Beta Asuswrt-Merlin 3006.102.4 Beta is now available

[dave14305]

I wonder what's different.

Maybe it’s the favicon GET? I’ll strace the successful login a bit later.

 

[ExtremeFiretop]

Maybe it’s the favicon GET? I’ll strace the successful login a bit later.

Well your on top of something. If I give it a dummy favicon to serve. Now I get one step closer!

But what account and password?

 

[ExtremeFiretop]

But it works fine from my Windows device now with the dummy favicon!

 

[mavortium]

After installing the Beta 3, I have lost access to my cable modem at http://192.168.100.1/ . My network router runs on http://192.168.50.1/ and following. Did the update drop or change anything that would cause that bit of weirdness?

OK, this may seem silly, but try clicking on the icon for internet status on the network map page and give it a minute.

 

[AlbumMan]

After installing the Beta 3, I have lost access to my cable modem at http://192.168.100.1/ . My network router runs on http://192.168.50.1/ and following. Did the update drop or change anything that would cause that bit of weirdness?

No problem here and am also using B3. Perhaps you are using a VPN client on the PC? I am, and had to add the modem address to the Smart Route settings in Privado.

 

[Howard_inGA]

No problem here and am also using B3. Perhaps you are using a VPN client on the PC? I am, and had to add the modem address to the Smart Route settings in Privado.

Hit the nail first swing! I stopped the VPN, and could once again log into the modem. I was using PC local Nord, but I'm not sure why that shut down log in?
Thanks!!

 

[Swistheater]

Maybe it’s the favicon GET? I’ll strace the successful login a bit later.

Ah, yes, of course, the mysterious favicon GET. That’s definitely the culprit. Good luck with your strace wizardry!

Well your on top of something. If I give it a dummy favicon to serve. Now I get one step closer!

But what account and password?

View attachment 65542

Looks like you are on to something!

 

[AlbumMan]

Dirty update 4 days ago from beta2 to beta 3. No big issues but did notice the following two things:
* After the flash/reboot, the LED's stayed OFF and were OFF before the flash. I seem to recall every time flashing they would turn back on and would have to turn them off again. I like that.
* And I just noticed the Wifi Agile Multiband setting is no longer there when flashing from 388.8_4 to 3006.102.4 (and betas) probably because I did not do a reset as I should have. It has always been Disabled anyway but will do a reset when the release comes out to make it right.

 

[Sydyt0635]

On RT-AX88u Pro, tried to upgrade from 3006.1002.4 beta2 to beta3. Only issue is find nowhere of AstrillVPN Applet Tab but only see AstrillVPN running well at back.

 

[ColinTaylor]

I was using PC local Nord, but I'm not sure why that shut down log in?

Er.. 'cos that's what a VPN is designed to do. It creates an encrypted tunnel between your PC and the VPN provider through which all your traffic flows. 192.168.100.1 is not publicly accessible from the internet.

 

[CaptainSTX]

Asuswrt-Merlin 3006.102.4 Beta is now available. There are a number of significant things to note with this release:

1) BCM4912 models are now migrated to this 3006 code base. This includes the following device list:

• GT-AX6000
• zenWifi Pro XT12
• GT-AX11000 Pro
• GT-AXE16000
• RT-AX86U Pro
• RT-AX88U Pro

2) New addition - the RT-BE92U is now supported. Note that the GPL used for this initial support suffers from some CPU-related issues, so support for this model at this time should be considered EXPERIMENTAL. If you lose the ability to access the router, then power cycle it, that usually solves it. Beta 2 updated that device's GPL to 102_37526, which should be stable.

3) Beside the addition of new models, the focus of this release is the merge of GPL code (I currently need to manage three separate GPL versions for this release.....), updated components, and a number of fixes.

Update (3-May): 3006.102 Beta 3 is now available. Changes since Beta 2:
Wifi 7:

40adf8f5d5 Bump revision to 3006.102.4 beta 3
b4d835a202 Updated documentation
9b75a69006 webui: Add Control-D servers to DoT json database
10a2737649 webui: fix DDNS notification bell on main index page
c37ffe2268 webui: update policy handling for Boostkey support; remove GT-AC2900 boostkey handling
29a6b7677a webui: re-add option to hide DHCP/RA queries, lost in the 102_36216 GPL merge
8ea42a46d7 webui: minor chart tweaks to Sysinfo
879c3d2f13 webui: move option to enable custom scripts to the Basic table; remove dead JFFS2-related code
ab1d87aaf4 Move "Redirect webui access to www.asusrouter.com" setting to the new Tweaks page
bae1c058a9 webui: rework Tools menu
ce67ba47a7 httpd: fix get_header_info returning truncated hostnames in certain scenarios
b63d4eaab6 webui: Ignore ASUS remote DoT json database on Multiservice WAN page
513a8a715d Updated documentation
f1f82d8e56 lighttpd: backport fixes from 102_37526
8d7f3bb437 rc: implement DOT blocking for SDN with DNS Director enabled
32df2f61de rc: make Global DNSDirector rule use REDIRECT target instead of DNAT

