We couldn't yet get accustomed to the speeds of wireless routers that support AC1900 when ASUS company surprised us with a new router, RT-AC87U, with support of AC2400, which allows for raising the level of wireless speeds up to staggering 2334 Mbps. In this review we will try to find out what are the real speeds available to the users of this wireless router.
ASUS RT-AC87U wireless router comes in a black plastic case, which is really typical for this kind of devices. The only nontypical thing in it is its size and weight: 290x168x48 mm and 747 grammes. To work properly the device needs an external power unit (included in the box) with the following characteristics: 19V and 2,37А.
On the upper surface there is a 3D brand tag as well as subscriptions to the device status LEDs located on the edge between the front and upper panels.
Side panels are not remarkable at all and there is only a ventilation grate located on them.
The front panel of the model under review has two buttons located on it: LED and Wi-Fi, which are used for enabling/disabling LEDs and Wi-Fi, respectively. Apart from it there is a USB 3.0 port hidden behind a special plate.
The bottom side has four rubber legs used for desktop mounting of the device. ASUS RT-AC87U can also be hanged onto the wall and therefore it has two mounting holes located on its bottom side. A sticker with the brief information about the model and a ventilation grate are located here, too.
The rear panel has sockets used for connection of four external antennae, power socket with a power ON/OFF button, WPS and Reset buttons, and five Gigabit Ethernet interfaces (four LAN and one WAN ports).
Now let's have a look at the insides of the ASUS RT-AC87U case. The electronic stuffing of ASUS RT-AC87U wireless router is one textolite card which has all essential elements located on both of its sides. Spansion S34ML01G100TFI00 module with the size of 128 Mbytes performs functions of flash memory.
The largest part of the card surface is covered by massive heatsinks. It stands to mention that passive cooling is used in RT-AC87U. However, unfortunately for us, the heatsinks themselves are used to cool metal screens under which there are all other chips located. Therefore, the only thing accessible for inspection is the flash memory module.
Information about the CPU and RAM can be obtained via several backhand ways: using the web-interface and command line. An ARMv7 CPU with two cores (2000 BogoMIPS each) is used in the system.
That is where we bring the review of hardware components of the device to an end and pass on to examining its software capabilities.
Upon first access to the web-interface of ASUS RT-AC87U wireless router the primary setup wizard will get launched. It is used to set the administrator password and specify the main operation parameters of the device: device operation mode, connection type to the service provider, settings of the wireless network.
And though the firmware update is not necessary to be carried out in order to prepare RT-AC87U for fully-fledged operation, we strongly recommend all users to do it.
Firmware upgrade is carried out in Firmware Upgrade tab, Administration menu item. Firmware upgrade may be carried out both in a manual and semi-automatic mode. In order to perform the latter one needs to be connected to the Internet. Actually, the manual firmware upgrade mode is not that difficult as it only requires a firmware image file that was previously downloaded from the vendor's web server. The whole firmware upgrade process takes about three minutes and does not require any technical proficiency from the administrator.
Unfortunately, when this article was being written there were still no utility for firmware restoration (Firmware Restoration) available for ASUS RT-AC87U at the official website. However, this is not a big problem. The owner of this device can either use the same utility available for any other ASUS wireless router or restore the device firmware manually. This utility may come in handy if there is a failure during the firmware upgrade process. In this case the device will automatically switch to the restoration mode.
Upon manual firmware restoration the administrator can upload the firmware file directly to the router using TFTP.
C:\>tftp -i 192.168.1.1 put c:\RT-AC87U_22.214.171.124_376_2061-gdea2a5b.trx
Transfer successful: 37543936 bytes in 107 second(s), 350877 bytes/s
The second method of the manual firmware restoration is uploading the firmware file using the boot-loader web-interface. Also, one can reboot the device or reset user settings here.
