What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Beta Asuswrt-Merlin 3006.102.4 Beta is now available

any syslog entries to confirm the script ran?
Code:
# grep -E "custom_script|custom_config" /jffs/syslog.log | grep dnsmasq
Apr 11 10:54:10 custom_script: Running /jffs/scripts/service-event (args: restart dnsmasq)
Apr 11 10:54:10 custom_config: Appending content of /jffs/configs/dnsmasq.conf.add.
Apr 11 10:54:10 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Apr 11 10:54:10 custom_config: Appending content of /jffs/configs/dnsmasq-1.conf.add.
Apr 11 10:54:10 custom_script: Running /jffs/scripts/dnsmasq-sdn.postconf (args: /etc/dnsmasq-1.conf 1)
Apr 11 10:54:10 custom_script: Running /jffs/scripts/service-event-end (args: restart dnsmasq)
Code:
octopus@GT-AX6000-F1E8:/tmp/home/root# grep -E "custom_script|custom_config" /jffs/syslog.log | grep dnsmasq-1
Apr 11 09:34:17 custom_script: Running /jffs/scripts/service-event (args: restart dnsmasq-1)
Apr 11 09:34:17 custom_script: Running /jffs/scripts/service-event-end (args: restart dnsmasq-1)
Apr 11 16:19:24 custom_config: Appending content of /jffs/configs/dnsmasq-1.conf.add.
Apr 11 16:19:41 custom_config: Appending content of /jffs/configs/dnsmasq-1.conf.add.
 
Code:
octopus@GT-AX6000-F1E8:/tmp/home/root# grep -E "custom_script|custom_config" /jffs/syslog.log | grep dnsmasq-1
Apr 11 09:34:17 custom_script: Running /jffs/scripts/service-event (args: restart dnsmasq-1)
Apr 11 09:34:17 custom_script: Running /jffs/scripts/service-event-end (args: restart dnsmasq-1)
Apr 11 16:19:24 custom_config: Appending content of /jffs/configs/dnsmasq-1.conf.add.
Apr 11 16:19:41 custom_config: Appending content of /jffs/configs/dnsmasq-1.conf.add.
Please share ls -l /jffs/*/dnsmasq*
 
Please share ls -l /jffs/*/dnsmasq*
Code:
octopus@GT-AX6000-F1E8:/tmp/home/root# ls -l /jffs/*/dnsmasq*
-rw-r--r--    1 octopus  root           436 Apr 11 16:31 /jffs/configs/dnsmasq-1.postconf
-rwxr-xr-x    1 octopus  root           439 Apr 11 16:40 /jffs/scripts/dnsmasq-1.postconf
-rwxr-xr-x    1 octopus  root           988 Apr 11 09:21 /jffs/scripts/dnsmasq.postconf
 
@bennor

Looking at the wiki, the dnsmasq-sdn.postconf script has the SDN Index number passed to it as the second argument ($2). You will need to modify your script to ensure you are taking action on the right dnsmasq config file.

EDIT: Argument 1 ($1), from the wiki says it is the first instance??? Not sure what that means... Does that mean SDN Index 1 as being the first instance? Kinda wish I had a Pro router to torture test. Mine is in production and I can't afford for it to be a Gini Pig :)
Yeah looked at the wiki late yesterday, haven't tried taking another run at using dnsmasq-sdn.postconf script file. Will try when I have a free moment. Figured this is all growing pains as people try new untried things with the Asus-Merlin 3006 firmware and figure out how things work or don't work.
 
This needs to be dnsmasq-sdn.postconf. The one in configs can be deleted.
I've tried both places. I removed it in /jffs/config but that didn't work either.
Code:
octopus@GT-AX6000-F1E8:/tmp/home/root# ls -l /jffs/*/dnsmasq*
-rwxr-xr-x    1 octopus  root           438 Apr 11 17:08 /jffs/scripts/dnsmasq-1.postconf
-rwxr-xr-x    1 octopus  root           988 Apr 11 09:21 /jffs/scripts/dnsmasq.postconf
 
Yeah looked at the wiki late yesterday, haven't tried taking another run at using dnsmasq-sdn.postconf script file. Will try when I have a free moment. Figured this is all growing pains as people try new untried things with the Asus-Merlin 3006 firmware and figure out how things work or don't work.
And that is the true purpose of Beta/Alpha testing! Good on everyone here that is doing more than just installing the firmware and saying that it works great. Torture test the thing. That will only make it better.