Wifi 6 additional changes:

1b846fdb30 webui: Escape single and double quotes in key/SSID on Wireless page and networkmap Wireless frame
1585de5f04 libmnl: fix invalid symlinks for installed library

Update (19-Apr): 3006.102.4 Beta 2 is now available. Changelogs for all three branches:

Wifi 6:

fe104c9774 (3006.102) webui: updated DNS Director notes
dcef132c02 Update RT-BE96U and GT-BE98_PRO wireless dongle driver to 102_37812 builds
1cc4127a8d miniupnpd: fix building (missing header file)
85c9d353af miniupnpd: update to 2.3.8
198e89a5e8 rc: move service-event-end back within again: loop
170d2e48b5 rc: Have DNS Director "Router" mode use REDIRECT target instead of DNAT to LAN IP in iptables.
8d40fbd7f2 Bumped revision to beta 2
879ad023d4 webui: fix missing button to remove Offline Client List entries
c77742afb1 webui: cleanup sysdep Wireless pages that are no longer existant

Wifi 7:

fe104c9774 (3006.102) webui: updated DNS Director notes
dcef132c02 Update RT-BE96U and GT-BE98_PRO wireless dongle driver to 102_37812 builds
1cc4127a8d miniupnpd: fix building (missing header file)
85c9d353af miniupnpd: update to 2.3.8
170d2e48b5 rc: Have DNS Director "Router" mode use REDIRECT target instead of DNAT to LAN IP in iptables.
8d40fbd7f2 Bumped revision to beta 2
879ad023d4 webui: fix missing button to remove Offline Client List entries
c77742afb1 webui: cleanup sysdep Wireless pages that are no longer existant

RT-BE92U:

fe104c9774 (3006.102) webui: updated DNS Director notes
dcef132c02 Update RT-BE96U and GT-BE98_PRO wireless dongle driver to 102_37812 builds
1cc4127a8d miniupnpd: fix building (missing header file)
85c9d353af miniupnpd: update to 2.3.8
170d2e48b5 rc: Have DNS Director "Router" mode use REDIRECT target instead of DNAT to LAN IP in iptables.
8d40fbd7f2 Bumped revision to beta 2
9fe89ff9b6 httpd: fix CPU temperature report on BCM4916
cb50c47eff Merge RT-BE92U binary blobs from 37526
789a111d63 Merge with GPL 102_37526 (RT-BE92U)
879ad023d4 webui: fix missing button to remove Offline Client List entries
c77742afb1 webui: cleanup sysdep Wireless pages that are no longer existant

Changelog:

3006.102.x (xx-xxx-xxxx)
  - NOTE: If migrating from a 3004 firmware, only the first Guest
          Network will be migrated - any additionnal GN must be
          manually reconfigured.
  - NOTE: If migrating from a 3004 firmware, the Wireless Scheduler
          will need to be manually reconfigured if you were using
          it.
  - NOTE: As a reminder, the ROG variant of the webui is not
          supported in the 3006 firmware series, as maintaining
          two separate interfaces is too much extra work.

