After watching this video I was able to further secure my internal devices and my router from external threats, thank you very much. Continue to make these videos 😀
Can you perhaps do another video for the installation and configuration of Unbound? It sounds great on the SNB Forum but there is no real step-by-step how2@@diytechtips247
Hello, I appreciated the clip thumbs up from me ^^, just you can talk also about diversion its a good add for the router and for people who wont use ddns. you can setup your own dns with cloudflare and its orangecloud protection.
I really wish you would have shown details for the tab Diversion creates within the router access menu. Can Diversion be toggled on and off from that tab or do you have to SSH into the router everytime you want to do so? Same with updates/upgrades- only through SSH or through the tab? Does Diversion have to be turned off when updating Asus Merlin firmware and does it need to be re-installed after an Asus Merlin firmware, even of restoring saved settings? Can adds be allowed on an IP basis similar to a VPN setup- because there are certain devices and situations where someone may want that? Installation is always pretty strait forward with this kind of stuff but often updates are when problems occur. Hopefully you can take what I am asking and make another video so we have a more comprehensive video.
You can only manage Diversion using the AMTM SSH interface, you will be able to add to the black or white listing as well as disable Diversion all together. The WEBGUI interface can be found under Advanced Settings section then select LAN and you will see the tab in there. That WEBGUI just displays statistics. All settings and configuration will have to be done through SSH. The below link will show you the different options you will have with SSH. When you upgrading your router there is no need to turn any features off. It will retain all settings including any third party apps/scripts. To update Diversion it has to be done through SSH. I have updated Diversion and router firmware multiple time without any issue. Diversion Setup - th-cam.com/video/RdVynb3yGtI/w-d-xo.html Hope that helps!
hello thanks for the video. everything works well for me until i have to create a swap file. i can format the usb stick but at the following step it says that there is no compatible device to create a swap file. i have formatted it following your steps. any hint? thanks again
It will be best for you to make sure you format the drive with FAT or FAT32, do not use NTFS as the router will not see it. You can format it on another Windows workstation with just FAT and then connect it to the router and see if that works. Hope that helps!
Just an fyi…on the web gui AI Protection page at the bottom it says alert preferences. You can put your email credentials in there to get any alerts via email if any security issues come up. Been using Skynet for awhile and it is an excellent security enhancement.
Yes, that is an excellent way to get alerts but just be cautious as it may trigger a lot of email notifications. You may want to do some testing for a few days to analyze its behaviour.
@@diytechtips247 Good point. I have only seen a couple alerts make it through to email. A lot of people don’t know that option is even there because it is hidden in the corner. I kind of go by the mindset of of even if it is a false alert i would rather know than something jump off and didn’t get a notification then it may be too late.
Hi when I install Skynet do I turn off Enable JFFS custom scripts and configs and the Enable SSH LAN only or do I leave these running after Skynet is installed on my ASUS router thanks hope you you reply.
No do not disable JFFS custom scripts as it is needed by AMTM and other scripts used by the Merlin adding. Yes leave SSH LAN only to avoid any possible port scanning from external. That way to access SSH will only be allowed from your internal network. Hope that answers your questions.
Hello I followed your guide to install skynet on Merlin my wireless cctv is still being hacked I’m I doing something wrong any idea you have I would be very grateful.
When you say your wireless cctv is hacked, can you give abit more information. There can be many reasons why it is being hacked. Is it that someone is able to connect from outside your network to your cameras? Do you have strong password for your cameras? Is any of your devices on the network infected with malware, etc? Something I would recommend is that if you do not view your cameras remotely you can create a close network for the cameras to only be viewed internally. Create a specific guest SSID for the cameras with a very complicated password to join the SSID and use a different subnet different from any of the rest of the network and then you can manually give the camaras static IPs but do not put a gateway address which will prevent traffic from moving between different subnets. For example, if your main network is 172.16.1.1-50 with a subnet mask of 255.255.255.0, you can create the guest SSID for the cameras with 172.16.2.1-50 with a subnet mask of 255.255.255.0 and do not put a gateway on the camaras. Hope that helps!
