1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

Merlin, AiMesh & AP Mode

Discussion in 'Asuswrt-Merlin' started by smajor, Aug 20, 2019.

  1. smajor

    smajor New Around Here

    Joined:
    Jun 28, 2019
    Messages:
    4
    Hi all, I used to run Merlin on my RT-AC66U years ago... I've upgraded to 3 AC68Us with two as AiMesh nodes. I run the primary router in AP Mode. Is there any benefit to me using Merlin with these with this setup?
     
  2. Swistheater

    Swistheater Very Senior Member

    Joined:
    Jul 8, 2017
    Messages:
    1,210
    Location:
    Florida
    I would say the main advantage comes when running merlin on your aimesh router vs node, but you would want to take your primary router out of AP mode and run it as your main router and bridge any other routers in front of it to prevent double nat. you could then benefit from all the enhanced features that merlins firmware brings.
     
  3. Val D.

    Val D. Senior Member

    Joined:
    Jun 16, 2019
    Messages:
    350
    AP Mode has no routing. Your primary router must be in Router Mode.

    If you don't need any of Asuswrt-Merlin enhancements - No.
     
    Swistheater likes this.
  4. Swistheater

    Swistheater Very Senior Member

    Joined:
    Jul 8, 2017
    Messages:
    1,210
    Location:
    Florida
    this is merlin's current feature listing on the web site

    Code:
    Features
    With a few rare exceptions, Asuswrt-Merlin retains the features from the original stock Asus firmware.  In addition, the following features have been added or enhanced:
    System:
    Various bugfixes
    Performance optimizations to some CPU-bound components like OpenVPN
    Some components were updated to their latest versions, for improved stability and security
    User scripts that run on specific events such as firewall restart
    Cron jobs for scheduled tasks
    Customizable config files for router services
    Third party software through Entware, with an easy setup script
    SNMP support
    Nano text editor (for more user-friendly script edition)
    NTP daemon, which can synchronize your client devices
    TLS 1.3 support for some services (OpenSSL 1.1.1)
     
    Disk sharing:
    Optionally use shorter share names (folder name only)
    Disk spindown after user-configurable inactivity timeout
    NFS exporting of USB drives
    Allow or disable WAN access to the FTP server
    Updated Samba version (3.6), with SMB2.0 support
    TLS support for the FTP server
     
    Networking:
    Act as a SMB Master Browser
    Act as a WINS server
    SSHD support for key-based authentication
    Allows tweaking TCP/UDP connection tracking timeouts
    CIFS client support (for mounting remote SMB share on the router)
    User-defined options for WAN DHCP requests (required by some ISPs)
    Advanced OpenVPN client and server, based on code originally written by Keith Moyer for Tomato and reused with his permission.
    Support for new OpenVPN 2.4 features like NCP and LZ4
    Netfilter ipset module, for efficient blacklist implementation
    Wireless site survey page
    DNS-based Filtering, enforcing a specific DNS server, can be applied globally or per client
    Custom DDNS (through a user script)
    TOR support, individual client access control
    Policy-based routing for OpenVPN clients (based on source or destination IPs), sometimes referred to as "selective routing", or "split tunneling")
    DNSSEC validation
    fq_codel queue discipline for QoS (ARM-based models only)
    Full cone NAT support (RT-AC86U/RT-AX88U only)
    Detailed wireless troubleshooting information (RT-AC86U/RT-AX88U only)
    Modern DDNS client (In-a-Dyn), with https support
    DNS-over-TLS support
    Redirect NTP client queries to the router's own NTP daemon
     
    Web interface:
    Performance improvements
    Optionally save traffic stats to disk (USB or JFFS partition)
    Enhanced traffic monitoring: adding graphical charts, and traffic monitoring per client IP
    Hostname field on the DHCP reservation list and Wireless ACL list
    System info summary page
    Wifi icon reports the state of both radios
    Display the Ethernet port states
    Wireless site survey
    Advanced Wireless client list display, including automated refresh
    Redesigned layout of the various System Log sections
    Editable entries (on some pages)
    User-provided SSL certificate
     
     
    Some features first debuted in Asuswrt-Merlin have since been integrated/enabled in the official firmware:
    HTTPS configuration interface
    Persistent JFFS partition
    LED control - put your router in Stealth Mode by turning off all LEDs
    Turning WPS button into a radio on/off toggle
    Clicking on the MAC address of an unidentified client will do a lookup in the OUI database.
    WakeOnLan web interface (with pre-configured targets)
    Display active/tracked network connections
    VPN Status page
    DualWAN and Repeater mode (while it was still under development by Asus)
    Basic OpenVPN (client and server) support
    Configurable IPv6 firewall
    Improved compatibility with 3TB+ and Advanced Format HDDs
    SSH access
     
  5. OzarkEdge

    OzarkEdge Very Senior Member

    Joined:
    Feb 14, 2018
    Messages:
    1,545
    Location:
    USA
    I don't think so... unless Merlin adds some AP mode features of interest... I suspect most/all Merlin features are in router mode.

    OE
     
    Swistheater likes this.
  6. heysoundude

    heysoundude Senior Member

    Joined:
    Sep 20, 2016
    Messages:
    492
    the adblocking script Diversion is a pretty big benefit to most around here, as is the SkyNet firewall. FreshJR's QoS is a big deal too...