Slowly flashing power indicator will show that the router changes for the rescue mode. Another thing that may indicate the transition to the rescue mode are changes in TTL field value in retraced ICMP echo replies: TTL=64 in the normal mode and TTL=100 in the restoration mode.
Now let's review the new capabilities of the router web-interface.
One can access the device web-interface by entering 192.168.1.1 in any modern browser. It's worth noticing that the web-interface is available in 22 languages.
We will not review all capabilities of the RT-AC87U web-interface, since we had already done it before, but only turn our attention to the most interesting features.
Network Map menu item shows brief information about the connected clients and availability of access to the Internet. Apart from it, this tab also contains key settings of the wireless network for both frequency ranges and information about the CPU and RAM usage.
ASUS company has started collaborating with Trend Micro anti-virus software vendor. This collaboration resulted in appearance of AiProtection menu item, which provides the router users with network protection and parental control features. It'd be fair to point out that the parental control feature has been present in the ASUS network equipment earlier too, but nevertheless the other protection features were not available.
Parental control lets one place restrictions on the used applications and visited websites for children's devices as well as grant the access to the Internet on schedule. Network protection features are more interesting and include a security test of the router (checking the correctness of settings in terms of security), blocking of malicious websites, attack control, and detection and blocking of infected devices.
Router Security Scan feature shows settings that are directly associated with security of the router and local network it's connected to. The user can manually activate any security feature that s/he is interested in.
Upon detecting an infected device in the local network, ASUS RT-AC87U wireless router can send the administrator an email notification.
Adaptive QoS menu item underwent some changes, too. Now the router can analyse applications (based on the transferred traffic) that are initialized on the user hosts and show their traffic consumption speed using Bandwidth Monitor tab. Traffic Monitor tab contains info about the interface utilization during various time periods.
QoS tab lets one carry out either manual or adaptive adjustment of QoS. In the manual adjustment mode the user can specify the bandwidth value—or its priority— required for every application by him/herself. The adaptive mode gives one a possibility to specify priorities for groups of similar applications.
The list of websites that the user has visited is located in Web History tab.
Switch Control tab in LAN menu item is meant to be used in order to enable and disable support of Jumbo frames as well as for selection of the method of accelerating of NAT translations.
Also, the new firmware versions now provide the users with a possibility to perform automatic reconnection to the server by the VPN client if the connection has been lost.
That's where we were about to bring this section to an end, but one thing attracted our attention: absence of the repeater mode in Operation Mode tab, Administration menu item. ASUS claims that RT-AC87U model supports three operation modes: wireless router, access point, and Media Bridge, which makes the device perform functions of a wireless client. However, some browsers let the user choose the above-mentioned operation mode. We notified the vendor about this and are expecting it to fix the bug in the next firmware versions.
And now let's pass on to reviewing the device command line capabilities.
Switching the access to the command line on and off is performed using System tab, Administration menu item in the web-interface.
Firmware of the model under review is built on Linux 126.96.36.199 OS using Busy Box 1.17.4.
RT-AC87U login: admin
ASUSWRT RT-AC87U_188.8.131.52 Thu Aug 28 08:49:28 UTC 2014
admin@RT-AC87U:/tmp/home/root# cd /
admin@RT-AC87U:/# uname -a
Linux RT-AC87U 184.108.40.206brcmarm #1 SMP PREEMPT Thu Aug 28 16:59:31 CST 2014 armv7l GNU/Linux
BusyBox v1.17.4 (2014-08-28 16:49:27 CST) multi-call binary.
Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.
See source distribution for full notice.
Usage: busybox [function] [arguments]...
or: function [arguments]...
BusyBox is a multi-call binary that combines many common Unix
utilities into a single executable. Most people will create a
link to busybox for each function they wish to use and BusyBox
will act like whatever it was invoked as.
