RT-ac68u wont sync NTP v. 378.56

[XIII]

Are you sure your WAN had successfully connected? link_internet being 0 and inability to resolve any DNS hostname would indicate there was no WAN connectivity at all.

Sorry, probably the result of my dnscrypt setup...

Dnscrypt is not working because the date on the router is not correct after rebooting; maybe because of the ntp issue?

After reboot:

Aug  1 02:00:29 dnscrypt-proxy[472]: Starting dnscrypt-proxy 1.6.0
Aug  1 02:00:29 dnscrypt-proxy[472]: Generating a new session key pair
Aug  1 02:00:29 dnscrypt-proxy[472]: Done
Aug  1 02:00:29 dnscrypt-proxy[470]: Starting dnscrypt-proxy 1.6.0
Aug  1 02:00:29 dnscrypt-proxy[470]: No useable certificates found

After applying workaround:

Oct 31 17:33:22 ntp: start NTP update
Oct 31 17:33:22 dnscrypt-proxy[678]: Starting dnscrypt-proxy 1.6.0
Oct 31 17:33:22 dnscrypt-proxy[678]: Proxying from 127.0.0.1:65053 to 176.56.237.171:443
Oct 31 17:33:22 dnscrypt-proxy[680]: Starting dnscrypt-proxy 1.6.0
Oct 31 17:33:22 dnscrypt-proxy[680]: Generating a new session key pair
Oct 31 17:33:22 dnscrypt-proxy[680]: Done
Oct 31 17:33:22 dnscrypt-proxy[680]: Server certificate #808464433 received
Oct 31 17:33:22 dnscrypt-proxy[680]: This certificate looks valid
Oct 31 17:33:22 dnscrypt-proxy[680]: Chosen certificate #808464433 is valid from [2015-09-11] to [2016-09-10]
Oct 31 17:33:22 dnscrypt-proxy[680]: Server key fingerprint is ...
Oct 31 17:33:22 dnscrypt-proxy[680]: Proxying from 127.0.0.1:65054 to 77.66.84.233:443

 

[RMerlin]

I'm uploading various test builds (gd825aae) to Mediafire:

https://www.mediafire.com/folder/bj94sbhrh7e49//Test Builds

Please give these builds a try. Since I am still unsure why the link state isn't always properly set and I'd like to move on, I've modified Asus's change so it will handle both states 1 (WAN with no DNS) and 2 (WAN with DNS). If it works, then it means the root issue is probably the DNS check isn't always properly done - and I'm still unable to reproduce the problem.

 

[XIII]

I'm uploading various test builds (gd825aae) to Mediafire. Please give these builds a try.

Seems to work better for me!

At boot the date is still wrong (Aug 1) and several ntp not syn messages:

Aug  1 02:00:24 hour monitor: ntp is not syn

However, after some time it seems to fix itself now:

Aug  1 02:02:00 ntp: start NTP update
...
Nov  1 10:20:18 crond[261]: time disparity of 133039 minutes detected
Nov  1 11:20:39 dnscrypt-proxy[470]: Proxying from 127.0.0.1:65053 to ...
Nov  1 11:20:39 dnscrypt-proxy[472]: Refetching server certificates
Nov  1 11:20:39 dnscrypt-proxy[472]: Server certificate #808464433 received
Nov  1 11:20:39 dnscrypt-proxy[472]: This certificate looks valid
Nov  1 11:20:39 dnscrypt-proxy[472]: Chosen certificate #808464433 is valid from [2015-09-11] to [2016-09-10]

 

[R1-Limited]

In your case, WAN was working properly, DNS resolution as well, but either the DNS test was done too early by the router (leaving you at state level 1), or the state check was never run by the firmware.

What type of WAN connection do you have? Any particular customization?

