Release Asuswrt-Merlin 3006.102.3 is now available for WIfi 7 devices

[Blacklistedcard]

i'm noticing that my AI Mesh network (all wireless) is virtually non-existing anymore since the latest update.

the logs show (many times) the following (not sure if it's related)


the AI mesh nodes will be offline about half the time. Sometimes they get up but even a wired connection to a AIMesh node almost doens'mt connect anymore to my external internet (and it's SLOOOW)

On my BE98-Pro I have one AC86U and AX88U and they are ok. No problems with AIMesh. No connection problems either.

 

[baller54]

Flashed 3006.102.3 on my RT-BE96U over top of stock firmware 3.0.0.6.102_37038 after running the 2 commands for downgrade check bypass:

nvram set DOWNGRADE_CHECK_PASS=1

nvram commit

So far so good, will report back over a longer testing period.

 

[jeff29922]

On my BE98-Pro I have one AC86U and AX88U and they are ok. No problems with AIMesh. No connection problems either.

Hey Everyone, first time posting. I have a 4 Node Asus Mesh network (BE98-Pro Router (Dual WAN) (Asuswrt-Merlin 3006.102.3), an Axe16000 (3.0.0.4.388.8 4) and two ZenWiFi Pro ET12's (both 3.0.0.4.388 24610). I am having a couple of issues that I wanted to surface, the most serious being issues with real time media quality (specifically with Microsoft Teams Audio). I am a Microsoft Cloud Solution Architect that support Microsoft Teams for large enterprise customers so troubleshooting media quality and reliability issues is a big part of what I do on a daily basis. I also work from home and pretty much all my daily work is done on Teams. My wife also works from home as well and she is usually in back-to-back Teams meetings on a daily basis. The BE98 Pro is a recent purchase so I am just starting to pound on it a little to see what shakes loose. Lately (since upgrading to the 3006.102.3 firmware build) I have been experiencing ATROCIOUS audio quality issues. Today I was on a call with Yealink and I could barely understand who I was talking to. My wife has also said that audio has been so bad that she has had to tether off her iPhone for her meetings. Of course, I didn't believe her until it started happening to me

The second issue, intermittent drops. Occasionally, I get booted off the Wi-Fi (always at the worst times), then it reconnects. It's more annoying than anything. I think I may have captured it in the logs, which I have saved if you need them. The third issue is there is some kind of DHCP issue on my primary WAN connection (PPPoE) to a Fiber ISP. The router is able to obtain an IP, but the Lease Time and Lease Expire fields shoe "Renewing" and "Expired". I have attached a screen shot of that. I am happy to help troubleshoot this, pull logs, test whatever helps my situation and the rest of the community. Nice to meet everyone.

 

[junior120872]

I've been running this build on my be96u with 3 ET12(9.0.0.6 beta firmware) aimesh nodes. Seems to be rock solid so far. I dirty flashed from asuswrt 3.0.0.6.102.37031 build.

 

[KevTech]

the most serious being issues with real time media quality (specifically with Microsoft Teams Audio)

Do not know if it will fix your issue but look at the setting for NAT passthrough as Merlin disables those now and stock firmware does not.

[Wireless Router] WAN - NAT Passthrough Introduction | Official Support | ASUS USA

 

[Sundraw]

Do not know if it will fix your issue but look at the setting for NAT passthrough as Merlin disables those now and stock firmware does not.

[Wireless Router] WAN - NAT Passthrough Introduction | Official Support | ASUS USA

Hi I don't understand what Nat is for with the Vpn. Is it better to keep it enabled or disabled for better performance? I use vpn fusion and wireguard.

 

[jeff29922]

Do not know if it will fix your issue but look at the setting for NAT passthrough as Merlin disables those now and stock firmware does not.

[Wireless Router] WAN - NAT Passthrough Introduction | Official Support | ASUS USA

@KevTech I just checked, I have everything enabled.

I'm going to dump the logs and sniff the WAN port and see what that tells me.

 

[jeff29922]

Hi I don't understand what Nat is for with the Vpn. Is it better to keep it enabled or disabled for better performance? I use vpn fusion and wireguard.

