Can't reach any device on lan, even if all wired

Installing and Using OpenWrt
1

I’m really stumped on this one. i think its just because its late here but i cannot figure it out. i try to ping 192.168.1.1 and they all get destination unreachable. even though thats the gateway. i do have access to the internet and other ip ranges if the firewall allows it, just not lan. even though the device i try to reach and am reaching out from are both on the physical ports mapped to lan.

heres my network config:

/etc/config/network 
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'

config globals 'globals'
option ula_prefix 'fd3d:2eed:7440::/48'
option packet_steering '1'

config device
option name 'br-lan'
option type 'bridge'
list ports 'eth1.1'

config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'

config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'

config switch_vlan
option device 'switch0'
option vlan '1'
option ports '0t 2 3 4 5'
option vid '1'
option description 'LAN'

config switch_vlan
option device 'switch0'
option vlan '2'
option ports '1t 6t'
option vid '6'
option description 'wan'

config device
option type '8021q'
option ifname 'eth0'
option vid '6'
option name 'eth0.6'

config interface 'WAN'
option proto 'pppoe'
option device 'eth0.6'
option username 'x'
option password 'x'
option mtu '1500'
option peerdns '0'
list dns 'x'
list dns 'x'
option ipv6 '1'
option metric '1'

config interface 'Guest'
option proto 'static'
option device 'br_Guest'
option ipaddr '192.168.2.1'
option netmask '255.255.255.0'

config device
option type 'bridge'
option name 'br_Guest'
option bridge_empty '1'

config interface 'x'
option proto 'static'
option device 'x_vl10'
option ipaddr '192.168.10.1'
option netmask '255.255.255.0'

config switch_vlan
option device 'switch0'
option vlan '3'
option ports '0t 2t'
option vid '10'
option description 'x network'

config device
option type 'bridge'
option name 'x_vl10'
list ports 'eth1.10'
/etc/config/firewall 
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'

config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'

config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
list network 'WAN'

config forwarding
option src 'lan'
option dest 'wan'

config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'

config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'

config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'

config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'

config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'

config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'

config zone
option name 'Guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'Guest'

config forwarding
option src 'Guest'
option dest 'wan'

config rule
option src 'Guest'
option name 'Allow-DNS-Guest'
option dest_port '53'
option target 'ACCEPT'

config rule
option src 'Guest'
option name 'Allow-DHCP-Guest'
list proto 'udp'
option dest_port '67'
option target 'ACCEPT'

config zone
option name 'x'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'x'

config forwarding
option src 'x'
option dest 'wan'

config forwarding
option src 'wan'
option dest 'x'

Thanks for trying to help!

edit:

this is on TP-Link Archer C7 v2 running OpenWrt 24.10.2

2

It seems you have mutuple VLAN-aware bridges defined instead of configuring your networks and VLANs using 1.

3

It is swconfig?

1 Like
4

My bad. If so, the tagging is incorrect.

5

From what device are you testing? What is the IP address of the system that is running this ping test?

6

ip adress of system is 192.168.1.237

7

That's good... it's on the same subnet. How did it get its address? DHCP or static IP? What is the subnet mask, router, and dns that you see on the .237 device?

8

its a DHCP lease.

IPv4 Address. . . . . . . . . . . : 192.168.1.237
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

9

That all looks good.

Do you have internet access from this computer?

What OS is running on it? Are there any host level firewalls or anti-virus apps that might interfere with local connections?

Have you tried another device?

10

yes i have an internet connection via this. i can reach wan. i can also reach another subnet, for example 192.168.10.1 i can reach and ping weirdly enough, thats how i access lucy now.

windows 11, i tried disabling the firewall and that made no difference.

i’ll try from another device.

I also rebooted both the openwrt device and the windows 11 device.

11

Can you show a picture from switch in
Luci/Network/Switch ?

12

Do you have any VPNs running on your computer?

13

only tailscale, i also have a virtual adapter for virtualbox.

14

Try tuning those off.

2 Likes
15

That fixed it! dumb, i was looking in the wrong place. Thanks for the help!

16

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.