E3000 patch for WPA2 Krack

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3  Next
Author Message
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 20:03    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
jwh7 wrote:
Nemisis wrote:
If I use the "k3x build", is it enough to do a 30-30-30 run before and after the update? Can I easily switch from the K2.6 version to the "k3x build"?

Is the K2.6 version only patched in a makeshift way?

Yes, the router is my gateway to the modem of the provider (cable Germany - Provider).
Old kernels get end-of-life'd and stop receiving updates.

See here; I'd say GUI resets (after) are fine unless you run in to issues. You could try going straight to the latest k3x E3000 build, since it is a trailed build, but I've not seen reports of others doing that.


hello jwh7,

is there an "End of LifE" date for the K2.6 kernel ???
I was still searching for comparisons and came across an interesting report.

https://www.stevejenkins.com/blog/2017/01/dd-wrt-k26-vs-k3x-vs-tomato-router-firmware-head-to-head-on-linksys-e4200/

The report is from 2017 and explicitly shows that the K.3x kernel is much slower in speed than the K2.6.
Especially when we are talking about routers of the E series.
The test ran on a Linksys E4200 and I even only have one E3000.

If the "End of Life" date for the Kernel K2.6 lasts another year or two, I'd be better off with the K2.6. on the way or?

best regards
Chris
Sponsor
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2318
Location: Canada

PostPosted: Sat Dec 30, 2017 20:12    Post subject: Kernel Reply with quote
The 2.6 Linux kernel is no longer maintained, Brainslayer and other non-ddwrt devs backport some fixes to it (and the 2.4 kernel) to fix specific bugs and vulnerabilities.

(Click the show button)
https://en.wikipedia.org/wiki/Linux_kernel#2.6.x.y_releases

As for K3X, I prefer the K3X kernel on my routers because it has better support for USB. It is also still supported, at least the 3.18 kernel that most routers use is. 3.10 is used in some, that is EOL now though.

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x3 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
TP-Link TL-WDR3600 v1 - WDS Station
TP-Link 841nd v8 - NU
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - NU
D-Link 862L A1 x2 - WDS Station
Netgear WNDR3700v2 - NU
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 20:24    Post subject: Re: Kernel Reply with quote
ian5142 wrote:
The 2.6 Linux kernel is no longer maintained, Brainslayer and other non-ddwrt devs backport some fixes to it (and the 2.4 kernel) to fix specific bugs and vulnerabilities.

(Click the show button)
https://en.wikipedia.org/wiki/Linux_kernel#2.6.x.y_releases

As for K3X, I prefer the K3X kernel on my routers because it has better support for USB. It is also still supported, at least the 3.18 kernel that most routers use is. 3.10 is used in some, that is EOL now though.



hello ian5142,

thanks for the information.
that means the LTS version for 2.6 is actually already expired ???
or does it retain the unofficial LTS status ??

USB would not be so important to me because I do not have USB hardware on my E3000.
For Filesahring I have a separate NAS and I do not have a printer on the router.

best regards
Chris
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 20:34    Post subject: Reply with quote
do I have to do all 3 steps during the update? In the tutorial it seems like these 3 steps have to be done on the very first flash.
But I'm already on a * nv60 build.

I just do not want to run the risk of brick my router.
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2318
Location: Canada

PostPosted: Sat Dec 30, 2017 22:01    Post subject: NV 60 Reply with quote
If you are already on an NV60 build, you should be able to flash a newer NV60 build. Just make sure that it is smaller than 8MB (8 000 000 bytes).

Also, if you are coming from a build older than about 6 months, I would suggest a reset to defaults.

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x3 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
TP-Link TL-WDR3600 v1 - WDS Station
TP-Link 841nd v8 - NU
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - NU
D-Link 862L A1 x2 - WDS Station
Netgear WNDR3700v2 - NU
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sat Dec 30, 2017 23:44    Post subject: Re: NV 60 Reply with quote
ian5142 wrote:
If you are already on an NV60 build, you should be able to flash a newer NV60 build. Just make sure that it is smaller than 8MB (8 000 000 bytes).

