- This topic has 84 replies, 6 voices, and was last updated 3 weeks, 6 days ago by
.
AdGuard and AiProtection working side by side , good to know and thanks for sharing
In a completely sane world, madness is the only freedom (J.G.Ballard).
Liked by:You need to login in order to vote
No problem, the manual set-up rather than using the built in toggle switch in the Web GUI to enable it solved the problem (it still shows as disabled in the WebGUI)
The manual set-up also added and extra IP4 and 2 x IPv6 address details to the DNS over TLS server list.
All DNS traffic is now encrypted which I can see on the AdGuard dashboard.
Happy to have got this working
Liked by:You need to login in order to vote
The BT8 and BT10 can work together in an AiMesh network and as you are utilising Ethernet backhaul, then most of your mesh problem will be removed, both models belong to the ASUS ZenWiFi AX (WiFi 6) family and support AiMesh, so they are designed to be compatible.
Only issue I see is that if you introduce a 2x BT8 nodes into a BT10 system, then small chance there could be issues due to nodes running different firmwares compared to Primary, but issue is only a small one.
Mixing BT8s with BT10s is a sensible, cost-effective option but just be aware that direct WiFi performance for clients connecting to the BT8 nodes may be a little lower compared to BT10 nodes, but with wired backhaul, your core network stability and speed should remain strong.
If you can add a switch to the setup. this then gives you more options to connect TV,s PC’s etc via LAN cables and gives you the option for future scalability and a centralised wired network.
In a completely sane world, madness is the only freedom (J.G.Ballard).
Liked by:You need to login in order to vote
Too many APs are bad for your home network and WiFi connectivity.
You should set an additional different SSID on your repeaters instead of an overkill extra AP, so you can connect your laptop in this room to a dedicated AP.Liked by:You need to login in order to vote
I disagree with Grisu. The BT10 and BT8 will operate as a mesh network and not as a router with APs. You do NOT need a different SSID. I am running an ASUS BT8 mesh network with 8 x BT8s. I have SSIDs for the 5 Ghz and 6 Ghz bands and added an IOT network for the 2.4 Ghz band (so only 3 SSIDs in total). I will be adding a further 2 x BT8s to complete my network (previously had 3 x ET12s and 9 x XD4s in my network).
As to adding the BT8 to the BT10, it should be the same process as for the BT10. The easiest method I have found for wired backhaul is to firstly ensure the ‘AiMesh node Ethernet auto setup’, ‘Hide Backhaul SSID’ and ‘Ethernet Backhaul Mode’ are set to on in ‘System Settings’, then just connect the new node in its new location with the ethernet cable and then just click ‘Add AiMesh Node’ (so you don’t need to have the new node close to the router node). It will find the new node very quickly. You must also manually update it immediately with the latest firmware downloaded from ASUS.
Hope this helps.
Always embrace change and new technology. Never say "I can't do that" instead say "I haven't done that before, but I'll give it a try"
Liked by:You need to login in order to vote
ASUS ZenWiFi BT10 Firmware version 3.0.0.6.102_38991
version 3.0.0.6.102_38991
2025/09/16
Important: After installing this firmware, we strongly recommend performing a factory-default reset to activate every new security adjustment.
Security Enhancements:
– Password Policy Upgrade – Minimum 10 characters with at least 1 letter, 1 digit and 1 special symbol, and no consecutive identical characters; hardens defense against brute-force attacks.
– HTTPS on 8443 – Management interface now served over TLS by default.
– UPnP Disabled – Universal Plug and Play starts in the off state for reduced surface exposure.
– AiCloud Authentication Hardening (CWE-287) – Added layered verification.
– Authentication Logic Refactor – Removed redundant code paths for a lean sign-in flow.
– Memory Safety Guard (CWE-476) – Introduced null-reference protections across critical services.
– Enhanced IPsec Parameter Validation – The existing input checks have been hardened.
– Data Exposure Mitigation (CWE-200) – Reinforced controls on sensitive pathways.
– Detailed Audit Trails – Expanded logging within the authentication module.System Improvements:
– Connection Stability – Core algorithms refined for steadier links.
– Scheduling Accuracy – Timed tasks execute reliably under PPPoE, PPTP and L2TP WAN modes.
– Client List Maintenance – Resolved an issue that prevented offline devices from being removed from the client list.Bug Fixes:
– Fixed abnormal client list.
– Fixed abnormal GUI behavior of Wireguard VPN.
– Fixed USB internet backup conflict with main WAN.
– Fixed abnormal WAN detection while AiDetection is enabled.
– Improved AdGuard DNS GUI issues.
– Fixed IPv6 related issues.
– Improved USB tether compatibility for pixel phones.In a completely sane world, madness is the only freedom (J.G.Ballard).
Liked by:You need to login in order to vote
The factory resetting option is a tricky consideration, as the update includes deep security changes (not just bug fixes) and some new features or security hardening which only take full effect after wiping old settings.
Factory resetting is the best, most secure option and also reduces possible connectivity problems, instability etc. I’ve seen a few of these over on Reddit likewise, some users have reported no problems after dirty flash and possible due to the configuration they are using etc.
Security–Performance–Usability Triangle
Conceptual Frameworks for Balancing Tech Trade-offs
- Security often reduces performance.
- Performance improvements can weaken security
- Usability/time constraints may force compromises in both.
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote
- You must be logged in to reply to this topic.