@Sundraw any kind of real time media (Audio, Video, Application & Desktop Sharing) can be adversely affected by VPN. For Teams, we ask our customers to use split tunneling, which allows Microsoft Teams SRTP traffic to route directly to an Azure front door on our global network. Doing so helps eliminate latency issues caused by encryption and/or routing issues. I wouldn't recommend tunnelling all your traffic if you have any latency sensitive traffic that needs to traverse your firewall.

 

[arewhy]

I upgraded my wireless router from a GT-AX11000 Wifi 6 router to an RT-BE88U Wifi 7 router because I wanted to leverage the SDN capabilities. I loaded Merlin’s firmware and performed a factory reset on the BE88U and configured from scratch. I installed ASUS’s firmware over Merlin’s firmware on my GT-AX6000s, performed a factory reset and added them as AiMesh nodes. I’ve been running this config since Jan 18th. Overall the network has been rock solid. Guest network Pro over AiMesh has been much more stable than Guest network1 over AiMesh. The only significant issue that I’ve experienced is that I’ve been unable to mount a CIFS/SMB share which is necessary to use Backupmon. I’ve provided the details below along with some of my other observations.

Network Configuration

RT-BE88U with Merlin 3006.102.3

Two GT-AX6000 AiMesh nodes with ASUS 3.0.0.6.102_34810. One node is connected via 2.5 Gbs link the other is connected via Wifi

Display Anomalies

The Device name and IPv4 address is not displayed on the Wireless Log page (/Main_WStatus_Content.asp) for Samsung Galaxy S24 Ultra phones and Samsung Galaxy S9 Ultra Tablets utilizing WiFi 7. However, the IPv6 addresses are shown for all three devices. It seems that there may be an issue with Samsung, as both IPv4 and IPv6 addresses were displayed before the latest firmware update for the tablet was installed.

At some point in time certain clients show the OUI information instead of the host name under the AiMesh clients tab (AiMesh.asp) for a specific node. I say at some point in time because right after a system reboot the host name is displayed. I suspect that this occurs after DHCP renewal but I have not confirmed that theory. These same clients always display their host name on the Wireless Log (if connected to main router) and DHCP leases tab.

On the AiMesh nodes Network tab, a string of 32 hexadecimal characters is displayed for the 2.4 and 5 GHz SSIDs. Also on the same tabk while there is transmit rate data (Current/Average) for both wireless channels, the receive rate (Current/Average) is zero.

AiMesh nodes do not support multiple keys in authorized_keys file. I believe this is because they are running ASUS firmware. I cannot run Merlin on the nodes until he puts out a 3006 version for GT-AX6000

Other observations

I can also confirm that as @Armand28 reported, there is no option to set re-key interval. I never changed the default value so it is not an issue for me



Bug/Issue

I am unable to mount a CIFS/SMB share using Backupmon or through manual command line methods. I have verified that the cifs.ko module is present in the library and loaded. I’ve checked the logs on the target device, and it does not appear that a connection is being attempted. Below is the command line used and the resulting error.

mount -t cifs \\\\IP_Address /cifs1 -o "vers=1.0,USERNAME=username,password=PASSWD"

mount: mounting \\IP_Address on /cifs1 failed

 

[RMerlin]

I am unable to mount a CIFS/SMB share using Backupmon

You need to load the cifs.ko kernel module first.

modprobe cifs.ko

Also, most devices no longer allow SMB 1.0, you should use 2.1 instead, unless that target device is really old.

 

[arewhy]

You need to load the cifs.ko kernel module first.

modprobe cifs.ko

Also, most devices no longer allow SMB 1.0, you should use 2.1 instead, unless that target device is really old.

Thanks for the quick reply @RMerlin, I did fact load the cifs.ko kernel module first and the Backupmon.sh script also loads the cifs.ko module. I confirmed the module was loaded via lsmod. It is an old Buffalo NAS with @Shonk modified that can no longer be updated so SMB 1.0 is what it is running. I also tried mounting a SMB 2.1 share and I received the same error.