Also, if you are coming from a build older than about 6 months, I would suggest a reset to defaults.


hello ian5142,

I was aware of a higher version with K2.6.
I may have expressed this badly.
I think rather if I follow the suggestion to update to K3X.

I read through the manual but am unsure of step 1.
Since I'm already on a * nv60k version, I'm not allowed to install a version without "nv60" in the name anymore.
But in Step 1 I should do this.
I would not but that the router ** BRICK

best regards
Chris
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2318
Location: Canada

PostPosted: Sun Dec 31, 2017 0:36    Post subject: NV60 Reply with quote
I just realized that there is no NV60 build for K3X. I guess in that case, just flash the e3000 mega build, from the K3X folder.

What version of dd-wrt are you running now?

The upgrade path I would take would be:
1. Flash 34311 - K26 NV60 mega, then reset to defaults
2. Flash 34311 - K3X e3000 mega, then reset to defaults
3. Configure all of your settings manually.

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x3 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
TP-Link TL-WDR3600 v1 - WDS Station
TP-Link 841nd v8 - NU
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - NU
D-Link 862L A1 x2 - WDS Station
Netgear WNDR3700v2 - NU
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sun Dec 31, 2017 0:55    Post subject: Re: NV60 Reply with quote
ian5142 wrote:
I just realized that there is no NV60 build for K3X. I guess in that case, just flash the e3000 mega build, from the K3X folder.

What version of dd-wrt are you running now?

The upgrade path I would take would be:
1. Flash 34311 - K26 NV60 mega, then reset to defaults
2. Flash 34311 - K3X e3000 mega, then reset to defaults
3. Configure all of your settings manually.


hello ian5142,

i have now a dd-wrt.v24-*****_NEWD-2_K2.6_big-nv60k.bin Version on a Linksys E3000
With this *nv60k Version may I only install versions with *nv60k in the name.
Otherwise there is danger to the router too brick.

the tutorial says, however:

K3.x upgrade

To update your E3000 unit to K3.x. These EXACT builds MUST be used to upgrade to K3.x for the first time. Any other builds will soft brick the device....Start with a hard reset then follow the steps below.

Three steps required to get K3.x on the unit:

1 - K2.6_21676_mini_e3000 ....wait 5 minutes....hard reset.....next load from the GUI

2 - K2.6_21676_mega_nv60K ....wait 5 minutes....hard reset.....next load from the GUI

3 - K3.x_21676_mega_nv60K...wait 5 minutes....hard reset.

....after that you can put a newer K3.x_mega build on directly...no need for nv60K builds any longer.


Step 1 is a version without nv60K. --> Here I see a danger for my router which already has an nv60K version.
The rest (Step 2 and Step 3) is fine since this nv60K versions are.

Does not one follow the instructions ->Any other builds will soft brick the device.

I do not know if the tutorial assumes an already installed nv60K version or a stock version ?!


best regards
Chris
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2318
Location: Canada

PostPosted: Sun Dec 31, 2017 1:01    Post subject: Steps Reply with quote
Start at step 2 then.

Then add a step to upgrade to the latest (with e3000 in the name, K3X).

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x3 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
TP-Link TL-WDR3600 v1 - WDS Station
TP-Link 841nd v8 - NU
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - NU
D-Link 862L A1 x2 - WDS Station
Netgear WNDR3700v2 - NU
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
jwh7
DD-WRT Guru


