As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [openwrt]

OpenWrt is a Linux distribution primarily targeted at routing on embedded devices.

Filter by
Sorted by
Tagged with
1 vote
1 answer
22 views

Duplicate traffic while spoofing an interface

to sum up my issue, I have a linux router that has 3 network interfaces: a wlan interface acting as a DHCP server, upon which I manage the device, not in the scope of this question. a lan interface, ...
Joy's user avatar
  • 11
0 votes
1 answer
51 views

Is there any geographical zone that permits all 802.11 frequencies? [closed]

When I run OpenWRT sometimes I get errors like this, daemon.notice hostapd: Frequency 5720 (primary) not allowed for AP mode, flags: 0x800416b NO-IR RADAR daemon.err hostapd: Primary frequency not ...
Evan Carroll's user avatar
  • 2,264
0 votes
0 answers
53 views

802.11r, same mobility domain across radio frequencies?

I have an OpenWRT box that has 2.4ghz, and 5ghz AC. Should I set up the same "Mobility Domain" for both radios to enable 802.11r?
Evan Carroll's user avatar
  • 2,264
0 votes
1 answer
92 views

Does nftables flowtable software/hardware offloading conflict with other nftables rules?

According to https://wiki.nftables.org/wiki-nftables/index.php/Flowtables, flowtables reside in the ingress hook. So, does that mean if connection is picked up by the flowtable, it will not be ...
user762750's user avatar
0 votes
0 answers
116 views

Openwrt don't resolve hostnames to another Openwrt

I have 2 Openwrt routers one is on front, another is on the back. Back router's WAN connected to LAN of front router and have it's own subnet. Back router WAN DNS configured to a front router. Front ...
Vladimir's user avatar
  • 123
0 votes
0 answers
14 views

iptables port forward with failover

I am setting up a robotics platform, which, while in maintenance mode will be connected via ethernet to the ground station. However while in operation, this same device will be connected via WiFi. The ...
Matt Clark's user avatar
0 votes
1 answer
140 views

::qWireguard unable to initiate handshake from one direction Site-to-Site VPN

I am trying to setup a Site-to-Site VPN between SiteA (OpenWrt Router) and SiteB (Oracle instance with public IP) Since SiteA is OpenWRT, I use the GUI OpenWRT_Server_Conf_Screenshot ...
Long Tran's user avatar
0 votes
1 answer
128 views

Openvpn - LAN behind openvpn server can not connect to LAN behind openvpn client

I have the following scenario: Server C and Server D can connect just fine to Server A and Server B , but Server B and Server A can not connect to Server C and Server D. I found some people having ...
Jose's user avatar
  • 21
0 votes
1 answer
301 views

How to extend amount of VLAN's via external Managed Switch on Linksys WRT Router on OpenWRT 21

Goal is to create more than 4 VLAN's leveraging external ports on Managed Switch all under control of the Main Router (Linksys WRT with 4 built-in switch-ports) running OpenWRT 21. Linksys Managed ...
Releaz's user avatar
  • 1
1 vote
0 answers
77 views

connecting two SIP phones from different LANs over ZeroTier openwrt

i make site to site conncetion by tp-link n600 openwrt zerotier and no problem , i can reach every thing in two sites and ping ok but i have in site 1 Issable and in site 2 sip phone ------------------...
Best Way's user avatar
0 votes
0 answers
373 views

1:1 NAT or MultiIP for WAN implementation on OpenWRT NFTABLES (fw4)

I would like to configure 1:1 NAT for my ISP modem connected to my OpenWRT WAN interface. The modem IP address is 10.70.70.1 and I want to map it on my OpenWRT LAN bridge (192.168.64.0/24) with IP ...
Sina S.'s user avatar
  • 11
3 votes
2 answers
408 views

How to route host traffic over lxc?

Some info updated: Last login: Wed Aug 31 18:10:24 2022 root@pve:~# ip route default via 192.168.132.1 dev vmbr0 proto kernel onlink 192.168.132.0/24 dev vmbr0 proto kernel scope link src 192.168.132....
Ken Kin's user avatar
  • 31
0 votes
0 answers
271 views

Is is possible to use OpenVPN client as default network gateway (OpenWRT)?