Currently defined functions:
[, [[, arp, ash, awk, basename, blkid, cat, chmod, chown, chpasswd, clear, cmp, cp, crond,
cut, date, dd, df, dirname, dmesg, du, e2fsck, echo, egrep, env, ether-wake, expr, fdisk,
fgrep, find, flock, free, fsck.ext2, fsck.ext3, fsck.minix, fsync, grep, gunzip, gzip,
head, ifconfig, insmod, ionice, kill, killall, klogd, less, ln, logger, login, ls, lsmod,
lsusb, md5sum, mdev, mkdir, mke2fs, mkfs.ext2, mkfs.ext3, mknod, mkswap, modprobe, more,
mount, mv, netstat, nice, nohup, nslookup, pidof, ping, ping6, printf, ps, pwd, readlink,
renice, rm, rmdir, rmmod, route, sed, setconsole, sh, sleep, sort, strings, swapoff,
swapon, sync, syslogd, tail, tar, telnetd, test, top, touch, tr, traceroute, traceroute6,
true, tune2fs, udhcpc, umount, uname, unzip, uptime, usleep, vconfig, vi, watch, wc, wget,
which, zcat, zcip
Let's see what processes are currently running using ps command. By using top utility one can obtain information on the current activity of the launched processes.
PID USER VSZ STAT COMMAND
1 admin 6084 S /sbin/preinit
2 admin 0 SW [kthreadd]
3 admin 0 SW [ksoftirqd/0]
4 admin 0 SW [kworker/0:0]
5 admin 0 SW [kworker/u:0]
6 admin 0 SW [migration/0]
7 admin 0 SW [migration/1]
8 admin 0 SW [kworker/1:0]
9 admin 0 SW [ksoftirqd/1]
10 admin 0 SW< [khelper]
11 admin 0 SW [kworker/u:1]
51 admin 0 SW [sync_supers]
53 admin 0 SW [bdi-default]
54 admin 0 SW< [kblockd]
105 admin 0 SW [kswapd0]
151 admin 0 SW [fsnotify_mark]
159 admin 0 SW< [crypto]
231 admin 0 SW [mtdblock0]
236 admin 0 SW [mtdblock1]
241 admin 0 SW [mtdblock2]
246 admin 0 SW [mtdblock3]
268 admin 0 SW [kworker/0:1]
269 admin 0 SW [kworker/1:1]
272 admin 0 SW [mtdblock4]
277 admin 0 SW [mtdblock5]
281 admin 664 S hotplug2 --persistent --no-coldplug
318 admin 6068 S console
320 admin 1508 S /bin/sh
326 admin 0 SWN [jffs2_gcd_mtd4]
329 admin 1496 S syslogd -m 0 -S -O /tmp/syslog.log -s 256 -l 6
332 admin 1496 S /sbin/klogd
334 admin 0 SW [khubd]
442 admin 6076 S usbled
532 admin 6076 S /sbin/wanduck
539 admin 652 S tftpd
551 admin 1500 S telnetd
553 admin 1480 S /bin/eapd
557 admin 2088 S /bin/wps_monitor
558 admin 6076 S wpsaide
560 admin 1956 S nas
561 admin 1596 S /usr/sbin/acsd
564 nobody 956 S dnsmasq --log-async
565 admin 6076 S ntp
570 admin 2452 S avahi-daemon: running [RT-AC87U-3E60.local]
571 admin 6500 S httpd
573 admin 1508 S crond
574 admin 1452 S /usr/sbin/infosvr br0
575 admin 1540 S networkmap --bootwait
577 admin 6076 S watchdog
580 admin 1688 S rstats
587 admin 6076 S ots
589 admin 1496 S lld2d br0
591 admin 6076 S disk_monitor
592 admin 6076 S bwdpi_check