  - NEW: Moved RT-AX86U_PRO, RT-AX88U_PRO, ZenWifi Pro XT12,
         GT-AX6000, GT-AXE16000 and GT-AX11000_PRO to the
         3006 firmware series.
  - NEW: Added RT-BE92U support, based on GPL 102_37526.
  - UPDATED: Merged GPL 3006.102_36521 for Wifi 6 models (Wifi 7
             devices other than the RT-BE92U are still on
             102_37346).
  - UPDATED: RT-BE96U and GT-BE98_PRO wifi driver to the build
             from 102_37812.
  - UPDATED: OpenVPN to 2.6.14.
  - UPDATED: miniupnpd to 2.3.8.
  - UPDATED: amtm to 5.2 (decoderman)
  - UPDATED: dnsmasq to 2.91.
  - UPDATED: dropbear to 2025.87.
  - CHANGED: Setting DNS Director to "Router" will now always
             redirect to the router's own IP.  Previously it
             would redirect to the first DNS server configured
             on the DHCP page (which defaults to the router
             itself).
             If you need DNS Director to redirect to an IP
             configured in your DHCP settings, use a Custom DNS
             entry in DNS Director.  This makes it more consistant
             with what the name implies, and was also necessary
             for improved Guest Network support.
  - CHANGED: Added Control-D servers to DNS-over-TLS
             presets (dave14305)
  - CHANGED: Tools category renamed System Info.
  - CHANGED: Tools -> Other Settings were moved to new tabs
             (Administration -> Tweaks, and
             Traffic Analyzer -> Settings).
  - CHANGED: Moved "Redirect to asusrouter.com " to the new
             Tweaks tab, and moved "Enable JFFS Custom Scripts"
             to the Basic Config section on the System page.
  - FIXED: Missing hostname on Wireless Log for MLO-capable Wifi 7
           clients.
  - FIXED: CVE-2024-9143 in OpenSSL (Debian backport by RSDNTWK)
  - FIXED: CVE-2024-13176 in OpenSSL (Ubuntu backport by RSDNTWK)
  - FIXED: Guest Networks on an isolated VLAN with DNS Director set
           to "Router" would fail to do any name resolution (both
           for whole network and for specific clients).
  - FIXED: Wrong tab selected when clicking on "Profile" on the
           VLAN page (dave14305)
  - FIXED: Missing button to remove entries in the Offline Client
           List (dave14305)
  - FIXED: CVE-2025-2492 in AiCloud (backport from upstream)
  - FIXED: DoT access wasn't properly blocked when appropriate
           for Guest Networks.
  - FIXED: DNS-over-TLS presets overwritten by Asus' own (dave14305)
  - FIXED: Networkmap system status frame failing to load when
           accessing the router with some particular hostnames.
  - FIXED: Missing option to disable logging of DHCP/RA queries.

Make sure you do read the changelog, especially if migrating from 3004 to 3006. I documented the known recommendations from Asus' own changelog, but there might be further compatibility issues arising when upgrading from 3004. In particular, I would recommend disconnecting and reconnecting any AiMesh node. Also, double check Wireless settings.

For this beta release I need test feedback for:

• The models that were migrated from 3004
• General RT-BE92U performance
• The Wireless Log page should be more accurate on Wifi 7 devices, the root problem of missing/incorrect hostnames having been resolved

Please keep discussions on this specific beta release.


Downloads are here.
Changelog is here.

Upgraded from B2 - B3 with no issues. The GUI still offers shows the option to use WPA/WPA2 with AES-TKIP but it really isn't available and defaults to AES onlly. Every IoT device except my Honeywell thermostat works without having TKIP enabled. Run the thermostat on its own AP with this option enabled.

 

[gioele]

Dirty upgrade from RT-AX88U_PRO 3004.388.8_4 to 3006.102.4-beta3 performed yesterday. So far, everything seems stable. The only issues I'm encountering are with some third-party scripts.

Some scripts like scMerlin and vnStat display correctly under Addons in the web UI. However, others — such as connmon, ntpMerlin, and spdMerlin — are broken: the left menu does not appear, and the page doesn't load data correctly.

I've tried deleting old data, uninstalling and reinstalling the scripts, but the issues persist. I also cleared the browser cache and tested in private/incognito mode, with the same results.

For the scripts that aren't working, I'm seeing the same JavaScript errors.

 

[bennor]

Some scripts like scMerlin and vnStat display correctly under Addons in the web UI. However, others — such as connmon, ntpMerlin, and spdMerlin — are broken: the left menu does not appear, and the page doesn't load data correctly.

You may need to update to the "develop" version of some scripts that fix the broken menus and other issues on the 3006.102.x Asus-Merlin firmware.

Edit to add: See the following post in a discussion in the Addons subforum for a summary of working and non working add-on scripts with the 3006 firmware:
https://www.snbforums.com/threads/c...ons-with-gt-be98-pro.90657/page-7#post-947006
For example:

connmon: Functional on 3006 (with the develop branch)
ntpMerlin: Functional on 3006 (with the develop branch)
spdMerlin: Functional on 3006 (with the develop branch)

 

[gioele]

You may need to update to the "develop" version of some scripts that fix the broken menus and other issues on the 3006.102.x Asus-Merlin firmware.

Edit to add: See the following post in a discussion in the Addons subforum for a summary of working and non working add-on scripts with the 3006 firmware:
https://www.snbforums.com/threads/c...ons-with-gt-be98-pro.90657/page-7#post-947006
For example:

I switched to the develop version and everything works now. Thanks for pointing that out. I had quickly looked through the forums for each script but didn’t see that information.

 

[jk7gr]

Well your on top of something. If I give it a dummy favicon to serve. Now I get one step closer!

But what account and password?

View attachment 65542

I am not so technical so can you please explain how you give a dummy favicon? Thank you!

 

[ExtremeFiretop]

I am not so technical so can you please explain how you give a dummy favicon? Thank you!

