[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[mobileman88]

This latest update is really great. I am getting almost 6MB/s for VPNs now.

 

[john9527]

Sorry if it's been discussed, but I've found no answers to this 'till now...

I've been constantly upgrading John's fork updates since the first release but every month or so my router starts failing and logs these:

"Jan 26 11:27:10 openvpn[30830]: Diffie-Hellman initialized with 512 bit key
Jan 26 11:27:10 openvpn[30830]: Cannot load private key file server.key: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
Jan 26 11:27:10 openvpn[30830]: Error: private key password verification failed
Jan 26 11:27:10 openvpn[30830]: Exiting due to fatal error"

I'm getting connection issues on all devices once that happens and the only way to get past this is to actually reboot the router. Anyone happens to have a workaround? I'm not really sure what SSL cert the error refers too, nor why would the mismatch occur.


Thank you.

I'm at a loss on this one....how did you generate your certs/keys for your OpenVPN server? Built in generation or did you gen them yourself?

 

[TheImmortal]

I'm at a loss on this one....how did you generate your certs/keys for your OpenVPN server? Built in generation or did you gen them yourself?

I did not...
I don't use an OpenVPN and I've never generated any keys on this router :|

 

[john9527]

I did not...
I don't use an OpenVPN and I've never generated any keys on this router :|

Ahhh....did you ever have a 376 Asus OEM code loaded? There was a problem with how the OpenVPN server settings were handled in OEM vs Merlin, and maybe it bled backwards so to speak.

Got to the VPN - VPN Server page.

Select Server mode: OpenVPN
Then select Server Instance to both Server1 and Server2 and make sure the slider is set to OFF for both.

 

[KGB7]

Wish I had a explanation for you, but I'm at a loss. Nothing specific that I did.

But, when I had my compile difficulties, I made an offering to the router gods....maybe they smiled upon us

EDIT: I did forget to ask....are you running an OpenVPN client on the router? If so, you probably got at 30-50% throughtput improvement just by loading the code.

I dont use VPN, direct connection to Fios router(in DMZ) which takes me directly to the internet.

My guess is, it's the reboot involved with the firmware upgrade that did it. I've seen plenty of these placebo posts myself over the years...

That would have been the case for many people and in some cases if the router was up and running none stop for a month. But, i have rebooted, reset and reflashed 10 firmwares in the past two weeks including 4 of your firmwares, each time under 2 days. Turns out that 2.4Ghz radio is dead on my Sammy Galaxy S4 phone and my warranty is up, but i can still get new batteries for free.

So yes, there is a BIG improvement. The slowest site, a forum that i visit daily is no longer loads at 56k, even though part of the issue is on their end, but it still loads much faster. And you know me, i dont go around stating facts with out extensive testing.

Perhaps John hasnt done anything to make this new found improvement, but the change is there and it is clearly noticeable on my end.

p.s.

So far, only yesterday and today youtube videos were slow loading and buffering forever at 1080 in the morning. But thats because we had snow, so two States in my area and DC had school cancellations. Thus youtube was over loaded by half the East Coast. I couldnt even watch videos on AT&T network until 11pm EST.

 

[GHammer]

OpenVPN Server 1 - Running

I did a factory reset, then installed v7 today.
After configuring the router, I had a look at the system logs. I saw that a VPN tunnel was active there, so I went to the VPN settings, and sure enough it shows server 1 running.
The On/Off is Off.

Any ideas as to why this would be?

BTW- Best U/D speeds I've seen on my 56U, running great on Comcast.

 

[L&LD]

A factory reset should be done after a new firmware is installed. Resetting the old firmware before won't do anything for the version you're interested in running, clean.

 

[Deleted member 22229]

I did a factory reset, then installed v7 today.
After configuring the router, I had a look at the system logs. I saw that a VPN tunnel was active there, so I went to the VPN settings, and sure enough it shows server 1 running.
The On/Off is Off.

Any ideas as to why this would be?

BTW- Best U/D speeds I've seen on my 56U, running great on Comcast.

Running v7 here on N66U and had no such issues all VPN is shut down and disabled by default. As mentioned did you factory reset after the install ?

 

[GHammer]

Running v7 here on N66U and had no such issues all VPN is shut down and disabled by default. As mentioned did you factory reset after the install ?

Never put the cart in front of the horse... Now I know what it means!

Thanks for pointing out my error. I have reset the router, reconfigured, and there are no VPN servers active.

 

[Gravityz]

Yes same here.

to bad there are some nice cosmetic features in the new firmware we could use (nice icons on client list, wifi signal stenght on clientlist.

besides that V7 seems rock solid.

