[Beta] Asuswrt-Merlin 384.10 Beta is now available

[L&LD]

RT-AC88U [Access Point] dirty flash from beta 2 to beta 3 as smooooth as silk.

Was looking for an update for my RT-AX88U currently running beta 2 (5640 version). Could have swarn that there was a beta 3 of it in the test build section this morning, but when I went back to download it, only beta 2 was there. Did I imagine that? lol.

I see it. It is a 70.2MB download, should be 'real'.

 

[JemTheWire]

Just checked again, and still shows in the Test Builds folder, beta 2, (5640) version. I have cleared browser cache, even used different browser and device.

Strange.

Screen capture a moment ago...

 

[L&LD]

Just checked again, and still shows in the Test Builds folder, beta 2, (5640) version. I have cleared browser cache, even used different browser and device.

Strange.

Have you tried on both the Main and the Mirror site?

 

[JemTheWire]

Yes,

I do see the 'ordinary' beta 3, it's the 5640 beta 3 build i was looking for.

 

[visortgw]

Yes,

I do see the 'ordinary' beta 3, it's the 5640 beta 3 build i was looking for.

It one in the same, but ax88 only.

 

[JemTheWire]

I know its for the AX only, i am currently running: RT-AX88U_384.10_beta2_5640-g26148798da_ubi.w

I am looking for the beta 3 variant, if it exists, as you say, it might not be a 'standalone version' now and have been rolled up into the general beta 3.

My query started because this morning while checking on my iPad, there was a beta 3 5640 showing in the test folder, now it's only beta 2. That's why I was asking if i imagined it!

 

[skeal]

I know its for the AX only, i am currently running: RT-AX88U_384.10_beta2_5640-g26148798da_ubi.w

The beta 3 for the AX88U includes the new gpl as the other special build had.

 

[JemTheWire]

That's great. Thank you.

You can see, hopefully, why I was a bit confused. I hope I was explaining myself OK.

edit: Beta 3 installed, running sweet, but only just flashed (the router that is, Lol)

 

[JohnSmith]

Upgrade AX88U from V384.9_Beta2_5640-g26148798da to V384.10_Beta3, via dirty flash. All appears to be working, except for the following:

• Networkmap listing may be unreliable. (Bug in Asus's code) - RMerlin's Changelog
• Under "Network Map" |"Clients", all my devices names that I had entered manually are gone, and only show either Manufacture Name or MAC Address in "Clients Name" Area
• Under "Network Map" | "Clients" | "Client Status", no wireless devices show under the "Wireless" tab, but under "System Log" | "Wireless Log", my wireless devices show and are connected
• FreshJR QOS V8.8 was removed and Merlin Classification TAB was added in
• Under "Adaptive QOS" | "QOS", QOS Configuration was reverted to defaults and did not keep my customization settings
• Under "Adaptive QOS" | "Bandwidth Monitor", any of my "Network Map" List clients that I normally had set from "Highest" to "Lowest" were all back to "Default" color
• Under "Traffic Analyzer" | "Traffic Monitor" | Set to "Monthly", I notice that only the current month of March is showing, even though under "Daily", I have traffic monitor graphs for February, not sure why they are not showing up in the "Monthly" graph

I then took a look at my /jffs folder on my external USB drive, and noticed that the /jffs/scripts folder is completely gone, which possibly relates to a lot of the above issues. Any ideas?

Edit: possible corruption occurred on /jffs/scripts folder, as I tried to reboot router multiple times, as it was no longer available, and I could not even recreate the "scripts" folder in the /jffs folder, so under "Administration" | "System" | "Persistent JFFS2 partition" ran "Format JFFS partition at next boot" and recreated all scripts and configs and up and running again

 

[RMerlin]

The networkmap issues are well known and outside of my control.

Adaptive QoS custom settings disappearing is also a known issue, I haven't had the chance to track it down yet, but it's been there for a long time.

Loss of jffs content might be caused by corruption of that partition content. The JFFS partition hasn't changed size on the RT-AX88U, so its content should normally survive firmware upgrades. Try just rebooting your router in case it was just failure to mount that partition properly at boot time.

 

[RMerlin]

Guys, please do some testing surrounding the OpenVPN key/certs, ensuring that you can still properly manage them: adding, removing (new with beta 3 - just clear the field to remove it), editing, etc...

Also, any further feedback on OpenVPN performance following the switch to OpenSSL 1.1.1?

