Disclaimer: If you brick (i.e. ruin) your router by following this page, I will not be held responsible. Although much effort has been made to ensure the correctness of the information presented here, it is possible there are still incorrect or outdated information. I have personally tried flashing RT-N16 and RT-N12 B1 only. (If you happen to make the router unbootable, retry the Asus recovery procedure with Asus stock firmware.)
Last update: 2013-10-30
Why install Tomato firmware?
- You need a feature that is supported by one of the variants of Tomato but not the stock Asus firmware
- You’re doing P2P and the router crashes / reboots
- You’re having an issue that you suspect it to be a bug in the stock Asus firmware
- You don’t like or don’t trust stock Asus firmware
What are the downsides of Tomato firmware?
- Tomato firmware disables Broadcom Cut-Through Forwarding (CTF) by default because it is incompatible with some Tomato features. At least for some Asus models, on Asus firmware with QoS and certain features disabled, the router activates CTF and yields a throughput that is greater than on Tomato with QoS and CTF disabled. Recent Tomato by Shibby firmwares show an option for enabling CTF, but there are reports that enabling it may not actually yield a difference for some models or firmwares. Tomato by Shibby also does not support FastNAT because it is incompatible with QoS, Bandwidth limiter, IP Traffice, Bandwidth Monitor and Web usage functions.
- In some cases, the WiFi behavior of the Asus firmware may be different from the Tomato firmware, because they usually use different versions of the Broadcom drivers. In general, Asus stock firmware may offer slightly higher WiFi performance than Tomato, because Asus usually uses newer Broadcom drivers, while Tomato usually sticks with an older but proven release that is more compatible with other client devices. As of June 2013, there are test builds of Tomato with newer and faster WiFi driver.
Why Asus router?
- You want to run Tomato firmware, and a few Asus models are supported
- Usually cheaper than Cisco / Linksys for the same level of hardware (If you do not find Asus RT-N16 to be significantly cheaper than Cisco E4200 V1, then I’d say E4200 V1 is the better choice due to dual-band with 5GHz. E4200 V2 cannot run Tomato.)
- You don’t like internal antennas as found in recent Cisco / Linksys models
Which Asus router to purchase?
In case you need recommendations for an Asus router, here’s my opinion (I currently own a RT-N16), in descending order of router CPU performance:
- There is no doubt RT-AC66U is the best Asus router one can buy to run Tomato as of this writing. Naturally it is also the most expensive. Tomato Shibby has added 5GHz support for it recently.
- (Unfortunately there is a huge price/performance/feature gap between the RT-N66U and the RT-N15U, and in between there is no other Asus router that uses Broadcom solution aside from the old RT-N16. Those who want RT-N15U performance together plus 5GHz WiFi from a router but still cheaper than RT-N66U may take a look at Linksys E3200.)
- RT-N15U: This seems like a cheaper successor to the old RT-N16. In terms of specifications it looks fine, and should perform faster than RT-N53 if one does not need 5GHz WiFi. I think that people with higher than 200Mbps broadband should consider something more powerful than this.
- RT-N53: 5GHz is really important. It is possibly the single most important tool to avoid WiFi interference from neighbors for now. However, its Ethernet ports are 100Mbps instead of Gigabit 1000Mbps, so this router does not make sense if you have higher than 100Mbps broadband.
- For a really low budget router, RT-N12 D1 is a nice choice. I have measured that its predecessor RT-N12 B1 can deliver 90Mbps WAN-to-LAN throughput. So even on a 100Mbps broadband connection, this router is sufficient for the usual consumers who only do typical web browsing and some occasional P2P. (For serious P2P something better should be used.) Those who need a stronger signal should consider the RT-N12HP variant, but it is more expensive though.
Differentiating among various models of Asus RT-N router series:
It is critical to find out the correct model of your router, its hardware revision, and the flash size before you proceed to install any third-party firmware such as Tomato to your router. Unless otherwise stated, all Tomato-supported models in this list should use the RT-N driver instead of RT driver when choosing a correct Tomato firmware.
In addition to the following list I maintain, please also read the official supported router list of Tomato by Shibby
- RT-AC68U: Although this uses a Broadcom chipset, it uses ARM architecture instead of MIPS. So it’s unlikely for Tomato to support it soon. If you’re looking for a custom firmware for this model, take a look at Asuswrt-Merlin.
