A bit late, maybe, but just saw your post today. If you're still interested, setting the HMAC to SHA-1 and adding an option --data-ciphers-fallback BF-CBC in the "custom configuration" did it for me just today on RT-AC88U on 386.4 when I encountered the same problem (USG Pro on the other side...