And if you previously had issues with the webui over https, does it seem more stable with beta 3 (now that I added the emailAddress field that Firefox likes seeing, otherwise it frequently stalls while loading the router ui)|?

Thanks!

 

[Gar]

No problems at all for flash from B2 to B3.

Edit: I can finally login via https thru firefox, although it is slow.

 

[AntonK]

Guys, please do some testing surrounding the OpenVPN key/certs, ensuring that you can still properly manage them: adding, removing (new with beta 3 - just clear the field to remove it), editing, etc...

Also, any further feedback on OpenVPN performance following the switch to OpenSSL 1.1.1?

And if you previously had issues with the webui over https, does it seem more stable with beta 3 (now that I added the emailAddress field that Firefox likes seeing, otherwise it frequently stalls while loading the router ui)|?

Thanks!

I get this error when I try to connect to my router via https. I don't know what it means, but I would need to created an exception to allow Firefox to connect to the router via https. Via http is no problem. My desktop is wired to my router.

 

[skeal]

I get this error when I try to connect to my router via https. I don't know what it means, but I would need to created an exception to allow Firefox to connect to the router via https. Via http is no problem. My desktop is wired to my router.

It means your browser doesn't have the .crt for the https login.

 

[JGrana]

And if you previously had issues with the webui over https, does it seem more stable with beta 3 (now that I added the emailAddress field that Firefox likes seeing, otherwise it frequently stalls while loading the router ui)|?

Thanks!

I had installed Beta 2 just yesterday afternoon on an AC3100. Later in the day Firefox was stalling on https handshakes. I switched over to Chrome and no problem.
Installed Beta 3 this morning, Firefox has been fine. So far so good.

 

[AntonK]

It means your browser doesn't have the .crt for the https login.

And how does one go about acquiring the .crt for the https login (he asked hesitantly)?

 

[MarkRH]

And how does one go about acquiring the .crt for the https login (he asked hesitantly)?

You just need to click "Accept the Risk and Continue" and add an exception for the certificate. It thinks the certificate is self-signed due to it being from an unknown authority "ASUSWRT-Merlin". If there's some way to add "ASUSWRT-Merlin" to the listed of trusted authorities so you don't have to do this every time, I'm not sure how.

 

[Butterfly Bones]

Guys, please do some testing surrounding the OpenVPN key/certs, ensuring that you can still properly manage them: adding, removing (new with beta 3 - just clear the field to remove it), editing, etc...

Also, any further feedback on OpenVPN performance following the switch to OpenSSL 1.1.1?

And if you previously had issues with the webui over https, does it seem more stable with beta 3 (now that I added the emailAddress field that Firefox likes seeing, otherwise it frequently stalls while loading the router ui)|?

Thanks!

I removed my OpenVPN client configs on # 1 & 3, created new ones on 2 & 4, then deleted those and reconfigured 1 & 3 again. Checking every time the key/crt were deleted and created correctly in /jffs/openvpn/.

I cannot tell any better or worse OpenVPN performance with this or what I had previously. My Spectrum ISP is very poor, giving only 70M on their advertised 100M plan (no other choices, take it or leave it). tl;dr all good

https has worked fine for me on Chrome and Firefox on my Linux box that is all I run. I have generated a cert from pixelserv-tls and imported it into my AC86U as well as all iOS or Android clients and Chrome and Firefox browsers.

I use an IPsec VPN server if I need to access my router when away from home, tested over cellular network - it is solid, no issues.

 

[Butterfly Bones]

And how does one go about acquiring the .crt for the https login (he asked hesitantly)?

Here. https://www.snbforums.com/threads/firefox-https-connection.44787/#post-389140

 

[RMerlin]

You just need to click "Accept the Risk and Continue" and add an exception for the certificate. It thinks the certificate is self-signed due to it being from an unknown authority "ASUSWRT-Merlin". If there's some way to add "ASUSWRT-Merlin" to the listed of trusted authorities so you don't have to do this every time, I'm not sure how.

You have to manage your own Certificate Authority, then import that CA certificate in all your clients.

I use XCA to do this on my LAN:

https://www.snbforums.com/threads/tool-to-manage-your-own-certificate-authority.45062/

The nice thing with this is you can then sign your own certificate for all other devices on your LAN (for example if you have a NAS), then any browser already having your root CA imported will automatically recognize and accept that device's certificate without warnings.


People using pixelserv-tls can also use a CA generated by it.