Skip to main content

Questions tagged [openwrt]

OpenWrt is a Linux distribution primarily targeted at routing on embedded devices.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
22 views

Connecting to ATT, I get OpenSSL: pending error: error:0A00018E:SSL routines::ca md too weak

When I try to connect to AT&T with WPA Supplicant running on OpenWRT, I'm getting, 10g-2: CTRL-EVENT-EAP-FAILURE EAP authentication failed 10g-2: CTRL-EVENT-EAP-FAILURE EAP authentication failed ...
Evan Carroll's user avatar
  • 2,434
0 votes
1 answer
38 views

ALIX with OpenWRT keeps restarting

I've got problem with ALIX 2D3 (or 2D13) which keeps restarting. It reboots in different period of time - from 2 to every 20 minutes. What we did is changed DC adapter but it's still looks the same. ...
fnsq's user avatar
  • 11
0 votes
1 answer
49 views

Connecting to ATT, I get "CTRL-EVENT-EAP-FAILURE EAP authentication failed"

When I connect with OpenWRT to ATT GPON and try to EAPOL auth with wpa_supplicant, I get the following error, CTRL-EVENT-SUBNET-STATUS-UPDATE status=0 CTRL-EVENT-EAP-STARTED EAP authentication started ...
Evan Carroll's user avatar
  • 2,434
0 votes
0 answers
165 views

Cannot setup ssh(dropbear) key login

Dropbear config is /etc/config/dropbear: config dropbear option Port '22' option Interface 'lan' option RootPasswordAuth 'off' option PasswordAuth 'on' I've paste my public ssh key ...
MPEI_stud's user avatar
0 votes
0 answers
164 views

Having 2nd router's LAN be on same subnet as main router (and not just wifi)

Below is a diagram of my network: MAIN router: 192.168.0.1 with DHCP assigning beginning at 192.168.0.5 2nd router: Running openWRT in AP mode. Receives a statically-assigned IP of 192.168.0.2 from ...
darnitdiy's user avatar
  • 101
0 votes
1 answer
418 views

Fixing route and iptables for an OpenVPN tun0 interface, with a selected and safe routing

I did setup my router to use 3rd party VPNs for maximum security. Since the ISPs that I am using have blocked all known VPN protocols including OpenVPN protocols, therefore I am forced to configure my ...
osiaso 's user avatar
2 votes
1 answer
477 views

How to configure DHCP relay when NAT is also used?

I have a multi-homed application server that serves multiple networks that are not connected with each other (other than being all connected to the server, each one on its dedicated network interface)....
raj's user avatar
  • 512
0 votes
2 answers
181 views

How do you create user-restrictions using wireguard?

I have two modes that I like to use to model my desired vpn settings, device wireguards in has access only to jellyfin device wireguards in has access to all resources. How do I configure OpenWRT ...
Evan Carroll's user avatar
  • 2,434
0 votes
1 answer
433 views

IPv6 guest network on OpenWrt, but ISP only delegates one /64 subnet

I want to host both an ordinary unrestricted Wi-Fi network and a more restricted guest Wi-Fi network on the same OpenWrt router. The problem is that my ISP only delegates one /64 subnet to me. ...
Alex Henrie's user avatar
-1 votes
1 answer
174 views

How to reroute packets to other gateway in LAN?

I have local network 192.168.203.0/24 with 2 gateways: 192.168.203.1 - router that gives access to the internet, 192.168.203.5 - OpenWRT which gives access to other private network through OpenVPN. ...
tmk555's user avatar
  • 1
0 votes
1 answer
237 views

application runs from command line, but cannot start as init.d script - openWrt

Got a problem with my service written in C. It runs as an init.d service and has been working fine for many months on many devices. Today I've made some changes in the software and very strange thing ...
Kal800's user avatar
  • 3
0 votes
0 answers
251 views

How to troubleshoot PXE boot from DD-WRT dnsmasq not sending tftp server info?

