Cant connect to openwrt via wifi when WAN is disconnected

RSHARM · January 4, 2026, 12:47pm

Sometimes solved when using static IP on stations (windows)

frollic · January 4, 2026, 12:48pm

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):

Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall

RSHARM · January 6, 2026, 7:07am

cat /etc/config/dhcp

/$ cat /etc/config/dhcp

config dnsmasq
	option domainneeded '1'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option localservice '1'
	option ednspacket_max '1232'
	list server '127.0.0.1#5453'
	list server '0::1#5453'
	list rebind_domain 'time.android.com'
	option stripmac '1'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'
	option force '1'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'
	option start '100'
	option limit '150'
	option leasetime '12h'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'
	option piofolder '/tmp/odhcpd-piofolder'

config dhcp 'guest'
	option interface 'guest'
	option start '100'
	option limit '150'
	option leasetime '12h'

config dhcp 'private'
	option interface 'private'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'

config dhcp 'server'
	option interface 'server'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.2'
	list mac '00:00:00:00:00:00'

config host
	option name 'Device Name Censored'
	list mac '00:00:00:00:00:00'
	option ip '192.168.1.3'
	option leasetime 'infinite'
	list tag 'Phone'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.4'
	list mac '00:00:00:00:00:00'
	list tag 'Desktop'
	option duid '752225972532457524722999592747'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.5'

config host
	option name 'Device Name Censored'
	list mac '00:00:00:00:00:00'
	option ip '192.168.4.6'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.6'
	option mac '00:00:00:00:00:00'
	list tag 'Adaptor'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.7'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.8'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.9'
	option mac '00:00:00:00:00:00'
	option leasetime 'infinite'
	list tag 'Phone'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.10'
	option leasetime 'infinite'
	list tag 'Laptop'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.11'
	option leasetime 'infinite'

config host
	option name 'Device Name Censored'
	option leasetime 'infinite'
	option ip '192.168.1.12'
	list tag 'Phone'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.13'
	option leasetime 'infinite'
	option mac '00:00:00:00:00:00'
	list tag 'Phone'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.14'
	list mac '00:00:00:00:00:00'
	option leasetime 'infinite'

config host
	option name 'Device Name Censored'
	option ip '192.168.1.15'

config host
	option name 'Device Name Censored'
	option ip '192.168.2.2'
	list tag 'TV'

config host
	option name 'Device Name Censored'
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.3'
	option leasetime 'infinite'
	list tag 'Phone'

config host
	option name 'Device Name Censored'
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.4'
	option leasetime 'infinite'

config host
	option name 'Device Name Censored'
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.5'
	option leasetime 'infinite'
	list tag 'Phone'

config host
	list mac '00:00:00:00:00:00'
	option ip '192.168.2.6'
	option name 'Device Name Censored'
	option leasetime 'infinite'
	list tag 'Phone'

config ipset
	list name '192.168.1.9-192.168.1.12'
	list domain 'UserX.lan'
	option table_family 'inet'

config ipset
	list domain 'DeviceList.local'
	list name '192.168.1.8-192.168.1.12'
	option table_family 'inet'

config ipset
	list name '192.168.1.8'
	list name '192.168.1.9'
	list name '192.168.1.12'
	list domain 'MobileList.lan'
	option table_family 'inet'

config ipset
	list domain 'facebook.com'
	list name 'facebook.com'
	option table_family 'inet'

config host
	option name 'Device Name Censored'

config host
	option name 'Device Name Censored'

config dhcp 'serverlocal'
	option interface 'serverlocal'
	option start '100'
	option limit '150'
	option leasetime '12h'

config dhcp 'lan2'
	option interface 'lan2'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'
	option ra 'server'
	option dhcpv6 'server'
	list ntp '192.168.0.1'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

cat /etc/config/network

/$ cat /etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option packet_steering '1'
	option steering_flows '128'
	option ula_prefix 'fd00::/8'

config device
	option name 'br-lan'
	option type 'bridge'
	option macaddr 'censored'
	list ports 'lan1'
	list ports 'lan2'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option ip6ifaceid '::1'
	option delegate '0'
	option auto '0'

config interface 'wan'
	option device 'wan'
	option proto 'dhcp'
	option peerdns '0'
	list dns '127.0.0.1'

config interface 'wan6'
	option device 'wan'
	option proto 'dhcpv6'
	option reqaddress 'try'
	option reqprefix 'auto'
	option norelease '1'
	option peerdns '0'
	list dns '0::1'
	option delegate '0'
	option auto '0'

