Release Asuswrt-Merlin 386.9 is now available for AC models

[oloco]

Sorry if this is a noob question.

Using this firmware, is it possible to also use wireguard vpn? If so, is it using a GUI interface, or only via scripts?

I ask this because I have just tried dd-wrt firm, but I was unable to make wireguard working, and I was close to break my router.

My router is an Asus rt-N66U

Regards

 

[XIII]

My router is an Asus rt-N66U

That's an EOL router, for which the latest available firmware is 380.70_0 (I think):

Download | Asuswrt-Merlin

www.asuswrt-merlin.net

 

[SheikhSheikha]

386.9 running silky smooth

 

[CaptnDanLKW]

It looks like Asus/Broadcom has added some more debug info for syslog.
New 'bsd:' entries now appear around the 'wlceventd:' events. Might be useful to better understand wireless events?

Two questions:
1) @RMerlin Do you know where this is triggered? i.e., general wireless or SmartConnect or AIMesh code? (I know it's all the closed source part but figured you may still have some insight on the relationship). I'm trying to determine which Scribe Log I want to stick this in but leaning towards my wlceventd.log 'noise' log.

2) These new bsd: entries have a few weird MAC addresses (in bold below). obviously 00:00:00:00:00:00 isn't real but 34:10:0c:9d:92:2d doesn't have a vendor when looking up the OID, so it may not be 'real' either. This MAC address has never been seen in any of my logs before. Any generic thoughts on these?

These questions are more about knowledge & sharing than anything else, not having any issues.


Jan 7 16:57:56 RTAC86U bsd: bsd: BSS Transit Response: ifname=eth6, event=156, token=7, status=1, mac=00:00:00:00:00:00
Jan 8 03:26:00 RTAC86U bsd: bsd: Sending act Frame to xx:xx:xx:xx:xx:xx with transition target eth6 ssid yy:yy:yy:yy:yy:yy
Jan 8 03:26:01 RTAC86U bsd: bsd: STA:xx:xx:xx:xx:xx:xx no response
Jan 8 03:26:01 RTAC86U bsd: bsd: Sending act Frame to xx:xx:xx:xx:xx:xx with transition target eth6 ssid yy:yy:yy:yy:yy:yy
Jan 8 03:26:02 RTAC86U bsd: bsd: STA:xx:xx:xx:xx:xx:xx no response
Jan 8 08:54:21 RTAC86U bsd: bsd: Sending act Frame to xx:xx:xx:xx:xx:xx with transition target eth5 ssid yy:yy:yy:yy:yy:yy
Jan 8 08:54:21 RTAC86U bsd: bsd: BSS Transit Response: ifname=eth6, event=156, token=e, status=6, mac=34:10:0c:9d:92:2d
Jan 8 08:54:21 RTAC86U bsd: bsd: BSS Transit Response: STA reject
Jan 8 08:54:21 RTAC86U bsd: bsd: Skip STA:xx:xx:xx:xx:xx:xx reject BSSID

 

[bennor]

My router is an Asus rt-N66U

The N66U is no longer supported by Asus-Merlin (supported devices) which means you cannot run the Asus-Merlin 386.9 firmware being discussed. The last Asus-Merlin firmware that supported the N66U was 380.70.

For alternate firmware for your device see the following discussion:
https://www.snbforums.com/threads/rt-n66u-2022.82744/

 

[oloco]

Ok, thanks so much for your help guys

Regards

 

[RMerlin]

@RMerlin Do you know where this is triggered?

I don't know.

 

[visortgw]

... These new bsd: entries have a few weird MAC addresses (in bold below). obviously 00:00:00:00:00:00 isn't real but 34:10:0c:9d:92:2d doesn't have a vendor when looking up the OID, so it may not be 'real' either. This MAC address has never been seen in any of my logs before. Any generic thoughts on these?

These unknown (aka not 'real') MAC addresses can often be attributed to randomized MAC addresses assigned by WiFi devices to address alleged privacy concerns.

 

[ColinTaylor]

It looks like Asus/Broadcom has added some more debug info for syslog.
New 'bsd:' entries now appear around the 'wlceventd:' events. Might be useful to better understand wireless events?

It's the Band Steering demon used by Smart Connect.

 

[heysoundude]

Sorry if this is a noob question.

