www.asus.com/support/callushttps://www.asus.com/support/FAQ/1005263/
2. Click [Quick Internet Setup]
The Quick Internet Setup function guides you to quickly set up your Internet connection.
The wireless router automatically detects if your ISP connection type is Automatic IP, Static IP,
PPPoE, PPTP and L2TP. Key in the necessary information for your ISP connection type.
IMPORTANT: Obtain the necessary information from your ISP about the Internet
connection type.
Example: [FAQ]How to use the QIS (Quick Internet Setup) to set up PPPoE ? (ASUSWRT)
3. If you need detailed setup information, go to the WAN- Internet Connection.
4. There are 5 WAN connections to choose from : Automatic IP, Static IP. PPPoE, PPTP,
L2TP.
https://www.asus.com/support/FAQ/1005485/
Automatic IP
Enable WAN: Enable and disable WAN. Under some connection types, you can get a new IP
address by using Enable and Disable WAN.
Enable NAT: NAT(Network Address Translation) is a process used in routers to replace the
address information of network packets with new address information. Typical applications for
NAT is for routers which connect to LAN with the WAN. In LAN, every network device had a
private IP (LAN IP) but there’s only one public IP (WAN IP). To grant internet access to the
network devices, the router replaces the private IP address of the sender with its own public IP
address in all outgoing data packets. The router saves all necessary information in a table (NAT
table) so that incoming data packets can then be assigned to the correct network device.
Enable UPnP: UPnP(Universal Plug and Play) allows several devices(routers, televisions, stereo
systems, game consoles, cellular phone) to be controlled via an IP-based network with or without
a central control through a gateway.
Connect to DNS Server automatically: Allows this router to get the DNS IP address from the
ISP automatically.
Authentication: This item may be specified by some ISPs. Check with your ISP and fill them in
if required.
Host Name: You can provide a host name for your router. It’s usually requested by your ISP.
MAC Address: MAC(Media Access Control) address is a unique identifier that identifies your
computer or device in the network. ISPs monitor the MAC addresses of devices that connect to
their services, and would disallow Internet Connection for new MAC addresses. To fix this issue,
you can do either of the following:
* Contact your ISP and request to update the MAC address associated with your ISP subscription.
* Clone or change the MAC address of the new device to match the MAC address of the original
device.
DHCP query frequency: Some Internet Service Providers block MAC addresses if the device
makes DHCP queries too often. To prevent this, change the DHCP query frequency.
In the default Aggressive mode, if the router does not get a response from the ISP, it sends another
query after 20 seconds and then makes three more attempts.
In Normal mode, if the router doesn’t get a response from the ISP, it makes a second query after
120 seconds and then makes two more attempts.
Static IP
Enable WAN: Enable and disable WAN. Under some connection type, you can get a new IP
address by enable and disable WAN.
Enable NAT: NAT(Network Address Translation) is a process used in routers to replace the
address information of network packet with new address information. Typical applications for
NAT is router which connect to LAN with the WAN. In LAN, every network devices had a private
IP(LAN IP) but there’s only one public IP(WAN IP). To grant the network devices access to
internet, the router replaces the private IP address of the sender with its own public IP address in
all outgoing data packets. The router saves all necessary information in a table(NAT table) so that
incoming data packets can then be assigned to the correct network device.
Enable UPnP: UPnP(Universal Plug and Play) allows several devices(routers, televisions, stereo
systems, game consoles, cellular phone) to be controlled via an IP-based network with or without
a central control through a gateway.
IP Address: If your WAN connection requires a static IP address, key in the IP address in this
field.
Subnet Mask: If your WAN connection requires a static IP address, key in the subnet mask in this
field.
Default Gateway: If your WAN connection requires a static IP address, key in the gateway IP
address in this field.
DNS Server: This field indicates the IP address of DNS that the router contacts to.
