Quick ? Regarding Firmware Upgrade....

[Techno]

Just wanted to post a quick ? before upgrading my ancient firmware...I am way way way behind in firmware updates and ultimately my goal is to upgrade to the newest Merlin firmware build.

Please assist me in correcting my steps below if something is out of place:

*Download latest and greatest Merlin firmware
*Log into router and upgrade current (old Asus) stock firmware to latest stock Asus firmware
*Perform Factory Reset
*Connect into router after reset and flash Merlin firmware (download located on laptop that is connected to router)
*Perform another Factory Reset
*Log back into router and Merlin firmware should be loaded and start configuring new settings

Is there anything I am missing with my steps? Any assistance would be greatly appreciative as I would like to update my old firmware in the near future.

Thanks....

 

[Kim Puleston]

All looks good but you can skip Step two. You do not require the latest stock firmware installed before you install Merlins firmware. Merlins Firmware is already built on the latest firmware anyway.

 

[martinr]

I'm sure this topic will help you, especially if you pay close attention to L&LD's responses including the link he gives to his own guide "minimal and manual configuration"

http://www.snbforums.com/threads/proper-firmware-upgrade-procedure.35605/#post-289530

 

[Techno]

Just wanted to say thank you to all those who responded. I will "attempt" my firmware upgrade this weekend.

The router is a n66 btw. And yes the firmware is way out dated so I may have to flash to 378.55 and then with the latest merlin as Sanna mentioned. Thanks!

 

[martinr]

J... I will "attempt" my firmware upgrade this weekend.....

Tell us how it goes.

 

[Techno]

Tell us how it goes.

Firmware upgrade went without a hitch...thanks to everyone for their assistance with correct procedure!

I was able to config new settings after upgrade and even had time to set up VPN access which leads me to a question. I am somewhat of a newbie setting up OpenVPN so just wanted to bounce a few questions and get some additional info on a few of the settings in the advanced options: (See attached pic)

1. Username/Password Auth (I set this to Yes since default was No and it prompts me as it should when signing into the OpenVPN app).

2. Username/Password Auth. Only (I set this to No but not really sure what it's saying...what is the complete verification steps when signing in?) If someone selected Yes on this it would only verify by username/password and not the client.opvn file? I am confused by this....

3. I assume you can change the port number to something other than the default as well as VPN Subnet (and then just regenerate / export a new opvn file?

4. Is the AES 128 encryption that I have selected sufficient?



Any assistance would be greatly appreciated just so I can gain an understanding of what these options entail.

Thanks!

 

[martinr]

Excellent.

I've used the OpenVPN servers on my router for a couple of years now.

My understanding is that for security you can use a username/password combination on its own, or together with public key infrastructure (PKI) - that is certs and keys, or you could use PKI on its own. Clearly, username/password together with PKI would offer the toughest nut for a hacker to crack. And the options you described in points 1 and 2 in your post relate to those 3 conditions: username/password only, PKI only; username/password and PKI.

You could change the port number if you wish. I have one server set at the default 1194, and I set the other to 443 for the odd occasion where I've found a public wifi was blocking my attempted remote connection to my router on 1194. (I've seen very heated arguments on the Internet about changing port numbers to add obfuscation for security, I think that's the word. I changed my SSH port from 22 to an obscure one, but left the default OpenVPN port at 1194 - maybe that's a bit illogical (or perhaps I mean inconsistent), but I'm happy with it.)

And I understand that AES 128 encryption is more than sufficient for our needs.