I have a MikroTik hEXs router (firmware v6.47.1) which I want to flash with OpenWRT. The OpenWRT wiki site has detailed instructions on the procedure, and it requires that one netboot the router. My ...
PattMauler's user avatar
1 vote
1 answer
178 views

Duplicate traffic while spoofing an interface

to sum up my issue, I have a linux router that has 3 network interfaces: a wlan interface acting as a DHCP server, upon which I manage the device, not in the scope of this question. a lan interface, ...
Joy's user avatar
  • 11
0 votes
1 answer
80 views

Is there any geographical zone that permits all 802.11 frequencies? [closed]

When I run OpenWRT sometimes I get errors like this, daemon.notice hostapd: Frequency 5720 (primary) not allowed for AP mode, flags: 0x800416b NO-IR RADAR daemon.err hostapd: Primary frequency not ...
Evan Carroll's user avatar
  • 2,434
0 votes
1 answer
465 views

Does nftables flowtable software/hardware offloading conflict with other nftables rules?

According to https://wiki.nftables.org/wiki-nftables/index.php/Flowtables, flowtables reside in the ingress hook. So, does that mean if connection is picked up by the flowtable, it will not be ...
William's user avatar
  • 181
0 votes
0 answers
372 views

Openwrt don't resolve hostnames to another Openwrt

I have 2 Openwrt routers one is on front, another is on the back. Back router's WAN connected to LAN of front router and have it's own subnet. Back router WAN DNS configured to a front router. Front ...
Vladimir's user avatar
  • 135
0 votes
1 answer
258 views

::qWireguard unable to initiate handshake from one direction Site-to-Site VPN

I am trying to setup a Site-to-Site VPN between SiteA (OpenWrt Router) and SiteB (Oracle instance with public IP) Since SiteA is OpenWRT, I use the GUI OpenWRT_Server_Conf_Screenshot ...
Teacup's user avatar
  • 11
0 votes
1 answer
276 views

Openvpn - LAN behind openvpn server can not connect to LAN behind openvpn client

I have the following scenario: Server C and Server D can connect just fine to Server A and Server B , but Server B and Server A can not connect to Server C and Server D. I found some people having ...
Jose's user avatar
  • 21
0 votes
1 answer
455 views

How to extend amount of VLAN's via external Managed Switch on Linksys WRT Router on OpenWRT 21

Goal is to create more than 4 VLAN's leveraging external ports on Managed Switch all under control of the Main Router (Linksys WRT with 4 built-in switch-ports) running OpenWRT 21. Linksys Managed ...
Releaz's user avatar
  • 1
1 vote
0 answers
120 views

connecting two SIP phones from different LANs over ZeroTier openwrt

i make site to site conncetion by tp-link n600 openwrt zerotier and no problem , i can reach every thing in two sites and ping ok but i have in site 1 Issable and in site 2 sip phone ------------------...
Best Way's user avatar
0 votes
0 answers
605 views

1:1 NAT or MultiIP for WAN implementation on OpenWRT NFTABLES (fw4)

I would like to configure 1:1 NAT for my ISP modem connected to my OpenWRT WAN interface. The modem IP address is 10.70.70.1 and I want to map it on my OpenWRT LAN bridge (192.168.64.0/24) with IP ...
Sina S.'s user avatar
  • 11
3 votes
2 answers
776 views

How to route host traffic over lxc?

Some info updated: Last login: Wed Aug 31 18:10:24 2022 root@pve:~# ip route default via 192.168.132.1 dev vmbr0 proto kernel onlink 192.168.132.0/24 dev vmbr0 proto kernel scope link src 192.168.132....
Ken Kin's user avatar
  • 31
0 votes
0 answers
412 views

Is is possible to use OpenVPN client as default network gateway (OpenWRT)?