Authentication: Some Internet Service Providers block MAC addresses if the device makes
DHCP queries too often. To prevent this, change the DHCP query frequency. In the default
Aggressive mode, if router does not get a response from the ISP, it sends another query after 20
seconds and makes three more attempts. In Normal mode, if router doesn’t get a response from the
ISP, it makes a second query after 120 seconds and makes two more attempts.
Host Name: You can provide a host name for your router. It’s usually requested by your ISP.
MAC Address: MAC(Media Access Control) address is a unique identifier that identifies your
computer or device in the network. ISPs monitor the MAC addresses of devices that connect to
their services, and would disallow Internet Connection for new MAC addresses. To fix this issue,
you can do either of the following:
* Contact your ISP and request to update the MAC address associated with your ISP subscription.
* Clone or change the MAC address of the new device to match the MAC address of the original
device.
PPPoE
Enable WAN: Enable and disable WAN. Under some connection type, you can get a new IP
address by enable and disable WAN.
Enable NAT: NAT(Network Address Translation) is a process used in routers to replace the
address information of network packet with new address information. Typical applications for
NAT is router which connect to LAN with the WAN. In LAN, every network devices had a private
IP(LAN IP) but there’s only one public IP(WAN IP). To grant the network devices access to
internet, the router replaces the private IP address of the sender with its own public IP address in
all outgoing data packets. The router saves all necessary information in a table(NAT table) so that
incoming data packets can then be assigned to the correct network device.
Enable UPnP: UPnP(Universal Plug and Play) allows several devices(routers, televisions, stereo
systems, game consoles, cellular phone) to be controlled via an IP-based network with or without
a central control through a gateway.
Get the WAN IP automatically: Allows the router to get the WAN IP address from the ISP
automatically.
Connect to DNS Server automatically: Allows this router to get the DNS IP address from the
ISP automatically.
User Name: Fill-in the information which ISP provided.
Password: Fill-in the information which ISP provided.
Idle Disconnect Time in seconds: Disconnect after time of inactivity (in seconds): This field is
optional and allows you to configure to terminate your ISP connection after a specified period of
time. A value of zero allows infinite idle time.
MTU: The Maximum Transmission Unit(MTU) of PPPoE packet. The default value is 1492.
Change this value only if your ISP requires it.
MRU: The Maximum Receive Unit(MRU) of PPPoE packet. The default value is 1492. Change
this value only if your ISP requires it.
Service Name: This field is optional and may be specified by some ISPs. Check with your ISP
and fill them in if required.
Access Concentrator Name: This field is optional and may be specified by some ISPs. Check
with your ISP and fill them in if required.
Additional pppd options: This item may be specified by some ISPs. Check with your ISP and fill
them in if required.
Enable VPN + DHCP Connection: Decied you want to enable VPN and DHCP connection or
not.
Host Name: You can provide a host name for your router. It’s usually requested by your ISP.
MAC Address: MAC(Media Access Control) address is a unique identifier that identifies your
computer or device in the network. ISPs monitor the MAC addresses of devices that connect to
their services, and would disallow Internet Connection for new MAC addresses. To fix this issue,
you can do either of the following:
* Contact your ISP and request to update the MAC address associated with your ISP subscription.
* Clone or change the MAC address of the new device to match the MAC address of the original
device.
PPTP
Enable WAN: Enable and disable WAN. Under some connection type, you can get a new IP
address by enable and disable WAN.
Enable NAT: NAT(Network Address Translation) is a process used in routers to replace the
address information of network packet with new address information. Typical applications for
NAT is router which connect to LAN with the WAN. In LAN, every network devices had a private
IP(LAN IP) but there’s only one public IP(WAN IP). To grant the network devices access to
internet, the router replaces the private IP address of the sender with its own public IP address in
all outgoing data packets. The router saves all necessary information in a table(NAT table) so that
incoming data packets can then be assigned to the correct network device.
Enable UPnP: UPnP(Universal Plug and Play) allows several devices(routers, televisions, stereo
systems, game consoles, cellular phone) to be controlled via an IP-based network with or without
a central control through a gateway.
Get the WAN IP automatically: Allows the router to get the WAN IP address from the ISP
automatically.
