Other Firmware for R7000/R7000P

Voxel's NETGEAR R7800 Custom Firmware (


1. OpenSSL v. 1.1.1c package is added.
2. OpenSSL v. 1.0.2 package is upgraded 1.0.2r->1.0.2s.
3. OpenVPN package is changed to use OpenSSL v. 1.1.1.
4. OpenVPN server(s) is(are) slightly optimized.
5. OpenVPN client now could be used simultaneously with OpenVPN server(s) (no necessity to disable server(s) from GUI).
6. unbound package (used in stubby) is changed to use OpenSSL v. 1.1.1.
7. getdns package (used in stubby) is changed to use OpenSSL v. 1.1.1.
8. Because of "6." and "7.": stubby is set to support TLSv1.3 with cloudflare (DoT).
9. wget package is changed to use OpenSSL v. 1.1.1.
10. transmission package is changed to use OpenSSL v. 1.1.1.
11. curl package is upgraded 7.64.1->7.65.0.
12. curl package is changed to use OpenSSL v. 1.1.1.
13. opkg package is changed to use OpenSSL v. 1.1.1.
14. uci package is upgraded 2018-08-11->2019-05-17.
15. openssh-client add-on is changed to use OpenSSL v. 1.1.1.

XWRT-VORTEX version 384.8_2 for the R7000

Asuswrt-Merlin 384/NG Changelog

384.8_2 (8-Dec-2018)
- CHANGED: Updated miniupnpd to 20181205.
- CHANGED: Push LAN domain to OpenVPN clients as DNS suffix
for the connection.
- FIXED: Cannot save custom settings on OpenVPN server page
on non-HND models.
- FIXED: Some webui pages fail to load properly in French
- FIXED: dnsmasq fails to start when certain options are
configured (themiron)
- FIXED: Non-functionnal Show Password option on OpenVPN/PPTP
server page for RT-AX88U (removed)
- FIXED: Persistent SSL cert was wiped at boot time in
some specific scenarios.

XWRT-VORTEX version 384.9_0 for the R7000

Asuswrt-Merlin 384/NG Changelog

384.9 (2-Feb-2019)
- NEW: Temporarily reorganized code in separate branches, to handle
Asus's currently scattered firmware source code releases.
The GPL situation for this release is as follow:
o RT-AX88U: Merged GPL 384_5329
o Other models: Merged GPL 384_45149.
o Special binary blobs provided by Asus for the RT-AC87U
and RT-AC3200 (compatible with 384_45149).

- NEW: Added NFS client support (V2 and V3) to the
RT-AC86U and RT-AX88U (already present in older models)
- NEW: Report the number of spatial streams and the PHY type
used by wireless clients for models supporting it
- NEW: Display tracked connections on the QoS Stats page (now
relabeled "Classification").
Fields can be sorted by clicking on the column headers.
Thanks to FreshJr for his help in deciphering the packet
mark values.