Hi you should do a TH-cam video how to secure your cctv step by step thousands of people would be very grateful if you could do this using asus router with skynet installed 👍
Thank u for the video. Can we go with Diversions Skynet and stock firewall at the same time? And for older routers like 68u which feature u consider most resource consuming and can be better off without it?
You can go with different configurations. The main purpose when it comes to protection is a concept called defense in depth where you will have different layers of protection, it work like the first layer will filter or protect you devices and network from certain attacks but some may get by but the second level of protection will most likely catch it and then the third, fourth, etc level of protection will continue to filter. So to recap having multiple layers of protection is always good. For the older 68u router it will depend on what you are trying to achieve, if you want to block ads you can use Diversion and Skynet, but if you don not mind ads to your devices and just want to protect your network from intruders go with Skynet and the default firewall. If you router can handle all 3 without a performance impact on the router and internet traffic I would recommend all 3 features. Hope that answers your questions?
Yes you can run both Skynet and Diversion at the same time. Please check out the below youtube videos. Diversion Setup - th-cam.com/video/RdVynb3yGtI/w-d-xo.html Skynet Setup - th-cam.com/video/vYoDfIoeqOQ/w-d-xo.html Hope that helps!
amtm is not preinstalled on 3.0.0.4.388_24762 and can't install it because missing dos2unix and can't install that because missing entware, and can't install that because missing amtm..
I would suggest that you update your ASUS router with the latest Merlin firmware for your router and it should be already incorporated into the firmware. What model ASUS router do you currently have? Trying upgrading to the latest Merlin firmware and then check to see if anymore is installed. Hope that helps?
You will have to make sure that the ISB storage is fine as it is needed for storing and running scripts. If you are still getting the error I would recommend setting up amtm over
Yes you can. It is advisable for security reasons to make your router more secure to disable ssh after you do your initial configuration but if you need ssh to be still enabled you can only allow internal ssh from your internal network to the router. Hope that helps.
There is no problem in using 10GB swap file but you may run the risk of it being corrupted. The recommended is 2GB but you can use 10GB. Hope that helps!
Hello After installation i deleted files from pen drive not i cant it does not allow me to re-install it says USB Not found . is there a way to re-install it again?
First try to reboot the router and remove and reinsert the USB stick. If that does not work then you will have no other choice than to uninstall the app from with the amtm menu, then format the drive and then redo the process again. Unfortunately that is the only way. Hope that help!
Yes! You can set it to both LAN and WAN but just keep in mind that port scanning can be done on that port externally. To better secure the SSH port it is recommended to change the port number from 22 to something like 8822 and also make sure that you change the admin username from admin and use a very secure password. Hope that help!
@@Atoys4eva Yes! Setting up these components will help in securing your network. Also make sure that you go to Administration -> Firmware Upgrade and check for updates once a week for Trend Micro: Signature version. Also when creating passwords try to use phrases and not short passwords. Hope that helps!
Hello Unfortunately if you cannot remember the username or password for the router the only way to regain access is to do a factory reset from the button behind the router with a paper clip. The drawback to doing a factory reset is that the configuration on the router will be lost but the Merlin firmware version will remain. The reason this is the only was is that it will be a security risk to be able to recover the username/password, for example, if you have your router at home and someone has physical access they will be able to compromise the security of your router, network and other devices within the network hence the factory reset option is the only one available. Sorry there isn't another alternative. Hope that helps!
If you have Skynet installed and identified the site or IP address that is blocked you can use AMTM for Skynet to whitelist it. The video show you how to access the option in Skynet and also you can use AiProtection -> Malicious Sites Blocking and scroll down under the threat activites windows on the right you will see a little pencil where you can whitelist domains. Hope that helps!
thanks man. Finally figured out how to whitelist it. was also wondering if you have any idea as to why our devices would lose internet connection randomly. no issues with wired connection and cat6 cable that I'm using is brand new
@@Atoys4eva This could be an issue with the strength of the WiFi signal or also if you have other interferences from other WiFi devices in the area that is overlapping on your channel. Do you use the 2.4 or 5 GHZ for the devices that are randomly disconnecting? This disconnection or WiFi interferences are common with 2.4GHZ. The only disadvantage with 5GHZ is that the coverage area are smaller than the 2.4GHZ.