Usually, when using a VPN, you can route all client traffic(s) through a VPN tunnel with a exit point on the VPN server. Is there a reverse possibility: to organize an exit point to the WWW on the ...
Alex A.'s user avatar
  • 101
0 votes
0 answers
292 views

nftables or fw4 issue with timebased traffic rules

Since the OpenWRT ver > 22.3 does use NFTABLES instead of IPTABLES I got issue with some firewall (fw4) time based traffic rules that I have no idea how to solve them. The firewall rule is as ...
Sina S.'s user avatar
  • 11
0 votes
1 answer
351 views

running openwrt in virtualbox with 2 network adapters- a host only adapter and bridged adapter, but only host-only adapter shows

following this video to try and set up a virtual network for me to practice hacking, but only the host-only adapter shows (I am currently 17 minutes into the video). uci show network ip addr /etc/...
Ben Cookson's user avatar
1 vote
0 answers
790 views

Blocking forwarded traffic with OpenWrt fw3 firewall

I can't find out how to create a fw3 rule which does what I want (block all traffic from 192.168.1.119). I have this in /etc/config/firewall config rule option ...
owrtbro's user avatar
  • 31
1 vote
1 answer
662 views

WG3526 modem can't connect to 4G/LTE with OpenWRT

I have a client with a WG3526 4G/LTE modem with a sim card slot. I had to change the firmware so I can get detailed bandwidth usage. My issue is since I installed the generic version of OpenWRT, the ...
sevynos's user avatar
  • 61
0 votes
1 answer
607 views

iptables rules openwrt not working

I am new here and I hope find answer to my question i hvae set rule in openwrt iptables iptables -A FORWARD -s 192.168.2.14 -m time --timestart 8:00 --timestop 18:30 -j ACCEPT iptables -A ...
Amrassad's user avatar
0 votes
1 answer
144 views

Is ingress filtering described in RFC2827 implemented in most routers? How does such implementation look like?

RFC 2827 describes the idea of ingress filtering that is meant to deal with DOS attacks that utilize IP spoofing: An input traffic filter on the ingress (input) link of "router 2", which ...
John Smith's user avatar
0 votes
0 answers
366 views

I want to test IGMP capability of a OpenWRT based router. How caan i test?

This is what I want to test out, SEE IMAGE: Router connected to users and is accessible over the internet as well PC1 and PC2 should be able to join some group(s). Should be able to leave group as ...
jatinBatra's user avatar
0 votes
0 answers
337 views

Transform Broadcast packet in Unicast packet with iptables and ebtables

I've been struggling with this problem for months, and my limited networking knowledge doesn't allow me to progress further, so here I am asking for an advice. I have an OpenWRT Router with two ...
Claudio Mezzasalma's user avatar
1 vote
1 answer
2k views

How can I MASQUERADE between vlan bridges

I have created two VLAN bridges in openwrt based system which has single physical interface. *) eth0->lan->br-lan *) br-lan->br-lan.2(VLAN INTF)->br-vlan2(BRIDGE INTF) *) br-lan->br-lan....
Sheik's user avatar
  • 11
0 votes
1 answer
904 views

How to add a routing rule that only match "dport"?

In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following: ip rule add from 192.168.28.2 dport 1888 lookup 123 ip ...
Leon's user avatar
  • 179
2 votes
1 answer
984 views

How to block devices connecting to a specific wireless interface from accessing the internet?

I have configured my OpenWRT WiFi router with two wireless interfaces: wlan0 and wlan0-1. My WAN ethernet interface is eth0.2. How do I prevent devices that connect to wlan0-1 from accessing the ...
KevinM's user avatar
  • 123
0 votes
1 answer
627 views

OpenVPN and IPTABLES - How to assign lan (vpn) gateway to clients

I am trying to set up my openvpn network but I have a problem. My LAN configuration is as follows: main router Zyxel 192.168.1.1 acting as gateway (vdsl connection) and access point; openwrt router ...
Francesco's user avatar
0 votes
1 answer
64 views

Redirect TLS traffic by hostname

I have an IoT device that connects to a.iot.x.amazonaws.com at port 8883 (secure MQTT). I would instead like it to connect to my own site at b.iot.x.amazonaws.com (same port and protocol). I would ...
MarshalH's user avatar
0 votes
0 answers
315 views

IPv6 connection drops after renewing an address

I have a router running OpenWrt and a machine with embedded Linux built with Yocto. I need to detect lease renewing in my C application. On my router I decrease lease time to 30 seconds. When I log on ...
tom654321's user avatar
0 votes
1 answer
7k views

Is it possible to force the DHCP server to assign a different IP address each time the address is renewed?

