[Release] Asuswrt-Merlin 384.11 is available

[Asad Ali]

xxx@RT-AC68U-E848:/tmp/home/root# nvram show | grep hwaddr_x
wan_hwaddr_x=54:ee:xx:86:32:yy
wan0_hwaddr_x=54:ee:xx:86:32:yy
wan1_hwaddr_x=
size: 54158 bytes (11378 left)

And about second part of your advice - I did it, but the problem is in that my router show to my provider information that I am connected fro two different interfaces with different MACs at the same time. So this solution don't helps. But thanks for idea.

Did you edit the two Mac addresses for privacy reasons? Because right now they're exactly same.

Edit: They should be same, I was thinking about something else lol

 

[dave14305]

it seems as my router broadcasts outside two MACs: wan_hwaddr and lan_hwaddr

Those are identical on my AC68U. Or do you mean the LAN and the cloned WAN address?

 

[ukrainer]

Did you edit the two Mac addresses for privacy reasons? Because right now they're exactly same.

yes, but they are the same

Those are identical on my AC68U. Or do you mean the LAN and the cloned WAN address?

wan_hwaddr = the cloned MAC and lan_hwaddr = other one MAC, but I am not sure that it is it's own one because the command nvram show | grep hwaddr shows me a huge list of MACs where most of them are the same as lan_hwaddr except of two last symbols of that MACs, which are different for wl1_hwaddr, wl0.14_hwaddr, wl1.12_hwaddr, wl0.1_hwaddr etc...

 

[Asad Ali]

Remove the cloned Mac address from the web UI, apply settings and reboot your router, then run the command again to see if the values clear itself or not.

 

[ukrainer]

Remove the cloned Mac address from the web UI, apply settings and reboot your router, then run the command again to see if the values clear itself or not.

Thanks, it leaded to clearing the second MAC and now my provider see only one MAC.
But the cloning is convenient if I need to use my PC to connect to Internet directly without router and not bothering the provider's support team to they bind this MAC to my account every time when I do this rotations...
Could anybody test the same situation - to clone your PC's MAC to the router and ask if provider see two MACs? Maybe the problem is not only in my case and the firmware need to be fixed, so reseting wouldn't help in my case if I did it?
Thanks all for your time and help!

 

[skeal]

Thanks, it leaded to clearing the second MAC and now my provider see only one MAC.
But the cloning is convenient if I need to use my PC to connect to Internet directly without router and not bothering the provider's support team to they bind this MAC to my account every time when I do this rotations...
Could anybody test the same situation - to clone your PC's MAC to the router and ask if provider see two MACs? Maybe the problem is not only in my case and the firmware need to be fixed, so reseting wouldn't help in my case if I did it?
Thanks all for your time and help!

Can I offer some advice, don't hard wire your computer directly to the internet without your router in between, your computer probably isn't setup for it and a software firewall and anti-virus won't do the trick.

 

[Asad Ali]

But the cloning is convenient if I need to use my PC to connect to Internet directly without router and not bothering the provider's support team to they bind this MAC to my account every time when I do this rotations...

That part is extremely easy to solve, you can use a Mac address cloning software on your PC to bind router's Mac address on computer's NIC.

 

[ukrainer]

Can I offer some advice, don't hard wire your computer directly to the internet without your router in between, your computer probably isn't setup for it and a software firewall and anti-virus won't do the trick.

Thanks, I agree. Sometime I do that to test real internet connection speed, to be sure ask the support from provider or not. Sometime my case issues on the line and I don't understand what is the reasone - router or my provider. If I connect directly then I can be sure that my router works fine and problem is with the providers lines.

That part is extremely easy to solve, you can use a Mac address cloning software on your PC to bind router's Mac address on computer's NIC.

it's good idea, thanks

 

[greggy101]

Does anyone know if 384.11_1 on RT-AC5300 still uses .45149 binary blobs or .45717?
I know that the source code for .45717 hasn't been officially released yet, but Merlin has his "early" sources...

 

[Poseidon]

Can someone tell me if my WAN DNS settings (Cloudflare) are correct please?

Should "Connect to DNS Server Automatically" be changed to NO (or kept at the default YES)???

 

[RMerlin]

Does anyone know if 384.11_1 on RT-AC5300 still uses .45149 binary blobs or .45717?
I know that the source code for .45717 hasn't been officially released yet, but Merlin has his "early" sources...

Still 45149. I was hoping to maybe get newer GPLs this week but it didn't happen, so I got tired of waiting. Currently building the 384.11_2 images.

 

[Gar]

Can someone tell me if my WAN DNS settings (Cloudflare) are correct please?

Should "Connect to DNS Server Automatically" be changed to NO (or kept at the default YES)??? View attachment 17691 View attachment 17692

Was a big topic here last week, but doesn't seem to matter as
DoT overrides this setting.

 

[Treadler]

Can someone tell me if my WAN DNS settings (Cloudflare) are correct please?

Should "Connect to DNS Server Automatically" be changed to NO (or kept at the default YES)??? View attachment 17691 View attachment 17692

As stated above, DNS Privacy overrides.
But;
What you have done is fine, in case of DNS Privacy not working for some reason, (unlikely), you would default to ISP server/s.

Bear in mind these may not be dnssec friendly, I see you have dnssec enabled.

If you want to default to Cloudflare then select ‘no’ & enter the Cloudflare server/s in wan, & IPv6. That gets rid of any possible dnssec issues.

 

[Gar]

What you have done is fine, in case of DNS Privacy not working for some reason, (unlikely), you will default to ISP server/s.

Bear in mind these may not be dnssec friendly, I see you have dnssec enabled.

If you want to default to Cloudflare then select ‘no’ & enter the Cloudflare server/s in wan, & IPv6. That gets rid of any possible dnssec issues.

I manually plugged in Quad9, but it never occurred to me that dnssec might not like it if it was used without DoT.

 

[Treadler]

I manually plugged in Quad9, but it never occurred to me that dnssec might not like it if it was used without DoT.

I’m pretty sure that Quad9 is ok with dnssec, so shouldn’t be an issue so far as I know.

 

[Poseidon]

As stated above, DNS Privacy overrides.
But;
What you have done is fine, in case of DNS Privacy not working for some reason, (unlikely), you would default to ISP server/s.

Bear in mind these may not be dnssec friendly, I see you have dnssec enabled.

If you want to default to Cloudflare then select ‘no’ & enter the Cloudflare server/s in wan, & IPv6. That gets rid of any possible dnssec issues.

When I enabled DNSSEC, the Cloudflare debug page says that I'm NOT connected to 1.1.1.1 and that I'm NOT using DoT.

Should I just disable DNSSEC if using Cloudflare instead of making the manual adjustments above?

 

[Treadler]

View attachment 17695

When I enabled DNSSEC, the Cloudflare debug page says that I'm NOT connected to 1.1.1.1 and that I'm NOT using DoT.

Should I just disable DNSSEC if using Cloudflare instead of making the manual adjustments above?

Previously discussed here in the forum, that page is broken.
Enable dnssec & have a great day!

 

[Paliv]

Previously discussed here in the forum, that page is broken.
Enable dnssec & have a great day!

I am wondering when they’ll fix this, or if they will. I know they were alerted a couple weeks ago or so.

 

[galen2]

new 348.11_2 flashed and all on my setup working fine

 

[RMerlin]

384.11_2 should be available on mirror sites now.