Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Wireless ap problem with Asus RT-ac66u

    Scheduled Pinned Locked Moved Wireless
    26 Posts 5 Posters 6.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bkandor
      last edited by

      Hi,

      My pfsense router's wan lan is connected to a gs1920 switch.  So, to create a wireless ap here,  I plugged in my asus rt-ac66u into a free port on the switch, configured it in wireless ap mode and it seems like that should work.

      Except the asus box cpu status climbs to 95 to 100%,  the unit becomes virtually unresponsive, and overheats upto 70-80c.    Really not sure what I'm doing wrong here.  The wireless ap doc for pfsense indicates a very simple procedure, including plugging the wireless ap into a switch rather than the router itself.

      The router is so bogged down it takes over 10min to open the web interface!

      I do have a free nic port on the router, but I havn't found docs for that type of setup.

      1 Reply Last reply Reply Quote 0
      • D
        doktornotor Banned
        last edited by

        -> The ASUS forums are here.
        -> Usable firmware is here.

        1 Reply Last reply Reply Quote 0
        • B
          bkandor
          last edited by

          Thanks for the info.

          My asus box has the latest firmware, plus I tested it with the latest merlin firmware with the same result.  In router mode it runs fine,  in ap mode, the cpu is pegged at 100% making it essentially inaccessible.

          My reason for posting here was to determine if I'm doing something wrong plugging the asus box into a switch (zyxel GS1920) as opposed to plugging directly into the pfsense box.  Or if there is a configuration setting in pfsense I need to modify that is somehow causing the issue with the asus box.

          1 Reply Last reply Reply Quote 0
          • H
            hda
            last edited by

            Give the AP a static and on the pfSense-LAN(switch), outside the DHCP pool. Do not use the dhcp of the AP. Kill it.

            1 Reply Last reply Reply Quote 0
            • B
              bkandor
              last edited by

              Ok,  I gave it a static ip outside pfsense dhcp range.  This is still the same result - it technically is working but useless with the cpu at 100%.  No idea what is going on here.

              So with the cpu this high, even though it is broadcasting, devices cannot connect to the ssid, it essentially just times out.

              1 Reply Last reply Reply Quote 0
              • H
                hda
                last edited by

                While not pfSense issue, use info in reply #1

                1 Reply Last reply Reply Quote 0
                • P
                  Peet1345
                  last edited by

                  Asus in ap mode.
                  Cable from pfsense lan(or switch on network) to 1 of the 4 switch ports on asus(not the wan port).
                  Pfsense lan network 192.168.1.1 , asus static ip 192.168.1.2
                  This works on my asus and pfsense.
                  If it is safe i still am investigating, it is stil new to me.

                  Now your lan and wifi is on the same network.
                  I think it is better to put the asus router on it's own networkcard(or usb to networkcard cable).

                  https://forum.pfsense.org/index.php?topic=81014.0

                  1 Reply Last reply Reply Quote 0
                  • B
                    bkandor
                    last edited by

                    Hi,

                    I'm back on this issue.  I'm starting to think that my problem started just after upgrading to 2.2.2.  After I originally built my pfsense box I plugged the asus router (in ap mode) into my switch and had wireless access with no issues.  Checking back on when I started this thread, i.e. when my wifi ap issue began was exactly the day I installed the pfsense upgrade.  I tried everything to get the asus box to work afterwards but it never would.  Note:  It will broadcast and you can 'sometimes' connect but it's overheating and chugging so much that no traffic passes.

                    I waited for a bit, then I pulled out my older WD MyNet900,  I plugged it in last night, set it to ap mode. And guess what the same exact issue is occuring,  it's running hot.  You appear to be able to connect, I even load a webpage, once on my ipad but then the connection times out.

                    My setup is:

                    Wifi-AP box –-------------->  Switch (zyxel GS1920) <-------------------- PFsense 2.2.2

                    I'm nervous about downgrading (I made a complete pfsense backup),  but I will put money down that my issue will disappear if I do.

                    Thanks in advance if you have any insight into what's going on here.

                    1 Reply Last reply Reply Quote 0
                    • D
                      doktornotor Banned
                      last edited by

                      Perpahs it's time to stop using obviously shitty APs? Your APs overheating are NOT pfSense issue.

