Web GUI down

[h0per]

Hello.

ASUS RT-AC86U
384.12
Log from externel SYSlog server - "All_2019-7-10-6_56_32.html" on attached

6:56 - router not responding on http://router.asus.com (192.168.51.1). All services work normally.
What happened before:
21:05 - all ok
22:56 - put Ipad to dock station on charge. Assumedly wifi on ipad switched to nonsleep mode
6:56 - browser not respond

helps reboot. In some cases, it himself goes out stupor after some time.

UPDATE: remote access still working (https); local access on port 80 is DOWN, on port 8443(https) still working

 

[martinr]

Welcome to the forum.

A little background please eg. other than upgrading to 384.12, have you made any other changes to the router recently, such as adding any scripts etc?

Which firmware were you running before 384.12?

How long have you had the router and is this the first problem you have had with it?

Fo you run any scripts or have anything plugged into the usb slots?

Thanks

 

[h0per]

It is new router. In use 2 months. Before was ac68u, there was no such thing.
I set up from scratch.
firmware before: stock (dont member rev), next merlin 384.11_2
DDNS custom script, no USB devices.
Problem from the start of use.

upload config from router - Settings_RT-AC86U.CFG

PS
what utility you read CFG ?

 

[Grisu]

you could use SSH and command ASUS-RT-AC68W:/tmp/home/root# nvram show | sort

 

[martinr]

It is new router. In use 2 months. Before was ac68u, there was no such thing.
I set up from scratch.
firmware before: stock (dont member rev), next merlin 384.11_2
DDNS custom script, no USB devices.
Problem from the start of use.

upload config from router - Settings_RT-AC86U.CFG

PS
what utility you read CFG ?

When you went from stock firmware to Merlin’s 384.11_2, did you reset the router to factory default settings AFTER flashing with the new firmware?

 

[Villodre]

I'm joining this thread. Recently upgraded from an RT-AC68U to an RT-AX88U, and first thing I did was flash WRT-Merlin and reproduce my configuration. I did not import my .cfg from the old router as I thought it may be a source for trouble. I'm using the last Merlin version as of now, I last upgraded weeks ago.

I've got HTTPS-only access enabled on it through the port 8888 and with LE configured. When I try to access the WebUI, both through the DDNS name and IP, Chrome refuses the connection with the error ERR_SSL_PROTOCOL_ERROR. I have SSH access enabled, and definitely sounds like something about SSL is misconfigured, although I was using this config without changing anything.

Looks like there is some trouble with the DNS:
https://check-your-website.server-daten.de/?q=villodre.asuscomm.com

And the router isn't responding to the ACME challenge:
http://villodre.asuscomm.com/.well-known/acme-challenge/1234

I can, of course, factory reset the router and simply configure it again but I'd like to learn how to solve it and report this issue if there's some kind of bug on it.

What info would you need to troubleshoot it?

 

[martinr]

I'm joining this thread. Recently upgraded from an RT-AC68U to an RT-AX88U, and first thing I did was flash WRT-Merlin and reproduce my configuration. I did not import my .cfg from the old router as I thought it may be a source for trouble. I'm using the last Merlin version as of now, I last upgraded weeks ago.

I've got HTTPS-only access enabled on it through the port 8888 and with LE configured. When I try to access the WebUI, both through the DDNS name and IP, Chrome refuses the connection with the error ERR_SSL_PROTOCOL_ERROR. I have SSH access enabled, and definitely sounds like something about SSL is misconfigured, although I was using this config without changing anything.

Looks like there is some trouble with the DNS:
https://check-your-website.server-daten.de/?q=villodre.asuscomm.com

And the router isn't responding to the ACME challenge:
http://villodre.asuscomm.com/.well-known/acme-challenge/1234

I can, of course, factory reset the router and simply configure it again but I'd like to learn how to solve it and report this issue if there's some kind of bug on it.

What info would you need to troubleshoot it?

Welcome to the forum.

Apologies if I have misunderstood, but have you enabled WAN access to your router? Even if you have limited WAN access to https only, it is quite a security risk. The only recommended way of accessing the router remotely is via VPN eg using the in-built OpenVPN Server.

So, with WAN access disabled, you could then allow, temporarily if you like, http access as well as https access, and confirm the results of accessing the web gui from the LAN.

 

[Villodre]

Welcome to the forum.

Apologies if I have misunderstood, but have you enabled WAN access to your router? Even if you have limited WAN access to https only, it is quite a security risk. The only recommended way of accessing the router remotely is via VPN eg using the in-built OpenVPN Server.

