TalkTalk’s new Sagemcom FAST 5364 Router and WiFi Hub

TalkTalk has a new router available to its 4 million broadband customers in the UK. The router is made by Sagemcom and called the FAST 5364. The company will sell you one for £120 here but it comes for free if you get the Faster Fibre Broadband package; or for £30 with the Fast Broadband package.

TalkTalk’s previous router was the Huawei HG633 or for some luckier customers the HG635, or perhaps a DLINK DSL3782. The HG633 is a poor product with slow WiFi performance and 100 Mbps Ethernet ports. The FAST 5364 looks like an effort to put things right. It is not worth £120 (you can get a better 3rd-party router for that money) but it is well worth £30 as an upgrade.

The router comes in a smart box with a big emphasis on the step-by-step guide to getting started.

image

The router itself has a perforated plastic case with a flip-out stand. On the back are four Gigabit Ethernet ports, a WAN port, a VDSL/ADSL Broadband port, a WPS button and an on-off switch. There is also a recessed Reset button.

image

A handy feature is that the WiFi details are on a removable panel. The router admin password is on the back label but not on the removeable panel – better for security.

image

Getting started

Presuming you are a TalkTalk customer, it should just be a matter of connecting the cables and turning on. In my case it took a little longer as I am not a TalkTalk consumer customer. I connected up, then logged into the admin at http://192.168.1.1 to enter my username and password for the internet connection, following which I was online. An LED on the front turns from amber to white to confirm.

There is an oddity though. The FAST 5364 has a red Ethernet port marked WAN. This should be suitable for connecting to a cable modem or any internet connection via Ethernet. However when I tried to use this it did not work, but kept on trying to connect via ADSL/VDSL. Either this is deliberately disabled, or this is a firmware bug.

Performance and specification

The good news is that performance on the FAST 5364 is good. Here is the spec:

Antennas: 4×4 5GHz and 3×3 2.4GHz

WiFi: 2.4GHz Wi-Fi (802.11 b/g/n) and MU-MIMO 5GHz Wi-Fi (802.11 a/n/ac)

Broadband: ADSL2+ & VDSL2

A point of interest here is that the WiFi supports a technology called Beamforming. This uses an array of antennas to optimise the signal. It is called Beamforming because it shapes the the beam according to the location of the client.

In addition, MU-MIMO (Multi-User, Multi-input, Multi-output) means that multiple WiFi streams are available, so multiple users can each have a dedicated stream. This means better performance when you have many users. TalkTalk claims up to 50 devices can connect with high quality.

Features

The FAST 5364 is managed through a web browser. Like many devices, it has a simplified dashboard along with “Advanced settings”.

From the simple dashboard, you can view status, change WiFi network name and password, and not much else.

If you click Manage my devices and then Manage advanced settings, you get to another dashboard.

Then you can click Access Control, where you get to manage the firewall, and set the admin password for the router.

Or you can click TalkTalk WI-Fi Hub, where you get more detailed status information, and can manage DHCP, Light control (literally whether the LED lights up or not), DNS (this sets the DNS server which connected clients use), DynDNS (which supports several dynamic DNS providers, not just DynDNS), Route for adding static routes, and Maintenance for firmware updates, logs, and setting an NTP server (so your router knows the time and date).

image

Or you can click Internet Connectivity so you can set a DNS server to be used on the WAN side as well as username, password and other settings if you cannot connect automatically.

Firewall and port forwarding

The firewall in your router is critically important for security. Further, users often want to configure port forwarding to enable multi-user online gaming or other services to work.

Dealing with this can be fiddly so most modern routers support a feature called UPnP which lets devices on your network request port forwarding automatically.

Personally I dislike UPnP because it is a security risk if an insecure device is present on your network (cheap security cameras are a notorious example). I like to control which ports are forwarded manually. That said, UPnP is better in some ways since it allows the same port to be forwarded to different devices depending on what is in use. It is a trade-off. Ideally you should be able to specify which devices are allowed to use UPnP but that level of control is not available here. Instead, you can turn UPnP on or off.

image

On the Port Forwarding screen, you can add rules manually, or select Games and Applications, which automatically sets the rules for the selected item if you specify its IP address on the network.

image

You can get to this same screen via Connected Devices, in which case the IP address of the selected device is pre-populated.

