ASUS RT-AC86U AsusWrt-Merlin Firmware 382.1.0

The AsusWrt-Merlin firmware was developed with the primary goal of boosting the original ASUS firmware, fix bugs and also add new improvements. This package includes a customized firmware targeted at ASUS routers that brings various changes without modifying the interface of the original firmware.

Asuswrt-Merlin 382 was rebuilt from a clean GPL codebase, as merging the new 382 GPL on top of the existing code proved too difficult.

For simplicity, the following abbreviations are used below:

- AM380 = Asuswrt-Merlin 380.xxx
- AM382 = Asuswrt-Merlin 382.xxx
- Asus380 = Asus's 3.0.0.4.380_xxxx
- Asus382 = Asus's 3.0.0.4.382_xxxx

AM382.1 is based on AM380.68_4 merged on top of a clean 3.0.0.4.382_15098 GPL.

At this time, only the RT-AC86U, RT-AC88U and RT-AC3100 are supported by AM382. Other models will gradually be moved to AM382 as Asus upgrade them to the new 382 code base (and GPL code becomes available for them).

This changelog will focus on changes that happened between AM380.68 and AM382.1, or between Asus382_16466 and AM382.

Changes:

- NEW: Moved to Asus382 codebase. Some of the most important changes between Asus380 and Asus382:
- NEW: Trend Micro DPI engine, with two-way IPS
- NEW: networkmap service (now closed source)
- NEW: OpenVPN implementation (now closed source, not used by AM382)
- NEW: Numerous security enhancements throughout the code
- NEW: Merged with GPL 382_16466 (RT-AC86U).
- NEW: Added support for the RT-AC86U and its Broadcom HND platform (HND SDK from GPL 382_18219). Note that IPTraffic is not supported by this model due to its newer Linux kernel.
- NEW: Rewrote part of the OpenVPN implementation, as Asus's own is now closed source. Asuswrt-Merlin's OpenVPN code will now be independent of Asus's.
- NEW: Added support for inline CRLs when importing an ovpn file
- NEW: Added support for fullcone NAT (RT-AC86U)
- NEW: Added WiFi Radar (Broadcom's Visualization app) in the Wireless section. You must enable data collection on its Configuration page for all charts to work properly.
- NEW: Added option to disable the Asus NAT tunnel service under Other Settings -> Tweak. Not quite sure what this partly closed source service is for, but it eats a fair amount of CPU and RAM.
- NEW: Option on OpenVPN Server page to quickly choose between pushing LAN or LAN + Internet access (ported from Asus382)
- NEW: Option to select the bitsize to use (1024 or 2048) when automatically generating the OpenVPN server key/certs (ported from Asus382)
- CHANGED: Updated wget to 1.19.2 (fixing connectivity to some TLS 1.2 servers)
- CHANGED: SSH host keys are now stored in /jffs/ssl/ rather than nvram.
- CHANGED: SMB2 is enabled by default on RT-AC86U (no performance penalty on that platform)
- CHANGED: Moved UPnP Secure Mode setting from the Tweaks section to the WAN page, next to other UPnP settings.
- CHANGED: Moved "Modify key and certs" link to its own dedicated row and made it a button for improved visibility (OpenVPN client & server pages)
- CHANGED: Updated OpenVPN to 2.4.4.
- CHANGED: The firmware version check behaviour was slightly changed. The "Get Beta" checkbox will now check both the Beta and the Release channels for new version availability. Automatic scheduled checks will still only check the Release channel.
- CHANGED: Layout improvements to the SNMP, Login, and Operation Mode pages (patches by Alin Trăistaru)
- CHANGED: Report both the local client IP as well as the public/visible IP on the OpenVPN client page once a client is connected (same info that was already available on the VPN Status page).
- CHANGED: Moved Disk spindown settings to the System page, to match with Asus382 which now offers this feature.
- REMOVED: Obsolete/exotic HMAC digests for OpenVPN servers (to match with Asus' own supported list)
- REMOVED: "Custom" OpenVPN authentication mode (which probably nobody used or even understood).

Installation Notes:

- This custom firmware can be applied like any regular update.
- You should not need to reset to factory defaults.
- You can revert back to an original ASUS firmware at any time.
- Do not load a saved copy of your settings.

About Router Firmware:

Before you consider downloading this firmware, go to the system information page of the router and make sure that the currently installed version isn't either newer or matching this release.

Due to the large variety of router models and different methods for upgrading the device, it is highly recommended that you read and, above all, understand the installation steps before you apply the new firmware, even if you are a power user.

In theory, these steps shouldn't be much of a hassle for anyone, because manufacturers try to make them as easy as possible, even if they don't always succeed. Basically, you must upload the new firmware to the router through its administration page and allow it to upgrade.

If you install a new version, you can expect increased security levels, different vulnerability issues to be resolved, improved overall performance and transfer speeds, enhanced compatibility with other devices, added support for newly developed technologies, as well as several other changes.

If you're looking for certain safety measures, remember that it would be best if you perform the upload using an Ethernet cable rather than a wireless connection, which can be interrupted easily. Also, make sure you don't power off the router or use its buttons during the installation, if you wish avoid any malfunctions.

If this firmware meets your current needs, get the desired version and apply it to your router unit; if not, check with our website as often as possible so that you don't miss the update that will improve your device.