Install and Configure a DD-WRT Kong Router

1. In a browser, go to: http://desipro.de/ddwrt-ren/K3-AC-Arm/
2. From the folder called "Initial", download the CHK file dd-wrt.K3_R7000.chk
3. In addition, from the folder for revision 24865M, download the BIN file named dd-wrt.v24-K3_AC_ARM_STD.bin

Note: Some people find that using an even older build 24345M solves some random rebooting issues with certain DD-WRT setups. If you see these types of problems, by all means downgrade, but I haven't seen any random reboots with my tests using the specific configurations detailed in this guide, and the OpenVPN scramble and password UI in newer builds are nice features to have, if you plan to setup a VPN.

1. If you have an active wireless connection on your PC, disable it temporarily.
2. Connect an Ethernet cable from the PC to Port 1 on the back of the router.
3. Connect power to the router, and make sure the power switch is on.
4. On the PC, run cmd.exe to start a command window, and enter the following commands:

ipconfig /release

ipconfig /renew

1. In a browser, go to http://192.168.1.1/
2. When asked "Do you want NETGEAR Genie to help?", enter "No, I want to configure the Internet connection myself.", then select the Next button.
3. When asked "Are you sure?", select OK.
4. Login with the default credentials (username = admin, password = password).
   
   • Note: These are printed on the bottom of the router.
5. You should then be taken to the NETGEAR genie Basic Home page.

3 More Images

Now, we'll upload the initial CHK DD-WRT firmware file to the router. CHK builds are specifically designed to upgrade from the stock factory firmware to DD-WRT.

1. Navigate to Advanced > Administration > Router Update.
2. Select the Browse button.
3. In the file selection dialog box, select the CHK file you downloaded earlier, then select Open.
4. Back on the Router Update page, select Upload.
5. When asked to "Continue?", select OK.
6. The file will begin uploading. Eventually, you will be prompted to login again. Login with the default credentials (username = admin, password = password).
7. If you see a prompt "Warning! The firmware you are trying to upload is the same as the one you had.", just select Yes. Uploading will continue.
8. When finished, the router will automatically reboot. Congratulations! You are now officially running DD-WRT.
9. Windows may prompt to set Network Location. If so, just select Home network in the dialog and move on to the next step.

1. In your browser, you will eventually see the DD-WRT Router Management page, asking to change the password. Just enter Username root and password password, then select Change Password.
   • Note: This password is temporary, and will be overwritten in a future step.

2. You will be taken to the DD-WRT main System Information page. Navigate to the Administration tab.

3. At the authentication popup, enter username root, password password, and select Login.

Now, we'll upgrade DD-WRT to the latest build.

1. Navigate to Firmware Upgrade.

2. At the Firmware Management page, select Choose File.

3. In the file selection dialog box, select the BIN file you downloaded earlier, then select Open.

4. Back on the the Firmware Management page, select Upgrade.

5. An "upgrading" message will show, then the device will automatically reboot.

6. If you see a blank page, or the message "If you have changed your router's IP address, please note that you must release/renew your client(s) address(s) on the network.", enter the following again in the cmd window:

7. ipconfig /release
   ipconfig /renew

1. Select Continue.
2. You will see an updated DD-WRT Router Management page. Navigate to Administration > Factory Defaults.
3. On the Factory Defaults page, set Restore Factory Defaults to Yes, then select Apply Settings.
4. At the warning popup, select OK.
5. You'll see some lights cycle on the router. Wait 30 seconds, then point the browser to http://192.168.1.1/.

1. At the Router Management page, you'll be asked to set your password again. Select a secure username and password this time, as it will be the one you use in future. Here is a good, free random password generator. Note the password you have chosen for the future, and select Change Password.

   • Note: This is the password you'll use to login to the DD-WRT Control Panel, NOT the wireless password. That is set elsewhere.

You'll be at the main System Information page again. Time to find out the best wireless channels (or group of channels) to use at your location. We plan to setup static channels later, and it's best to pick one that nobody else is using. Luckily, DD-WRT has a valuable built-in tool for this, called Site Survey.

1. Navigate to the Status tab. If asked to login, supply your new Username and Password, and select Login.
2. Navigate to the Wireless tab.
3. You will be shown some info about your wireless device. Under Wireless Status, set the Interface to wl0 (the 2.4 GHz radio).
4. Scroll down to the bottom of the page, and select Site Survey.
5. The existing wireless networks will be shown in the Site Survey window. Make a note of them, or print them. In our example image, channel 9 is looking pretty open...
6. Repeat the process for the 5 GHz wl1 Interface.