Using this firmware, is it possible to also use wireguard vpn? If so, is it using a GUI interface, or only via scripts?

I ask this because I have just tried dd-wrt firm, but I was unable to make wireguard working, and I was close to break my router.

My router is an Asus rt-N66U

Regards

you would need to upgrade your hardware to an AC86 to get WireGuard working...the processor and code running the n66 is not capable (or have the FreshTomato people managed?)
if you are stuck with that N66 for whatever reason, you could put a PiHole in front of it and let it simply be a WAP...but even that doesn't make $ sense, when RasPi hardware costs as much as an AX86s.

 

[sznobel]

hello, is it possible to run wireguard on RT-AC68U ?

 

[ZebMcKayhan]

hello, is it possible to run wireguard on RT-AC68U ?

Not in kernel. Only possibility would be the go version, but then you might as well run ovpn instead:
https://nixfaq.org/2020/07/wireguar...v7-32-bit-chipset-running-asuswrt-merlin.html

 

[n3cr0shark]

Report on the RT-AC5300:

Although I did not have an issue dirty flashing from the Alpha to the Beta - Just like when I went from the old release to the Alpha, it would not let my dirty flash the firmware from the Beta to the 386.9 release. It would say it was completed, but it would also say it was on the old beta code (even after a hard reboot).

Note: this time I noticed a message that said that something to the effect that 'This version of software not compatible with older software revisions and third party code' on the upload screen. Something I didn't catch when dirty flashing to the alpha.

Once I removed it from the Mesh, I was able to update it to the released 386.9 code without any issues. And, once upgraded, I was then able to add it back to the Mesh. The main router and other mesh node is on 388.1.

 

[CaptnDanLKW]

These unknown (aka not 'real') MAC addresses can often be attributed to randomized MAC addresses assigned by WiFi devices to address alleged privacy concerns.

That was a though too, but they only appear in the new bsd: log entires. If they were on my network they would leave traces in my dnsmasq-dhcp log and network map list. The source must be something internal and probably some broadcom “special”.

 

[st3v3n]

I upgraded our RT-AC86, RT-AC 2900 and a new GT-AC2900 to v3896.9 and all are running without issues (though the speed check won't permit checks of VPN client tunnels as it did in the past, every site tested through WAN is accurate).

After I updated the GT-AC2900 to Asus most current firmware, I first applied Merlins 'rog' version, but quickly overwrote it with the 'regular' interface. The bright red ''binking//flashing' of the stock Asus GT-AC2900 interface each time a tab or switch is changed might appeal to some, but after 10 minutes it became distracting, bordering on irritating when trying to make and monitor changes. The outer lighting on the front of the GT can be most pleasant (if not flashing), the 'glowing' setting looks good. A new flash and clean setup for the final Merlin non-rog version upgrade for the GT-AC2900, and the network performs as expected.

The total memory used before invoking Trend Micro functions was about 292 Mb. After turning on all of the Trend Micro goodies, another 100-110 Mb was added to the memory used, the CPU wasn't stressed and the temperature increased only a degree or two. There was little or no impact on VPN responsiveness for either of the two OpenVPN tunnels, running 17 wi-fi and 5 wired devices, none of which ever drops to WAN. Merli'ns non-rog firmware versuib for the GT-AC2900 essentially looks and performs as the regular RT-AC86 or RT-AC2900 when upgraded to Merlin. A side note, we paid only $89 for the GT-AC2900, and $99 for the RT-AC2900 last month, saving $10 (about $20 more for the RT-AC2900 at this writing).

For each upgrade provided for these routers over many years, my sincere thanks to Eric for his continuing work and dedication to this project, also to others who have contributed addons. Those whose patient and involved answers to the questions from many inexperienced members also helps make the forums the best. Cheers, S.

 

[KGB7]

Router ac68u.


AdGuard Home now works with this firmware.

With firmware 386.7_2, i was getting errors. There is not enough memory. When i tried to access Adguard settings in amtm.

But now AdGuard works great and all web pages load much quicker. Especially BestBuy webpage, which used to drive me nuts how slow it loaded.

 

[diabolyk]

Since I have updated from 386.7_2 I have random reboots.

why ? how to stop that ?

