Davidc502- wrt1200ac wrt1900acx wrt3200acm wrt32x builds

I bought this wrt3200acm-eu router from a European seller on ebay. I live in Brazil and here the rules of the signals are the same as those of the Americans (FCC). Here in Brazil at 2.4ghz the power of channels 1 to 11 is 30db. And in the frequency in 5Ghz, the channels follow the same also in the United States (36 to 165) The biggest power level TX are the channels 149,153,157,161 and 165 that transmit the signal in 30db. Now this European variant router the maximum power is 20db at 2.4 GHz and 27db at 5Ghz on DFS channels. I was totally frustrated with the low power in such an expensive router and over time, I discovered that there are 2 variants of the WRT3200ACM ( US and EU ) with FCC and ETSI standards.

1 Like

Hi, im trying to setup samba4 i installed last from Davidc502 "OpenWrt SNAPSHOT r13342-e35e40ad82 / LuCI Master git-20.144.63033-62ed4e6"
But cant access the samba from a windows 10 machine
With linux i can access it with vers=2.0 but not with vers=1.0
i also try to enable it with min protocol = SMB1
but still no smb1 enable
What can i try ?
i have enable smb1 on the windows machine.

If you're using only SMB1 on Win10 then you need hit Start, type Features, click "Turn windows features on", then scroll down and enable SMB 1.0. Once it installs think you need to reboot. Win10 only supports SMB2+ by default for security reasons... If you have done that then make sure the shares are enabled in the router Network Shares. Otherwise not sure.

Thansk for your answer i have done it and still cant access,
the machine box is conected to a samba on a arch box with protocol 3
ServerName ShareName UserName Credential Dialect NumOpens


ARCH-IP Arch DESKTOP-XXXX\XX DESKTOP-XXXX\XX 3.1.1 1

But cant connect to the router.

well i update this, atfer trying a few thing i think host_allow did the trick, right now i have add these to my templrate and its working.

    min protocol = SMB2
    max protocol = SMB2
    encrypt passwords = true
    smb encrypt = disabled
    hosts allow = 192.168.0.
    map to guest = Never
    security = user

Thanks

David is right, FCC is very angry about this.
Despite the good question why they should decide what to do for the rest of the world, it's maybe not a good idea to hack driver for zone selection.
You can google if you wish to do it for yourself, information is available (but it's not so easy).

My syslog is full of "disassociated due to inactivity" every 5 minutes:

Thu Jun 11 02:17:43 2020 daemon.info hostapd: wlan1: STA xx:xx:xx:xx:xx:xx IEEE 802.11: authenticated
Thu Jun 11 02:17:43 2020 daemon.info hostapd: wlan1: STA xx:xx:xx:xx:xx:xx IEEE 802.11: associated (aid 1)
Thu Jun 11 02:17:43 2020 daemon.notice hostapd: wlan1: AP-STA-CONNECTED xx:xx:xx:xx:xx:xx
Thu Jun 11 02:17:43 2020 daemon.info hostapd: wlan1: STA xx:xx:xx:xx:xx:xx WPA: pairwise key handshake completed (WPA)
Thu Jun 11 02:17:43 2020 daemon.info hostapd: wlan1: STA xx:xx:xx:xx:xx:xx WPA: group key handshake completed (WPA)
Thu Jun 11 02:22:57 2020 daemon.notice hostapd: wlan1: AP-STA-DISCONNECTED xx:xx:xx:xx:xx:xx
Thu Jun 11 02:22:57 2020 daemon.info hostapd: wlan1: STA xx:xx:xx:xx:xx:xx IEEE 802.11: disassociated due to inactivity

I've already unchecked 'Disassociate On Low Acknowledgement' and that adds option disassoc_low_ack as 0 in wifi-iface but there has been no change.

The mac ageing timeout on the bridge interface is exactly 5 minutes.
Maybe it has something to do with it?
But hostapd directly runs on the wlan* interface(s) so that would be a bit strange?
You can also increase the inactivity timer with max_inactivity option.
I patched my builds to have a mac ageing timeout of 35minutes.

