ASUS RT-AC3100 Firmware version 3.0.0.4.385.20457

[Vincent Clement]

New Firmware 3.0.0.4.385_20457-g89c3cdd

Bug Fixes and Improvement:
- Improved connection stability.
- Optimized CPU utilization.
- Fixed firmware upgrade bugs.
- Fixed CVE-2019-15126 (Kr00k) vulnerability.
- Fixed a DDoS vulnerability.
- Fixed Let's Encrypt related bugs.
- Fixed folder creating bugs in Samba.

Please note. If router firmware is
3.0.0.4.385.20457 (or newer version)
and you want to downgrade to
3.0.0.4.384.81116 (or previous version),
you need to reset the router after firmware changed.

Have not had a chance to install new firmware as I'm in the middle of working remotely. Maybe this weekend.
Currently on 3.0.0.4.384_81116 and have noticed connections not being stable with some computers, especially when they are on a schedule. Hopefully, Let's Encrypt will also work.

 

[Deleted member 22229]

Thanks..

 

[ScorpionX]

Looks like they removed "Game Boost" from this firmware...no biggie just pointing it out.

 

[Deleted member 22229]

Yeah i think Game boost was alaway's a gimmic and never worked right anyway. Never used it never would.

 

[ScorpionX]

Yeah i think Game boost was alaway's a gimmic and never worked right anyway. Never used it never would.

Yeah pretty much, just not sure what they removed it, it's still on my RT-AX88U and RT-AC88U with the latest firmwares (just updated a few days ago) and is still listed as a feature on their website for the RT-AC3100...strange!

 

[Deleted member 22229]

Likely Asus is removing it because it's not a feature that is really being used very much. That would also free up needed memory space for possibly the 386 code that should be forth coming. Just a guess.

 

[RMerlin]

Please note. If router firmware is
3.0.0.4.385.20457 (or newer version)
and you want to downgrade to
3.0.0.4.384.81116 (or previous version),
you need to reset the router after firmware changed.

FYI, this also applies if going from these newer stock firmware to my firmware (at least up to 384.16, can't speak about future releases yet). This is because Asus is now encrypting the login password, so if you downgrade, your router will end up with an encrypted password it cannot decrypt (so, it will expect you to provide a password that looks like "=bjqbq785n5353" instead of "mypassword").

 

[ATLga]

FYI, this also applies if going from these newer stock firmware to my firmware (at least up to 384.16, can't speak about future releases yet). This is because Asus is now encrypting the login password, so if you downgrade, your router will end up with an encrypted password it cannot decrypt (so, it will expect you to provide a password that looks like "=bjqbq785n5353" instead of "mypassword").

May I suggest that this very important fact be added on your Merlin page FAQ's; Read Me First or maybe it's own sticky since it's important.
If it's posted somewhere and I've overlooked it, apologies.

 

[OzarkEdge]

May I suggest that this very important fact be added on your Merlin page FAQ's; Read Me First or maybe it's own sticky since it's important.
If it's posted somewhere and I've overlooked it, apologies.

This FAQ explains the factory default reset. Everyone should know it and then everyone should realize that if you load different party firmware, you should then always reset it to finish the job.

OE

 

[Arkaye]

I can confirm that Let's Encrypt certificate is already renewing on my AC3100.
New categories for QoS - WFH for Online Conference, and LFH - for Learning.
Game Boost also removed.

 

[Vincent Clement]

AIProtection > Malicious Sites Blocking > Details of Successfully Protected Events:
The name of the device is used instead of the MAC address and events are grouped by device and destination. I don't recall if the Whitelist option was their before.

Adaptive QoS > QoS:
Can confirm new options under QoS. I don't use QoS, so cannot confirm how they function.