I'm not sure how much of a technical explanation I should give, so bare with me if I over-explain.
The simple solution for me was to copy a "favicon.ico" file into the following directory on the router:

/tmp/uamsrv/www

I used WinSCP to quickly copy it there, then issued the following commands to restart the crashed service:

killall uamsrv
/usr/sbin/uamsrv -f /tmp/uamsrv.conf &

That time, I was able to login on my Windows device successfully via the captive portal once the file was in that location and the service was started.
Incase you don't know, a Favicon is basically this:

It's the little image on your tabs of the website your visit, now why this is mission critical and crashes the service if it's missing; I'm not sure...
It kind of feels like a default should be there, or maybe ASUS planned on giving the users the option to select a favicon which isn't implemented?

If you aren't sure how to make a Favicon you can go to websites like this: https://favicon.io/
Others like this allow you to download already made favicons: https://icons8.com/icons/set/favicon

Once you have the favicon you can name it "favicon.ico" and upload it to that directory:

/tmp/uamsrv/www

You should then see it function for windows devices and apple devices.

Sadly my Android device still gives me the "invalid account and password" with a password not configured or with one configured; that seems to be it's own separate issue though.
On a reboot you will likely lose the favicon again, so it's really only a temporary fix unless you script something to copy it into that directory on every reboot like I've done...

You can use mine if you'd like; I uploaded it to Github here temporarily until the firmware resolves the issue.
Run this command to download it:

curl --retry 3 "https://raw.githubusercontent.com/ExtremeFiretop/CaptivePortal_Workaround/refs/heads/main/favicon_copy.sh" -o "/jffs/scripts/favicon_copy.sh" && chmod 755 "/jffs/scripts/favicon_copy.sh"

And this to install it:

sh /jffs/scripts/favicon_copy.sh install

Once the firmware fixes the issue you can remove the script and hook with:

sh /jffs/scripts/favicon_copy.sh uninstall

 

[dave14305]

now why this is mission critical and crashes the service if it's missing; I'm not sure...

I believe it wanted to give a 404 error, which the conf file wanted to redirect to a non-existent index.html file. Perhaps the bad redirect crashed it.

 

[ExtremeFiretop]

I believe it wanted to give a 404 error, which the conf file wanted to redirect to a non-existent index.html file. Perhaps the bad redirect crashed it.

I managed to solve my error with the android device by setting the password to something more simple for the Captive Portal UI.
Without giving my actual password; it previously looked something like this in complexity: GatewayEntry2021!

When I set it something similar to this Complexity: HAHATest

It logged me in on my Android device:

So; now between the scripted fix for the Favicon.ico, and the changed password complexity, everything is working as expected now.

 

[Treadler]

The Controld DNS DoT presets for some IPv4 servers are giving an IPv6 suggestion.

 

[jk7gr]

I'm not sure how much of a technical explanation I should give, so bare with me if I over-explain.
The simple solution for me was to copy a "favicon.ico" file into the following directory on the router:

/tmp/uamsrv/www

I used WinSCP to quickly copy it there, then issued the following commands to restart the crashed service:

killall uamsrv
/usr/sbin/uamsrv -f /tmp/uamsrv.conf &

That time, I was able to login on my Windows device successfully via the captive portal once the file was in that location and the service was started.
Incase you don't know, a Favicon is basically this:

View attachment 65570

It's the little image on your tabs of the website your visit, now why this is mission critical and crashes the service if it's missing; I'm not sure...
It kind of feels like a default should be there, or maybe ASUS planned on giving the users the option to select a favicon which isn't implemented?

If you aren't sure how to make a Favicon you can go to websites like this: https://favicon.io/
Others like this allow you to download already made favicons: https://icons8.com/icons/set/favicon

Once you have the favicon you can name it "favicon.ico" and upload it to that directory:

/tmp/uamsrv/www

You should then see it function for windows devices and apple devices.

Sadly my Android device still gives me the "invalid account and password" with a password not configured or with one configured; that seems to be it's own separate issue though.
On a reboot you will likely lose the favicon again, so it's really only a temporary fix unless you script something to copy it into that directory on every reboot like I've done...

You can use mine if you'd like; I uploaded it to Github here temporarily until the firmware resolves the issue.
Run this command to download it:

curl --retry 3 "https://raw.githubusercontent.com/ExtremeFiretop/CaptivePortal_Workaround/refs/heads/main/favicon_copy.sh" -o "/jffs/scripts/favicon_copy.sh" && chmod 755 "/jffs/scripts/favicon_copy.sh"

And this to install it:

sh /jffs/scripts/favicon_copy.sh install

Once the firmware fixes the issue you can remove the script and hook with:

sh /jffs/scripts/favicon_copy.sh uninstall

Great work mate. I confirm the workaround. Thank you!