                      1 Reply Last reply Reply Quote 0
                      • B
                        bkandor
                        last edited by

                        If you read my last message you would realize that it's exactly related to PFsense.    I'll work through this issue better without your input so you will have more time to help other people.

                        1 Reply Last reply Reply Quote 0
                        • D
                          doktornotor Banned
                          last edited by

                          Yeah, I did read your message. Shitty AP overheating is still not, and never will be, a pfSense issue.

                          1 Reply Last reply Reply Quote 0
                          • B
                            bkandor
                            last edited by

                            2 different routers who's cpu is pegged at 100% starting the day I upgraded to 2.2.2  -  Again, I don't require your assistance, help people elsewhere

                            1 Reply Last reply Reply Quote 0
                            • DerelictD
                              Derelict LAYER 8 Netgate
                              last edited by

                              You have something misconfigured or you have created a network loop or something else.  It's not pfSense.  Your alleged time coincidence with an upgrade to 2.2.2 is unconvincing evidence.

                              Chattanooga, Tennessee, USA
                              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                              Do Not Chat For Help! NO_WAN_EGRESS(TM)

                              1 Reply Last reply Reply Quote 0
                              • B
                                bkandor
                                last edited by

                                Fair enough, however the same asus unit was working perfectly until that upgrade.  I agree it doesn't make sense but I can't find any other cause, especially after testing with another unit.

                                1 Reply Last reply Reply Quote 0
                                • H
                                  hda
                                  last edited by

                                  Layer ate brain. What were the results without the managed-switch in between ?

                                  1 Reply Last reply Reply Quote 0
                                  • DerelictD
                                    Derelict LAYER 8 Netgate
                                    last edited by

                                    The 100% CPU has me thinking layer 2 loop. They're always fun.

                                    Chattanooga, Tennessee, USA
                                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      bkandor
                                      last edited by

                                      I will try that next, but for now, downgrading to 2.2.1 has fixed it (although I'm still using the second WD N900 router,  I'll test soon with the asus unit to confirm).    Not sure why my hardware doesn't like 2.2.2

                                      I have dual wan (cable motorola modems)  plugged into a 4 port intel nic on the pfsense unit.    The 3rd port from pfsense is plugged into a zyxel GS-1920.  The AP is just plugged into the same gs-1920.

                                      The only thing I noticed in the past was that pfsense docs explicitly state to not connect the AP via it's wan port.  Even though both asus and wd n900 both explicitly state to connect WITH the wan port to your switch (when the router is in AP mode).

                                      What I found was that it will work barely when plugged to the wan port and works normally with it plugged into a lan port.  So I've always had it plugged in via a lan port.  Maybe some combo issue between the zyxel swith, intel nic and router are causing the issue with 2.2.2 but I don't even know where to start.  For now, I'll  stay on 2.2.1

                                      Thanks!

                                      1 Reply Last reply Reply Quote 0
                                      • B
                                        bkandor
                                        last edited by

                                        @Derelict:

                                        The 100% CPU has me thinking layer 2 loop. They're always fun.

                                        Sorry you posted while I was,  2 layer loop?  I'm not too familiar,  but my zyxel switch is the only managed switch.  I have a couple peripheral 8 port d-link switches that are unmanaged, but they aren't interconnected with the ap or the pfsennse box.  Both of those are direct to the zyxel.  Perhaps this is a configuration issue with the zyxel?

                                        Thanks,

                                        1 Reply Last reply Reply Quote 0
                                        • DerelictD
                                          Derelict LAYER 8 Netgate
                                          last edited by

                                          Virtually ALL of the documentation on using a consumer router as an AP say plug it into the LAN side because there IS NO AP MODE on most consumer routers.

                                          If your gear has an AP / Bridge mode that bridges the Wi-Fi with the WAN port, then that's the port you need to use.  A true AP usually has only ONE port, which is always bridged with the radios.

                                          Sort of up to you to know the capabilities of your specific gear.

                                          Another example that does this is an airport express in bridge mode.  The WAN port gets plugged into the LAN in that case.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          1 Reply Last reply Reply Quote 0
                                          • DerelictD
                                            Derelict LAYER 8 Netgate
                                            last edited by

                                            2 layer loop?

                                            Google "layer 2" loop

                                            Chattanooga, Tennessee, USA
                                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.