Joined: 25 Oct 2013
Posts: 2670
Location: Indy

PostPosted: Sun Dec 31, 2017 1:15    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
Nemisis wrote:
The report is from 2017 and explicitly shows that the K.3x kernel is much slower in speed than the K2.6.
Especially when we are talking about routers of the E series.
The test ran on a Linksys E4200 and I even only have one E3000.
Yes that was from January 2017, and SFE accelerated NAT was added in late summer, making k3x faster than k2.6. See the SFE link in my signature. Regarding k2.6 EOL, see: http://lkml.iu.edu/hypermail/linux/kernel/1603.1/03938.html
_________________
# NAT/SFE/CTF: limited speed w/ DD # Repeater issues # DD-WRT info: FAQ, Builds, Types, Modes, Changes, Demo #
OPNsense x64 5050e ITX|DD: DIR-810L, 2*EA6900@1GHz, R6300v1, RT-N66U@663, WNDR4000@533, E1500@353,
WRT54G{Lv1.1,Sv6}@250
|FreshTomato: F7D8302@532|OpenWRT: F9K1119v1, RT-ACRH13, R6220, WNDR3700v4
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sun Dec 31, 2017 1:30    Post subject: Re: Steps Reply with quote
ian5142 wrote:
Start at step 2 then.

Then add a step to upgrade to the latest (with e3000 in the name, K3X).


hello ian5142,

ok, than with this Step.

1: Hard Reset 30-30-30

2: In Step 2 with the 2 - K2.6_21676_mega_nv60K or with a 25697er version....I still have the dd-wrt.v24-25697_NEWD-2_K2.6_big-nv60k.bin version.
Then the mega must also be out from this series.

after Mega Patch

3: Hard Reset 30-30-30


4: - K3.x_21676_mega_nv60K ( here also determined from the 25697 series ??)

after Patch

5: Hard Reset 30-30-30

6: reconfigure everything

Am I on the safe side???

best regards
Chris
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sun Dec 31, 2017 1:35    Post subject: Re: E3000 patch for WPA2 Krack Reply with quote
jwh7 wrote:
Nemisis wrote:
The report is from 2017 and explicitly shows that the K.3x kernel is much slower in speed than the K2.6.
Especially when we are talking about routers of the E series.
The test ran on a Linksys E4200 and I even only have one E3000.
Yes that was from January 2017, and SFE accelerated NAT was added in late summer, making k3x faster than k2.6. See the SFE link in my signature. Regarding k2.6 EOL, see: http://lkml.iu.edu/hypermail/linux/kernel/1603.1/03938.html


hello jwh7,

ok, good to know that NAT works faster with it.
Are there any readings that can be compared with the January report?
What else do you say about the update? Is that as ok as I wrote it ian5142 ?

Update: ... i have a Problem:

The Last " dd-wrt.v24-23598_NEWD-2_K3.x_mega-nv60k.bin " is in the 02-19-2014-r23598.

these are all versions under my version.
Can I easily downgrade my version?

I need a Mega Version from 2014-r23598 and the last K3.x_mega-nv60k Version.
Only then I can take the current K3.x version without nv60!
ian5142
DD-WRT Guru


Joined: 23 Oct 2013
Posts: 2318
Location: Canada

PostPosted: Sun Dec 31, 2017 4:43    Post subject: Steps Reply with quote
I would use the latest, same file names but instead of using either 21676 or 25697, use 34311. I understand you are already on a higher build (25697>21676) but you must downgrade to upgrade So you would get:

1: Hard Reset 30-30-30 (Factory Defaults, through GUI, don't use the reset button)

2: Flash - K3X_21676_mega_nv60K

3: Hard Reset 30-30-30 (Factory Defaults, through GUI, don't use the reset button)

4: - K3.X_34311_mega_e3000

5: Hard Reset 30-30-30 (Factory Defaults, through GUI, don't use the reset button)

6: reconfigure everything

_________________
Before asking a question on the forums, update dd-wrt: Where do I download firmware? I suggest reading it all.
QCA Best WiFi Settings


Some dd-wrt wiki pages are up to date, others are not. PM me if you find an old one.

