Advanced Router Configuration Guide

Router Admin Access

1. Connect to router via ethernet cable
2. Open web browser, navigate to:
   • Primary: 192.168.1.1
   • Alternative: 192.168.0.1
   • Or: router.starhub
3. Login with admin credentials
4. Navigate to "Advanced" or "Expert" mode

First-Time Security Setup

Setting	Action	Reason
Admin Password	Change from default	Prevent unauthorized access
Admin Username	Change if possible	Additional security layer
Remote Management	Disable unless needed	Reduce attack surface
WPS	Disable	Known vulnerability

DHCP Settings

VLAN Configuration

Common Port Forwarding Rules

Service	Protocol	External Port	Internal Port
Web Server	TCP	80, 443	80, 443
Gaming (PS5)	TCP/UDP	80, 443, 3478-3480	Same
Remote Desktop	TCP	3389	3389
Minecraft Server	TCP	25565	25565
Security Camera	TCP	8080	80

DMZ Configuration

• Use for devices needing full port access
• Set DMZ host IP (e.g., gaming console)
• Ensure device has strong security
• Monitor for unusual activity

Traffic Classification

1. Navigate to QoS > Classification
2. Create priority rules:
   • Voice: Highest (DSCP 46)
   • Video: High (DSCP 34)
   • Gaming: High (DSCP 26)
   • Browsing: Normal (DSCP 0)
   • Downloads: Low (DSCP 8)

Bandwidth Allocation

Professional WiFi Optimization

Setting	Default	Optimized	Purpose
Channel Width	Auto	80MHz (5GHz)	Maximum throughput
Guard Interval	Auto	Short	Higher data rates
Beacon Interval	100ms	200-300ms	Reduce overhead
RTS Threshold	2347	2304	Better collision handling
DTIM Period	1	3	Power saving for devices

Band Steering Configuration

1. Enable band steering for dual-band devices
2. Set RSSI threshold: -75 dBm
3. Configure load balancing between bands
4. Exception list for 2.4GHz-only devices

Firewall Rules

• Enable SPI (Stateful Packet Inspection)
• Block common attack ports
• Create custom rules:
  1. Block all incoming except established
  2. Allow specific services only
  3. Log dropped packets
  4. Rate limit connections

Access Control Lists

Rule Type	Example	Purpose
MAC Filtering	Allow list only	Device whitelist
Time-based	Kids devices off at 10 PM	Parental control
URL Filtering	Block social media	Productivity
Service Block	Disable P2P	Bandwidth management

Built-in VPN Server

1. Navigate to VPN > VPN Server
2. Choose protocol:
   • OpenVPN (most secure)
   • PPTP (easier, less secure)
   • L2TP/IPSec (balanced)
3. Generate certificates
4. Create user accounts
5. Export client configuration

VPN Client Setup

• For privacy: Configure VPN client
• Route specific devices through VPN
• Kill switch for VPN disconnection
• Split tunneling for local access

Built-in Tools

• Traffic Monitor: Real-time bandwidth usage
• System Log: Connection events and errors
• Ping Test: Network connectivity check
• Traceroute: Path diagnosis
• Port Scanner: Security audit

SNMP Configuration

1. Enable SNMP v3 for security
2. Set community string
3. Configure trap destinations
4. Use monitoring software:
   • PRTG Network Monitor
   • Zabbix
   • Nagios

Configuration Backup

1. Navigate to System > Backup
2. Export configuration file
3. Save with date stamp
4. Store in multiple locations
5. Test restore procedure

Factory Reset Procedure

• Hold reset button 30 seconds
• Or via admin panel: System > Factory Reset
• Reconfigure from backup
• Update firmware immediately