Definitely not my signal strength or other interference. Can it be a possibility that its due to the power socket having a shortage? Also i cant figure out how to access the gui after changing it the router to access point
Once you change your router to access point the GUI will not be accessible by using an IP address. To gain back access you will have to reset it back to default. If you use AiMesh all configuration will be done on the main router and the configuration will be synced with the nodes automatically. Hope that helped
![CAMPปลิ้น | รวม Highlight 2024! PART [1/2]](http://i.ytimg.com/vi/6hnvNnvYloU/mqdefault.jpg)
After watching this video I was able to further secure my internal devices and my router from external threats, thank you very much. Continue to make these videos 😀
Glad it helped
Thank you so much for this consise and detailed how-to! I successfully installed SkyNet and it is functional!
Very happy that it was able to assist you in setting up and securing your network.
Thank you so much video helped me to install skynet so easy as before video i was so confused.
Thank you again so much
Glad it was of help for you!
Excellent Video. Skynet works like a charm. Thank you! Humble Request: Could you please do a video on AdGuard install/setup on Asus Router?
That is one feature that is next on the list to do a tutorial. Glad to hear Skynet is working great for you.
Thank you. Your video really helped
Glad the video was helpful!
Can you perhaps do another video for the installation and configuration of Unbound? It sounds great on the SNB Forum but there is no real step-by-step how2@@diytechtips247
Hello,
I appreciated the clip thumbs up from me ^^, just you can talk also about diversion its a good add for the router and for people who wont use ddns. you can setup your own dns with cloudflare and its orangecloud protection.
Thanks for the tips! I will try to bring videos that will unlock the true potential of the Merlin firmware on the ASUS brand of routers.
awsome content! kudos!!
Thanks, glad it was helpful for you!
I really wish you would have shown details for the tab Diversion creates within the router access menu. Can Diversion be toggled on and off from that tab or do you have to SSH into the router everytime you want to do so? Same with updates/upgrades- only through SSH or through the tab? Does Diversion have to be turned off when updating Asus Merlin firmware and does it need to be re-installed after an Asus Merlin firmware, even of restoring saved settings? Can adds be allowed on an IP basis similar to a VPN setup- because there are certain devices and situations where someone may want that? Installation is always pretty strait forward with this kind of stuff but often updates are when problems occur. Hopefully you can take what I am asking and make another video so we have a more comprehensive video.
You can only manage Diversion using the AMTM SSH interface, you will be able to add to the black or white listing as well as disable Diversion all together. The WEBGUI interface can be found under Advanced Settings section then select LAN and you will see the tab in there. That WEBGUI just displays statistics. All settings and configuration will have to be done through SSH. The below link will show you the different options you will have with SSH.
When you upgrading your router there is no need to turn any features off. It will retain all settings including any third party apps/scripts. To update Diversion it has to be done through SSH. I have updated Diversion and router firmware multiple time without any issue.
Diversion Setup - th-cam.com/video/RdVynb3yGtI/w-d-xo.html
Hope that helps!
hello thanks for the video. everything works well for me until i have to create a swap file. i can format the usb stick but at the following step it says that there is no compatible device to create a swap file. i have formatted it following your steps. any hint? thanks again
It will be best for you to make sure you format the drive with FAT or FAT32, do not use NTFS as the router will not see it. You can format it on another Windows workstation with just FAT and then connect it to the router and see if that works.
Hope that helps!
Just an fyi…on the web gui AI Protection page at the bottom it says alert preferences. You can put your email credentials in there to get any alerts via email if any security issues come up. Been using Skynet for awhile and it is an excellent security enhancement.
