Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. DigitizedMe

    Inadyn Cloudflare DDNS Help?

    Since Google domains is dropping support for DDNS and moving everything to Squarespace, I transferred my domains to Cloudflare. I wanted to confirm this works great for me for both IPv4 and IPv6! Thanks for sharing your inadyn config!
  2. DigitizedMe

    The rmerlin donation thread.

    Thanks for the reminder. Sent a few cups myself. I can't thank him enough for his ongoing maintenance.
  3. DigitizedMe

    Let's Encrypt Error on RT-AX88U Latest firmware

    Immediately after a dirty flash of 386.1 beta 5, I got a pop-up notification that my LE cert renewed and verified it on crt.sh. After 3 months pass it would always get stuck authorizing. This took no extra processing on my part. I didn't delete my jffs/.le directory or my domain folder inside...
  4. DigitizedMe

    LetsEncrypt Cert Stopped Updating?

    I'm still having to delete the domain.key every 3 months for a Let's Encrypt cert renewal. With the upgrade to 386.1 beta, and the built in IKEv2 and Instant Guard support, I started to explore using the ASUS cert for IKEv2 as an alternative. I exported the router signed IKEv2 certificates and...
  5. DigitizedMe

    Beta ASUS Instant Guard iOS/Android public beta

    FYI for anyone using a custom ipsec.conf. It must be removed for Instant Guard to work. I guess this is obvious since Instant Guard is dependent on IKEv2. I (and many others) used the ipsec.conf script from https://www.snbforums.com/threads/asus-ipsec-vpn-server.44973. What would be nice is to...
  6. DigitizedMe

    Beta Asuswrt-Merlin 386.1 Beta is now available

    Can someone post the jffs/scripts/ipsec.conf file after the update? I only did a dirty upgrade with my old ipsec.conf in place. I'd like to use the new ASUS certificates with the default IKEv2 support that has certs which don't expire until 2026! I had previously modified my ipsec.conf to be...
  7. DigitizedMe

    OpenVPN TAP Client Causes AX88U Server Reboot

    After testing for a week, I can confirm it is NOT BitLocker. Although it does appear to be related somehow, the forced restarts began to happen over time and are now persistent again with BitLocker entirely disabled. It has to be something with the virtual TAP adapter on this specific Dell...
  8. DigitizedMe

    OpenVPN TAP Client Causes AX88U Server Reboot

    I ran my trusty N66U for a pretty long time with Merlin and OpenVPN TAP too. Tried and true. I have been using IPSEC with the AX88U to take advantage of the coprocessor with crypto acceleration. I hadn't used OpenVPN in about a year and tried to switch back and kept crashing the router at home...
  9. DigitizedMe

    OpenVPN TAP Client Causes AX88U Server Reboot

    Following up for future use. This is now a bug report with OpenVPN. The culprit appears to be BitLocker drive encryption enabled on a Windows 10 PC using TAP. https://community.openvpn.net/openvpn/ticket/1339#ticket I found I could not knock the router out by connecting with any other devices...
  10. DigitizedMe

    OpenVPN TAP Client Causes AX88U Server Reboot

    I'm fishing around to see if anyone else has ran across something similar using an AX88U as a TAP OpenVPN server. I can't pin down when it started happening, but I can verify it didn't knock the router out in the past. When I try to connect home with a Windows 10 client with the latest version...
  11. DigitizedMe

    LetsEncrypt Cert Stopped Updating?

    I just wanted to say thanks. I had to do the same and my LE cert renewed.
  12. DigitizedMe

    Mobile clients sometimes hanging for an eternity

    Messing around with this today, and I can confirm device hand off isn't working using same SSID and different channels, on 5 GHz only. Roaming assistant doesn't appear to do anything even if I set the RSSI threshold super low between my two APs. However, it will swap to a 2.4 GHz channel if dual...
  13. DigitizedMe

    Asus IPSEC Vpn Server

    I also cleared the content in /jffs/.le/ and /jffs/.certs/ to get Let's Encrypt working prior to toggling the WebUI. This thread contains everything I did: https://www.snbforums.com/threads/beta-asuswrt-merlin-384-14-beta-is-now-available.60037/page-32
  14. DigitizedMe

    Asus IPSEC Vpn Server

    I thought I'd done that with my n66u in the past, but no question that you are right. Holding down for 30 after plugin would put it into recovery mode. I'd do L&LD's nuclear reset from the link in his sig.
  15. DigitizedMe

    Asus IPSEC Vpn Server

    Have you tried backing up your current config, then doing a 30/30/30 reset and manual reconfigure? You can always restore later if it still doesn't work. :D
  16. DigitizedMe

    Asus IPSEC Vpn Server

    I probably can't assist much, but I'm wondering if your Let's Encrypt certificate status show as validated for the Web UI at least?
  17. DigitizedMe

    Asus IPSEC Vpn Server

    Quick updates regarding Let's Encrypt in the newest version 384.14 Beta with ACMEv2 support. (I was using the LE certificate only for IPSEC IKEv2, with ODKRYS' ipsec.postconf script.) First, to get LE certificate to authorize in WAN > DDNS, I had to enable the Web UI HTTPS through...
  18. DigitizedMe

    [Beta] Asuswrt-Merlin 384.14 Beta is now available

    I modified the ipsec.postconf script to: pc_append " cacert=/jffs/.le/$(nvram get ddns_hostname_x)/ca.crt" $CONFIG pc_append " leftcert=/jffs/.le/$(nvram get ddns_hostname_x)/my.domain.cer " $CONFIG All works well so far. I'm going to hunt down the thread with Odkrys' script using chain.pem...
  19. DigitizedMe

    [Beta] Asuswrt-Merlin 384.14 Beta is now available

    ASUS Web UI SSL Certificate "status" functionality must have changed to use the fullchain.pem with the requirement to enable the HTTPS access to Web UI; versus the old behavior that had a split cert.pem & chain.pem certificates, with ability to keep the HTTPS Web UI disabled. SSH into the...
  20. DigitizedMe

    [Beta] Asuswrt-Merlin 384.14 Beta is now available

    You da man! (Or woman)! It worked. I don't want to derail the thread any longer, but I'm guessing something changed in the behavior to generate the LE SSL certs for the DDNS? I only ask since I had web UI set to http only prior, and the LE cert was being created correctly before. In my case...
Top