--- a/include/linux/if_bridge.h
+++ b/include/linux/if_bridge.h
@@ -48,7 +48,7 @@ struct br_ip_list {
 #define BR_NEIGH_SUPPRESS	BIT(15)
 #define BR_ISOLATED		BIT(16)
 
-#define BR_DEFAULT_AGEING_TIME	(300 * HZ)
+#define BR_DEFAULT_AGEING_TIME	(2100 * HZ)
 
 extern void brioctl_set(int (*ioctl_hook)(struct net *, unsigned int, void __user *));

Also patched the default ARP/NDP timeouts to 20 minutes
(because there is this random timer thing (*3/2) it can be high as 30 minutes.)
The default 60sec seems a bit low...

Interesting but doh and dnscrypt is not the same.
You used both?

What are the differences between smart DNS , stubby and doh.?

It says in inactivity timeout options that the default max inactivity is 5 minutes so that's probably why. For disassoc_low_ack it says "This depends on the driver capabilities and may not be available with all drivers." Does the option not work with WRT1900ACS?

works for me as well using a 940/50 mbit line. Getting about 700-900 but with A+ rating using SQM cake and software flow offload enabled

2 Likes

Wow that’s some serious bandwidth for SQM cake. Good to know these routers can almost keep up with gigabit.

2 Likes

Stubby is just query encrypt system, and only support DoT (DNS-Over-TLS), not DoH (DNS-Over-HTTPS).
SmartDNS is DNS accelerator first - it have nice features to decrease overall DNS latency and uses zone prefetch as well. Really faster responses in my case. And as a bonus it supports both DoH and DoT for uplink DNS connections.
At my router, with heavy caching, it's only uses 5M of RAM.

2all: I experiment with 160Mhz at 5.x core. Now it works in low channels (36,40) as well. Still not so stable and some adapters can't connect, but if it works i got 110-115MBps from Samba instead of 70 (seems like Samba have no speed cap, but connection are).

2 Likes

Thanks for that tip :+1:

Got to be careful with Adblock as well. It’s now V4.0.5 in this build. Pre V4 is different.

Followed your advice by doing backup, modified the backup tarball, sysupgrade straight - no carry config, restore modded backup.

So, restoring the adblock config from v3.x to v4.x broke my dnsmasq. Can no longer use any “option serversfile “ entries, and lost all resolution. :frowning:

So, if upgrading from Adblock V3.x to V4.x, don’t carry over the config. Edit /etc/config/dhcp and comment out any “option serversfile” entries. In luci Adblock interface set your NV Storage for Backup and Report dirs and take the defaults for everything else. Go from there.
.

Seems there has been some misinformation here about no ack, it doesn't prevent hosts from disconnecting from the AP and should normally not be used.

https://routerguide.net/ack-suppression-on-or-off-no-acknowledgement/

I hope this clears things up on that setting!

1 Like

Has this been security vetted by the community? No backdoor's etc.

Just want to be sure due to chinese origin.

To put a bit more nuance into my statement (read the article and didn't do enough research on the OpenWRT function), by default the setting is enabled and the "no acks" come from Android and iOS devices so the advice of OpenWRT is to disable it (https://openwrt.org/faq/disconnected_due_to_excessive_missing_acks). Which lowers the reliability of the network in the end.

The only issue I had with Wi-Fi disconnecting after a while was on 5Ghz, I named my 2.4Ghz and 5Ghz the same and since that moment I never lose Wi-Fi connection now on my Android devices. On my laptop it always goes to 5Ghz and never dissacotiates though, so not sure if this is a hacky/coincidental solution or the way it was intended.

There is another setting which is already turned off and should stay turned off to keep stations preventing from disconnecting: "skip_inactivity_poll" source: https://openwrt.org/docs/guide-user/network/wifi/basic

So, now I was not giving the complete picture and wanted to right that. So the conclusion is, that disabling the no ack setting (which is enabled by default) could solve issues, which I do not experience on any device since I named my networks the same and have switch between 2.4 and 5Ghz networks themselves.

Understand you well, i visit CN from time to time and that's why i prefer SSH tunnels instead of VPNs :slight_smile:

Smartdns is opensource and not so big, you can check or build yourself from github, but i didn't see anything suspicious.

Enabling skip_inactivity_poll (set to 1) will immediately disconnect stations when they are idle for amount of time specified by max_inactivity without doing a check before disconnecting the station.