Usually, when using a VPN, you can route all client traffic(s) through a VPN tunnel with a exit point on the VPN server. Is there a reverse possibility: to organize an exit point to the WWW on the ...
Alex A.'s user avatar
  • 101
0 votes
0 answers
159 views

nftables or fw4 issue with timebased traffic rules

Since the OpenWRT ver > 22.3 does use NFTABLES instead of IPTABLES I got issue with some firewall (fw4) time based traffic rules that I have no idea how to solve them. The firewall rule is as ...
Sina S.'s user avatar
  • 11
0 votes
1 answer
234 views

running openwrt in virtualbox with 2 network adapters- a host only adapter and bridged adapter, but only host-only adapter shows

following this video to try and set up a virtual network for me to practice hacking, but only the host-only adapter shows (I am currently 17 minutes into the video). uci show network ip addr /etc/...
Ben Cookson's user avatar
1 vote
0 answers
566 views

Blocking forwarded traffic with OpenWrt fw3 firewall

I can't find out how to create a fw3 rule which does what I want (block all traffic from 192.168.1.119). I have this in /etc/config/firewall config rule option ...
owrtbro's user avatar
  • 11
1 vote
1 answer
347 views

WG3526 modem can't connect to 4G/LTE with OpenWRT

I have a client with a WG3526 4G/LTE modem with a sim card slot. I had to change the firmware so I can get detailed bandwidth usage. My issue is since I installed the generic version of OpenWRT, the ...
sevynos's user avatar
  • 61
0 votes
1 answer
457 views

iptables rules openwrt not working

I am new here and I hope find answer to my question i hvae set rule in openwrt iptables iptables -A FORWARD -s 192.168.2.14 -m time --timestart 8:00 --timestop 18:30 -j ACCEPT iptables -A ...
Amrassad's user avatar
0 votes
1 answer
93 views

Is ingress filtering described in RFC2827 implemented in most routers? How does such implementation look like?

RFC 2827 describes the idea of ingress filtering that is meant to deal with DOS attacks that utilize IP spoofing: An input traffic filter on the ingress (input) link of "router 2", which ...
John Smith's user avatar
0 votes
0 answers
279 views

I want to test IGMP capability of a OpenWRT based router. How caan i test?

This is what I want to test out, SEE IMAGE: Router connected to users and is accessible over the internet as well PC1 and PC2 should be able to join some group(s). Should be able to leave group as ...
jatinBatra's user avatar
0 votes
0 answers
207 views

Transform Broadcast packet in Unicast packet with iptables and ebtables

I've been struggling with this problem for months, and my limited networking knowledge doesn't allow me to progress further, so here I am asking for an advice. I have an OpenWRT Router with two ...
Claudio Mezzasalma's user avatar
1 vote
1 answer
1k views

How can I MASQUERADE between vlan bridges

I have created two VLAN bridges in openwrt based system which has single physical interface. *) eth0->lan->br-lan *) br-lan->br-lan.2(VLAN INTF)->br-vlan2(BRIDGE INTF) *) br-lan->br-lan....
Sheik's user avatar
  • 11
0 votes
1 answer
380 views

How to add a routing rule that only match "dport"?

In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following: ip rule add from 192.168.28.2 dport 1888 lookup 123 ip ...
Leon's user avatar
  • 169
2 votes
1 answer
684 views

How to block devices connecting to a specific wireless interface from accessing the internet?

