Questions tagged [openwrt]
OpenWrt is a Linux distribution primarily targeted at routing on embedded devices.
223
questions
1
vote
1
answer
22
views
Duplicate traffic while spoofing an interface
to sum up my issue, I have a linux router that has 3 network interfaces:
a wlan interface acting as a DHCP server, upon which I manage the device, not in the scope of this question.
a lan interface, ...
- 11
0
votes
1
answer
51
views
Is there any geographical zone that permits all 802.11 frequencies? [closed]
When I run OpenWRT sometimes I get errors like this,
daemon.notice hostapd: Frequency 5720 (primary) not allowed for AP mode, flags: 0x800416b NO-IR RADAR
daemon.err hostapd: Primary frequency not ...
- 2,264
0
votes
0
answers
53
views
802.11r, same mobility domain across radio frequencies?
I have an OpenWRT box that has 2.4ghz, and 5ghz AC. Should I set up the same "Mobility Domain" for both radios to enable 802.11r?
- 2,264
0
votes
1
answer
92
views
Does nftables flowtable software/hardware offloading conflict with other nftables rules?
According to https://wiki.nftables.org/wiki-nftables/index.php/Flowtables, flowtables reside in the ingress hook. So, does that mean if connection is picked up by the flowtable, it will not be ...
- 181
0
votes
0
answers
116
views
Openwrt don't resolve hostnames to another Openwrt
I have 2 Openwrt routers one is on front, another is on the back.
Back router's WAN connected to LAN of front router and have it's own subnet.
Back router WAN DNS configured to a front router.
Front ...
- 123
0
votes
0
answers
14
views
iptables port forward with failover
I am setting up a robotics platform, which, while in maintenance mode will be connected via ethernet to the ground station. However while in operation, this same device will be connected via WiFi.
The ...
- 665
0
votes
1
answer
140
views
::qWireguard unable to initiate handshake from one direction Site-to-Site VPN
I am trying to setup a Site-to-Site VPN between SiteA (OpenWrt Router) and SiteB (Oracle instance with public IP)
Since SiteA is OpenWRT, I use the GUI
OpenWRT_Server_Conf_Screenshot
...
0
votes
1
answer
128
views
Openvpn - LAN behind openvpn server can not connect to LAN behind openvpn client
I have the following scenario:
Server C and Server D can connect just fine to Server A and Server B , but Server B and Server A can not connect to Server C and Server D.
I found some people having ...
- 21
0
votes
1
answer
301
views
How to extend amount of VLAN's via external Managed Switch on Linksys WRT Router on OpenWRT 21
Goal is to create more than 4 VLAN's leveraging external ports on Managed Switch all under control of the Main Router (Linksys WRT with 4 built-in switch-ports) running OpenWRT 21.
Linksys Managed ...
- 1
1
vote
0
answers
77
views
connecting two SIP phones from different LANs over ZeroTier openwrt
i make site to site conncetion by tp-link n600 openwrt zerotier and no problem , i can reach every thing in two sites and ping ok
but i have in site 1 Issable and in site 2 sip phone
------------------...
- 11
0
votes
0
answers
373
views
1:1 NAT or MultiIP for WAN implementation on OpenWRT NFTABLES (fw4)
I would like to configure 1:1 NAT for my ISP modem connected to my OpenWRT WAN interface.
The modem IP address is 10.70.70.1 and I want to map it on my OpenWRT LAN bridge (192.168.64.0/24) with IP ...
- 11
3
votes
2
answers
408
views
How to route host traffic over lxc?
Some info updated:
Last login: Wed Aug 31 18:10:24 2022
root@pve:~# ip route
default via 192.168.132.1 dev vmbr0 proto kernel onlink
192.168.132.0/24 dev vmbr0 proto kernel scope link src 192.168.132....
- 31
0
votes
0
answers
271
views
Is is possible to use OpenVPN client as default network gateway (OpenWRT)?
Usually, when using a VPN, you can route all client traffic(s) through a VPN tunnel with a exit point on the VPN server.
Is there a reverse possibility: to organize an exit point to the WWW on the ...
- 101
0
votes
0
answers
159
views
nftables or fw4 issue with timebased traffic rules
Since the OpenWRT ver > 22.3 does use NFTABLES instead of IPTABLES I got issue with some firewall (fw4) time based traffic rules that I have no idea how to solve them.
The firewall rule is as ...
- 11
0
votes
1
answer
234
views
running openwrt in virtualbox with 2 network adapters- a host only adapter and bridged adapter, but only host-only adapter shows
following this video to try and set up a virtual network for me to practice hacking, but only the host-only adapter shows (I am currently 17 minutes into the video).
uci show network
ip addr
/etc/...
1
vote
0
answers
566
views
Blocking forwarded traffic with OpenWrt fw3 firewall
I can't find out how to create a fw3 rule which does what I want (block all traffic from 192.168.1.119). I have this in /etc/config/firewall
config rule
option ...