Thanks

log when restarted :

Jan  9 02:45:56 ntpd: Initial clock set
Jan  9 02:45:56 rc_service: ntpd_synced 2794:notify_rc restart_diskmon
Jan  9 02:45:56 custom_script: Running /jffs/scripts/service-event (args: restart diskmon)
Jan  9 02:45:56 disk_monitor: Finish
Jan  9 02:45:56 disk_monitor: be idle
Jan  9 02:45:57 WAN_Connection: WAN was restored.
Jan  9 02:45:57 wlceventd: wlceventd_proc_event(511): eth5: Disassoc B8:27:EB:C2:C6:08, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8), rssi:0
Jan  9 02:45:58 wlceventd: wlceventd_proc_event(494): eth5: Deauth_ind C0:97:27:64:B4:17, status: 0, reason: Deauthenticated because sending station is leaving (or has left) IBSS or ESS (3), rssi:0
Jan  9 02:45:58 wlceventd: wlceventd_proc_event(511): eth5: Disassoc C0:97:27:64:B4:17, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8), rssi:0
Jan  9 02:45:59 wlceventd: wlceventd_proc_event(530): eth5: Auth B8:27:EB:C2:C6:08, status: Successful (0), rssi:0
Jan  9 02:45:59 wlceventd: wlceventd_proc_event(559): eth5: Assoc B8:27:EB:C2:C6:08, status: Successful (0), rssi:0
Jan  9 02:45:59 wlceventd: wlceventd_proc_event(530): eth5: Auth C0:97:27:64:B4:17, status: Successful (0), rssi:0
Jan  9 02:45:59 wlceventd: wlceventd_proc_event(559): eth5: Assoc C0:97:27:64:B4:17, status: Successful (0), rssi:0
Jan  9 02:45:59 kernel: SHN Release Version: 2.0.2 90120f9
Jan  9 02:45:59 kernel: UDB Core Version: 0.2.20
Jan  9 02:45:59 roamast: ROAMING Start...
Jan  9 02:46:00 kernel: sizeof forward pkt param = 280
Jan  9 02:46:00 BWDPI: fun bitmap = 53f
Jan  9 02:46:00 custom_script: Running /jffs/scripts/pre-mount (args: /dev/sda1 ext4)
Jan  9 02:46:00 amtm disk-check: Probing 'ext4' on device /dev/sda1
Jan  9 02:46:00 amtm disk-check: Running disk check v3.1, with command 'e2fsck -p' on /dev/sda1
Jan  9 02:46:01 amtm disk-check: Disk check done on /dev/sda1
Jan  9 02:46:01 usb: USB ext4 fs at /dev/sda1 mounted on /tmp/mnt/SWAP.
Jan  9 02:46:01 custom_script: Running /jffs/scripts/post-mount (args: /tmp/mnt/SWAP)
Jan  9 02:46:01 Diversion: Starting Entware and Diversion services on /tmp/mnt/SWAP
Jan  9 02:46:01 Diversion: pixelserv-tls or Diversion disabled, not starting pixelserv-tls
Jan  9 02:46:01 rc_service: service 3017:notify_rc restart_dnsmasq
Jan  9 02:46:01 custom_script: Running /jffs/scripts/service-event (args: restart dnsmasq)
Jan  9 02:46:01 rc_service: hotplug 2943:notify_rc restart_nasapps
Jan  9 02:46:01 rc_service: waitting "restart_dnsmasq" via  ...
Jan  9 02:46:01 custom_config: Appending content of /jffs/configs/dnsmasq.conf.add.
Jan  9 02:46:01 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Jan  9 02:46:01 spdMerlin: /tmp/mnt/SWAP contains Entware, starting spdMerlin
Jan  9 02:46:01 Diversion: Mounting Diversion WebUI page
Jan  9 02:46:02 Diversion: Mounted Diversion WebUI as user1.asp in LAN/Diversion
Jan  9 02:46:02 Diversion: is disabled, no services started
Jan  9 02:46:02 custom_script: Running /jffs/scripts/service-event (args: restart nasapps)
Jan  9 02:46:02 iTunes: daemon is stopped
Jan  9 02:46:02 FTP_Server: daemon is stopped
Jan  9 02:46:02 wsdd2[1516]: Terminated received.
Jan  9 02:46:02 Samba_Server: smb daemon is stopped
Jan  9 02:46:03 rc_service: udhcpc_wan 2583:notify_rc stop_samba
Jan  9 02:46:03 rc_service: waitting "restart_nasapps" via hotplug ...
Jan  9 02:46:04 wlceventd: wlceventd_proc_event(530): eth6: Auth 3C:8D:20:42:4D:48, status: Successful (0), rssi:0