The Firewall management gives you four levels:

Low: Allow all traffic both LAN->WAN and WAN->LAN. Not recommended, but not quite as bad as it sounds since NAT will give you some protection.

Medium: Allow all traffic LAN->WAN. Block NETBIOS traffic WAN->LAN. This is the default. More relaxed than I would like, presuming it means that all other traffic WAN->LAN is allowed, which is the obvious interpretation.

image

High: Allow common protocols LAN->WAN. Block all traffic WAN->LAN. A good secure setting but could be annoying since you will not be able to connect to non-standard ports and will probably find some web sites or applications not working as they should.

image

Custom: This seems to be the High setting but shown as custom rules, with the ability to add new rules. Thus with some effort you could set a rule to allow all traffic LAN->WAN, and block all traffic WAN->LAN except where you add a custom rule. To my mind this should be the default.

Most home users will never find this screen so it seems that TalkTalk is opening up its customers to a rather insecure setup by default, especially if there are bugs discovered in the router firmware.

I am asking TalkTalk about this and will let you know the response.

Missing features

The most obvious missing feature, compared to previous TalkTalk routers, is the lack of any USB port to attach local storage. This can be useful for media sharing. It is no great loss though, as you would be better off getting a proper NAS device and attaching it to one of the wired Ethernet ports.

Next, there is no provision for VPN connections. Of course you can set up a VPN endpoint on another device and configure the firewall to allow the traffic.

I cannot see a specific option to set a DHCP reservation, though I suspect this happens automatically. This is important when publishing services or even games, as the internal IP must not change.

There is no option to set a guest WiFi network, with access to the internet but not the local network.

Overall I would describe the router and firewall features as basic but adequate.

TalkTalk vs third party routers

Should you use a TalkTalk-supplied router, or get your own? There are really only a couple of reasons to use the TalkTalk one. First, it comes free or at a low price with your broadband bundle. Second, if you need support, the TalkTalk router is both understood and manageable by TalkTalk staff. Yes, TalkTalk can access your router, via the TR-069 protocol designed for this purpose (and which you cannot disable, as far as I can tell). If you want an easy life with as much as possible automatically configured, it makes sense to use a TalkTalk router.

That said, if you get a third-party router you can make sure it has all the features you need and configure it exactly as you want. These routers will not be accessible by TalkTalk staff. I would recommend this approach if you have anything beyond basic connectivity needs, and if you want the most secure setup. Keep a TalkTalk router handy in case you need to connect it for the sake of a support incident.

Final remarks

TalkTalk users are saying that the new router performs much better than the old ones (though this is not a high bar). For example:

“this is a very very good router with strong stable wifi. It is a massive upgrade to any of the routers supplied currently and its not just the wifi that is better. I get 16 meg upload now was 14 before”

That sounds good, and really this is a much better device than the previous TalkTalk offerings.

My main quibble is over the questionable default firewall settings. The browser UI is not great but may well improve over time. Inability to use the WAN port with a cable modem is annoying, and it would be good to see a more comprehensive range of features, though given that most users just want to plug in and go, a wide range of features is not the most important thing.

21 thoughts on “TalkTalk’s new Sagemcom FAST 5364 Router and WiFi Hub”

    1. Hi Alex, I haven’t see a manual. Most of the settings are self-explanatory if you are familiar with routers, as you navigate the management pages, but I agree a detailed manual would be helpful.

      Tim

  1. Hi Tim,
    Excellent review. Thanks.
    As a long-time Talk-Talk customer, I’ve bent their arm to get my some-years-old router upgraded to their ‘Wi-Fi Hub’ (aka Sagecom 5364) because I was concerned about security with respect to the router itself. I wanted a router on which I could change both the Wi-Fi name and password and the broadband password (ideally the broadband user name too). Given that motivation, I was astounded to find that, even though I was setting out from the secure Talk-Talk website I found myself accessing the router settings via the hackneyed IP address: 192.168 xx etc,. which is an insecure connection. It seems ludicrous to enter the password for the router, which is known to be a vulnerable backdoor, on a totally insecure connection.
    I see you went through this procedure as a non-Talk-Talk customer. Did it take you in via an insecure connection, too. Or is this only a Talk-Talk system defect?