My wife was a train control tester a long time ago for the railway we worked for at the time. It was amazing the bugs she could find during development just by doing things that no one else would ever think of doing.
 
dnsmasq-1.postconf
This is not a valid script name. It must be dnsmasq-sdn.postconf (literally).

maybe this will help show our differences:
Code:
# ls -l /jffs/*/dnsmasq*
-rwxrwx--x    1 rtradmin root            61 Apr 11 10:51 /jffs/configs/dnsmasq-1.conf.add
-rwxrwx--x    1 rtradmin root           613 Feb 19 05:58 /jffs/configs/dnsmasq.conf.add
-rwxr-x---    1 rtradmin root           190 Apr 11 10:59 /jffs/scripts/dnsmasq-sdn.postconf
-rwxr-x---    1 rtradmin root           230 Apr 10 09:20 /jffs/scripts/dnsmasq.postconf
 
This is not a valid script name. It must be dnsmasq-sdn.postconf (literally).

maybe this will help show our differences:
Code:
# ls -l /jffs/*/dnsmasq*
-rwxrwx--x    1 rtradmin root            61 Apr 11 10:51 /jffs/configs/dnsmasq-1.conf.add
-rwxrwx--x    1 rtradmin root           613 Feb 19 05:58 /jffs/configs/dnsmasq.conf.add
-rwxr-x---    1 rtradmin root           190 Apr 11 10:59 /jffs/scripts/dnsmasq-sdn.postconf
-rwxr-x---    1 rtradmin root           230 Apr 10 09:20 /jffs/scripts/dnsmasq.postconf
that's working. Thank for your help !

Code:
octopus@GT-AX6000-F1E8:/tmp/home/root# ls -l /jffs/*/dnsmasq*
-rwxr-xr-x    1 octopus  root           438 Apr 11 17:08 /jffs/scripts/dnsmasq-sdn.postconf
-rwxr-xr-x    1 octopus  root           988 Apr 11 09:21 /jffs/scripts/dnsmasq.postconf
 
Following up on this issue from the alpha thread:
The ‘x’ is missing in the offline section of the clientlist dropdown throughout the GUI, wherever it is used.

It looks like somewhere in the build process the × character is being removed from client_function.js. It’s in the repo, but not on the router anymore in /www. Therefore, there is nothing to click to remove the offline client entry.

Perhaps replace the x with ×
@RMerlin Where do the js files get compressed or minified during build?
 
Been up and running almost 25 hours on my AX88U Pro using Aimesh. All seems to be running fine. Set up an IoT network in Guest Network Pro. The only issue I find with that is the one already mentioned. All the devices connected to it appear in the main network ssid list and not the IoT network ssid list
 
Thanks Merlin. BE92U flashing went smooth, just one issue is that system log full of pptp [xxxxx]: Could not open control connection to 192.168.x.x error messages. Call manager exited with error 1. connect: Connection refused

I just enabled IPSec VPN server but not PPTP server and I have no such error log before. Do I need to factory reset the router ?

BTW speed of 6GHz, 5GHz and 2.4GHz are no differences compare with original Asus firmware, also 100% CPU stuck seems fixed with recent firmware updates. I haven't seen this issue for about one month usage.

Thanks in advance.
 
Last edited:
Also flashed BE92U without issue coming from Asus 3.0.0.6.102_37506 dirty flash. Used the Merlin instructions with "nvram set DOWNGRADE_CHECK_PASS=1". Works like a champ. Thanks Merlin!!!!!!!