668 admin 716 S miniupnpd -f /etc/upnp/config
680 admin 2456 S u2ec
682 admin 1524 S lpd
685 admin 2456 S u2ec
686 admin 2456 S u2ec
843 admin 1520 S -sh
853 admin 1500 R ps
Mem: 46584K used, 209184K free, 0K shrd, 304K buff, 12424K cached
CPU: 0.0% usr 4.5% sys 0.0% nic 95.4% idle 0.0% io 0.0% irq 0.0% sirq
Load average: 0.13 0.04 0.05 1/61 854
PID PPID USER STAT VSZ %MEM CPU %CPU COMMAND
854 843 admin R 1504 0.5 0 4.5 top
571 1 admin S 6500 2.5 0 0.0 httpd
1 0 admin S 6084 2.3 1 0.0 /sbin/preinit
577 1 admin S 6076 2.3 1 0.0 watchdog
591 1 admin S 6076 2.3 1 0.0 disk_monitor
532 1 admin S 6076 2.3 0 0.0 /sbin/wanduck
592 1 admin S 6076 2.3 0 0.0 bwdpi_check
565 1 admin S 6076 2.3 0 0.0 ntp
558 1 admin S 6076 2.3 0 0.0 wpsaide
442 1 admin S 6076 2.3 0 0.0 usbled
587 577 admin S 6076 2.3 0 0.0 ots
318 1 admin S 6068 2.3 1 0.0 console
680 1 admin S 2456 0.9 0 0.0 u2ec
685 680 admin S 2456 0.9 1 0.0 u2ec
686 685 admin S 2456 0.9 0 0.0 u2ec
570 1 admin S 2452 0.9 0 0.0 avahi-daemon: running [RT-AC87U-3E60.local]
557 1 admin S 2088 0.8 0 0.0 /bin/wps_monitor
560 1 admin S 1956 0.7 0 0.0 nas
580 1 admin S 1688 0.6 0 0.0 rstats
561 1 admin S 1596 0.6 1 0.0 /usr/sbin/acsd
575 1 admin S 1540 0.6 0 0.0 networkmap --bootwait
682 1 admin S 1524 0.6 0 0.0 lpd
843 551 admin S 1520 0.5 0 0.0 -sh
320 318 admin S 1508 0.5 1 0.0 /bin/sh
573 1 admin S 1508 0.5 1 0.0 crond
551 1 admin S 1500 0.5 0 0.0 telnetd
589 1 admin S 1496 0.5 1 0.0 lld2d br0
332 1 admin S 1496 0.5 0 0.0 /sbin/klogd
329 1 admin S 1496 0.5 0 0.0 syslogd -m 0 -S -O /tmp/syslog.log -s 256 -l 6
553 1 admin S 1480 0.5 0 0.0 /bin/eapd
574 1 admin S 1452 0.5 0 0.0 /usr/sbin/infosvr br0
564 1 nobody S 956 0.3 1 0.0 dnsmasq --log-async
668 1 admin S 716 0.2 0 0.0 miniupnpd -f /etc/upnp/config
281 1 admin S 664 0.2 1 0.0 hotplug2 --persistent --no-coldplug
539 1 admin S 652 0.2 1 0.0 tftpd
246 2 admin SW 0 0.0 1 0.0 [mtdblock3]
269 2 admin SW 0 0.0 1 0.0 [kworker/1:1]
7 2 admin SW 0 0.0 1 0.0 [migration/1]
268 2 admin SW 0 0.0 0 0.0 [kworker/0:1]
326 2 admin SWN 0 0.0 1 0.0 [jffs2_gcd_mtd4]
5 2 admin SW 0 0.0 0 0.0 [kworker/u:0]
Contents of /bin, /sbin, /usr/bin, and /usr/sbin catalogs, as well as the output of sysinfo utility, are located in a separate file. For example, /sbin catalog contains tcpcheck utility that lets the administrator find out whether a TCP port is open in a certain node.
usage: tcpcheck <timeout> <host:port> [host:port]
admin@RT-AC87U:/# tcpcheck 5 192.168.1.1:23
192.168.1.1:23 is alive
admin@RT-AC87U:/# tcpcheck 5 192.168.1.3:80
It looks like /rom/Beceem_firmware catalog contains files that are somehow associated with Yota service provider.