- RT-AC66U: 802.11ac, BCM4706@ 600MHz, 128MB Flash, 256MB RAM, dual band 5/2.4GHz support. 5GHz is only supported from Shibby Builds starting from 111. Note: for 5GHz to work you may need to set Country to EU.
- RT-AC66R: Same hardware as RT-AC66U but sold by BestBuy
- RT-AC56U: Although this uses a Broadcom chipset, it uses ARM architecture instead of MIPS. So it’s unlikely for Tomato to support it soon. If you’re looking for a custom firmware for this model, take a look at Asuswrt-Merlin.
- RT-N66U: BCM4706@ 600MHz, 32MB Flash, 256MB RAM, dual band 5/2.4GHz support. Only supported by Toastman Builds starting from 2012-2-(end) and Shibby Builds starting from 085V.
- RT-N66R: Same hardware as RT-N66U but sold by BestBuy
- EA-N66: This model does not use Broadcom chipset and therefore cannot run Tomato firmware
- RT-N65U: This model does not use Broadcom chipset and therefore cannot run Tomato firmware
- RT-N56: This model does not use Broadcom chipset and therefore cannot run Tomato firmware
- RT-N53: BCM5358U @ 300MHz, 8MB Flash, 32MB RAM, dual band 5/2.4GHz support. Supported by Shibby build starting from 104 with 5GHz support.
- RT-N53 H/W version A1: Supported by Shibby build starting from 114 (to be confirmed).
- RT-N16: BCM4718 @ 480MHz, 32MB Flash, 128MB RAM, 2 USB 2.0. Officially it is recommended to use RT driver versions of Tomato, although I use RT-N driver and it works for me. It seems that many Tomato developers have this router, so this is a nice router for Tomato if your broadband is less than 150Mbps and you don’t need 5GHz WiFi. I use one too.
- RT-N15U: BCM5357 @ 500MHz, 8MB Flash, 64MB RAM, 1 USB 2.0. Supported by Shibby build starting from 093.
- RT-N15: This model is totally different from RT-N15U. It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N14U: This model does not use Broadcom chipset and therefore cannot run Tomato firmware
- RT-N13: This model does not use Broadcom chipset and therefore cannot run Tomato firmware
- RT-N12 LX: This model is totally different from RT-N12 (without LX). It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N12E: This model is totally different from RT-N12 (without E). It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N12 H/W version 1: BCM4716 @ 300MHz, 4MB Flash, 32MB RAM. Recommended to use RT driver versions of Tomato, although RT-N driver should also work. Beware there are reports of instability with this router.
- RT-N12 H/W version B1: BCM5357B0@ 300MHz, 8MB Flash, 32MB RAM. Only supported by Toastman Builds starting from 2012-2-6 and Shibby Builds starting from 083V. (Note: There are many web pages listing this model having 4MB flash only, but the unit I tried really has 8MB flash, and many experts in relevant forums agree this model has 8MB flash too.) (Newer shipments may have changed the chipset to BCM53572.)
- RT-N12 H/W version C1: Same as RT-N12 B1 but with a “Black Diamond” appearance
- RT-N12 H/W version D1: (To be confirmed) BCM53572. This is functionally the same as C1 but equipped with built-in signal amplifier. There are forum reports indicating success of flashing Tomato firmware on this router.
- RT-N12HP: This is functionally the same as D1 but equipped with two 9dbi antenna. A review reported that its WiFi signal is good enough even after passing through two concrete walls.
- RT-N11: This model does not use Broadcom chipset and therefore cannot run Tomato firmware
- RT-N10P: RT-N53572 @ 300MHz, 8MB Flash. With a 5dbi antenna, it seems to be a nice 150Mbps WiFi budget variant of the excellent RT-N12 series. Supported by Shibby build starting from 114.
- RT-N10+: This model is totally different from RT-N10U. It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N10+ B1 , C1: This model is totally different from RT-N10U. It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N10+ D1: (To be confirmed) BCM5356 @ 300MHz, 4MB Flash, 16MB RAM. There is a forum reporting stating success with flashing tomato, but with the following limitations: 1. Power LED does not behave correctly; 2. WAN/LAN ports are shifted, such that LAN Port 4 needs be used for WAN, and the original WAN port becomes LAN Port 1; 3. GUI nvram clear must not be used otherwise it goes back into firmware restoration mode
- RT-N10 LX: This model is totally different from RT-N10U. It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N10E: This model is totally different from RT-N10U. It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N10E B1: (To be confirmed) I suspect this is very similar to RT-N10+ D1
- RT-N10 H/W version 1: BCM5356 @ 300MHz, 4MB Flash, 16MB RAM. Some versions of tomato support this model (Build 52 or earlier). Some do not and WILL BRICK your router. Exercise extreme caution.
