Release Asuswrt-Merlin 386.2 is now available

JohnSmith · Apr 2, 2021

After 46+ days of being up both both routers, decided to upgrade RT-AX88U & RT-AC3100 from V386.1_2 Final to V386.2 Final via firmware upgrade, by FULL POWER down routers first, power up, wait for all scripts to initialize and settle, and then apply firmware upgrade.

40+ devices (includes gaming, streaming, downloads, many IOT devices, etc.) and all appears to be working for main AX88U & backup AC3100 routers. Still postponing adding RT-AX58U with V386.2 Final into AiMesh 2.0, until Guest Network #01 issue is fixed, as Guest network is #01, and IOT devices is #02 currently in my setup.

JIPG · Apr 2, 2021

pinkfloyd1173 said:
Dirty upgrade, only issue I see is the icon pics are gone for your devies?

See the note in changelog: You have to press shift+refresh in your browser to re-load the new icon set.

MvW · Apr 2, 2021

pinkfloyd1173 said:
Dirty upgrade, only issue I see is the icon pics are gone for your devices?

Have you cleared your cache and refreshed the page?

pinkfloyd1173 · Apr 2, 2021

Thank you

JIPG and MvW.

That fixed it.

Grievous Angel · Apr 2, 2021

MvW said:
Have you cleared your cache and refreshed the page?

Yes, and afterwards the icon list is expanded to mirror the mobile app. Which is nice because there are more appropriate icons out there now. At least on the x86u.

tweakertje · Apr 2, 2021

RMerlin said:
Do a factory default reset of the node, then re-add it.

Check your system log, it will tell you why it's failing.

Here the VPN log after an upgrade
just downgrade to the old version and its working again....
the openvpn file works..

May 5 07:15:24 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=d32f41db fb8f51ba
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN= root CA, serial=12345678900987654321
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=dd2f2fe5 00d13f70
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN=Van Linstee ICT root CA, serial=12345567890987654321
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=4ae30671 34f6a0d0
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=2, C=NL, XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=1, C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid: C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, serial=1234
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)

skeal · Apr 2, 2021

@RMerlin Can't figure this out, AC68U, any version of firmware I try is said to be uncertified and the upgrade fails. Doesn't matter if it's 384.19 or 386.2 it says both are not certified. Which I know is crap but how do I get by it, my other AC68U updated fine but it's a aimesh node, the one I'm trying to upgrade and failing at is wireless router mode. Any ideas besides firmware recovery tool?

Deleted member 22229 · Apr 2, 2021

skeal said:
@RMerlin Can't figure this out, AC68U, any version of firmware I try is said to be uncertified and the upgrade fails. Doesn't matter if it's 384.19 or 386.2 it says both are not certified. Which I know is crap but how do I get by it, my other AC68U updated fine but it's a aimesh node, the one I'm trying to upgrade and failing at is wireless router mode. Any ideas besides firmware recovery tool?

Did you try and go back to Asus official firmware ? After that try to flash back to Merlin. Please keep us posted. I have to upgrade my sisters AC68U and there can be no down time as both her and her husband work from home for Ford motor and the connection must work.

octopus · Apr 2, 2021

tweakertje said:
Here the VPN log after an upgrade
just downgrade to the old version and its working again....
the openvpn file works..

May 5 07:15:24 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=d32f41db fb8f51ba
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN= root CA, serial=12345678900987654321
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:24 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=dd2f2fe5 00d13f70
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=2, error=self signed certificate in certificate chain: CN=Van Linstee ICT root CA, serial=12345567890987654321
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:29 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TCP/UDP: Preserving recently used remote address: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Socket Buffers: R=[524288->524288] S=[524288->524288]
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link local: (not bound)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: UDP link remote: [AF_INET]123.123.123.123:1194
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS: Initial packet from [AF_INET]123.123.123.123:1194, sid=4ae30671 34f6a0d0
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=2, C=NL, XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY OK: depth=1, C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid: C=NL,XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, serial=1234
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: OpenSSL: error:1416F086:lib(20):func(367):reason(134)
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS_ERROR: BIO read tls_read_plaintext error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS object -> incoming plaintext read error
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: TLS Error: TLS handshake failed
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: SIGUSR1[soft,tls-error] received, process restarting
May 5 07:15:34 RT-AX88U ovpn-client1[30884]: Restart pause, 5 second(s)

Seems clock isn't set.

MvW · Apr 2, 2021

octopus said:
Seems clock isn't set.

Indeed, NTP hasn’t synced yet:

Code:

May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid:

@tweakertje

For some reason (could be various) your system time has been not yet been synced as mentioned by @octopus. You have to make sure it syncs first, otherwise the certificate remains invalid. If you keep having issues, search the forum for NTPbootwatchdog by @Jack Yaz. I had many issues with NTP syncing too late, causing all sorts of trouble and since installing his script it hasn’t happened a single time anymore, so highly recommended.

DanNuke86 · Apr 2, 2021

MvW said:
Indeed, NTP hasn’t synced yet:

Code:

May 5 07:15:34 RT-AX88U ovpn-client1[30884]: VERIFY ERROR: depth=0, error=certificate is not yet valid:

@tweakertje

For some reason (could be various) your system time has been not yet been synced as mentioned by @octopus. You have to make sure it syncs first, otherwise the certificate remains invalid. If you keep having issues, search the forum for NTPbootwatchdog by @Jack Yaz. I had many issues with NTP syncing too late, causing all sorts of trouble and since installing his script it hasn’t happened a single time anymore, so highly recommended.

I second this. The Ntpbootwatchdog script does what it says on the tin.