I have configured my OpenWRT WiFi router with two wireless interfaces: wlan0 and wlan0-1. My WAN ethernet interface is eth0.2. How do I prevent devices that connect to wlan0-1 from accessing the ...
KevinM's user avatar
  • 123
0 votes
1 answer
418 views

OpenVPN and IPTABLES - How to assign lan (vpn) gateway to clients

I am trying to set up my openvpn network but I have a problem. My LAN configuration is as follows: main router Zyxel 192.168.1.1 acting as gateway (vdsl connection) and access point; openwrt router ...
Francesco's user avatar
0 votes
1 answer
50 views

Redirect TLS traffic by hostname

I have an IoT device that connects to a.iot.x.amazonaws.com at port 8883 (secure MQTT). I would instead like it to connect to my own site at b.iot.x.amazonaws.com (same port and protocol). I would ...
user1924347's user avatar
0 votes
0 answers
225 views

IPv6 connection drops after renewing an address

I have a router running OpenWrt and a machine with embedded Linux built with Yocto. I need to detect lease renewing in my C application. On my router I decrease lease time to 30 seconds. When I log on ...
tom654321's user avatar
0 votes
1 answer
3k views

Is it possible to force the DHCP server to assign a different IP address each time the address is renewed?

I need to detect IP address renewals in my C++ Linux application and check if the new address is different from the old one. I have access to a router running OpenWrt. I can change the lease time, but ...
tom654321's user avatar
0 votes
0 answers
599 views

Requests to WAN IP are served by LAN interface on OpenWrt

Here's the situation. I have OpenWrt installation with multiple zones: WAN - let it be 1.1.1.1 LAN0 - 192.168.0.0/24 LAN1 - 192.168.1.0/24 After forwarding some port from WAN to LAN0 I can reach it ...
WGOS's user avatar
  • 101
0 votes
1 answer
612 views

Unraid share fails to mount on OpenWRT using mount.cifs?

So I have an Unraid machine with some shares on it and I would like to be able to mount this share on my OpenWRT router for backing up/transfering files onto the router (avoids having to plug-in/...
Kris Rice's user avatar
1 vote
1 answer
847 views

How to get internet/networking on QEMU for OpenWrt under Windows?

I would like to run a Internet-capable OpenWrt-Box on a Windows10 Machine using QEMU. I have tried this command: "c:\Program Files\qemu\qemu-system-aarch64.exe" -m 1024 -smp 2 -cpu cortex-...
scjorge's user avatar
  • 111
0 votes
0 answers
248 views

OpenVPN on OpenWRT fails to connect "connection timeout"

It seems very elegant to be able to connect to your homenetwork from any public accesspoint without being worried to disclose your traffic. So dispite my lack of computer network experience, and after ...
alex's user avatar
  • 101
3 votes
2 answers
6k views

OpenWRT - How to redirect all subdomains of a hostname, to the same host, so that it can be reverse proxied?

I have an OpenWRT router setup, 192.168.1.1, with search domain, local (as opposed to the default lan). I have a server setup, 192.168.1.200, with hostname, server.local. I have a workstation, 192.168....
Jack_Hu's user avatar
  • 179
0 votes
1 answer
501 views

Capturing IEEE802.11.x auth and capabilities data with tcpdump?

I'm troubleshooting some issues with my wireless network (OpenWrt 19.x and mobile device) and I came across this: https://dot11.exposed/2017/09/20/violation-of-802-11-standard-intel-wireless-cards-...
KreonZZ's user avatar
  • 13
2 votes
1 answer
3k views

OpenWrt allow IPv6 rule to access a server with global IPv6 on local area

First of all, I have a domain with dns configured to point to my device global address witch is set to static with my ISP gloabl prefix as xxxx:xxxx:xxxx:de01::3/64 in dhcpcd.conf. I'm using Openwrt ...
JB_DELR's user avatar
  • 121
2 votes
1 answer
1k views

Does Dropbear know what a ~/.ssh/config file is?

I want to ssh from one host (OpenWrt running Dropbear) to another host on the same LAN that is running open-ssh server and client. I converted the private open-ssh key of the other host to dropbear ...
FlexMcMurphy's user avatar
0 votes
1 answer
2k views

setting up load balancing with mwan3 on openwrt

I want my traffic going through USB-tethering, while destination to 192.168.0.0/24 going to WAN port. I have SSH-ed into the GL-AR750S and opkg-install-ed luci-app-mwan3. Both interfaces are up and ...
ロジャー's user avatar
0 votes
1 answer
2k views

How do I block all traffic to all ports except 80/443 in OpenWRT?