No customization at all outside of a start up script making sure 8.8.8.8 and 8.8.4.4 are primary DNS.
WAN is simply Comcast cable PPPOE

On a side note as well, DST is actually 11/1/ on the first sunday at 2 am. I tried to adjust this in the admin DST a it fails to stick. Just fyi

 

[R1-Limited]

I'm uploading various test builds (gd825aae) to Mediafire:

https://www.mediafire.com/folder/bj94sbhrh7e49//Test Builds

Please give these builds a try. Since I am still unsure why the link state isn't always properly set and I'd like to move on, I've modified Asus's change so it will handle both states 1 (WAN with no DNS) and 2 (WAN with DNS). If it works, then it means the root issue is probably the DNS check isn't always properly done - and I'm still unable to reproduce the problem.

Worked. Updated and rebooted no syn issue seen.

Good work

 

[Toddimus]

This may be different than the "regular" NTP sync issue people are having... I'm on 378.56_2 firmware on an RT-AC87R router. The thing that's different is that it is set up as a WDS bridge. So on this router, I did't have to set anything for WAN because it gets its external connectivity through the wireless bridge to the "base" station. In fact, I can enable or disable WAN on the bridged router with no apparent effects.

The "base" station is another RT-AC87R (running 54_2 firmware). It is connected to a Surfboard cable modem with Comcast cable internet (150Mb / 12Mb). The base station has no problems with NTP time sync.

I can connect via wireless or hardwired LAN to either of the routers and surf the web quite quickly.

I posted about this couple of months ago, but still haven't been able to come up with a fix. I've tried everything I can think of on the problem router which includes:

WAN DNS

Connect to DNS Server automatically - Yes and No

When No, all permutations of base station IP, 8.8.8.8, 75.75.75.75​

WAN enable/disable (this has no effect on internet access from the problem router- web surfing still works either way)
LAN DHCP settings

DHCP server is disabled on this router (base station router does have it enabled with a fixed IP for the problem router)
Default gateway: empty, base station IP, cable modem IP, 8.8.8.8, 75.75.75.75
DNS server: base station IP, 8.8.8.8, 75.75.75.75
Check and unchecked "Forward local domain queries to upstream DNS"​

Firewall

General -> NAT loopback Disabled, ASUS, Merlin​

When I go to Network Tools and PING www.google.com, I get "ping: bad address 'www.google.com'"

When I run
nvram get link_internet
It returns 0

Then I set it and restart ntpc:
nvram set link_internet=2
service restart_ntpc

Still no joy.

The response to Merlin's suggested test:

admin@RT-AC87R-UP:/tmp/home/root# nvram get link_internet
2
admin@RT-AC87R-UP:/tmp/home/root# cat /etc/resolv.conf
nameserver 127.0.0.1
admin@RT-AC87R-UP:/tmp/home/root# nslookup www.google.com
Server:  127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

nslookup: can't resolve 'www.google.com'
admin@RT-AC87R-UP:/tmp/home/root# ps w | grep dnsmasq
2465 nobody  1068 S  dnsmasq --log-async
2650 admin  1376 S  grep dnsmasq
admin@RT-AC87R-UP:/tmp/home/root#

Any help would be appreciated. Thanks!
-Todd

 

[RMerlin]

This may be different than the "regular" NTP sync issue people are having... I'm on 378.56_2 firmware on an RT-AC87R router. The thing that's different is that it is set up as a WDS bridge. So on this router, I did't have to set anything for WAN because it gets its external connectivity through the wireless bridge to the "base" station. In fact, I can enable or disable WAN on the bridged router with no apparent effects.

This is probably a limitation of WDS mode, where the router is just a bridge, with no Internet access of its own.

 

[Toddimus]

That's what I figured. Seems weird though.
Thanks.


Sent from my iPhone using Tapatalk

 

[primitivo]

378.56_2 - has resolved "ntp not in sync" issue for me. Has the reason of this issue been found?

 

[RMerlin]

378.56_2 - has resolved "ntp not in sync" issue for me. Has the reason of this issue been found?

No. For some reason, the test Asus now does for DNS functionality either fails or doesn't get executed for some people. I simply reverted the change where the ntp update was waiting for the DNS to successfully complete its test, and run the ntp update as long the WAN link itself is considered up.