- RT-N10 H/W version B1 / C1 / D1: This model is totally different from H/W version 1. It does not use Broadcom chipset and therefore cannot run Tomato firmware. You’re screwed.
- RT-N10U: BCM5357 (or BCM5356U?) @ 300MHz, 8MB Flash, 32MB RAM, 1 USB 2.0. This is the best variant of the RT-N10* series. It is functionally a 150Mbps N-Lite (instead of 300Mbps N) version of RT-N12 B1 with a USB port added. Only supported by Toastman Builds starting from 2012-2-6 and Shibby Builds starting from 079V (with a USB LED fix in 093)
- RT-N10U B: Same as the original RT-N10U, but with a “Black Diamond” appearance
Choosing the right version of Tomato
There are several forks of Tomato by different developers, and some of which are no longer maintained. For corporate environment, Toastman Builds are usually more suitable because it has DHCP disabled by default, such that a router that has lost its settings and rebooted will not run DHCP server accidentally. For home users, many people prefer Shibby Builds – some variants come with Transmission BitTorrent client.
For latest build types, find the latest builds.png for the corresponding version.
How to choose: (Disclaimer: I’m less familiar with Shibby builds)
- For Shibby Builds, go to the K26RT-N folder if you need RT-N driver (for most of the routers listed above), or K26 folder if you prefer RT driver (for RT-N16 or RT-N12 H/W version 1), according to your Asus model requirement discussed above. For RT-AC66U, go into K26RT-AC folder instead.
- Find the latest release by version number with the appropriate language suffix (-EN or none for English)
- Choose a “with USB” or “without USB” firmware depending on whether the router hardware has USB ports or not
- For specific models such as RT-AC66U, RT-N66U or RT-N53, there may be special builds for them, different from other models
- If both MIPSR2 and MIPSR1 firmware are listed, use only MIPSR2 firmware for the Asus RT-N models described on this page
- If your router has more than 8MB Flash, you may use the AIO (All-in-one) firmware with all features
- If your router has a USB port and you need to run a BitTorrent client on the router, choose BT-VPN, otherwise choose Big-VPN.
- Verify that its file size is less than the flash size of your router. Be very careful if you have a 4MB Flash router – you may need to use Std or Mini variants (instead of VPN) in order to fit the 4MB Flash requirement.
- Stay away from NVRAM60K versions or those with other model names (Ex000, F7Dxxxx, etc.)
- There may special test builds with a newer and faster WiFi driver.
Toastman Builds are available from http://www.4shared.com/dir/v1BuINP3/Toastman_Builds.html (Start from early 2012 It seems to require creating a free account for downloading.)
For latest build types, find “Toastman Releases” from linksysinfo.org
- Mini – no USB, no CIFS, no Zebra
- MiniIPV6 – no USB, no CIFS, no Zebra + IPv6
- Std – normal build
- Ext – normal + Extra utilities + NTFS
- VPN – normal + Extras + NTFS + VPN
- VPN-NOCAT – normal + Extras + NTFS + VPN + NOCAT portal
How to choose:
- For Toastman Builds, go to the RT or RT-N folder according to your Asus model requirement discussed above.
- Read the changelog and see which version you want to try out, or just go to the latest version.
- If your router has USB port(s), find those firmwares with “USB” in the filename, otherwise find those firmwares without “USB” in the filename.
- Unless you have to use the VLAN feature, do not choose a VLAN firmware.
- Unless you have to use the Captive Portal feature, do not choose a NOCAT firmware.
- Get a firmware with VPN in the filename, and verify that its file size is less than the flash size of your router. Be very careful if you have a 4MB Flash router – you may need to use Std or Mini variants (instead of VPN) in order to fit the 4MB Flash requirement.
- Stay away from NVRAM60K versions or those with other model names (Ex000, F7Dxxxx, etc.)
Installation Procedure (adapted from patricksheedy.net)
Note: some people say you need to install DD-WRT first. I do NOT recommend anyone to install DD-WRT first before installing Tomato on Asus routers.
- Download a suitable tomato firmware as described above
- Install the Asus router utility from the CD that came with the router. Run \Utility\setup.exe from the CD to install it. If you no longer have the CD you can also download it from the Asus website.