The signal for 6 GHz (channel 5 is the main one I use) is 3 - 5 dBm worse on the Asus Merlin firmware. Very noticeable. The other bands seem fine. Something may be going on with the driver. Will do a reset and configure from scratch after lunch.

RAM usage was 63% with the Asus OEM 3.0.0.6.102_37506 firmware, it is 53% with Merlin 3006.102.4_beta1, so a nice benefit!

CPU load seems stable even when running speedtest over a VPN client.
 
This is not a valid script name. It must be dnsmasq-sdn.postconf (literally).
Yes that was the trick. The file name had to be "dnsmasq-sdn.postconf" nothing anything else. Permissions set on file to 0755. Now it seems to be properly loading the names into dnsmasq in my use case for both Guest Network Pro SDN's I have. Example code:
Code:
#!/bin/sh
CONFIG=$1
source /usr/sbin/helper.sh
pc_append "dhcp-host=AA:11:BB:22:CC:33,192.168.52.10,JohnSmithPhone" $CONFIG
pc_append "dhcp-host=AA:11:BB:22:CC:33,192.168.52.11,JaneSmithPhone" $CONFIG
pc_append "dhcp-host=AA:11:BB:22:CC:33,192.168.53.10,SuziQPhone" $CONFIG
pc_append "dhcp-host=AA:11:BB:22:CC:33,192.168.53.11,JonnysPhone" $CONFIG
 
I fully appreciate that AiMesh is closed source and RMerlin cannot change / fix anything.

None of my nodes are broadcasting 5Ghz WiFi. 5Ghz is enabled on each node and each states broadcasting but they are not.

Anyone else with an AXE-16000 as the main experiencing the same?

HB
 
Some Network Map weirdness on a RT-AX86U Pro. Have a wired NAS connected through a Netgear managed switch that isn't showing up in the Network Map. This client has a DHCP Manual IP reservation in the GUI. This client did show up properly in the 3004 firmware. Device gets an IP address but for what ever reason just isn't showing up correctly in the GUI's Client Lists or Client Status or Network Map sections. The DHCP leases shows it with the properly assigned IP address and lease time.

And another issue cropped up. Setup a ProtonVPN free OpenVPN entry in the VPN Client section and while connected, with a VPN Director entry created for all LAN clients (192.268.2.0/24) nothing seem to be going through the tunnel. If the Proton OpenVPN client is disabled and a Proton Wireguard VPN client is enabled in VPN Client, the LAN clients go through the VPN tunnel properly due to the VPN Director entry for the Wireguard VPN that also uses 192/168.2.0/24. Will continue to troubleshoot why the OpenVPN isn't working right but Wireguard is.
Edit to add: Fixed the OpenVPN client VPN issue. Was a misconfiguration of the GUI OpenVPN Client settings. Once the following two changes were made, per Proton's guide, the clients used the tunnel correctly.
  • Accept DNS configuration: Exclusive
  • Redirect Internet traffic through tunnel: Yes (all)
 
Last edited:
@RMerlin Where do the js files get compressed or minified during build?
Somewhere within the multiple levels of Makefiles - no idea where specifically. The processing is done by a tool written by Asus if I remember.
 
I just enabled IPSec VPN server but not PPTP server and I have no such error log before. Do I need to factory reset the router ?
VPN settings are not fully compatible between stock and Asuswrt-Merlin. Double check, there might be a PPTP client or server enabled. Otherwise, a factory default reset is preferable when coming from stock.
 
I would be careful with YazDHCP with 3006 until the developer or someone else can confirm YazDHCP will work. I don't use it, so I can't say.

You are correct though about the dnsmasq scripts and config files.
I had to remove YazDHCP in the Alpha versions as it wasn't working and interfered with manually trying to assign IPs. Haven't tried with the Beta.
 