admin@RT-AC87U:/# ls /rom/Beceem_firmware/
RemoteProxy.cfg macxvi.cfg.freshtel macxvi.cfg.gmc macxvi200.bin.giraffe
Server_CA.pem.yota macxvi.cfg.giraffe macxvi.cfg.yota macxvi200.bin.normal
Now let's turn to /proc catalogue to view its contents and find out the system uptime, its average utilisation, information on the CPU installed, and the amount of RAM. Actually, system uptime and average system utilisation can also be learnt using uptime command.
admin@RT-AC87U:/# cd /proc
1 326 565 8 fs self
10 329 570 843 interrupts slabinfo
105 332 571 9 iomem softirqs
11 334 573 953 ioports stat
151 4 574 bcm947xx irq swaps
159 442 575 buddyinfo kallsyms sys
2 5 577 bus key-users sysrq-trigger
231 51 580 cmdline kmsg sysvipc
236 53 587 cpu loadavg timer_list
241 532 589 cpuinfo locks tty
246 539 591 crypto meminfo uptime
268 54 592 devices misc version
269 551 6 diskstats modules vmallocinfo
272 553 668 dmu mounts vmstat
277 557 680 driver mtd zoneinfo
281 558 682 emf net
3 560 685 execdomains pagetypeinfo
318 561 686 fa partitions
320 564 7 filesystems scsi
admin@RT-AC87U:/proc# cat uptime
admin@RT-AC87U:/proc# cat loadavg
0.03 0.04 0.05 2/61 955
admin@RT-AC87U:/proc# cat cpuinfo
Processor : ARMv7 Processor rev 0 (v7l)
processor : 0
BogoMIPS : 1998.84
processor : 1
BogoMIPS : 1998.84
Features : swp half thumb fastmult edsp
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x3
CPU part : 0xc09
CPU revision : 0
Hardware : Northstar Prototype
Revision : 0000
Serial : 0000000000000000
admin@RT-AC87U:/proc# cat meminfo
MemTotal: 255768 kB
MemFree: 203308 kB
Buffers: 388 kB
Cached: 12592 kB
SwapCached: 0 kB
Active: 12808 kB
Inactive: 6444 kB
Active(anon): 10880 kB
Inactive(anon): 3908 kB
Active(file): 1928 kB
Inactive(file): 2536 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 6280 kB
Mapped: 3608 kB
Shmem: 8508 kB
Slab: 20728 kB
SReclaimable: 7152 kB
SUnreclaim: 13576 kB
KernelStack: 488 kB
PageTables: 568 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 127884 kB
Committed_AS: 23860 kB
VmallocTotal: 516096 kB
VmallocUsed: 18464 kB
VmallocChunk: 445268 kB
05:13:52 up 1:13, load average: 0.01, 0.04, 0.04
We can't help to mention nvram utility that allows changing certain important device operation parameters.
usage: nvram [get name] [set name=value] [unset name] [show] [commit] [save] [restore] [erase] ...
admin@RT-AC87U:/# nvram show | grep admin
size: 35379 bytes (30157 left)
As a matter of course, we couldn't help but check a recently discovered vulnerability, which is called ShellShock, in Bash framework. Fortunately, ASUS RT-AC87U wireless router is not exposed to it due to the absence of the pain point of the device, the interpreter.
-sh: bash: not found
That's where we proceed to completion of the brief review of the command line interface capabilities and pass directly on to testing the device.
The first testing procedure we usually begin our testing section with is estimating the booting time of the device, which is a time interval starting with the moment when the power is on until the first echo reply is received through ICMP protocol. ASUS RT-AC87U wireless router boots in 104 seconds. We believe that this result is decent.
