Beta ASUSWRT 386 RC3-1 public beta

[Deleted member 72428]

Great work @ASUSWRT_2020, now if only Asus can finally release GPL code...

 

[VANT]

anyone can try pwr show command on AC86U in this fw ?

 

[bones5050]

anyone can try pwr show command on AC86U in this fw ?

Power Management Configuration
Functional Block Status
CPU Wait ENABLED
Ethernet Auto Power Down ENABLED
Energy Efficient Ethernet DISABLED
Switch Deep Green Mode ENABLED (statuseactivated)
bones5050@RT-AC86U-81C8:/tmp/home/root#

 

[VANT]

Power Management Configuration
Functional Block Status
CPU Wait ENABLED
Ethernet Auto Power Down ENABLED
Energy Efficient Ethernet DISABLED
Switch Deep Green Mode ENABLED (statuseactivated)
bones5050@RT-AC86U-81C8:/tmp/home/root#

thanks. Still eee is disabled. Why ?

 

[banger]

DDNS is going a bit whacky on RCAC68U on this beta in the log. Keeps restarting with NOIP.

 

[banger]

Seems to have settled down now on 2nd attempt at upgrade.

 

[Tech9]

DDNS is going a bit whacky on RCAC68U

Do you have DNSFilter on RT-AC68U? I don't see it on RT-AC1900P.

 

[Quan]

Hello, the OpenVPN doesn't work for me. The client profile works on other Asus routers with stock firmware. Thank you.

 

[rotareneg]

After flashing the beta onto my AC66U B1 there's now a separate "Enable IPv4 Firewall" setting, or at least I don't remember it being there before:

I didn't reset the router yet as I want to verify that the beta is working fine with a dirty upgrade. I'm just a bit confused by the Enable Firewall "Yes" vs Enable IPv4 Firewall "No" settings. Should that IPv4 setting be enabled or disabled? The IPv6 firewall is enabled (although I'm not using IPv6.)

 

[ASUSWRT_2020]

Hello, the OpenVPN doesn't work for me. The client profile works on other Asus routers with stock firmware. Thank you.

Did you test with two routers? One is OpenVPN server and another one is OpenVPN client.
The IP/Routing conflict indicates that the OpenVPN server and OpenVPN client use the same subnet.
You might change the OpenVPN client router's LAN IP to, for example, 192.168.60.1

 

[zbqwert]

AC86U quick test of this Beta firmware.
Installed over Asus 386.44470 initially. Of note that under Administration/Firmware Upgrade is a check box to enable the check for Beta Firmware and a link to revert the firmware. Did not test these.
Did an Asus Hard Factory Reset, connected to my WAN and LAN cables, manually configured, enabled DoT to Quad9 resolvers. Opened a terminal and verified that Stubby was working to the upstream resolvers. Also enabled QOS and AiProtect. Went to Firmware Upgrade and noticed the Revert link was not there which is likely as I had done a factory reset. Checking firmware with enable beta firmware unchecked started a firmware upgrade to 386.44470 (also noted when configuring manually I got a prompt to upgrade to 386.44470 which I thought was weird as the Beta firmware is newer than 386.44470).
Other router functions worked well and the WIFI for both 2.4 and 5 GHz seemed stable. Web site resolving was quick with no apparent errors.
I did note that the Stubby being used is 0.3.0 whereas the current version is 0.4.0. Would be nice to have the ability to enable DNSSEC on Stubby (Merlin uses dnsmasq for DNSSEC which requires the hard coding of keys in the firmware. While this works well using DNSSEC with Stubby the keys are downloaded each time Stubby starts.).
Next to get this for my AX86U! This is a good step Asus!

Please test Wireguard is support IPv6 or not on AX86U.

 

[iphoneking]

Please test Wireguard is support IPv6 or not on AX86U.

Based on my testing on AX11000, it looks like the VPN clients do not support IPv6

 

[zbqwert]

IPSec and openvpn server don't support IPv6, I hope Wireguard do support IPv6 this time.
also DDNS. Come on Asus!!!

 

[iphoneking]

IPSec and openvpn server don't support IPv6, I hope Wireguard do support IPv6 this time.
also DDNS. Come on Asus!!!

I hope so too but I can tell you that in this release it does not

 

[zbqwert]

I hope so too but I can tell you that in this release it does not

Thank for your test, so disappointed with Asus.

 

[shabbs]

Asus has indeed integrated DNSFilter into the stock firmware.

Well well well... this is great to see as it's a truly an awesome feature and one of the key things that drew me to the Merlin builds. Hopefully some great recognition in there for you Eric.

 

[Quan]

Did you test with two routers? One is OpenVPN server and another one is OpenVPN client.
The IP/Routing conflict indicates that the OpenVPN server and OpenVPN client use the same subnet.
You might change the OpenVPN client router's LAN IP to, for example, 192.168.60.1

I have one router (Asus XT8) running the OpenVPN server and OpenVPN client at the same time. I tested another router running Merlin firmware with OpenVPN server and OpenVPN client running at the same time. The router with Merlin firmware works fine.

 

[MDK]

Hello guys

Does this versions covers this update on version (3.0.0.4.386.45375) :


BusyBox
- CVE-2016-2148
- CVE-2016-6301
- CVE-2018- 1000517

cURL
- CVE-2020-8169
- CVE-2019-5481
- CVE-2019-5482
- CVE-2018-1000120
- CVE-2018- 1000300
- CVE-2018-16839

Lighttpd
- CVE-2018-19052

Linux
- CVE-2020-14305
- CVE-2020-25643
- CVE-2019-19052

lldpd
- CVE-2020-27827

Avahi
- CVE-2017-6519

hostapd
- CVE-2021-30004
- CVE-2019-16275

OpenVPN
- CVE-2020-11810
- CVE-2020-15078

wpa
- CVE-2021-30004
- CVE-2021-27803
- CVE-2019-11555
- CVE-2019-9499
- CVE-2019-9498
- CVE-2019-9497
- CVE-2019-9496
- CVE-2019-9495
- CVE-2019-9494
- CVE-2017-13086
- CVE-2017-13084
- CVE-2017-13082
- CVE-2016-4476
- CVE-2015-8041

 

[ASUSWRT_2020]

Hello guys

Does this versions covers this update on version (3.0.0.4.386.45375) :

Yes, of course

 

[SomeWhereOverTheRainBow]

IPSec and openvpn server don't support IPv6, I hope Wireguard do support IPv6 this time.
also DDNS. Come on Asus!!!

Please test Wireguard is support IPv6 or not on AX86U.

Based on my testing on AX11000, it looks like the VPN clients do not support IPv6

Asus would have to change too many things under the hood to get IPV6 support for their VPN Servers/ Clients. Good luck pushing that argument. People have been trying for YEARS.