Yes, that is an excellent way to get alerts but just be cautious as it may trigger a lot of email notifications. You may want to do some testing for a few days to analyze its behaviour.
@@diytechtips247 Good point. I have only seen a couple alerts make it through to email. A lot of people don’t know that option is even there because it is hidden in the corner. I kind of go by the mindset of of even if it is a false alert i would rather know than something jump off and didn’t get a notification then it may be too late.
Hi when I install Skynet do I turn off Enable JFFS custom scripts and configs and the Enable SSH LAN only or do I leave these running after Skynet is installed on my ASUS router thanks hope you you reply.
No do not disable JFFS custom scripts as it is needed by AMTM and other scripts used by the Merlin adding. Yes leave SSH LAN only to avoid any possible port scanning from external. That way to access SSH will only be allowed from your internal network.
Hope that answers your questions.
Hello I followed your guide to install skynet on Merlin my wireless cctv is still being hacked I’m I doing something wrong any idea you have I would be very grateful.
When you say your wireless cctv is hacked, can you give abit more information. There can be many reasons why it is being hacked.
Is it that someone is able to connect from outside your network to your cameras?
Do you have strong password for your cameras?
Is any of your devices on the network infected with malware, etc?
Something I would recommend is that if you do not view your cameras remotely you can create a close network for the cameras to only be viewed internally. Create a specific guest SSID for the cameras with a very complicated password to join the SSID and use a different subnet different from any of the rest of the network and then you can manually give the camaras static IPs but do not put a gateway address which will prevent traffic from moving between different subnets.
For example, if your main network is 172.16.1.1-50 with a subnet mask of 255.255.255.0, you can create the guest SSID for the cameras with 172.16.2.1-50 with a subnet mask of 255.255.255.0 and do not put a gateway on the camaras.
Hope that helps!
Hi you should do a TH-cam video how to secure your cctv step by step thousands of people would be very grateful if you could do this using asus router with skynet installed 👍
@@Andy-y4m3z Ok thanks for letting me know. Will work on that for you.
Thank u for the video. Can we go with Diversions Skynet and stock firewall at the same time?
And for older routers like 68u which feature u consider most resource consuming and can be better off without it?
You can go with different configurations. The main purpose when it comes to protection is a concept called defense in depth where you will have different layers of protection, it work like the first layer will filter or protect you devices and network from certain attacks but some may get by but the second level of protection will most likely catch it and then the third, fourth, etc level of protection will continue to filter. So to recap having multiple layers of protection is always good.
For the older 68u router it will depend on what you are trying to achieve, if you want to block ads you can use Diversion and Skynet, but if you don not mind ads to your devices and just want to protect your network from intruders go with Skynet and the default firewall. If you router can handle all 3 without a performance impact on the router and internet traffic I would recommend all 3 features.
Hope that answers your questions?
@@diytechtips247 Absolutely. Thank you very much o7.
Can I run SKYNET and diversion at the same time? If so could you explain how. I'm running a rt-ax86u pro
Yes you can run both Skynet and Diversion at the same time. Please check out the below youtube videos.
Diversion Setup - th-cam.com/video/RdVynb3yGtI/w-d-xo.html
Skynet Setup - th-cam.com/video/vYoDfIoeqOQ/w-d-xo.html
Hope that helps!
amtm is not preinstalled on 3.0.0.4.388_24762 and can't install it because missing dos2unix and can't install that because missing entware, and can't install that because missing amtm..
I would suggest that you update your ASUS router with the latest Merlin firmware for your router and it should be already incorporated into the firmware. What model ASUS router do you currently have? Trying upgrading to the latest Merlin firmware and then check to see if anymore is installed.
Hope that helps?
@@diytechtips247 If I try to update through panel it says latest version..
@miloldr What model Asus Router you have?
@@diytechtips247 I dont know, unless RT-AX58U is a model.