Morac · Apr 2, 2021

Dirty flashed my AC88U from 386.1_2 to 386.2 using my iPad without issue. As “expected” I got a traffic spike within 12 hours of doing so. Based on what I saw with 386.1, these will occur for the next 3 days and then stop until I reboot my router again.

Jeffrey Young · Apr 2, 2021

heysoundude said:
that's the required procedure then? I'll get right on it...

Not quite sure what you are asking. I did not turn on the built in CakeQoS and stayed with the pre .2 install. Cake worked fine.

I have uninstalled the pre .2 Cake, then turned on the built in Cake and configured.

It was a time thing for me (Good Friday and everyone here is on the Internet). When I saw an opening to install .2, I went for it. Waited for the second breath to uninstall Cake and turn on the built in version.

All is tickity boo now.

tweakertje · Apr 2, 2021

octopus said:
Seems clock isn't set.

ay 5 07:05:52 RT-AX88U dnscrypt-proxy[888]: dnscrypt-proxy is ready - live servers: 39
May 5 07:06:19 RT-AX88U uiDivStats: Waiting for NTP to sync...
May 5 07:06:19 RT-AX88U uiScribe: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U spdMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U scMerlin: Waiting for NTP to sync...
May 5 07:06:29 RT-AX88U kernel: bcm_i2c: bus 0: Failed to detect SFP: 100 retries exhausted
May 5 07:06:50 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U scMerlin: Waiting for NTP to sync...

after reboot .... but it does not sync automatic
it did before
maybe ntpMerlin fails on this??
just clicking on apply on the settings page (admin/system) helps to get time

how can i fix it?

Gar · Apr 2, 2021

skeal said:
I'm unable to update one of my AC68U routers. I get this everytime I try:View attachment 32708

I had to both eject USB and reformat before flash would work. Then restore and reboot.

octopus · Apr 2, 2021

tweakertje said:
ay 5 07:05:52 RT-AX88U dnscrypt-proxy[888]: dnscrypt-proxy is ready - live servers: 39
May 5 07:06:19 RT-AX88U uiDivStats: Waiting for NTP to sync...
May 5 07:06:19 RT-AX88U uiScribe: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U spdMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:20 RT-AX88U scMerlin: Waiting for NTP to sync...
May 5 07:06:29 RT-AX88U kernel: bcm_i2c: bus 0: Failed to detect SFP: 100 retries exhausted
May 5 07:06:50 RT-AX88U ntpMerlin: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U dn-vnstat: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U connmon: Waiting for NTP to sync...
May 5 07:06:50 RT-AX88U scMerlin: Waiting for NTP to sync...

after reboot .... but it does not sync automatic
it did before
maybe ntpMerlin fails on this??
just clicking on apply on the settings page (admin/system) helps to get time

how can i fix it?

What do log says?

Calkulin · Apr 2, 2021

chercm said:
does this fix this in the syslog?

not mesh client, can't update it's ip

That is Trend Micro related, so if you withdraw from it, that will stop showing up in the logs

AnClar · Apr 2, 2021

Dirty upgrade from 386.1_2 to 386.2 on three RT-AC68U nodes and one RT-AC5300 main router in AIMesh configuration. All working fine. Thanks again @RMerlin for all the work on this great firmware!

Svenskmat · Apr 2, 2021

Dirty upgrade to two RT-AC5300's. Node upgraded first and then router.
No Issues! Thanks @RMerlin for this excellent update.

JIPG · Apr 2, 2021

After flashing the new FW 386.2, I have seen in the logs a new error never seen before:

kernel: FPM Pool 1: invalid token 0x21950000 freed

Is this something to be concerned about?

Thread starter	Title	Forum	Replies	Date
J	AC-86u vulnerability tracking post-EoL (asuswrt-merlin 386.14_2)	Asuswrt-Merlin	8	May 17, 2025
	Release Asuswrt-Merlin 3006.102.7 is now available	Asuswrt-Merlin	383	Feb 22, 2026
	Beta Asuswrt-Merlin 3006.102.7 Beta is now available	Asuswrt-Merlin	106	Feb 7, 2026
	Release Asuswrt-Merlin 3004.388.11 is now available	Asuswrt-Merlin	83	Dec 26, 2025
	Asuswrt-Merlin 3004.288.8_4 /jffs Partition Nuked on Random Reboot	Asuswrt-Merlin	6	Dec 21, 2025
	Beta Asuswrt-Merlin 3004.388.11 Beta is now available	Asuswrt-Merlin	28	Dec 20, 2025
	Sparrows Suricata - IDS on AsusWRT Merlin	Asuswrt-Merlin	9	Dec 18, 2025
	[Announcement] Removal of AiCloud from Asuswrt-Merlin	Asuswrt-Merlin	82	Nov 27, 2025
	Release Asuswrt-Merlin 3006.102.6 is now available	Asuswrt-Merlin	268	Nov 25, 2025
	Beta Asuswrt-Merlin 3006.102.6 Beta is now available	Asuswrt-Merlin	192	Nov 11, 2025

Release Asuswrt-Merlin 386.2 is now available

Senior Member

Regular Contributor

MvW

Guest

Senior Member

Regular Contributor

Occasional Visitor

Part of the Furniture

Deleted member 22229

Guest

Part of the Furniture

MvW

Guest

Regular Contributor

Senior Member

Very Senior Member

Occasional Visitor

Very Senior Member

Part of the Furniture

Senior Member

not mesh client, can't update it's ip​

Regular Contributor

Regular Contributor

Regular Contributor

kernel: FPM Pool 1: invalid token 0x21950000 freed​

Similar threads

Similar threads

Support SNBForums w/ Amazon

Sign Up For SNBForums Daily Digest

We value your privacy

not mesh client, can't update it's ip

kernel: FPM Pool 1: invalid token 0x21950000 freed