Armed with knowledge of our wireless environment, we're ready to enter some new wireless settings in DD-WRT. This is an important step, as customized settings are needed to get full performance out of this router. Luckily, both Kong and the DD-WRT forums have complete suggestions. We'll configure some settings that agree with their recommendations, but these are by no means the best settings for every application. First, we'll setup the 2.4 GHz band as an 802.11g/n network, to be compatible with a wider range of devices.

1. In the DD-WRT Control Panel, navigate to Wireless > Basic Settings.
2. Configure these settings for the 2.4 GHz interface, wl0:
   • Regulatory Domain = pick your actual region; in this guide, we'll use UNITED_STATES
   • Wireless Mode = AP
   • Wireless Network Mode = NG-Mixed
   • Wireless Network Name (SSID) = whatever you want; in this guide, we'll use Secure2Point4
   • Wireless Channel = select an unused channel from our Site Survey in the previous step; in this guide, we'll use 9
   • Channel Width = 20 MHz
   • Wireless SSID Broadcast = Enable
   • Optimize Multicast Traffic = Disable
   • TurboQAM (QAM256) support = Enable
   • Explicit Beamforming = Disable
   • Implicit Beamforming = Disable
   • Network Configuration = Bridged
3. After you set these, scroll to the bottom of the page, and select Save.

We'll optimize the 5 GHz band for 802.11ac performance. This can be challenging when setting a fixed channel as Kong recommends. In general, try to pick a high base channel (149-161) that's not used by another wireless network on your Site Survey. More info on troubleshooting channel groups can be found here. The following channel settings are just one valid example; if they work for you, wonderful! If not, happy tweaking!

1. Configure these settings for the 5 GHz interface, wl1:

   • Wireless Mode = AP

   • Wireless Network Mode = AC-Only

   • Wireless Network Name (SSID) = whatever you want; in this example, we are using Secure5

   • Channel Width = VHT (80+80 MHz)

2. Stop here, and Save to make new options appear.

3. Set Extension Channel = upper upper. Save again.

4. Continue:

   • Wireless Channel = 161 - 5.805 GHz

   • Wireless SSID Broadcast = Enable

   • Optimize Multicast Traffic = Disable

   • Explicit Beamforming = Enable (If your 802.11ac network adapters do not support beamforming, leave this disabled; we'll assume they support it, and you'll have them setup to use it.)

   • Implicit Beamforming = Disable

   • Network Configuration = Bridged

5. Select Save, then Apply Settings. If the page is blank after applying settings, go to http://192.168.1.1/ again, in the browser.

1. Navigate to Wireless > Wireless Security.
2. Set Security Mode = WPA2 Personal and WPA Algorithms = AES for both Interfaces, and set a strong password (recommend longer than 15 characters) for both.
3. Select Save and Apply Settings.

Now for some housekeeping. In the past, DD-WRT has had issues with the ttraf Daemon using up NVRAM. We can easily disable it.

1. Navigate to Services > Services.
2. Under WAN Traffic Counter, set ttraff Daemon = Disable.
3. Save and Apply Settings.

Almost done!

1. Navigate to Setup > Basic Setup.
2. Under Time Settings, set:
   • NTP Client = Enable
   • Time Zone = your city (You might have to do some research to pick a city in the same timezone, if yours isn't listed.)
     • This is a good resource.
   • Server IP/Name = time.nist.gov (or another preferred time server)

3. Save and Apply Settings.

Backup your settings, in case you need to roll back later.

1. Navigate to Administration > Backup.
2. Select the Backup button, and a configuration file called nvrambak.bin will be downloaded to your PC. You can Restore this file later on the same screen if needed.

Conclusion

Congratulations, you're done! Connect the WAN port of your router to your cable, fiber or ADSL modem, and you're off and running. Now that you have DD-WRT setup, you might want to explore its many advanced features, like VPN, NAS, and overclocking. For extra VPN help, check out my Instructable on how to Configure VPN Settings on a DD-WRT Router for Private Internet Access.

And if you have issues, the DD-WRT forums and wiki are a great place to find help.

Additional Info

DD-WRT Forums: http://www.dd-wrt.com/phpBB2/

DD-WRT wiki page for the R7000: http://dd-wrt.com/wiki/index.php/DD-WRT_on_R7000

NETGEAR's R7000 support site: http://support.netgear.com/product/R7000

Kong's DD-WRT blog: http://tips.desipro.de/category/dd-wrt/

Special Thanks

Kong, BrainSlayer, Fractal, Eko, Steve Jenkins, Spiff

Non-Commercial Statement

I haven't been incentivized or compensated in any way by the organizations I've linked or recommended in this guide.