Router Charts

Router Charts

Router Ranker

Router Ranker

Router Chooser

Router Chooser

NAS Charts

NAS Charts

NAS Ranker

NAS Ranker

More Tools

More Tools

Wireless Reviews

Feature Tour

Many of the features of the WZR-HP are standard features found on all routers, so I’ll comment briefly on unique features for each of the tabbed sections:

Setup – This tab provides easy access to a number of built-in wizards that can help assist you with configuration.  It also gives you a quick summary of your Internet connection as well as your wireless configuration.

Internet/LAN – This tab is a bit confusing, as there is also another tab named LAN Config.  However, options on this tab allow you to configure your Internet connection, set up Dynamic DNS (DynDNS or TZO), change your LAN and DHCP settings, enable/disable NAT, and create static routes.  The WZR-HP supports DHCP reservation, and you can change the DHCP lease period. 

One unique feature, also found in other legacy Buffalo routers, is a built in VPN server.  Using PPTP, the VPN server provides layer 2 access for up to 5 remote clients.  While PPTP is generally considered insecure and has been superseded by L2TP/IPSEC, it still is found in use because it’s easy to configure. 

All versions of Windows dating back to Windows 95 have a built-in PPTP client, as does Mac OS X.  For a home environment, it’s an easy and free way to set up a VPN.  Note that  the PPTP user list is a separate list from the user list for the NAS function.  Figure 8 shows the sub-tabs for the Internet/LAN tab as well as the PPTP configuration page.

PPTP VPN configuration

Figure 8: PPTP VPN configuration

Wireless Config – This tab allows you to configure virtually all wireless settings.  You can enable/disable the radio, change the operating channel or let the AirStation pick the best channel for you and disable SSID broadcast.  While all of these features are fairly standard, the WZR-HP has a unique “Multi-Security” feature that’s worth talking about (Figure 9).  When enabled, you can configure up to three wireless security profiles, each with a separate SSID and wireless security setting. 

Wireless Multi-security setup

Figure 9: Wireless Multi-security setup

But you don't have free reign for how you set wireless security for the three WLANs. For SSID1, you have a choice of WPA or WPA/WPA2, SSID2 supports WPA2/AES only and for SSID3, WEP is the only choice.  This allows you to have the security of WPA/WPA2, but also provides backwards compatibility with legacy wireless devices that only support WEP.  All three profiles connect to the single wired LAN and single DHCP server. Note that only the PSK forms of WPA are supported. If you need the Enterprise (RADIUS) version, you'll have to take a pass on the WZR-HP.

Checking the Separate Feature box in an SSID will block traffic between wireless clients only. The blocking works both for clients associated with the same SSID and also between SSIDs. Each WLAN, however, has free access to wired LAN clients. This means that if the weakest wireless security link, WEP, is compromised, all wired clients could be compromised.

While I like the multiple security feature, I think I prefer the “Guest” feature found in many D- Link routers.  The Guest WLAN feature allows you to provide wireless access on a separate VLAN that has access only to the Internet.

Security – There not too much to say about this tab.  The major feature found here is the ability to set up IP filtering rules.  Up to 32 rules are supported.

Lan Config – In this tab (Figure 10) you set up port forwarding to forward traffic from the Internet to a specific LAN IP address.  Ports for common services are pre-populated as shown.

Port Forwarding

Figure 10: Port Forwarding

The QoS sub-tab lets you set low, medium or high priority for various types of traffic (port based) being sent to the Internet only.  There is no downlink QoS, nor is there an automatic QoS feature like that found on most D-Link routers.

Other functions on this tab include setting up the IP address for the DMZ, enabling / disabling UPnP, and configuring the Movie Engine options.  Note:  you must enable the Movie Engine using the switch on the front panel – you can’t enable it through the web UI.

Amazon Top-Selling Wireless Routers

More Wireless

Win This!

TP-LINK Archer C9 AC1900 Router

 

You could win a TP-LINK Archer C9 AC1900 Router

Learn How!

Top Performing Routers

AC3200
AC2350
AC1900
AC1750
AC1200

Top Performing NASes

NoRAID
RAID1
RAID5

Over In The Forums

here's the changelog: ASUS RT-AC68U Firmware version 3.0.0.4.378.4376 Security related - Upgrade OpenSSL library to 1.0.0q - Fixed CVE-201301813 - Fixed the XSS vulnerability on page Main_Analysis_Content.asp AiProtection fixes - Fixed router reboot issue when disabled...
Highlights of this release: Official support for the RT-N16 is being dropped. This last model based on SDK5 requires too much efforts to maintain. New features such as the...
Hi there... I have a RT-N16 running merlin 378.50. I have a DNS and DHCP server on my local network, and I want to have a guest wireless network. I collected various...
Trying to figure out the best way to configure a small network for blistering speed. A new client of mine is a tiny business with three engineers running AutoDesk Inventor in...
I am using Tomato Firmware 1.28.0000 -2.4-123 K26ARM USB AIO-64K and cannot get the NAT Loopback working. I am trying to access a webpage on machine on my LAN...