Jan  9 02:46:04 wlceventd: wlceventd_proc_event(559): eth6: Assoc 3C:8D:20:42:4D:48, status: Successful (0), rssi:0
Jan  9 02:46:04 Timemachine: daemon is stopped
Jan  9 02:46:04 avahi-daemon[3541]: WARNING: No NSS support for mDNS detected, consider installing nss-mdns!
Jan  9 02:46:04 Samba_Server: daemon is started
Jan  9 02:46:05 rc_service: udhcpc_wan 2583:notify_rc start_samba
Jan  9 02:46:05 rc_service: waitting "stop_samba" via udhcpc_wan ...
Jan  9 02:46:05 custom_script: Running /jffs/scripts/service-event (args: stop samba)
Jan  9 02:46:05 wsdd2[3555]: Terminated received.
Jan  9 02:46:05 avahi-daemon[3541]: Alias name "RT-AC86U" successfully established.
Jan  9 02:46:06 kernel: bcm_mcast_mld_add:833 mc_fdb->rep_list ffffffc014596668 next ffffffc0133c2f20 prev ffffffc0133c2f20 rep_entry->list ffffffc0133c2f20 next ffffffc014596668 prev ffffffc014596668
Jan  9 02:46:06 Samba_Server: smb daemon is stopped
Jan  9 02:46:07 dhcp_client: bound 192.168.0.1/255.255.255.0 via 192.168.0.254 for 43200 seconds.
Jan  9 02:46:07 custom_script: Running /jffs/scripts/service-event (args: start samba)
Jan  9 02:46:07 custom_config: Appending content of /jffs/configs/dnsmasq.conf.add.
Jan  9 02:46:07 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Jan  9 02:46:07 Diversion: is disabled, no services started
Jan  9 02:46:07 Samba_Server: daemon is started
Jan  9 02:46:10 spdMerlin: Mounting WebUI tab for spdMerlin
Jan  9 02:46:10 spdMerlin: Mounted spdMerlin WebUI page as user2.asp
Jan  9 02:46:13 wlceventd: wlceventd_proc_event(530): eth6: Auth 12:60:61:48:3C:87, status: Successful (0), rssi:0
Jan  9 02:46:13 wlceventd: wlceventd_proc_event(559): eth6: Assoc 12:60:61:48:3C:87, status: Successful (0), rssi:-53
Jan  9 02:46:15 wlceventd: wlceventd_proc_event(511): eth5: Disassoc CC:8C:BF:64:08:F8, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8), rssi:0
Jan  9 02:46:15 wlceventd: wlceventd_proc_event(530): eth5: Auth CC:8C:BF:64:08:F8, status: Successful (0), rssi:0
Jan  9 02:46:15 wlceventd: wlceventd_proc_event(559): eth5: Assoc CC:8C:BF:64:08:F8, status: Successful (0), rssi:0
Jan  9 02:46:38 crond[1338]: time disparity of 2462201 minutes detected

 

[bennor]

Since I have updated from 386.7_2 I have random reboots.

It may help if you provide more information about what router you are running, are you using a AImesh setup, and what scripts you are running.

Does the random reboots happen if you disconnect the USB drive, do a hard reset on the router, and manually reconfigure without adding any add-on scripts and or loading a saved configuration file.

 

[diabolyk]

It may help if you provide more information about what router you are running, are you using a AImesh setup, and what scripts you are running.

Does the random reboots happen if you disconnect the USB drive, do a hard reset on the router, and manually reconfigure without adding any add-on scripts and or loading a saved configuration file.

Hi,
Sorry...
I'm on AC86U, not using aimesh and add Yazdhcp and swap on USB 2.
It happens randomly without doing anything, last one was during the night for example (I have upload the log in order to have help)

 

[bennor]

I'm on AC86U, not using aimesh and add Yazdhcp and swap on USB 2.
It happens randomly without doing anything, last one was during the night for example (I have upload the log in order to have help)

It would likely help others if you posted the portion of the log before, and including, the reboot (if possible) which may give a clue as to what caused the reboot.