config interface 'Wireguard'
	option proto 'wireguard'
	list addresses '10.2.0.2/32'
	option private_key 'censored'
	list dns '127.0.0.1'
	list dns '0::1'

config interface 'guest'
	option proto 'static'
	option ipaddr '192.168.3.1'
	option netmask '255.255.255.240'
	option device 'br-guest'
	list dns '127.0.1.1'
	list dns '127.0.0.1'
	option auto '0'

config interface 'private'
	option proto 'static'
	option ipaddr '192.168.2.1'
	option device 'br-private'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option ip6ifaceid '::1'
	option delegate '0'

config device
	option type 'bridge'
	option name 'br-guest'
	option bridge_empty '1'
	list ports 'lan4'

config device
	option type 'bridge'
	option name 'br-private'
	option bridge_empty '1'
	option macaddr 'censored'
	list ports 'lan3'

config device
	option type 'bridge'
	option name 'br-server'
	option bridge_empty '1'
	option macaddr 'censored'

config interface 'server'
	option proto 'static'
	option ipaddr '192.168.4.1'
	option device 'br-server'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option ip6ifaceid '::1'
	option auto '0'

config device
	option name 'wan'
	option macaddr 'censored'

config device
	option name 'eth0'

config interface 'wwan'
	option proto 'dhcp'
	option auto '0'
	option disabled '1'

config device

config wireguard_Wireguard
	option description 'Config Example'
	option private_key 'censored'
	option private_key 'censored'
	list allowed_ips '0.0.0.0/0'
	option persistent_keepalive '25'
	option endpoint_host '146.70.174.66'
	option disabled '1'

config interface 'serverlocal'
	option proto 'static'
	option ipaddr '192.168.5.1'
	option netmask '255.255.255.0'
	option device 'br-serverlocal'
	option auto '0'

config device
	option type 'bridge'
	option name 'br-serverlocal'

config wireguard_Wireguard
	option description 'x'
	option private_key 'censored'
	option private_key 'censored'
	option persistent_keepalive '25'
	option endpoint_host '89.187.170.159'
	list allowed_ips '0.0.0.0/0'
	list allowed_ips '::/0'

config wireguard_Wireguard
	option description 'x'
	option private_key 'censored'
	option private_key 'censored'
	option persistent_keepalive '25'
	option endpoint_host '146.70.174.66'
	list allowed_ips '0.0.0.0/0'
	option disabled '1'

config wireguard_Wireguard
	option description 'x'
	option private_key 'censored'
	option private_key 'censored'
	option persistent_keepalive '25'
	option endpoint_host '185.132.132.113'
	list allowed_ips '0.0.0.0/0'
	list allowed_ips '::/0'
	option disabled '1'

config interface 'lan2'
	option proto 'static'
	option device 'br-lan'
	option ipaddr '192.168.0.1'
	option netmask '255.255.255.240'
	list dns '127.0.0.1'
	list dns '0::1'
	option delegate '0'
	option ip6ifaceid '::1'

cat /etc/config/network

/$ cat /etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option band '2g'
	option cell_density '1'
	option country 'US'
	option htmode 'HT40'
	option channel '6'
	option txpower '20'
	option ldpc '0'
	option noscan '1'

config wifi-device 'radio1'
	option type 'mac80211'
	option path '1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0'
	option band '5g'
	option cell_density '3'
	option country 'US'
	option channel '36'
	option htmode 'VHT160'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan2'
	option mode 'ap'
	option ssid 'Censored'
	option key 'Censored'
	option encryption 'sae-mixed'
	option wpa_disable_eapol_key_retries '1'
	option macaddr 'random'
	option ocv '0'
	option isolate '1'
	option ieee80211w '1'
	option ifname 'WifiMain2Ghz'
	option disassoc_low_ack '0'

config wifi-iface '2Ghz'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'Censored'
	option ifname '2Ghz'
	option key 'Censored'
	option encryption 'sae-mixed'
	option wpa_disable_eapol_key_retries '1'
	option macaddr 'random'
	option ocv '0'
	option isolate '1'
	option ieee80211w '1'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option mode 'ap'
	option wpa_disable_eapol_key_retries '1'
	option network 'lan2'
	option ssid 'Censored'
	option key 'Censored'
	option encryption 'sae-mixed'
	option macaddr 'random'
	option ieee80211w '1'
	option isolate '1'
	option ocv '0'
	option ifname 'WifiMain5Ghz'