- Disable Firewall on your computer.
- Disable anti-virus on your computer.
- Connect your computer to one of the LAN ports of the router with an ethernet cable.
- Assign a static IP of 192.168.1.10 and subnet mask 255.255.255.0 to your computer LAN port.
- Disconnect the router WAN port if you already have a cable plugged into that port.
- From Windows Start menu, run ASUS Utility -> RT-N Wireless Router -> Firmware Restoration.
- Click the Browse button and select the file that you downloaded in step #1. Don’t click the upload button yet.
- Put the router in recovery mode: Unplug the power cord of the router. Hold down the black Restore button using a pen (not the red button). Plug the power cord back in. Once the power light starts flashing slowing, release the Restore button. The power light should continue to flash. The flashing light means the router is ready to accept the new firmware in recovery mode.
- Click the upload button in the Restoration utility. If it warns about incorrect Asus firmware, ignore it. The firmware should now start uploading into the router. Don’t touch anything while the firmware is being uploaded. (Note: these steps worked when I flashed my RT-N16. However, the utility could not find my RT-N12 B1 when I tried to flash the router, although it did work for other people. After failing for more than a dozen times, I tried to perform the upload first before putting the router in recovery mode, then it finally worked. Later I tried a different unit of RT-N12 B1 strangely it could be flashed the first time using the normal procedure. If neither of these procedures work, please see the Addendum in The Wiert Corner, and the tftp method described by Simeon W in the comments section.)
- No matter whether the utility says the upload is completed, or it hangs at a certain percent, DO NOT PANIC, and WAIT FOR FIVE MINUTES before you do anything else.
- After five minutes, open a browser and go to http://192.168.1.1. Login with user “admin” (or “root”) and password “admin”. You should be logged into Tomato.
- Administration -> Configuration -> Restore Default Configuration -> Erase all data in NVRAM memory(thorough) -> OK (Note: there is a forum report saying this reset function does not work properly on RT-N53 – in this case, try the hardware reset button.)
- After it is completed, login again, enable DHCP (for Toastman Builds), change admin password, enable WiFi security if you use WiFi, plug in your WAN connection and configure it. Also take a look at the CPU frequency, you may need to manually change it if it is not correct. (Note: overclocking your router is usually not a good idea from my experience.)
- Change your computer LAN port back to use DHCP (dynamic address) and dynamic DNS.
- If you happen to make the router unbootable, retry the Asus recovery procedure with Asus stock firmware.
- If you upgraded from DD-WRT to tomato but cannot login, it’s because you did not get the password before the upgrade, so you need to reset it – google for it
- With very new models, sometimes the Ethernet port order may be reversed. Look for a newer firmware, or try “Invert Ports Order” option.
- If something does not work as expected, try “Erase all data in NVRAM memory(thorough)”. If you would like to do it by pressing a button, you may try the WPS button in addition to the reset button. If you run Toastman build, remember that after this you’ll have to use static IP instead of DHCP to connect to the router before you can re-enable DHCP again.
- If your router reboots while doing BitTorrent, etc., reduce the number of connections in the router and/or BitTorrent client.
- If you use Shibby BT-VPN and found the built-in Transmission BitTorrent client to be unstable even after reducing the number of connections, you may try Big-VPN or BTgui instead, then install Transmission as optware. This should be more stable. Google for it.
- As of this writing, there are multiple reports of reboot/hang problems when using bandwidth limiter function for RT-N driver releases. If you need this function, you should try Shibby 084V or later.
- If you experience WiFi issues, try a different WiFi channel, turn off Interference Mitigation and APSD Mode, use 20MHz instead of 40MHz channel bandwidth. Turn off power saving at the WiFi client side (or set it to CAM if there is no off setting). Auto channel in some configurations may yield channel 12 or channel 13, and many client devices do not support these channels without changes to an advanced setting (could be a driver property in case of Windows client). If you’re using a test build with a newer WiFi driver, try falling back to the normal build, and vice versa. If you’re using RT-N16 or the original RT-N12 H/W Version 1, you have an additional choice between RT driver or RT-N driver – try each of them to see which one works better.
- If 5GHz does not work, check that you are using the correct build (especially for RT-N53 firmware, which may be different from others). Set Country to EU. Also try clearing the NVRAM data, and clearing it using the hardware reset button.
- Royee (see the comments section) found that the Windows driver for the network adapter needs to be updated in order to connect to the Tomato router.