I'm trying to do some testing and would like to setup my network to only allow traffic on 80/443, expect for specific IP addresses where I will specify a TCP port and UDP port. Once completed, I want ...
Rob's user avatar
  • 244
0 votes
0 answers
2k views

StrongSwan config issue: no matching peer config found

I am trying to establish a VPN between my router (running OpenWrt) and my smartphone using IPsec. I followed the guide at https://openwrt.org/docs/guide-user/services/vpn/ipsec/strongswan/roadwarrior ...
ahorn42's user avatar
0 votes
2 answers
207 views

StrongSwan: manually expire security association

I am working on automating some software tests involving IPSec and StrongSwan. These tests basically apply a swanctl.conf file to two gateway machines, then establish a tunnel between them. It then ...
Will Nilges's user avatar
0 votes
0 answers
2k views

Use WireGuard for combining bandwidth (multiwan)

Is it possible to combine multiple uplinks for getting faster VPN access to a server with WireGuard? I already played around with MultiWAN (mwan3, OpenWRT) in the past but for VPN access, its only ...
Andreas Weidlinger's user avatar
0 votes
1 answer
2k views

How can I setup dnsmasq wildcard cnames for domains generated from dhcp leases?

I have an OpenWRT router with automatic dhcp domains enabled. This way, for host example-host, I automatically get an A record for example-host.lan to 192.168.1.2. I am trying to setup a wildcard ...
kittydoor's user avatar
0 votes
1 answer
1k views

How to set up Kubernetes (k8s) environment on an open-wrt based node connected in a cluster?

Openwrt OS support ".opk" file format extensions for the packages to be installed on the top of it. For that k8s, kubelet binaries are availbale but the procedure is to generate an installable ...
user554272's user avatar
1 vote
1 answer
227 views

How to clone egress UDP packets & send them to the same destination in order

This is what I want,LAN---- (UDP packets flow)----->Router [Mirror UDP packets & send these packets to the same destination port/IP in order]--------> Internet. Any idea? Side note: I want to try ...
Dark Knight's user avatar
0 votes
1 answer
3k views

TP-LINK TL-MR6400 IPSEC L2TP VPN tunnel with GCP server

I have a TP-LINK TL-MR6400 router, connected to internet by means of an LTE sim. This is a very rough network diagram of my current situation.1 My IoT services sit behind the TL-MR6400. Unfortunately ...
Nicola Bertellini's user avatar
0 votes
1 answer
196 views

Check forwarding queue occupation on router

I have a router forwarding traffic from a network to another and I need to know when the packet queue (in the receiving side/interface - rx) occupation is close to its maximum capacity. However, ...
imll's user avatar
  • 113
1 vote
1 answer
116 views

gitolite on openwrt - ssh not using gitolite

I've set up a gitolite installation on OpenWrt-18.06.04 according to this guide: https://openwrt.org/docs/guide-user/services/gitolite Step 9 of the "actual install" suggests removing the RSA-key ...
goaran's user avatar
  • 111
2 votes
1 answer
320 views

Strange routing behavior, Synology combined with OpenVPN

Essentially the setup I've got is WAN <-> OpenVPN running on OpenWRT running on WRT3200ACM <-> LAN -> Gigabit Switch -> RPI and synology The openVPN tun is working fine and dandy. I get an IP ...
ThomasRB's user avatar
0 votes
1 answer
2k views

OpenWRT + OpenVPN - connection to the VPN succeeds but can't ping LAN, can't ping outside

I'm setting up a VPN connection using OpenVPN client on OpenWrt. The client connects to the server, but I can't ping any network hosts using the tun0 interface Ping Examples: ping -I tun0 192.168.1....
Date Day's user avatar
0 votes
1 answer
151 views

Dynamic SQM Settings

I've just set up my new router (WRT1900ACS) and installed OpenWRT. I have ADSL which makes it pretty hard to adjust the sqm up/download speed correctly as it differs depending on what day it is. Is ...
schgab's user avatar
  • 105

1
2 3 4 5