 

[RMerlin]

Thanks for the quick reply @RMerlin, I did fact load the cifs.ko kernel module first and the Backupmon.sh script also loads the cifs.ko module. I confirmed the module was loaded via lsmod. It is an old Buffalo NAS with @Shonk modified that can no longer be updated so SMB 1.0 is what it is running. I also tried mounting a SMB 2.1 share and I received the same error.

No issue here connecting to an SMB 2.1 share on my RT-BE96U (which shares the same kernel as the RT-BE88U). You will have to troubleshoot your connection. Check with dmesg, it might provide more info.

Also, your example is missing the actual share in the path - you are just trying to connect to the root of your NAS, which won't work.

 

[arewhy]

@RMerlin thank you for steering me toward dmesg. It was helpful. When I put the actual share in the path, I was getting an "invalid argument" error. I assumed, incorrectly, that it was because I specified the share name because when I didn't enter it, I'd get the mount failed error. After trying a few variations of the mount command it appears that any vers= option less than 2.1 is considered invalid and not accepted. If I leave vers= out altogether, I get
"kernel: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3 (or SMB2.1) specify vers=1.0 on mount."
which implies that I should be able to specify vers=1.0 but that does not appear to be the case

Another bad assumption I made was that the USB Samba share that I created on one of my GT-AX6000 AiMesh nodes would be running 2.1 or greater because it's running the latest ASUS firmware. In looking at the smb.conf file on the node, it is SMB 2.0 which explains why I was not able to mount the share on the node. I created a share on a windows 11 computer, and I was able to mount the share.

To summarize, If I use vers=1.0 or 2.0, I get Invalid option and if I use vers=2.1 or 3, I get host is down when attempting to mount an SMB 1.0 or 2.0 share. Understand that SMB 1.0/2.0 is frowned upon so I'll configure backupmon to use my Windows 11 computer instead of my Buffalo NAS for now.

 

[Noblistic]

Hey Everyone, first time posting. I have a 4 Node Asus Mesh network (BE98-Pro Router (Dual WAN) (Asuswrt-Merlin 3006.102.3), an Axe16000 (3.0.0.4.388.8 4) and two ZenWiFi Pro ET12's (both 3.0.0.4.388 24610). I am having a couple of issues that I wanted to surface, the most serious being issues with real time media quality (specifically with Microsoft Teams Audio). I am a Microsoft Cloud Solution Architect that support Microsoft Teams for large enterprise customers so troubleshooting media quality and reliability issues is a big part of what I do on a daily basis. I also work from home and pretty much all my daily work is done on Teams. My wife also works from home as well and she is usually in back-to-back Teams meetings on a daily basis. The BE98 Pro is a recent purchase so I am just starting to pound on it a little to see what shakes loose. Lately (since upgrading to the 3006.102.3 firmware build) I have been experiencing ATROCIOUS audio quality issues. Today I was on a call with Yealink and I could barely understand who I was talking to. My wife has also said that audio has been so bad that she has had to tether off her iPhone for her meetings. Of course, I didn't believe her until it started happening to me

The second issue, intermittent drops. Occasionally, I get booted off the Wi-Fi (always at the worst times), then it reconnects. It's more annoying than anything. I think I may have captured it in the logs, which I have saved if you need them. The third issue is there is some kind of DHCP issue on my primary WAN connection (PPPoE) to a Fiber ISP. The router is able to obtain an IP, but the Lease Time and Lease Expire fields shoe "Renewing" and "Expired". I have attached a screen shot of that. I am happy to help troubleshoot this, pull logs, test whatever helps my situation and the rest of the community. Nice to meet everyone.

Hi Jeff, welcome!

There may be an Adaptive QoS issue with this build. I just noticed I was only getting about 1Gbps transfer with it enabled; after disabling this feature, I got my expected 4.1+Gbps transfer speed locally on WiFi7, with my NAS leveraging a 10GbE card. There may be some other QoS options that work, but there seems to be some QoS issues with this build is my guess.

 

[jeff29922]

Hi Jeff, welcome!