So, with WAN access disabled, you could then allow, temporarily if you like, http access as well as https access, and confirm the results of accessing the web gui from the LAN.

To be fair, I don't know if I left WAN access enabled, because I usually connect through a VPN. However, I'm on the LAN now and can't access it neither.

Edit: thanks for the welcome ;-)

 

[martinr]

To be fair, I don't know if I left WAN access enabled, because I usually connect through a VPN. However, I'm on the LAN now and can't access it neither.

Edit: thanks for the welcome ;-)

You cannot access the router even using http (after changing your setting to allow http) and using the router’s IP address?

You have tried other browsers? What error message does the browser give when trying normal http access?

 

[h0per]

...Chrome refuses the connection with the error ERR_SSL_PROTOCOL_ERROR. I have SSH access enabled, and definitely sounds like something about SSL is misconfigured, although I was using this config without changing anything.

...

try use https://www.asus.com/us/support/FAQ/1034294/

 

[h0per]

When you went from stock firmware to Merlin’s 384.11_2, did you reset the router to factory default settings AFTER flashing with the new firmware?

yes. was reset to default.
keep watching: after twenty-four hours all port of gui is down.
I suppose that the reason is an open session for a long time.
Im not logout.

UPDATE:
funny.
hackers intensified
141.98.80.115
60.191.52.254
91.193.179.228
122.228.19.80

 

[Villodre]

Thank you for answering.

You cannot access the router even using http (after changing your setting to allow http) and using the router’s IP address?

You have tried other browsers? What error message does the browser give when trying normal http access?

How may I revert back to HTTP? I've tried connecting via SSH and looking at the nvram flags, but haven't found the correct one.

try use https://www.asus.com/us/support/FAQ/1034294/

The root of my issue is that I can't access the web interface, so I can't follow any of those instructions.

It seems that the SSL part of the connection to the web GUI has misconfigured, but I don't know why.

 

[Jack Yaz]

Thank you for answering.


How may I revert back to HTTP? I've tried connecting via SSH and looking at the nvram flags, but haven't found the correct one.



The root of my issue is that I can't access the web interface, so I can't follow any of those instructions.

It seems that the SSL part of the connection to the web GUI has misconfigured, but I don't know why.

I think there's an http nvram variable with a value of 0,1,2 which correspond to http,https or both. I am unsure of the mapping off the top of my head

 

[Villodre]

Well, I've just re-enabled HTTP access.

It looks like my firmware version was 384.12_beta1-g1e0caccaa1, so a beta one.
The command sequence

Have you tried the command

service restart_httpd

Yes, and resetting the router too.

But I've just re-enabled HTTP access. It looks like my firmware version was 384.12_beta1-g1e0caccaa1, so a beta one.
The command sequence I used is:

nvram set http_enable=2
nvram commit
service restart_httpd

I don't know what happened and if it could be of any interest to Merlin. Of course, HTTPS connection still doesn't work but I'll look if there's a new firmware and will fiddle with the settings. OpenVPN works just fine and all the other router functionality as well, it's just that I wasn't able to log into the web interface.

Jack Yaz, you were on point ;-)

 

[Villodre]

Web UI through plain HTTP constantly asks for login on every click and won't let me upload a new firmware :-(

 

[h0per]

service restart_httpd

GUI Came to life.
it remains to find the cause.

 

[Villodre]

It looks like I'll have to factory reset, would've liked to know the cause of this issue.

 

[martinr]

It looks like I'll have to factory reset, would've liked to know the cause of this issue.

Manual and minimal reset guide is here
https://www.snbforums.com/threads/n...l-and-manual-configuration.27115/#post-205573

And, should you ever need it, the “Nuclear” reset guide is here

https://www.snbforums.com/threads/major-issues-w-rt-ac86u.56342/page-4#post-495710

along with L&LD’s other invaluable guides and resources.

 

[Villodre]

Manual and minimal reset guide is here
https://www.snbforums.com/threads/n...l-and-manual-configuration.27115/#post-205573

And, should you ever need it, the “Nuclear” reset guide is here

https://www.snbforums.com/threads/major-issues-w-rt-ac86u.56342/page-4#post-495710

along with L&LD’s other invaluable guides and resources.

Thanks a lot, immediately bookmarked

 

[h0per]

PS
what utility you read CFG ?

i find this
https://www.medo64.com/wrtsettings/