Release Asuswrt-Merlin 3004.388.10 is now available

[John Fitzgerald]

Can someone please tell me what the new password requirements are, and if they are enforced immediately or only when the pw is next changed? I will wait to update if they are enforced immediately -- too many devices and users teach the new pw.

Thanks!

One capital, one special character, one number, length 10 or better. RMerlin relaxed no consecutive character repeat (example, DD).

EDIT: not sure how the enforcement part is going to work. (I changed mine prior to flashing)

 

[zOi-br]

One capital, one special character, length 10 or better. RMerlin relaxed no consecutive character repeat (example, DD).

EDIT: not sure how the enforcement part is going to work. (I changed mine prior to flashing)

Unfortunately it was not found, even with the node turned off. I don't know what else to do. I've tried almost everything, but this router doesn't update anymore. Version 388.9_2 is stuck.

Thank you for your dedication in trying to help me

 

[davidwford]

I agree. Especially for a third party developer working on a free independent solo project. I find it rude that so many make demands with the Me Me Me attitude.

Didn’t realise anyone was making demands or was being rude on this thread? I for one was only reporting an issue that wasn’t there previously. I don’t think anyone has blamed Merlin for the problem, if the problem is in this build, rather than the app, then it could easily be in the GPL or any other closed code than Merlin does have access too. If the post was directed at me, then sorry for how you have interpreted it, but that wasn’t my intention.

 

[John Fitzgerald]

Unfortunately it was not found, even with the node turned off. I don't know what else to do. I've tried almost everything, but this router doesn't update anymore. Version 388.9_2 is stuck.

Thank you for your dedication in trying to help me

What happens if you attempt a GUI reset with the box checked next to it to clear JFFS. Again no nodes should be powered on during any of this.
Have you backed up settings and JFFS, just in case.
I'm guessing this needs a complete wipe and reset and you will need to load all settings from scratch once you can get it going.
Try also, WPS reset like 3 or 4 times in a row then flash. (not flashing between WPS) That works for some.

EDIT: Also re-circle around to using merlinAU to update, now that the nodes are powered off.

EDIT: Also try Restoration tool with the most recent stock Asus firmware, or just keep trying different ways over again but with stock firmware.

 

[ExtremeFiretop]

Got notified last night that my node auto-updated successfully. Quickly logged in by SSH and all appears functional as expected.

As always much appreciate the time and effort RMerlin.

 

[dave14305]

For all the broken HA users, is your integration setup to use HTTPS already?

 

[bartj12]

For all the broken HA users, is your integration setup to use HTTPS already?

Yes, maybe I try to change it to http or ssh prior to updating again

 

[NXIL]

AX-3000 (AX58) dirty upgrade with zero problems or issues.

I did update my router's password before the update to make sure it complied with new requirements.

ASUS Router Password Rules & Recommendations

• Length: Passwords should be at least 10 characters long.
  

• Complexity: Include a combination of uppercase letters, lowercase letters, numbers, and special characters (e.g., !, @, #, $).
  
  
• Uniqueness: Use a different password for your Wi-Fi network and for accessing the router's admin settings.
  
  
• No Consecutive Identical Characters: Avoid passwords with repeating characters, such as "1111" or "aaaa".
  
  
• Avoid Default Passwords: Do not use default credentials like "admin" for your administrator password; set a strong, unique password during the initial setup.

"Admin": in Cliff Stoll's 1989 book "The Cuckoo's Egg", an early book about hacking connected computers, a lot of Unix administrators kept "Admin" and "Admin" as the username/password for their system, including nuclear labs, military systems, Reagan's "Star Wars" contractors, and so on. Book would have been a lot shorter without the sloppy password usage.

In one incident Stoll watched hackers (from overseas, no spoilers) log into Los Angeles Air Force Base's Unix system. He called the duty officer, said "there are foreign intel agents logged into your system".

Duty officer said "That's impossible, it has a password."

Stoll replied "the password is Admin."

The duty officer said "stand by", checked, and then proceeded to unplug the system from wall power as fast as he could.

 

[dbell]

If you don't run Home Assistant, than the integration isn't causing your issues (because the integration runs inside Home Assistant, not on the router.) But, as the integration also logs in on the router, as does the app, maybe there is a problem with the login process?

I for one had never seen the https asus login screen and instructions to install a certificate before installing this version.

I saw the instability with browser login and mobile app with beta 1 - had better success when I switched the access from allow "both" to https only and made sure that the HA integration was configured for https / 8443 as well. Suddenly all started working properly again. I had brought it up in the beta thread: https://www.snbforums.com/threads/asuswrt-merlin-3004-388-10-beta-is-now-available.95740/post-970225

 

[rung]

Tried and failed upgrade the node with the released version. Even with unpair, WPS reset, re-pair procedure. Clients were not happy. Reverted back to beta 2, and all working again. I'll monitor the thread to see if there are similar issues/suggestions or if (more likely) this is PEBKAC. I do know my main router is NOT compliant with the new password rules. Try this next?

 

[DrTurk]

Dirty upgrade on my RT-AX86U from 3004_388.9_2 with no issues so far. Thanks for all you do RMerlin!