Atheros:
Netgear R7800 x3 - WDS AP / station, gateway, QoS
TP-Link Archer C7 v2 x2 - WDS Station
TP-Link TL-WDR3600 v1 - WDS Station
TP-Link 841nd v8 - NU
D-Link 615 C1/E3/I1 x 7 - 1 WDS station
D-Link 825 B1 - NU
D-Link 862L A1 x2 - WDS Station
Netgear WNDR3700v2 - NU
UBNT loco M2 x2 - airOS

Broadcom
Linksys EA6400 - Gateway, QoS
Asus N66U - AP
Netgear WNDR3700v3 - not used
MediaTek
UBNT EdgeRouter X - switch
redhawk0
DD-WRT Guru


Joined: 04 Jan 2007
Posts: 11563
Location: Wherever the wind blows- North America

PostPosted: Sun Dec 31, 2017 13:41    Post subject: Re: NV60 Reply with quote
Nemisis wrote:

hello ian5142,

i have now a dd-wrt.v24-*****_NEWD-2_K2.6_big-nv60k.bin Version on a Linksys E3000
With this *nv60k Version may I only install versions with *nv60k in the name.
Otherwise there is danger to the router too brick.

the tutorial says, however:

K3.x upgrade

To update your E3000 unit to K3.x. These EXACT builds MUST be used to upgrade to K3.x for the first time. Any other builds will soft brick the device....Start with a hard reset then follow the steps below.

Three steps required to get K3.x on the unit:

1 - K2.6_21676_mini_e3000 ....wait 5 minutes....hard reset.....next load from the GUI

2 - K2.6_21676_mega_nv60K ....wait 5 minutes....hard reset.....next load from the GUI

3 - K3.x_21676_mega_nv60K...wait 5 minutes....hard reset.

....after that you can put a newer K3.x_mega build on directly...no need for nv60K builds any longer.

best regards
Chris


I guess I'm not getting the point of this thread...you already have the instructions to upgrade to K3.x.

Reset the router...and follow steps 1-3 with those builds EXACTLY...when finished...load the latest K3.x_mega build.

Its not that hard folks!!!!

redhawk

_________________
The only stupid question....is the unasked one.
Nemisis
DD-WRT User


Joined: 06 May 2008
Posts: 86

PostPosted: Sun Dec 31, 2017 14:38    Post subject: Re: NV60 Reply with quote
redhawk0 wrote:
Nemisis wrote:

hello ian5142,

i have now a dd-wrt.v24-*****_NEWD-2_K2.6_big-nv60k.bin Version on a Linksys E3000
With this *nv60k Version may I only install versions with *nv60k in the name.
Otherwise there is danger to the router too brick.

the tutorial says, however:

K3.x upgrade

To update your E3000 unit to K3.x. These EXACT builds MUST be used to upgrade to K3.x for the first time. Any other builds will soft brick the device....Start with a hard reset then follow the steps below.

Three steps required to get K3.x on the unit:

1 - K2.6_21676_mini_e3000 ....wait 5 minutes....hard reset.....next load from the GUI

2 - K2.6_21676_mega_nv60K ....wait 5 minutes....hard reset.....next load from the GUI

3 - K3.x_21676_mega_nv60K...wait 5 minutes....hard reset.

....after that you can put a newer K3.x_mega build on directly...no need for nv60K builds any longer.

best regards
Chris


I guess I'm not getting the point of this thread...you already have the instructions to upgrade to K3.x.

Reset the router...and follow steps 1-3 with those builds EXACTLY...when finished...load the latest K3.x_mega build.

Its not that hard folks!!!!

redhawk


" ....I guess I'm not getting the point of this thread...you already have the instructions to upgrade to K3.x.

Reset the router...and follow steps 1-3 with those builds EXACTLY...when finished...load the latest K3.x_mega build.

Its not that hard folks!!!! "

seriously ??!!

As you can read (I hope so), I already have a xxx version on the device!
So I can not install K2.6_21676_mini_e3000 !!!
That would destroy the device.
The K2.6_21676_mini_e3000 I can install if I have a Linksys version on the device!
The K2.6_21676_mini_e3000 version is the first version I need to install on an E3000 when I come from the Linksys version !!

So thank you for the nonsensical advice.
If the exact procedure is too much for you, you do not have to write an answer!
Goto page Previous  1, 2, 3  Next Display posts from previous:    Page 2 of 3
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum