[Fork] Asuswrt-Merlin 374.43 LTS releases (Archive)

[Uncle_Gadget]

Thanks, @john9527, for the jffs backup fix. 25E8 is running great. One minor note regarding documentation. I wanted to move my https cert to jffs and couldn't find any instructions in Merlin_Fork_Options.txt. A quick search of the forum found the info below and moving it worked perfectly. So, next time you get around to editing Merlin_Fork_Options.txt, you might want to add the info below:

Add command line utilities to move HTTPS cert between NVRAM and JFFS

• To move the HTTPS (router SSL) cert, enter
  https2jffs or
  https2nvram

Thanks, again, for all you and Merlin do to make our networking lives better!

 

[ColinTaylor]

Both appear to be working fine. Thanks John.

Sorry John. I'm going to have to correct that statement.

The logout function appears to work, for both the timeout and clicking on the Logout button. However, if I click the browser's Back button it gives me the user/password dialog (with the previous screen in the background). At this point I can just cancel that dialog and I'm still logged in to the router. Sometimes, depending on the screen in question (i.e. Traffic Monitor, VPN Status), the page is only partially complete but clicking Refresh makes it appear correctly.

Tested with IE 11. No saved passwords or stuff like that.

 

[john9527]

Sorry John. I'm going to have to correct that statement.

The logout function appears to work, for both the timeout and clicking on the Logout button. However, if I click the browser's Back button it gives me the user/password dialog (with the previous screen in the background). At this point I can just cancel that dialog and I'm still logged in to the router. Sometimes, depending on the screen in question (i.e. Traffic Monitor, VPN Status), the page is only partially complete but clicking Refresh makes it appear correctly.

Tested with IE 11. No saved passwords or stuff like that.

Another reason not to use IE! Both Firefox and Chrome will give you this.....
Going to have to call foul on IE here.
What access method (http/https) and port are you using? If you are using http/80, try changing the port to a non-standard port (I use 8081)....it seems as if IE will then at least show the 'T'he port has changed....' screen instead of falsely authorizing the session.

 

[ColinTaylor]

Going to have to call foul on IE here.
What access method (http/https) and port are you using? If you are using http/80, try changing the port to a non-standard port (I use 8081)....it seems as if IE will then at least show the 'T'he port has changed....' screen instead of falsely authorizing the session.

Yes it seems to be IE specific, I tried with Chrome (http & https) and it works as it's meant to.

With IE I was using http/80 so changed the port to 8081 but I could still get back in by cancelling the dialog box. I tried https but got a certificate error that IE won't let me get past (and I can't be bothered to fix).

So yes, it's just IE so not worth expending any time on, IMHO.

 

[john9527]

Yes it seems to be IE specific, I tried with Chrome (http & https) and it works as it's meant to.

Maybe a new axiom....
Friends don't let friends use IE

Every browser has it's quirks.....but IMHO IE seems prone to more bugs than the others, and I basically stopped using it a while ago. Even less now since I've been moving away from Windows to Linux wherever I can.

 

[jrmwvu04]

Maybe a new axiom....
Friends don't let friends use IE

I don’t know about “new” as I adopted that axiom around the time Netscape 3 went final.

 

[Waylo]

Just installed 25E8, coming from 25E7. Anyone else have issues with the Client Status never populating? (searched for it on the thread but did not come up with anything recent). Just get endless "Searching, please wait..."

As far as I can tell, all devices are connected and operational.

 

[Andi P]

Just installed 25E8, coming from 25E7. Anyone else have issues with the Client Status never populating? (searched for it on the thread but did not come up with anything recent). Just get endless "Searching, please wait..."

As far as I can tell, all devices are connected and operational.

Working just fine here on my ac-68u.

Andi

 

[Waylo]

Working just fine here on my ac-68u.

Andi

Okay, did a full reboot and it's looking okay now.

 

[punchsuckr]

Conflicts as in if the client location also uses the default 192.168.1.x scheme.