There may be an Adaptive QoS issue with this build. I just noticed I was only getting about 1Gbps transfer with it enabled; after disabling this feature, I got my expected 4.1+Gbps transfer speed locally on WiFi7, with my NAS leveraging a 10GbE card. There may be some other QoS options that work, but there seems to be some QoS issues with this build is my guess.

@Noblistic, thank you for your response. I am definitely using the Adaptive QoS feature so I will disable it and retest. I am continuing to experience drops, and now I am noticing that I am occasionally losing internet connectivity overnight that leaves everything hung up. I am running Dual WAN, but the failover doesn't complete 100%. I have to manually bounce the WAN configuration by turning off the secondary WAN connection and then flipping it back on. I think I will also disable Dual WAN for now, my wife and I work from home, and she is getting pretty pissed off with how bad our internet connectivity has been, especially since I just went out and dropped close to $800 for the BE98 Pro. I will keep everyone updated. Again, I am happy to pull logs if anyone else would like to take a look at the issue? I am a network guy and have some development chops, but I don't know Linux well enough to debug and recommend a fix.

 

[Noblistic]

Sounds good, keep us posted!

 

[Noblistic]

Jeff, it took me forever to detect this, but with your help I think I've seen another similar issue to yours. In certain applications, authentication into some banking systems or starting a video on certain mobile apps would take forever to start. I ended up disabling IPv6 updates for DDNS and disabling IPv6 altogether. After that, things seemed to clear up substantially. You might need to give this a try to solve your issues completely as well.

 

[MrRojano97]

I am seeing a lot of these DEAUTHORIZE/DEAUTHENTICATE errors in the system log. Is it normal?


Jan 15 12:02:10 kernel: CFG80211-ERROR) wl_cfg80211_change_station :
Jan 15 12:02:10 kernel: WLC_SCB_DEAUTHORIZE error (-30)
Jan 15 12:02:10 kernel: CFG80211-ERROR) wl_cfg80211_del_station :
Jan 15 12:02:10 kernel: WLC_SCB_DEAUTHENTICATE_FOR_REASON err -30
Jan 15 12:02:10 hostapd: wl3.2: STA 2b:ac:6e:71:6c:11 IEEE 802.11: disassociated
Jan 15 12:02:10 wlceventd: wlceventd_proc_event(645): wl3.2: Deauth_ind 2B:AC:6E:71:6C:11, status: 0, reason: Group key update timeout (10), rssi:-53
Jan 15 12:02:10 kernel: CFG80211-ERROR) wl_cfg80211_change_station :
Jan 15 12:02:10 kernel: WLC_SCB_DEAUTHORIZE error (-30)

I’m experiencing this issue as well
kernel: WLC_SCB_DEAUTHORIZE error (-30)

I have a server running a Kuma Ping container that pings multiple endpoints. Thanks to this setup, I discovered that whenever this kernel error appears on my Asus router, all DNS queries stop working—this even applies to devices on Ethernet. However, there haven’t been any issues with established connections, such as Discord calls, which continue uninterrupted.

An interesting detail is that my Kuma Ping container is explicitly configured to use Cloudflare DNS, yet the router’s logs show that these DNS queries are still being made. This suggests the router might be intercepting the queries at some point. The problem is particularly noticeable when I can’t resolve asusrouter.com after receiving a downtime notification from Kuma Ping. Even on a Wi-Fi device connected to the router, asusrouter.com remains unreachable.

I’m using an Asus RT-BE88U router running firmware version 3006.102.3.

 

[Bralee]

Hello,
i have some issues in add-on module like conmon or speedmerlin don't work properly.
There are some part missing or don't work when click on.
Try in 3 internet clients (firefox, chrome, safari...)

thanks for help

 

[ExtremeFiretop]

Hello,
i have some issues in add-on module like conmon or speedmerlin don't work properly.
There are some part missing or don't work when click on.
Try in 3 internet clients (firefox, chrome, safari...)

thanks for help

Did you install the development versions of the add-ons?

Read through this thread for answers: https://www.snbforums.com/threads/compatibility-findings-with-addons-with-gt-be98-pro.90657/