Amtm not found error showing please any solution
You will have to make sure that the ISB storage is fine as it is needed for storing and running scripts. If you are still getting the error I would recommend setting up amtm over
Hi, can you disable ssh after installing skynet and would it still work?
Yes you can. It is advisable for security reasons to make your router more secure to disable ssh after you do your initial configuration but if you need ssh to be still enabled you can only allow internal ssh from your internal network to the router.
Hope that helps.
any problems choosing the 10gb swap file?
There is no problem in using 10GB swap file but you may run the risk of it being corrupted. The recommended is 2GB but you can use 10GB.
Hope that helps!
Hello After installation i deleted files from pen drive not i cant it does not allow me to re-install it says USB Not found . is there a way to re-install it again?
First try to reboot the router and remove and reinsert the USB stick. If that does not work then you will have no other choice than to uninstall the app from with the amtm menu, then format the drive and then redo the process again. Unfortunately that is the only way.
Hope that help!
Is it okay if I set the SSH to both lan and wan?
Yes! You can set it to both LAN and WAN but just keep in mind that port scanning can be done on that port externally. To better secure the SSH port it is recommended to change the port number from 22 to something like 8822 and also make sure that you change the admin username from admin and use a very secure password.
Hope that help!
Thanks man! Definitely worth subbing to your channel
@@Atoys4eva Thanks! Check out the other videos in the series to take full advantage of the Merlin Firmware.
@@diytechtips247 Would setting up the aiprotect, firewall and skynet be enough for my home?
@@Atoys4eva Yes! Setting up these components will help in securing your network. Also make sure that you go to Administration -> Firmware Upgrade and check for updates once a week for Trend Micro: Signature version. Also when creating passwords try to use phrases and not short passwords.
Hope that helps!
THis really helped me
Glad that it was helpful.
hello greeting, I do not remember my login can you make a video on how to recover the password or the user in ASUS thanks
Hello
Unfortunately if you cannot remember the username or password for the router the only way to regain access is to do a factory reset from the button behind the router with a paper clip. The drawback to doing a factory reset is that the configuration on the router will be lost but the Merlin firmware version will remain.
The reason this is the only was is that it will be a security risk to be able to recover the username/password, for example, if you have your router at home and someone has physical access they will be able to compromise the security of your router, network and other devices within the network hence the factory reset option is the only one available.
Sorry there isn't another alternative.
Hope that helps!
Anyone knows how to whitelist a website that I can't seem to access?
If you have Skynet installed and identified the site or IP address that is blocked you can use AMTM for Skynet to whitelist it. The video show you how to access the option in Skynet and also you can use AiProtection -> Malicious Sites Blocking and scroll down under the threat activites windows on the right you will see a little pencil where you can whitelist domains.
Hope that helps!
thanks man. Finally figured out how to whitelist it. was also wondering if you have any idea as to why our devices would lose internet connection randomly. no issues with wired connection and cat6 cable that I'm using is brand new
@@Atoys4eva This could be an issue with the strength of the WiFi signal or also if you have other interferences from other WiFi devices in the area that is overlapping on your channel.
Do you use the 2.4 or 5 GHZ for the devices that are randomly disconnecting? This disconnection or WiFi interferences are common with 2.4GHZ. The only disadvantage with 5GHZ is that the coverage area are smaller than the 2.4GHZ.
Definitely not my signal strength or other interference. Can it be a possibility that its due to the power socket having a shortage? Also i cant figure out how to access the gui after changing it the router to access point
Once you change your router to access point the GUI will not be accessible by using an IP address. To gain back access you will have to reset it back to default. If you use AiMesh all configuration will be done on the main router and the configuration will be synced with the nodes automatically.
Hope that helped
🤩🤩🤩🤩🤩🤩 ❤ 🧡 💛 💚 💛 🧡 ❤ 👍 👍 👍 👍 👍 👍 👍
Glad this video was helpful. Check out more in the series to help fully setup your ASUS Merlin Router.
WHAT????
We’re you able to successfully make your router more secure?