- NEW: Implemented ipsec.postconf and strongswan.postconf scripts.
- KNOWN ISSUE: dcd process crashing on RT-AC86U (bug in Trend
Micro's code, outside of my control).
- KNOWN ISSUE: IPv6s on Tracked Connections have their last
two bytes set to 00 (bug in Trend Micro's
code truncating the last two bytes).
- KNOWN ISSUE: No IPS events logged (bug in Asus's code,
IPS should work, just fails to log hits)
- KNOWN ISSUE: Networkmap listing may be unreliable.
(Bug in Asus's code)
- KNOWN ISSUE: Users failing to read changelogs will
probably complain about the above issues.
(Outside of my control).
- CHANGED: Updated wget to 1.20.
- CHANGED: Updated nano to 3.2.
- CHANGED: Updated curl to 7.62.0.
- CHANGED: Updated Chart.js to 2.7.3.
- CHANGED: Updated dnsmasq to 2.80-32-g28cfe36 (themiron)
- CHANGED: Optimized some JS files to reduce their size
- CHANGED: OpenVPN clients can now accept CNs up to 255 chars
when using it to validate the certificate.
- CHANGED: No longer reset the OpenVPN client's description,
policy mode and existing rules when uploading an
.ovpn config file.
- CHANGED: No longer accept any server-provided route
when OpenVPN client set to Policy (Strict).
- CHANGED: Clients bound to DNSFilter rules will no longer
bypass it by using DoT. DNSFilter servers that
support DoT (like Quad9) will only allow filtered
clients to use that server
- FIXED: Firmware update checks would not run at boot time
on the RT-AX88U.
- FIXED: Name resolution issues for /etc/hosts entries on
HND models (themiron)
- FIXED: Syslog not properly copied to JFFS on reboot
(John Bacho)
- FIXED: Volumes not properly unmounted on HND platform
(John Bacho)
- FIXED: Added missing TEE Netfilter target on the RT-AC86U
- FIXED: SSH brute force protection didn't work in Dual WAN
load balancing mode.
- FIXED: httpd crashes on RT-AC86U (themiron)
- FIXED: DNSFilter clients could use a different nameserver
when using an IPv6 connection
- FIXED: USB disk idle config changes not applying without a
- FIXED: "Strict" DNS mode wasn't working properly with OpenVPN
- FIXED: Cannot upload JFFS backup on HND models

XWRT-VORTEX version 384.10_2 for the R7000

Asuswrt-Merlin 384/NG Changelog

384.10_2 (3-Apr-2019)
- CHANGED: Increased OpenVPN interface queue length from 100
to 1000 bytes, to reduce the amount of dropped
packets if router can't keep up.
- CHANGED: Updated CA bundle to January 23rd version
- FIXED: Moviestar VLAN routes weren't properly configured
(broken quagga configuration)
- FIXED: Layout issues on the Wireless Log page for some
- FIXED: Missing tooltip content for the new local DNS
resolution setting on the Tweak page
- FIXED: FAQ URL on Bandwidth Monitor points to a non-existing
page on Asus's servers (point to old page for now)
- FIXED: OpenVPN CA would be overwritten if there was no
server key or cert present - only generate them
if all three are missing.
- FIXED: Bandwidth Limiter not working properly in some
cases, as it failed to disable hardware acceleration

Stock Firmware for NETGEAR R7000 Nighthawk Wi-Fi Router

r7000 Firmware Version

Note: Please remember to do factory default after firmware upgrade. Enter "Backup Settings" in the web GUI and click "Erase" button of "Revert to factory default settings".

New Features & Enhancements:

Netgera DDNS error handling when server can't be connected.
Remove Upstream QoS bandwidth auto detection. Recommend to use www.speedof.me to detect upstream QoS.
Improved USB download throughput.
Bug Fixes:

VPN may not be connected when WAN response to ping is disabled.
iTunes server will not function after device name is changed.
Using Bonjour printer on MAC PC, when router reboot, the MAC PC can't recognized the Printer.
Using Samba to copy the file over 4G may cause the file corrupted.
Use Netgear DDNS domain for VPN Service will not work. The VPN client config file did not use correct domain name.
To Install

Note: Do not upgrade the firmware using a wireless connection. Please perform firmware upgrade with wired or Ethernet connection only.

Write down all the settings which you changed from the default values, since you may need to re-enter them manually.
Download the firmware and save it to a convenient place such as your desktop. Unzip if needed.
Log in to the router using a Web browser. The URL is http://www.routerlogin.net.
Click ADVANCED tab > Administration > Firmware Upgrade.
Click Browse and find the file you just downloaded.
Click Upload. Do not interrupt the upgrade while the router does this step.
Important Note:

1. The upgrade process is completed when the on screen progress bar completes. If power LED light turns amber and blinking, power cycle the router to complete the upgrade.

2. If the upgrade progress bar on web GUI doesn't display correctly during firmware upgrade, you can still check the status using Power LED. The Power LED should be blinking (amber) during firmware upgrade. After firmware upgrade is done and boots up the system, it changes to steady amber color.
Please DO NOT power off or reboot the device during firmware upgrade, otherwise, it may result to a corrupt firmware and cause the device not to work.