The second traditional test was a security scanning procedure, which has been carried out using Positive Technologies XSpider 7.7 (Demo build 3100) utility. On the whole, there were 13 open ports discovered. The most interesting data are presented below.
Before getting down to performance tests we would like to get our readers familiar with the key specifications of the test stand we used.
|Motherboard||ASUS Maximus VI Extreme||ASUS M60J|
|CPU||Intel Core i7 4790K 4 GHz||Intel Core i7 720QM 1.6 GHz|
|RAM||DDR3 PC3-10700 SEC 32 Gbytes||DDR3 PC3-10700 SEC 16 Gbytes|
|NIC||Intel PRO/1000 PT
|OS||Windows 7 x64 SP1 Rus||Windows 7 x64 SP1 Rus|
Performance of ASUS RT-AC87U upon carrying out of NAT/PAT translations is presented on the diagram below. It's worth noticing that by default this kind of traffic is processed using hardware acceleration, which prevents applying any load on the device CPU.
If one enables carrying out of the translation, or in other words when simple routing of packets is performed, the data transmission will not be done using hardware acceleration but the CPU.
Apart from IPv4 traffic forwarding ASUS RT-AC87U also supports the next version of Internet Protocol, IPv6, which is handled by the CPU.
Connection to the provider may be carried using various tunnel types. PPTP, L2TP, and PPPoE. We decided to test PPTP performance. Connection may be established both using MPPE encryption and without it.
ASUS RT-AC87U wireless router possesses a built-in VPN server of OpenVPN protocol. We just couldn't help but measure speeds of access to the server upon using default settings.
One of the most interesting tests is, we dare say, the measurements of performance of the wireless segment. Unfortunately, we didn't have any wireless adapter operating in AC2400 mode in our lab and that's why at first we performed measurements for both of the frequency ranges using ASUS PCE-AC68 network adapter that supports AC1900.
We must say that we were pleasantly surprised at the wireless data transmission speeds for 5 GHz frequency range that we obtained. However, we decided not to stop at this point and asked the vendor to provide us with another ASUS RT-AC87U router in order to use it as a client and thoroughly test AC2400.
This way we'd probably manage to hit the barrier of 1 Gbps in wireless speeds soon!
ASUS RT-AC87U wireless router has a USB 2.0 and a USB 3.0 port, which we used to connect a 750 Gbyte Transcend StoreJet 25M3 hard disk successively formatted into four file systems: NTFS, FAT32, and EXT2/3. The results of measurement of access speeds to the disks using SMB protocol are presented below.
It's also worth mentioning that ASUS RT-AC87U uses passive cooling of its hardware components, or in other words it doesn't have a fan in its case. We decided to measure the temperature of the device case during our performance tests. In order to measure it we used our lab's ADA TempPro-2200 pyrometer. The highest temperature that we managed to measure has been 48,8°С. We believe that the result is decent.
That's where we draw the testing chapter to a close and move on to summing it all up.
Generally, we are glad about ASUS RT-AC87U wireless router we tested. It allows for performing wireless data transfer at never-before-seen speeds. Appearance of user protection features, developed by Trend Micro company, looks like a useful change too. Usage of a powerful CPU will let the users enjoy various network resources to the full.
Strength areas of ASUS RT-AC87U are presented below.
- High traffic transmission speeds in the wireless segment
- A powerful CPU
- Appearance of a feature of network protection of the clients
- Advanced capabilities of QoS feature
- Support of IPv6
- Excellent IPv6 routing speeds
- Availability of hardware acceleration of traffic upon carrying out of NAT/PAT translations
- Support of two wireless frequency ranges
- A built-in client and VPN server
Unfortunately, we cannot help to mention some of its drawbacks.
- Relatively high price
- The web-interface is not completely translated
- The Russian language web-interface is a bit unstable and runs beyond the screen
As of when this article was being written, ASUS RT-AC87U was not officially on sale in Moscow. The sales are to start in December 2014. The device will be priced at 9990 roubles.