    1. Hi Oscar

      It is not that bad since it is a local network connection, so your password etc is not transmitted in plain text over the internet. The fact that it is 192.168.x.x isn’t a concern, but if you use http it is unencrypted. However the router does also support SSL connection to the dashboard, just use https://192.168.1.1. You will get a certificate warning but that doesn’t matter in this instance.

      If you access your dashboard over the internet (blocked by default) you should always use https for security.

      Tim

  2. Interesting review, as I’ve just ordered one of these at the loyalty team price of £30 and found your review when looking for the manual online (not found, and not on TT website). However, what your review doesn’t make clear is:-
    a) Whether you can set separate SSIDs for the 2.4 and 5GHz bands, as some Android devices in particular will only connect at 2.4 GHz if a common SSID is used.
    b) Whether remote maintenance can be disabled. I had to do that on my Huawei HG635, as remote maintenance interrupts the carrier for 60 sec. and causes my cloud backup service to fail if maintenance occurs during a backup.
    If both those features are absent, I’ll be sending it back for a refund.

    1. Hi

      You can set separate SSIDs. Not sure you can disable remote maintenance though. I don’t think there is any documented way.

      Tim

  3. Hi Tim

    Great review!

    One thing it really lacks under access control is parental controls.
    I write an app (wifi blocker .. iOS , and android in development) that allow parents easy access to block people or devices. Which is really needed with kids staying on their iPads until 2am on school nights and many other issues. Good for blocking the printer or other smart devices so they doesn’t send outbound traffic too.
    Shame about lack of parental controls on this router, all other talktalk provided parental controls through hidden menus but the app worked with these. Will look at the firewall rules see if this is possible. I think talktalk don’t like parental controls on their routers to avoid customer issues. They could have asked for this feature easy enough.
    Get in touch I’m keen to start promoting my app but not got time to blog/market it and looking to start affiliate program or pay per genuine blog.

    1. thank you Tim, you just answered my question. So, there is no option for parental control. At the minimum I need to be able to control the wifi on/off times but doesn’t look like it can do that too…

  4. Hi I upgraded to fibre and was sent the Sagem Fast 5364 router.
    A couple of weeks ago I was offered an upgrade to the the DLink DSL-3782 router.
    Which router is better?

    1. The DLink has some extra features, USB port and VPN support. Performance though, not sure without trying it but suspect the Sagem may be better.

  5. Hello Tim I have recently upgraded to a TalkTalk Sagem 5364 hub. The old router was a TalkTalk Huawei HG633 which worked fine, but when I renewed my contract TalkTalk sent me this new hub. My problem is that now I can’t “Cast-to” movies from my computer to my Samsung smart TV. Can you tell me if the new Sagem 5364 allow me to do this?
    Regards Peter

    1. Hi, is your Samsung definitely connected to the network? Try the network setup on the Samsung and see if is connected. It might need refreshing following the router change.

  6. Hi. Good review & comments. Did you get any response from Talktalk regarding security? Firmware upgrade etc?

    Cheers. Doug.

  7. This router has many firmware bugs which Talktalk have acknowledged on their forum and will fix in a future update.
    I found the performance to be good, but the reliability poor.
    The 5GHz band stopped working altogether after a few weeks. A replacement was supplied and had the same fault after a few days. I sent the replacement back for a refund and bought a retail router.

  8. Thinking of upgrading to this new talk talk Faber does this mean a engineer will call to connect fibre cable like virgin

  9. Hello Tim, Really please to find your review. As a long time TalkTalk customer and an Apple user I have to say I have never used their Modem/Routers after an early Sagem Modem caused some serious problems. I have just updated our contract to a Broadband fibre package and have just received a Sagem 5364.
    We live in a very tall stone cottage and the router is in an office on the fourth floor I have a Netgear extender on the first floor. The router is a Netgear Night Hawk D7000 and the the wireless system around our property works well on all floors. I am reluctant to change it. What would you advise. Thanks.

Leave a Reply

Your email address will not be published. Required fields are marked *