config wifi-iface 'W5Ghz'
	option device 'radio1'
	option mode 'ap'
	option wpa_disable_eapol_key_retries '1'
	option network 'lan'
	option ifname 'W5Ghz'
	option ssid 'Censored'
	option key 'Censored'
	option encryption 'sae-mixed'
	option macaddr 'random'
	option ieee80211w '1'
	option ocv '0'
	option isolate '1'
	option disabled '1'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'

config wifi-iface 'IOT2Ghz'
	option device 'radio0'
	option mode 'ap'
	option wpa_disable_eapol_key_retries '1'
	option ifname 'IOT2Ghz'
	option key 'Censored'
	option ssid 'Censored'
	option encryption 'sae-mixed'
	option network 'private'
	option macaddr 'random'
	option ocv '0'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	list maclist '00:00:00:00:00:00'
	option skip_inactivity_poll '1'
	option disabled '1'

config wifi-iface 'IOT5Ghz'
	option device 'radio1'
	option mode 'ap'
	option encryption 'sae-mixed'
	option wpa_disable_eapol_key_retries '1'
	option ifname 'IOT5Ghz'
	option key 'Censored''
	option ssid 'Censored'
	option network 'private'
	option macaddr 'random'
	option ieee80211w '1'
	option ocv '0'
	list maclist '00:00:00:00:00:00'
	option disabled '1'

config wifi-iface 'WifiGuest'
	option device 'radio0'
	option mode 'ap'
	option ssid 'Censored'
	option encryption 'sae-mixed'
	option isolate '1'
	option ifname 'WifiGuest'
	option macaddr 'random'
	option key 'Censored'
	option ieee80211w '1'
	option wpa_disable_eapol_key_retries '1'
	option network 'Guest guest'
	option ocv '0'
	option disabled '1'

config wifi-iface 'WifiServer'
	option device 'radio0'
	option mode 'ap'
	option ssid 'Censored'
	option encryption 'sae-mixed'
	option macaddr 'random'
	option key 'Censored'
	option network 'server'
	option isolate '1'
	option ifname 'Wifi_Server'
	option ocv '0'
	option disabled '1'

config wifi-iface 'WifiClient'
	option device 'radio0'
	option mode 'sta'
	option network 'wwan'
	option ssid 'Censored'
	option encryption 'sae'
	option key 'Censored'
	option macaddr 'random'
	option ocv '0'
	option disabled '1'
	option ifname 'WifiClient'

config wifi-iface 'monitor'
	option device 'radio1'
	option mode 'monitor'
	option network 'lan'
	option ifname 'Wifi5mon0'
	option macaddr 'random'
	option ssid 'Censored'
	option disabled '1'

config wifi-iface 'mesh'
	option device 'radio0'
	option mode 'mesh'
	option mesh_fwding '1'
	option mesh_rssi_threshold '0'
	option key 'Censored'
	option encryption 'none'
	option mesh_id '80211s'
	option macaddr 'random'
	option disabled '1'

config wifi-iface 'adhoc'
	option device 'radio0'
	option mode 'adhoc'
	option ssid 'Censored'
	option macaddr 'random'
	option ifname 'Wifi_Adhoc'
	option encryption 'none'
	option key 'Censored'
	option disabled '1'

config wifi-iface 'wifinet12'
	option device 'radio0'
	option mode 'ap'
	option ssid 'Censored'
	option encryption 'sae-mixed'
	option ifname 'experiment'
	option macaddr 'random'
	option key 'Censored'
	option ocv '0'

config wifi-iface 'wifinet13'
	option device 'radio0'
	option mode 'ap'
	option ssid 'Censored'
	option encryption 'sae-mixed'
	option macaddr 'random'
	option key 'Censored'
	option ocv '0'

RuralRoots · January 6, 2026, 7:47am

You missed:

ubus call system board
uci export firewall

RSHARM · January 6, 2026, 6:00pm

/$ ubus call system board
{
"kernel": "6.6.110",
"hostname": "R",
"system": "MediaTek MT7621 ver:1 eco:3",
"model": "D-Link DIR-2640 A1",
"board_name": "dlink,dir-2640-a1",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "24.10.4",
"revision": "r28959-29397011cc",
"target": "ramips/mt7621",
"description": "OpenWrt 24.10.4 r28959-29397011cc",
"builddate": "1760891865"
}
}