System Log - Wireless Log:
This is new information under 5G:

"DFS status: state IDLE time elapsed 0ms radar channel cleared by DFS none
Channel Information
----------------------------------------
Channel 36 A Band
Channel 40 A Band
Channel 44 A Band
Channel 48 A Band
Channel 52 A Band, RADAR Sensitive, Passive
Channel 56 A Band, RADAR Sensitive, Passive
Channel 60 A Band, RADAR Sensitive, Passive
Channel 64 A Band, RADAR Sensitive, Passive
Channel 100 A Band, RADAR Sensitive, Passive
Channel 104 A Band, RADAR Sensitive, Passive
Channel 108 A Band, RADAR Sensitive, Passive
Channel 112 A Band, RADAR Sensitive, Passive
Channel 116 A Band, RADAR Sensitive, Passive
Channel 132 A Band, RADAR Sensitive, Passive
Channel 136 A Band, RADAR Sensitive, Passive
Channel 140 A Band, RADAR Sensitive, Passive
Channel 144 A Band, RADAR Sensitive, Passive
Channel 149 A Band
Channel 153 A Band
Channel 157 A Band
Channel 161 A Band
Channel 165 A Band"

 

[ScorpionX]

I'm starting to believe this firmware is bugged, my RT-AC68P still has "Game Boost" and they also added "Open NAT" to this older product (firmware 3.0.0.4.385.20433 - 4/14/2020) but took it out of the RT-AC3100 and didn't add "Open NAT" which is a more capable router? (firmware 3.0.0.4.385.20457 4/16/2020) Just my opinion, any ideas?

 

[DaveMishSr]

I am sticking with what works for now. Merlin 384.16.0 on the AiMesh router and Asus 384.81116 on the AiMesh nodes.

 

[neptube]

Do not use this version of the firmware. It will lock you out of your router if you have it set for secure https access to the login page, and there is no way to downgrade the firmware without first resetting the router to factory defaults.
I filed a case with them, and today Asus has removed firmware version 3.0.0.4.385.20457 from their download support site for the RT-AC3100 / RT-AC88U.

 

[neptube]

FYI, this also applies if going from these newer stock firmware to my firmware (at least up to 384.16, can't speak about future releases yet). This is because Asus is now encrypting the login password, so if you downgrade, your router will end up with an encrypted password it cannot decrypt (so, it will expect you to provide a password that looks like "=bjqbq785n5353" instead of "mypassword").

This firmware update 3.0.0.4.385.20457 has now been removed from the Asus firmware downloads for the RT-AC88U / RT-AC3100 on their support site.

 

[didario]

anyone have this version to share?

 

[Ballesteros]

Do not use this version of the firmware. It will lock you out of your router if you have it set for secure https access to the login page, and there is no way to downgrade the firmware without first resetting the router to factory defaults.

Thanks for sharing - nice to know it wasn't just me!

I'd finally upgraded from my old RT-AC87U to an RT-AC88U and had finished updating to the latest firmware and restoring my config, and all seemed to be running fine, then after a router reboot I was locked out on https. Blaming some incompatibility with my restored config, I reset to factory defaults and reconfigured manually from clean slate, only to get locked out again after a reboot. On the third attempt I managed to change router access from https-only to http+https, and to enable SSH, before it could lock me out.

So I'm still on 3.0.0.4.385_20457 and https has locked up again since then, but when it happens I can still get in via http, and it seems that service restart_httpd over SSH also temporarily fixes https.

 

[L&LD]

@Ballesteros currently the 385.xx versions are being beta tested on specific routers. Unless you want to be a beta-tester, I suggest the stable RMerlin 384.17_0 release final instead.

Please use the link in my signature below to first flash to the firmware you want and then perform the M&M Config (and ideally the Nuclear Reset) guides too to get your router to a good/known and stable state (whether you flash to the RMerlin firmware or remain on the stock Asus firmware as you wish).

 

[Ballesteros]

Thanks - if I'd followed the order in your steps then it would have saved me an hour or two realising much sooner that it was 385 that was broken and not my config, so will keep that in mind in future - but at this point I'm ok with what I've seen so far after a week on 385, so for now will stick and wait it out until Asus fix it, and further down the line when Merlin has been able to merge 385 then I'll probably switch to that.

I run Merlin's firmware on my Access Points (2* RT-AC67U plus the recently repurposed RT-AC87U), but in the meantime the little additions to QoS and DDNS certs in 385, plus the thought of setting up all my DHCP reservations and port forwarding rules again, plus the hate from the wife and kids if I take the house offline to roll back firmware, far outweighs any desire to step back to 384.x just to fix https. I don't need remote access from WAN in normal times, let alone when home for weeks during covid lockdown, and if I did need remote access then it's done via RDP to a server inside my network first anyway, so local http access isn't really a worry for me.