IP Address: If your WAN connection requires a static IP address, key in the IP address in this
field.
Subnet Mask: If your WAN connection requires a static IP address, key in the subnet mask in this
field.
Default Gateway: If your WAN connection requires a static IP address, key in the gateway IP
address in this field.
Connect to DNS Server automatically: Allows this router to get the DNS IP address from the
ISP automatically.
DNS Server: This field indicates the IP address of DNS that the router contacts to.
User Name: Fill-in the information which ISP provided. This filed is only available when setting
the WAN Connection Type as USB Modem, PPPoE, PPTP or L2TP.
Password: Fill-in the information which ISP provided. This field is only available when setting
WAN Connection Type as PPPoE.
Idle Disconnect Time in seconds: Disconnect after time of inactivity (in seconds): This field is
optional and allows you to configure to terminate your ISP connection after a specified period of
time. A value of zero allows infinite idle time.
PPTP Options: This item may be specified by some ISPs. Check with your ISP and fill them in
if required.
Additional pppd options: This item may be specified by some ISPs. Check with your ISP and fill
them in if required.
VPN Server: If your WAN connection type is PPTP or L2TP, please enter the server name or
server IP of the VPN Server.
Host Name: You can provide a host name for your router. It’s usually requested by your ISP.
MAC Address: MAC(Media Access Control) address is a unique identifier that identifies your
computer or device in the network. ISPs monitor the MAC addresses of devices that connect to
their services, and would disallow Internet Connection for new MAC addresses. To fix this issue,
you can do either of the following:
* Contact your ISP and request to update the MAC address associated with your ISP subscription.
* Clone or change the MAC address of the new device to match the MAC address of the original
device.
L2TP
Enable WAN: Enable and disable WAN. Under some connection type, you can get a new IP
address by enable and disable WAN.
Enable NAT: NAT(Network Address Translation) is a process used in routers to replace the
address information of network packet with new address information. Typical applications for
NAT is router which connect to LAN with the WAN. In LAN, every network devices had a private
IP(LAN IP) but there’s only one public IP(WAN IP). To grant the network devices access to
internet, the router replaces the private IP address of the sender with its own public IP address in
all outgoing data packets. The router saves all necessary information in a table(NAT table) so that
incoming data packets can then be assigned to the correct network device.
Enable UPnP: UPnP(Universal Plug and Play) allows several devices(routers, televisions, stereo
systems, game consoles, cellular phone) to be controlled via an IP-based network with or without
a central control through a gateway.
Get the WAN IP automatically: Allows the router to get the WAN IP address from the ISP
automatically.
IP Address: If your WAN connection requires a static IP address, key in the IP address in this
field.
Subnet Mask: If your WAN connection requires a static IP address, key in the subnet mask in this
field.
Default Gateway: If your WAN connection requires a static IP address, key in the gateway IP
address in this field.
Connect to DNS Server automatically: Allows this router to get the DNS IP address from the
ISP automatically.
DNS Server: This field indicates the IP address of DNS that the router contacts to.
User Name: Fill-in the information which ISP provided. This filed is only available when setting
the WAN Connection Type as USB Modem, PPPoE, PPTP or L2TP.
Password: Fill-in the information which ISP provided. This field is only available when setting
WAN Connection Type as PPPoE.
Additional pppd options: This item may be specified by some ISPs. Check with your ISP and fill
them in if required.
VPN Server: If your WAN connection type is PPTP or L2TP, please enter the server name or
server IP of the VPN Server.
Host Name: You can provide a host name for your router. It’s usually requested by your ISP.
MAC Address: MAC(Media Access Control) address is a unique identifier that identifies your
computer or device in the network. ISPs monitor the MAC addresses of devices that connect to
their services, and would disallow Internet Connection for new MAC addresses. To fix this issue,
you can do either of the following:
* Contact your ISP and request to update the MAC address associated with your ISP subscription.
* Clone or change the MAC address of the new device to match the MAC address of the original
device.