Asuswrt-Merlin 3006.102.4 Beta is now available. There are a number of significant things to note with this release:

1) BCM4912 models are now migrated to this 3006 code base. This includes the following device list:
  • GT-AX6000
  • zenWifi Pro XT12
  • GT-AX11000 Pro
  • GT-AXE16000
  • RT-AX86U Pro
  • RT-AX88U Pro

2) New addition - the RT-BE92U is now supported. Note that the GPL used for this initial support suffers from some CPU-related issues, so support for this model at this time should be considered EXPERIMENTAL. If you lose the ability to access the router, then power cycle it, that usually solves it.

If I don't get a fix from Asus in time for the final 3006.102.4 release, then I will skip this device until Asus can provide a fix, and release the final build for the other models.

3) Beside the addition of new models, the focus of this release is the merge of GPL code (I currently need to manage three separate GPL versions for this release.....), updated components, and a number of fixes.


Changelog:
Code:
3006.102.x (xx-xxx-xxxx)
  - NOTE: If migrating from a 3004 firmware, only the first Guest
          Network will be migrated - any additionnal GN must be
          manually reconfigured.
  - NOTE: If migrating from a 3004 firmware, the Wireless Scheduler
          will need to be manually reconfigured if you were using
          it.
  - NOTE: As a reminder, the ROG variant of the webui is not
          supported in the 3006 firmware series, as maintaining
          two separate interfaces is too much extra work.

  - NEW: Moved RT-AX86U_PRO, RT-AX88U_PRO, ZenWifi Pro XT12,
         GT-AX6000, GT-AXE16000 and GT-AX11000_PRO to the
         3006 firmware series.

  - NEW: Added RT-BE92U support, based on GPL 102_37435.  This GPL
         seems to have some stability issues, so consider support
         for this model to remain Beta, until a fix is provided
         for it.

  - UPDATED: Merged GPL 3006.102_36521 for Wifi 6 models (Wifi 7
             GPL codebase is unchanged from 3006.102.3).
  - UPDATED: OpenVPN to 2.6.14.
  - UPDATED: miniupnpd to 2.3.7 (20250207 snapshot)
  - UPDATED: amtm to 5.2 (decoderman)
  - UPDATED: dnsmasq to 2.91.
  - UPDATED: dropbear to 2025.87.
  - FIXED: Missing hostname on Wireless Log for MLO-capable Wifi 7
           clients.
  - FIXED: CVE-2024-9143 in OpenSSL (Debian backport by RSDNTWK)
  - FIXED: CVE-2024-13176 in OpenSSL (Ubuntu backport by RSDNTWK)
  - FIXED: Guest Networks on an isolated VLAN with DNSDirector set
           to "Router" would fail to do any name resolution.
  - FIXED: Wrong tab selected when clicking on "Profile" on the VLAN
           page (dave14305)

Make sure you do read the changelog, especially if migrating from 3004 to 3006. I documented the known recommendations from Asus' own changelog, but there might be further compatibility issues arising when upgrading from 3004. In particular, I would recommend disconnecting and reconnecting any AiMesh node. Also, double check Wireless settings.

For this beta release I need test feedback for:
  • The models that were migrated from 3004
  • General RT-BE92U performance (there is a known issue with a CPU core often getting stuck at 100%, that will need to be fixed by Asus)
  • The Wireless Log page should be more accurate on Wifi 7 devices, the root problem of missing/incorrect hostnames having been resolved

Please keep discussions on this specific beta release.


Downloads are here.
Changelog is here.
Dirty upgrade from Alpha2 and two things that I noticed.

1. It may have been mentioned but after installing I noticed that WPS was enabled apparently by default. Might have missed this in the alphas.

2. In my grudge match with my Honeywell thermostat and trying to connect it to my AX88 Pro I tried setting the WiFi security on the 2.4Ghz radio to WPA-WPA2 - Personnel which then also gives you the option to select either AES or TKIP+AES. If you select TKIP+AES then hit apply the router just defaults to AES. Apparently the Thermostat wants to use outdated TKIP and refuses to connect to a more secure connection. Not issue for most people or devices however it does show as an option in the firmware and it really isn't functional.

Everything else working fine. Finally having the VLAN option and Merlin firmware is fantastic.

Thank you.
 

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top