I gave up im back on 374_43_2(v7) fork and im gonna stick with it.
376.xxx give me slow loading internet pages
378.xxx both asus and merlin, im loosing IPV6(6rd) each days, need reboot,somethings new each days in logs also ....

Well... i dont need bells and whistles , i just want a router to route

V7 fork is awesome, fast and stable.Never lost ipv6 with it and internet pages loading instantly

Sorry for my english

Good job john

 

[RogerSC]

What I found is that although there wasn't any 'labelled' 68P changes, buried in the wireless initialization code was a special set of wireless parameters for a specific country code and regulation revision (Q2/40). Turns out these are the default values in the 68P cfe. Since the wireless is closed source, not sure what all of them do...so I can't say whether what you saw was expected or not. But, what's there now matches the 'official' release. Unfortunately the unknown is if they changed the driver too.....so....

Looking forward to you reporting back!

Just trying v7, and it looks really good here. Excellent wireless coverage on the RT-AC68P, and IPv6 looks good, great overall performance. Seems like a solid firmware release so far.

One comment on the IPv6, you could look at the ICMPv6 packet filtering. Apparently ICMPv6 packets being sent to computers on my network are being filtered. Tried it with and without IPv6 firewall, same result on the "IPv6 Connectivity and speed test", 17/20. Comcast is my ISP, and using RMerlin's latest firmware (376.49* and 378.50_Beta), I get 19/20, showing that ICMPv6 packets for my computers were not being filtered *smile*.

Anyways, looks great, thanks so much for keeping this moving forward!

 

[Deleted member 22229]

Roger i am using a different router N66U with this build and i am getting 19/20 while testing IPv6. Not sure what the difference might be just a FYI..

 

[GHammer]

Roger i am using a different router N66U with this build and i am getting 19/20 while testing IPv6. Not sure what the difference might be just a FYI..

Just to add a confirmation.
I run the N56U as well and got 19/20 failing the reverse DNS test.

 

[RogerSC]

Roger i am using a different router N66U with this build and i am getting 19/20 while testing IPv6. Not sure what the difference might be just a FYI..

Well, geeze, after reading the last couple of replies, I just asked myself the same question. Same firmware, should be the same resulting ip6tables rules. So I just rebooted my router, and guess what? Got 19/20 on that test as well. Not sure what happened there, same thing happened when I tried 378.50_Beta the first time...then jiggled things around a little, and went up to 19/20. Odd, but okay, I guess.

I suppose that extra reboot when I see 17/20 on that page is now part of my firmware upgrade procedure *smile*.

 

[Deleted member 22229]

Well, geeze, after reading the last couple of replies, I just asked myself the same question. Same firmware, should be the same resulting ip6tables rules. So I just rebooted my router, and guess what? Got 19/20 on that test as well. Not sure what happened there, same thing happened when I tried 378.50_Beta the first time...then jiggled things around a little, and went up to 19/20. Odd, but okay, I guess.

I suppose that extra reboot when I see 17/20 on that page is now part of my firmware upgrade procedure *smile*.

You know what they say... What ever works !!

 

[KGB7]

Installed V7 on friends N66U router, and even he saw an improvement in web response right off the bat.

Before that, he was running Asus OEM firmware.

 

[john9527]

Installed V7 on friends N66U router, and even he saw an improvement in web response right off the bat.

Before that, he was running Asus OEM firmware.

I won't argue with success

 

[BWR]

Hey John,
Found a minor bug in the interface. I have a few AC66U access points behind a main router and their web interface ports are forwarded (TCP/8001 router -> TCP/80 AP no. 1, TCP/8002 router -> TCP/80 AP no. 2 etc), so that I access them using the main router's fqdn and port, i.e hostname:8001, hostname:8002 etc.
In Wireless - General and Wireless - Advanced pages, when I switch from 2,4GHz to 5GHz or viceversa, the interface omits the port in the URL redirect and tries to reload a wrong address:
- http://hostname/Advanced_Wireless_Content.asp instead of http://hostname:8001/Advanced_Wireless_Content.asp
- http://hostname/Advanced_WAdvanced_Content.asp instead of http://hostname:8001/Advanced_WAdvanced_Content.asp
Not critical, just a bit annoying.
Thanks.

 

[john9527]

@BWR - Just to make sure I understand....it's correct the first time you select the page, but incorrect when you change the 'Frequency' selection?

I'll take a look.

 

[KGB7]

I won't argue with success

I take care of all his network needs and resolve all issues. If his happy, then im happy.

Merlin makes great firmware and many will be for ever grateful.

But you keep the flame going for the older generation of firmware, before Asus put shackles on it. And for that I am grateful.

Just dont let it get it to your head.