Wireless Network disappears daily

TheDaveAbides

Occasional Visitor
I've got an ASUS AX58U running Merlin (Current Version : 386.5_2), which is running nextDNS (I don't know what version, but it's probably due for an update). Also running is an OpenVPN server.

At least once a day, if not several times a day, devices lose connectivity. It'll be fine one moment, then suddenly the Mac will show no connection, phones will switch to cellular, and the home hub will be disconnected (which is wired). A minute or 2 later, everything is fine. I'm not sure what steps to take to diagnosing this problem. Maybe I'll disable the OpenVPN server, and update nextDNS to see if it improves. But I'm open to any other suggestion.s
 

ColinTaylor

Part of the Furniture
Look in the router's System Log for the time period the problem occurred.
 

TheDaveAbides

Occasional Visitor
I waited a couple days to gain some data and I have 2 system logs where a crash exists.

June 10th around 12:23:
Code:
Jun 10 12:21:13 dropbear[19218]: Login attempt for nonexistent user
Jun 10 12:21:24 nextdns[2762]: Connected XX.XX.XX.236:443 (con=19ms tls=27ms, TCP, TLS13)
Jun 10 12:22:26 dropbear[19370]: Login attempt for nonexistent user
Jun 10 12:22:40 nextdns[2762]: Connected XXX.XX.XX.163:443 (con=15ms tls=29ms, TCP, TLS13)
Jun 10 12:23:46 dropbear[19532]: Login attempt for nonexistent user
...[many seemingly random log entries from May 5]
.....[I assume the reboot]
Code:
Jun 10 12:26:04 ntpd: Initial clock set
Jun 10 12:26:04 rc_service: ntpd_synced 3053:notify_rc restart_diskmon
Jun 10 12:26:04 disk_monitor: Finish

June 14th around 8:22
Code:
Jun 14 08:22:23 kernel:  *** ERROR: [send_redir_page:625] # redir_url=http://192.168.50.1:80/blocking.asp?cat_id=89&mac= (There's tons of these errors)
Jun 14 08:22:34 nextdns[2750]: Connected XXX.X.XXX.163:443 (con=15ms tls=31ms, TCP, TLS13)
...[many seemingly random log entries from May 5]
.....[I assume the reboot]
Code:
Jun 14 08:24:22 ntpd: Initial clock set
Jun 14 08:24:22 rc_service: ntpd_synced 3033:notify_rc restart_diskmon
Jun 14 08:24:22 disk_monitor: Finish

I'm not sure where to go from here. I can expand if needed, but I don't see anything that jumps out at the immediate time of reboot. There's tons of those kernel error redir, and also tons of entries from May 5 in between everything. Maybe a cache is filling up? I'm really not sure.
 

ColinTaylor

Part of the Furniture
The May 5 entries indicates that your router was rebooted. That would explain why your devices are disconnecting.

So if it wasn't you deliberately rebooting the router then it's likely that it crashed. We'd have to see the complete unedited syslog to try and identify the cause. You can upload it to pastebin.com and provide a link if you want us to look at it.

Side note: The dropbear messages indicate that someone or something is trying to SSH into your router. Again, if that's not you then it's a security concern. Make sure that SSH access is not enabled for "LAN & WAN" (Administration - System). If it is then change it to "LAN only". If it's already set to LAN only then try to identify what it is on your LAN that is attempting to access the router.
 

SheikhSheikha

Senior Member
Although this does not describe your problem some of the info might perhaps be helpful to identify your problem.
On my AC5300 I experienced that the second 5Ghz crashed when DNS over TLS could not properly connect to the DNS server when my Openvpn client is on. Given the security of my vpn service I have switched off DNS over TLS and the 5GHz-2 has never crashed again.
 

TheDaveAbides

Occasional Visitor
So if it wasn't you deliberately rebooting the router then it's likely that it crashed. We'd have to see the complete unedited syslog to try and identify the cause. You can upload it to pastebin.com and provide a link if you want us to look at it.
I will look in to that when I get a chance and post the 2 logs. So I know, is there any security concern, posting logs of my home router with all the IP addresses and whatever else?

Thanks for the tip on SSH, I switched it to LAN only. I also have disabled OpenVPN, and it does seem more stable. Oddly enough, I think Safari on my Mac is also more reliable since I made that change.
 

ColinTaylor

Part of the Furniture
I will look in to that when I get a chance and post the 2 logs. So I know, is there any security concern, posting logs of my home router with all the IP addresses and whatever else?
The only thing you would normally hide is your public IP address if it appears in the logs. And also any personal DDNS information if you're using that and it's visible in to log. Obviously give the log quick look through in case there's something obvious (e.g your email address) that an add-on script might be putting out.

Thanks for the tip on SSH, I switched it to LAN only. I also have disabled OpenVPN, and it does seem more stable. Oddly enough, I think Safari on my Mac is also more reliable since I made that change.
Exposing SSH and OpenVPN servers to the internet on standard ports is asking for trouble. It's possible the router got overwhelmed trying to block the incoming traffic and that caused it to crash. Obviously it ought not to crash but, you know, bugs....
 

TheDaveAbides

Occasional Visitor
Here's a crash on June 14 around 8:22am

Thanks for all the tips. I changed the SSH settings and turned off OpenVPN. Crashes still happening once per day.
 

ColinTaylor

Part of the Furniture
Thanks for the file. The first thing I'd mention is that we're still seeing failed SSH login attempts to the router. Check again the SSH is only allowed from the LAN. If it is I strongly suggest that you find out what device on your LAN is doing this. It's possible (but unlikely) this is contributing to your problem.

As for the reboots, that's a bit of a mystery. I was expecting it to be caused by some process crashing, which is quite a common issue. However there is no indication that the router crashed. For all intents and purposes it looks like the router was turned off and on again. Check the power adapter and cables for loose connections.
 

TheDaveAbides

Occasional Visitor
Here's today's crash. I don't remember if yesterday's I had turned off SSH, but I know on this it is turned off.

The router is high up on the top of a desk hutch, and if I recall the power adapter cable is pretty short. So odds are it's connected to a cheap indoor extension. I will look in to getting a higher gauge extension.
 

ColinTaylor

Part of the Furniture
Here's today's crash. I don't remember if yesterday's I had turned off SSH, but I know on this it is turned off.
Thanks. Again, no obvious sign of a software problem.

The router is high up on the top of a desk hutch, and if I recall the power adapter cable is pretty short. So odds are it's connected to a cheap indoor extension. I will look in to getting a higher gauge extension.
Got any pets? :)
 

TheDaveAbides

Occasional Visitor
Got any pets?

Yes I do. A dog who sheds. But the power is behind the really heavy and difficult to move desk. But I will certainly check that out and also check out the router itself for airflow. It's certainly possible I don't dust up there enough.

Thanks again for all your help. I appreciate it.
 

Similar threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top