- 11
1
vote
1
answer
347
views
WG3526 modem can't connect to 4G/LTE with OpenWRT
I have a client with a WG3526 4G/LTE modem with a sim card slot.
I had to change the firmware so I can get detailed bandwidth usage.
My issue is since I installed the generic version of OpenWRT, the ...
- 61
0
votes
1
answer
457
views
iptables rules openwrt not working
I am new here and I hope find answer to my question
i hvae set rule in openwrt iptables
iptables -A FORWARD -s 192.168.2.14 -m time --timestart 8:00 --timestop 18:30 -j ACCEPT
iptables -A ...
- 1
0
votes
1
answer
93
views
Is ingress filtering described in RFC2827 implemented in most routers? How does such implementation look like?
RFC 2827 describes the idea of ingress filtering that is meant to
deal with DOS attacks that utilize IP spoofing:
An input traffic filter on the ingress (input) link of "router 2", which ...
- 105
0
votes
0
answers
279
views
I want to test IGMP capability of a OpenWRT based router. How caan i test?
This is what I want to test out,
SEE IMAGE: Router connected to users and is accessible over the internet as well
PC1 and PC2 should be able to join some group(s).
Should be able to leave group as ...
0
votes
0
answers
207
views
Transform Broadcast packet in Unicast packet with iptables and ebtables
I've been struggling with this problem for months, and my limited networking knowledge doesn't allow me to progress further, so here I am asking for an advice.
I have an OpenWRT Router with two ...
1
vote
1
answer
1k
views
How can I MASQUERADE between vlan bridges
I have created two VLAN bridges in openwrt based system which has single physical interface.
*) eth0->lan->br-lan
*) br-lan->br-lan.2(VLAN INTF)->br-vlan2(BRIDGE INTF)
*) br-lan->br-lan....
- 11
0
votes
1
answer
380
views
How to add a routing rule that only match "dport"?
In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following:
ip rule add from 192.168.28.2 dport 1888 lookup 123
ip ...
- 169
2
votes
1
answer
684
views
How to block devices connecting to a specific wireless interface from accessing the internet?
I have configured my OpenWRT WiFi router with two wireless interfaces: wlan0 and wlan0-1. My WAN ethernet interface is eth0.2.
How do I prevent devices that connect to wlan0-1 from accessing the ...
- 123
0
votes
1
answer
418
views
OpenVPN and IPTABLES - How to assign lan (vpn) gateway to clients
I am trying to set up my openvpn network but I have a problem.
My LAN configuration is as follows:
main router Zyxel 192.168.1.1 acting as gateway (vdsl connection) and
access point;
openwrt router ...
0
votes
1
answer
50
views
Redirect TLS traffic by hostname
I have an IoT device that connects to a.iot.x.amazonaws.com at port 8883 (secure MQTT).
I would instead like it to connect to my own site at b.iot.x.amazonaws.com (same port and protocol). I would ...
0
votes
0
answers
225
views
IPv6 connection drops after renewing an address
I have a router running OpenWrt and a machine with embedded Linux built with Yocto. I need to detect lease renewing in my C application. On my router I decrease lease time to 30 seconds. When I log on ...
0
votes
1
answer
3k
views
Is it possible to force the DHCP server to assign a different IP address each time the address is renewed?
I need to detect IP address renewals in my C++ Linux application and check if the new address is different from the old one. I have access to a router running OpenWrt. I can change the lease time, but ...
0
votes
0
answers
599
views
Requests to WAN IP are served by LAN interface on OpenWrt
Here's the situation. I have OpenWrt installation with multiple zones:
WAN - let it be 1.1.1.1
LAN0 - 192.168.0.0/24
LAN1 - 192.168.1.0/24
After forwarding some port from WAN to LAN0 I can reach it ...
- 101
0
votes
1
answer
612
views
Unraid share fails to mount on OpenWRT using mount.cifs?
So I have an Unraid machine with some shares on it and I would like to be able to mount this share on my OpenWRT router for backing up/transfering files onto the router (avoids having to plug-in/...
- 51
1
vote
1
answer
847
views
How to get internet/networking on QEMU for OpenWrt under Windows?
I would like to run a Internet-capable OpenWrt-Box on a Windows10 Machine using QEMU.
I have tried this command:
"c:\Program Files\qemu\qemu-system-aarch64.exe" -m 1024 -smp 2 -cpu cortex-...
- 111
0
votes
0
answers
248
views
OpenVPN on OpenWRT fails to connect "connection timeout"
It seems very elegant to be able to connect to your homenetwork from any public accesspoint without being worried to disclose your traffic. So dispite my lack of computer network experience, and after ...
- 101
3
votes
2
answers
6k
views
OpenWRT - How to redirect all subdomains of a hostname, to the same host, so that it can be reverse proxied?
I have an OpenWRT router setup, 192.168.1.1, with search domain, local (as opposed to the default lan).
I have a server setup, 192.168.1.200, with hostname, server.local.
I have a workstation, 192.168....
- 179
0
votes
1
answer
501
views
Capturing IEEE802.11.x auth and capabilities data with tcpdump?