I need to detect IP address renewals in my C++ Linux application and check if the new address is different from the old one. I have access to a router running OpenWrt. I can change the lease time, but ...
tom654321's user avatar
0 votes
0 answers
706 views

Requests to WAN IP are served by LAN interface on OpenWrt

Here's the situation. I have OpenWrt installation with multiple zones: WAN - let it be 1.1.1.1 LAN0 - 192.168.0.0/24 LAN1 - 192.168.1.0/24 After forwarding some port from WAN to LAN0 I can reach it ...
WGOS's user avatar
  • 101
0 votes
1 answer
733 views

Unraid share fails to mount on OpenWRT using mount.cifs?

So I have an Unraid machine with some shares on it and I would like to be able to mount this share on my OpenWRT router for backing up/transfering files onto the router (avoids having to plug-in/...
Kris Rice's user avatar
1 vote
1 answer
1k views

How to get internet/networking on QEMU for OpenWrt under Windows?

I would like to run a Internet-capable OpenWrt-Box on a Windows10 Machine using QEMU. I have tried this command: "c:\Program Files\qemu\qemu-system-aarch64.exe" -m 1024 -smp 2 -cpu cortex-...
scjorge's user avatar
  • 111
0 votes
0 answers
375 views

OpenVPN on OpenWRT fails to connect "connection timeout"

It seems very elegant to be able to connect to your homenetwork from any public accesspoint without being worried to disclose your traffic. So dispite my lack of computer network experience, and after ...
alex's user avatar
  • 101
5 votes
2 answers
9k views

OpenWRT - How to redirect all subdomains of a hostname, to the same host, so that it can be reverse proxied?

I have an OpenWRT router setup, 192.168.1.1, with search domain, local (as opposed to the default lan). I have a server setup, 192.168.1.200, with hostname, server.local. I have a workstation, 192.168....
Jack_Hu's user avatar
  • 209
0 votes
1 answer
892 views

Capturing IEEE802.11.x auth and capabilities data with tcpdump?

I'm troubleshooting some issues with my wireless network (OpenWrt 19.x and mobile device) and I came across this: https://dot11.exposed/2017/09/20/violation-of-802-11-standard-intel-wireless-cards-...
KreonZZ's user avatar
  • 113
2 votes
1 answer
4k views

OpenWrt allow IPv6 rule to access a server with global IPv6 on local area

First of all, I have a domain with dns configured to point to my device global address witch is set to static with my ISP gloabl prefix as xxxx:xxxx:xxxx:de01::3/64 in dhcpcd.conf. I'm using Openwrt ...
JB_DELR's user avatar
  • 121
3 votes
1 answer
2k views

Does Dropbear know what a ~/.ssh/config file is?

I want to ssh from one host (OpenWrt running Dropbear) to another host on the same LAN that is running open-ssh server and client. I converted the private open-ssh key of the other host to dropbear ...
FlexMcMurphy's user avatar
0 votes
1 answer
3k views

setting up load balancing with mwan3 on openwrt

I want my traffic going through USB-tethering, while destination to 192.168.0.0/24 going to WAN port. I have SSH-ed into the GL-AR750S and opkg-install-ed luci-app-mwan3. Both interfaces are up and ...
ロジャー's user avatar
0 votes
1 answer
3k views

How do I block all traffic to all ports except 80/443 in OpenWRT?

I'm trying to do some testing and would like to setup my network to only allow traffic on 80/443, expect for specific IP addresses where I will specify a TCP port and UDP port. Once completed, I want ...
Rob's user avatar
  • 244
0 votes
0 answers
3k views

StrongSwan config issue: no matching peer config found

I am trying to establish a VPN between my router (running OpenWrt) and my smartphone using IPsec. I followed the guide at https://openwrt.org/docs/guide-user/services/vpn/ipsec/strongswan/roadwarrior ...
ahorn42's user avatar
0 votes
2 answers
347 views

StrongSwan: manually expire security association

I am working on automating some software tests involving IPSec and StrongSwan. These tests basically apply a swanctl.conf file to two gateway machines, then establish a tunnel between them. It then ...
Will Nilges's user avatar

1
2 3 4 5