⌘ Home networks

Backing up your router configuration and updating its firmware

How to save and document your router configuration, update firmware safely, recognise a model at end of support and recover quickly after a reset.

After hours spent setting up Wi-Fi networks, DHCP reservations, firewall rules and VPNs, a home router holds a small treasure of work. Yet a failed update, a hardware fault or an accidental reset with a paperclip is all it takes to lose everything. A configuration backup and a little documentation turn an afternoon of rebuilding into ten minutes of restoring.

The router's backup file

Almost all routers let you export the configuration to a file, usually in the system or administration section, under items such as "Save settings" or "Backup configuration". It is the first thing to do once the router is set up the way you want.

There are, however, a few characteristics to be aware of:

  • the file is often binary or encrypted, so it cannot be read or edited;
  • it is tied to the model and sometimes to the firmware version: restoring it on a different device, or after a major update, may not work;
  • it contains sensitive data, such as Wi-Fi passwords and connection credentials: keep it somewhere protected, not lying on the desktop.

Firmware such as OpenWrt instead produces an archive of readable text files, which can be compared from one version to the next.

Documenting beyond the file

Precisely because the backup file is not always reusable, it is worth pairing it with readable documentation. Nothing elaborate is needed: a document with the main settings or a set of screenshots of the configuration pages.

What to record Why
Provider connection parameters Needed to reconnect after a reset
Wi-Fi network names and security used Saves reconfiguring every device
Network address and DHCP range Keeps home addresses consistent
DHCP reservations The NAS and printer return to the same addresses
Port forwarding and firewall rules These are the hardest settings to remember
DNS settings Filters and local names work again
VPN configuration Client keys and addresses

If you recreate the Wi-Fi networks with the same name and the same password, every device in the home reconnects on its own. It is the detail that saves the most time.

Updating the firmware

Firmware updates fix security vulnerabilities, as well as resolving bugs and sometimes adding features. An outdated router is one of the most common weak points of a home network, because it is directly exposed to the Internet.

A careful procedure:

  1. Export the configuration and save screenshots before you start.
  2. Read the release notes, looking for warnings about settings that change or get reset.
  3. Update from a computer connected by cable, not over Wi-Fi.
  4. Do not cut the power during the update and wait for the full reboot.
  5. Check the main functions: connection, Wi-Fi, VPN, port forwarding.

Many modern routers offer automatic updates. For most homes this is a good choice: the risk of a faulty update is generally lower than that of running for months with a known vulnerability. It is best, though, to schedule updates for the night-time hours.

Recognising a router at end of support

Sooner or later every manufacturer stops updating a model. Support pages often indicate the product's status, sometimes with an abbreviation such as EOL (end of life). If the last update was a long time ago and the model no longer appears among the supported ones, the router will not receive any more security fixes.

At that point there are two paths: replace it or, if the model is compatible, install alternative firmware maintained by the community. Either way, it is a signal not to ignore.

Starting again after a reset

When the router returns to factory settings, the order of operations matters:

  1. connect by cable and change the admin password immediately;
  2. restore the backup file, if it is compatible with the firmware version;
  3. otherwise, re-enter the provider connection by hand and check that the Internet works;
  4. recreate the Wi-Fi networks with the same names and passwords as before;
  5. re-enter DHCP reservations, DNS, port forwarding and VPN from your documentation;
  6. export a new backup.

In my work I keep, for every network I manage, a folder with the latest backup, the screenshots and the date of the last update: it is the only way not to depend on memory.

In short

  • Export the router configuration as soon as it is complete and after every important change.
  • The backup file is tied to model and firmware: pair it with screenshots and notes.
  • Recreating Wi-Fi networks with the same name and password reconnects every device.
  • Update firmware over a cable, after a backup, or enable automatic night-time updates.
  • A router at end of support should be replaced or given maintained alternative firmware.
MM
Marco Marzaduri

Marco Marzaduri works in cybersecurity, digital forensics and web development. A computer science graduate, he combines rigorous technical analysis with attention to the people who use technology.

Read also