I'm troubleshooting some issues with my wireless network (OpenWrt 19.x and mobile device) and I came across this:
https://dot11.exposed/2017/09/20/violation-of-802-11-standard-intel-wireless-cards-...
- 13
2
votes
1
answer
3k
views
OpenWrt allow IPv6 rule to access a server with global IPv6 on local area
First of all, I have a domain with dns configured to point to my device global address witch is set to static with my ISP gloabl prefix as xxxx:xxxx:xxxx:de01::3/64 in dhcpcd.conf.
I'm using Openwrt ...
- 121
2
votes
1
answer
1k
views
Does Dropbear know what a ~/.ssh/config file is?
I want to ssh from one host (OpenWrt running Dropbear) to another host on the same LAN that is running open-ssh server and client.
I converted the private open-ssh key of the other host to dropbear ...
- 193
0
votes
1
answer
2k
views
setting up load balancing with mwan3 on openwrt
I want my traffic going through USB-tethering, while destination to 192.168.0.0/24 going to WAN port. I have SSH-ed into the GL-AR750S and opkg-install-ed luci-app-mwan3. Both interfaces are up and ...
- 223
0
votes
1
answer
2k
views
How do I block all traffic to all ports except 80/443 in OpenWRT?
I'm trying to do some testing and would like to setup my network to only allow traffic on 80/443, expect for specific IP addresses where I will specify a TCP port and UDP port.
Once completed, I want ...
- 244
0
votes
0
answers
2k
views
StrongSwan config issue: no matching peer config found
I am trying to establish a VPN between my router (running OpenWrt) and my smartphone using IPsec.
I followed the guide at https://openwrt.org/docs/guide-user/services/vpn/ipsec/strongswan/roadwarrior
...
- 1
0
votes
2
answers
207
views
StrongSwan: manually expire security association
I am working on automating some software tests involving IPSec and StrongSwan. These tests basically apply a swanctl.conf file to two gateway machines, then establish a tunnel between them. It then ...
- 67
0
votes
0
answers
2k
views
Use WireGuard for combining bandwidth (multiwan)
Is it possible to combine multiple uplinks for getting faster VPN access to a server with WireGuard?
I already played around with MultiWAN (mwan3, OpenWRT) in the past but for VPN access, its only ...
0
votes
1
answer
2k
views
How can I setup dnsmasq wildcard cnames for domains generated from dhcp leases?
I have an OpenWRT router with automatic dhcp domains enabled. This way, for host example-host, I automatically get an A record for example-host.lan to 192.168.1.2.
I am trying to setup a wildcard ...
0
votes
1
answer
1k
views
How to set up Kubernetes (k8s) environment on an open-wrt based node connected in a cluster?
Openwrt OS support ".opk" file format extensions for the packages to be installed on the top of it. For that k8s, kubelet binaries are availbale but the procedure is to generate an installable ...
1
vote
1
answer
227
views
How to clone egress UDP packets & send them to the same destination in order
This is what I want,LAN---- (UDP packets flow)----->Router [Mirror UDP packets & send these packets to the same destination port/IP in order]--------> Internet.
Any idea?
Side note: I want to try ...
- 113
0
votes
1
answer
3k
views
TP-LINK TL-MR6400 IPSEC L2TP VPN tunnel with GCP server
I have a TP-LINK TL-MR6400 router, connected to internet by means of an LTE sim.
This is a very rough network diagram of my current situation.1
My IoT services sit behind the TL-MR6400.
Unfortunately ...
google-cloud-platform
0
votes
1
answer
196
views
Check forwarding queue occupation on router
I have a router forwarding traffic from a network to another and I need to know when the packet queue (in the receiving side/interface - rx) occupation is close to its maximum capacity.
However, ...
- 113
1
vote
1
answer
116
views
gitolite on openwrt - ssh not using gitolite
I've set up a gitolite installation on OpenWrt-18.06.04 according to this guide:
https://openwrt.org/docs/guide-user/services/gitolite
Step 9 of the "actual install" suggests removing the RSA-key ...
- 111
2
votes
1
answer
320
views
Strange routing behavior, Synology combined with OpenVPN
Essentially the setup I've got is
WAN <-> OpenVPN running on OpenWRT running on WRT3200ACM <-> LAN -> Gigabit Switch -> RPI and synology
The openVPN tun is working fine and dandy. I get an IP ...
- 31
0
votes
1
answer
2k
views
OpenWRT + OpenVPN - connection to the VPN succeeds but can't ping LAN, can't ping outside
I'm setting up a VPN connection using OpenVPN client on OpenWrt. The client connects to the server, but I can't ping any network hosts using the tun0 interface
Ping Examples:
ping -I tun0 192.168.1....
- 1
0
votes
1
answer
151
views
Dynamic SQM Settings
I've just set up my new router (WRT1900ACS) and installed OpenWRT. I have ADSL which makes it pretty hard to adjust the sqm up/download speed correctly as it differs depending on what day it is. Is ...
- 105