Release Asuswrt-Merlin 386.2 is now available

[pinkfloyd1173]

Dirty upgrade, only issue I see is the icon pics are gone for your devices?

 

[heysoundude]

Made the jump from 386.1 to 386.2. Have not uninstalled CAKE yet and jumped to the built in CAKE, but so far, so good.

Will play around with the built in CAKE later today.

Thanks for all the hard work on this project. This firmware has brought my network into places that I thought it would never go .......

that's the required procedure then? I'll get right on it...

 

[JohnSmith]

After 46+ days of being up both both routers, decided to upgrade RT-AX88U & RT-AC3100 from V386.1_2 Final to V386.2 Final via firmware upgrade, by FULL POWER down routers first, power up, wait for all scripts to initialize and settle, and then apply firmware upgrade.

40+ devices (includes gaming, streaming, downloads, many IOT devices, etc.) and all appears to be working for main AX88U & backup AC3100 routers. Still postponing adding RT-AX58U with V386.2 Final into AiMesh 2.0, until Guest Network #01 issue is fixed, as Guest network is #01, and IOT devices is #02 currently in my setup.

 

[JIPG]

Dirty upgrade, only issue I see is the icon pics are gone for your devies?

See the note in changelog: You have to press shift+refresh in your browser to re-load the new icon set.

 

[MvW]

Dirty upgrade, only issue I see is the icon pics are gone for your devices?

Have you cleared your cache and refreshed the page?

 

[pinkfloyd1173]

Thank you

JIPG and MvW.

That fixed it.

 

[Grievous Angel]

Have you cleared your cache and refreshed the page?

Yes, and afterwards the icon list is expanded to mirror the mobile app. Which is nice because there are more appropriate icons out there now. At least on the x86u.

 

[tweakertje]

Do a factory default reset of the node, then re-add it.

Check your system log, it will tell you why it's failing.

Here the VPN log after an upgrade
just downgrade to the old version and its working again....
the openvpn file works..



May 5 07:15:24 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=d32f41db fb8f51ba
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN= root CA, serial=12345678900987654321
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=dd2f2fe5 00d13f70
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN=Van Linstee ICT root CA, serial=12345567890987654321
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=4ae30671 34f6a0d0
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=2, C=NL, XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=1, C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid: C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, serial=1234
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)

 

[skeal]

@RMerlin Can't figure this out, AC68U, any version of firmware I try is said to be uncertified and the upgrade fails. Doesn't matter if it's 384.19 or 386.2 it says both are not certified. Which I know is crap but how do I get by it, my other AC68U updated fine but it's a aimesh node, the one I'm trying to upgrade and failing at is wireless router mode. Any ideas besides firmware recovery tool?

 

[Deleted member 22229]

@RMerlin Can't figure this out, AC68U, any version of firmware I try is said to be uncertified and the upgrade fails. Doesn't matter if it's 384.19 or 386.2 it says both are not certified. Which I know is crap but how do I get by it, my other AC68U updated fine but it's a aimesh node, the one I'm trying to upgrade and failing at is wireless router mode. Any ideas besides firmware recovery tool?

Did you try and go back to Asus official firmware ? After that try to flash back to Merlin. Please keep us posted. I have to upgrade my sisters AC68U and there can be no down time as both her and her husband work from home for Ford motor and the connection must work.

 

[octopus]

Here the VPN log after an upgrade
just downgrade to the old version and its working again....
the openvpn file works..



May 5 07:15:24 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=d32f41db fb8f51ba
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN= root CA, serial=12345678900987654321
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=dd2f2fe5 00d13f70
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN=Van Linstee ICT root CA, serial=12345567890987654321
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=4ae30671 34f6a0d0
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=2, C=NL, XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=1, C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid: C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, serial=1234
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)

Seems clock isn't set.

 

[MvW]

Seems clock isn't set.

Indeed, NTP hasn’t synced yet:

May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid:

@tweakertje

For some reason (could be various) your system time has been not yet been synced as mentioned by @octopus. You have to make sure it syncs first, otherwise the certificate remains invalid. If you keep having issues, search the forum for NTPbootwatchdog by @Jack Yaz. I had many issues with NTP syncing too late, causing all sorts of trouble and since installing his script it hasn’t happened a single time anymore, so highly recommended.

 

[DanNuke86]

Indeed, NTP hasn’t synced yet:

May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid:

@tweakertje

For some reason (could be various) your system time has been not yet been synced as mentioned by @octopus. You have to make sure it syncs first, otherwise the certificate remains invalid. If you keep having issues, search the forum for NTPbootwatchdog by @Jack Yaz. I had many issues with NTP syncing too late, causing all sorts of trouble and since installing his script it hasn’t happened a single time anymore, so highly recommended.

I second this. The Ntpbootwatchdog script does what it says on the tin.

 

[Morac]

Dirty flashed my AC88U from 386.1_2 to 386.2 using my iPad without issue. As “expected” I got a traffic spike within 12 hours of doing so. Based on what I saw with 386.1, these will occur for the next 3 days and then stop until I reboot my router again.

 

[Jeffrey Young]

that's the required procedure then? I'll get right on it...

Not quite sure what you are asking. I did not turn on the built in CakeQoS and stayed with the pre .2 install. Cake worked fine.

I have uninstalled the pre .2 Cake, then turned on the built in Cake and configured.

It was a time thing for me (Good Friday and everyone here is on the Internet). When I saw an opening to install .2, I went for it. Waited for the second breath to uninstall Cake and turn on the built in version.

All is tickity boo now.

 

[tweakertje]

Seems clock isn't set.

ay 5 07:05:52 RT-AX88U dnscrypt-proxy[888]: dnscrypt-proxy is ready - live servers: 39
May 5 07:06:19 RT-AX88U uiDivStats: Waiting for NTP to sync...
May 5 07:06:19 RT-AX88U uiScribe: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U spdMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U scMerlin: Waiting for NTP to sync...
May 5 07:06:29 RT-AX88U kernel: bcm_i2c: bus 0: Failed to detect SFP: 100 retries exhausted
May 5 07:06:50 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U scMerlin: Waiting for NTP to sync...



after reboot .... but it does not sync automatic
it did before
maybe ntpMerlin fails on this??
just clicking on apply on the settings page (admin/system) helps to get time

how can i fix it?

 

[Gar]

I'm unable to update one of my AC68U routers. I get this everytime I try:View attachment 32708

I had to both eject USB and reformat before flash would work. Then restore and reboot.

 

[octopus]

ay 5 07:05:52 RT-AX88U dnscrypt-proxy[888]: dnscrypt-proxy is ready - live servers: 39
May 5 07:06:19 RT-AX88U uiDivStats: Waiting for NTP to sync...
May 5 07:06:19 RT-AX88U uiScribe: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U spdMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U scMerlin: Waiting for NTP to sync...
May 5 07:06:29 RT-AX88U kernel: bcm_i2c: bus 0: Failed to detect SFP: 100 retries exhausted
May 5 07:06:50 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U scMerlin: Waiting for NTP to sync...



after reboot .... but it does not sync automatic
it did before
maybe ntpMerlin fails on this??
just clicking on apply on the settings page (admin/system) helps to get time

how can i fix it?

What do log says?

 

[Calkulin]

does this fix this in the syslog?

not mesh client, can't update it's ip​

That is Trend Micro related, so if you withdraw from it, that will stop showing up in the logs

 

[AnClar]

Dirty upgrade from 386.1_2 to 386.2 on three RT-AC68U nodes and one RT-AC5300 main router in AIMesh configuration. All working fine. Thanks again @RMerlin for all the work on this great firmware!