Router addr is 10.93.69.1
Rpi is at 10.93.69.61
Addr range for clients is 10.8.0.x

Any thoughts?

 

[tyspeed42]

Just installed 25E8, coming from 25E7. Anyone else have issues with the Client Status never populating? (searched for it on the thread but did not come up with anything recent). Just get endless "Searching, please wait..."

As far as I can tell, all devices are connected and operational.

No issues running of the beta 26B6 on both my AC68W, AC68U routers, the Client Status are populated as normal. Did not test 25E8.

 

[Swazz]

@john9527 I don't know if you didn't have time or overlooked it: you have PMs

@cowst @john9527

I am experiencing the same issue with Asus RT-N66U, Merlin 380.66_6 (and _2 and _4 behaved the same), NordVPN set up according to the instructions on their website. I am not using auth-nocache on client side.

Kill switch is enabled and very simply when the key expires, the new key seems to be negotiated fine and then after the 'Control Channel' message, the tunnel seems to go down with no error messages. My screen capture would look exactly like the one @cowst sent. Wondering now if this is unique to the N66U.

Did you have any luck in further diagnosis?

 

[cowst]

He he apparently I not alone anymore
No, so far we did not find a solution.
I noticed 2 variants of this issue.
1 - vpnclient simply down, and I have to go and enable it again
2 - all looks fine from the router perspective, but the vpn tunnel is just not working under the hood

Perhaps we can increase logging verbosity (from where?) and see if there is some useful information we are not currently logging.

@cowst @john9527

I am experiencing the same issue with Asus RT-N66U, Merlin 380.66_6 (and _2 and _4 behaved the same), NordVPN set up according to the instructions on their website. I am not using auth-nocache on client side.

Kill switch is enabled and very simply when the key expires, the new key seems to be negotiated fine and then after the 'Control Channel' message, the tunnel seems to go down with no error messages. My screen capture would look exactly like the one @cowst sent. Wondering now if this is unique to the N66U.

Did you have any luck in further diagnosis?

 

[cybrnook]

@cowst @john9527
I am not using auth-nocache on client side

And when you do?

My IPVanish and PIA VPN tunnels both work fine and renegotiate fine. Keep in mind OpenVPN is running the latest version.

 

[john9527]

I am not using auth-nocache on client side.

And when you do?

There as a problem prior prior to OpenVPN 2.4.3, where using auth-nocache would cause the tunnel to disconnect/reconnect instead of just performing a key re-negotiation with some providers (PIA was one of them, at least for me).

I've verified it's indeed been fixed in 2.4.3 (and is listed in their Changelog). So if you use OpenVPN clients, you should upgrade to V25E8 or the V26 beta.

 

[john9527]

Any thoughts?

No, nothing immediate. If you are using QoS (either Traditional or Bandwidth limiter), try disabling it.

 

[cowst]

Thanks John, I'll try this tonight and report as soon as I won't get disconnected anymore

There as a problem prior prior to OpenVPN 2.4.3, where using auth-nocache would cause the tunnel to disconnect/reconnect instead of just performing a key re-negotiation with some providers (PIA was one of them, at least for me).

I've verified it's indeed been fixed in 2.4.3 (and is listed in their Changelog). So if you use OpenVPN clients, you should upgrade to V25E8 or the V26 beta.

 

[punchsuckr]

No, nothing immediate. If you are using QoS (either Traditional or Bandwidth limiter), try disabling it.

No, no Qos. Anything out of the ordinary is the sd card i installed in it which has the traffic manager data.

 

[john9527]

No, no Qos. Anything out of the ordinary is the sd card i installed in it which has the traffic manager data.

Have you tried V26 beta? With the new samba, some of the performance parameters got 'tweaked'....

 

[punchsuckr]

Have you tried V26 beta? With the new samba, some of the performance parameters got 'tweaked'....

No not yet. Will give it a shot in the next few days.