Davidc502- wrt1200ac wrt1900acx wrt3200acm wrt32x builds

[Benoit]

Hello, I'm having interrupted IP traffic with my Wifi clients, every hour or so. The Wifi client remains connected both on its operating system (Windows 10) and on the WRT3200ACM.

I'm using Davidc502 build OpenWrt SNAPSHOT r12235-49caf9f98a / LuCI Master git-20.047.03130-732722d with WPA2 Enterprise (with a radius server running on a Synology NAS) :

Once the problem occurs, the client starts to emit repeated frames like these (trace from tcpdump on the WRT3200ACM):

18:14:04.222892 dc:fb:48:xx:xx:xx IP > ff:ff:ff:ff:ff:ff Unknown DSAP 0x18 Information, send seq 0, rcv seq 16, Flags [Response], length 52
        0x0000:  1907 0020 0000 0000 aaaa 0300 0000 0806  ................
        0x0010:  0001 0800 0604 0001 dcfb 48xx xxxx c0a8  ..........HQ.p..
        0x0020:  0ad7 0000 0000 0000 c0a8 0a01 a5a2 c9da  ................
        0x0030:  f0fb 977a                                ...z

OpenWRT shows the client is still connected. Right after the problem occurs, I can see the EAP re-authentication in the log, which seems successful.

Then if I reconnect the client by disabling / re-enabling its Wifi adapter, it connects fine for another hour.

I tried to fix the IP address, this didn't make a difference.

Some infos :

Has anyone already seen such behavior ? I'm having a hard time tracking down the issue.

Best regards,

Benoît.

[davidc502]

Does the same issue exist with the channel width on 80mhz instead of 160? Also, channel 116 is a DFS channel and at 160Mhz width, so if radar is detected at any time it will drop all your clients for a period of time before it re-establishes if it re-establishes at all.
Try channel 36 with 80mhz width and see if the problem persists.

[Benoit]

I tried this morning, same symptoms.

Setup :

Weird part is, the PC remains connected seen from the acces-point.

Test pending : I have disabled radio0 (5GHz) and am trying on radio1 (2.4GHz) to see if the same occurs.

I will report the result in about one hour.

Edit : the same happens on 2.4 GHz

Trying with 5GHz back on channel 116/160MHz but with WPA2 PSK this time (no radius). Will report in about one hour.

Edit : using WPA2/PSK did not cause the hourly disconnection. It seems the problem is in relation with WPA2 Enterprise. After some searches, I found this thread, mentioning rekeying problem.

I will try with different values for parameter wpa_pair_rekey to see what happens.

Edit : setting wpa_pair_rekey to 30 seconds, I can reproduce the problem : disconnection occurs after 30 seconds following the correct authentication.

I have set this parameter to 0 and will see what happens...

Edit : 0 for this parameter was a mess : connecting and disconnecting tight after. Trying with 86400 seconds to see...

Final tests : bad luck, despite the values of the number I choose (7200, 86400, 9), I get disconnected after one hour

It seems the problem is strongly related to WPA2-EAP, on my other router (WRT1200AC) it works well since years.

Any idea on what other parameter I could investigate ?

[Gremlin]

Hi, Just out of curiosity what was the reason for the WAN LAN MAC swap?

[anomeome]

the commit

[adri]

@davidc502

For those who want to test offloading do the following.

1. Do it the easy way and install "kmod-ipt-offload".
2. Go to the Firewall Section in LuCi and enable Software Flow Offloading and then Hardware Flow Offloading.
3. From SSH run HTOP, and then run some speed tests and see the Processor% as well as speeds if you're limited currently by processor utilization.

@davidc502,

Will you include the "kmod-ipt-offload" module in future builds?
Or do we have to manually install it after each firmware upgrade?

[davidc502]

Yes, it will be added to the next build moving forward.

[Kherby]

I'm very interested in the question if Software Flow Offloading works fine with SQM these days? The reason why I've never tried is that in the past I've read that flow offloading doesn't go well with SQM.
Currently I wouldn't need Software Flow Offloading it as my speeds are just ~100 mbps Down and 40Up but it sounds quite usefull to free up the cpu a little bit for other tasks...

[gregas]

Hi to all,
Sorry I am new to OpenWRT, linux, unix etc. However use search and google.
I do have WRT3200ACM with this nice firmware.

PROBLEM I face with network shares is write/delete files and folders from mounted 64GB USB key via WindowsExplorer. I always get fatal errors, permission denied because of disk is write-protected.
Problem related to file and folder permissions. After USB is mounted Windows Explorer shows the only "Special permissions" enabled is for Unix User\root. I did play with "create mask" 0666->0777 and "directory mask" 0777 to various settings found on https://en.wikipedia.org/wiki/File_system_permissions

MY SETTINGS:

1. I went to menu System/MountPoints and mounted drive to /mnt/sda1. Checkbox Enabled.
2. I went to menu Services/NetworkShares->SharedDirectories
   Name: VIDEO
   Path: mnt/sda1
   Browseable: yes
   Read only: no
   ForceRoot: yes (otherwise I can't acces drive at all)
   Allowed users: [empty]
   Allow guests: yes
   Guests only: yes (no difference Yes or No selected)
   Inherit owner: yes (no difference Yes or No selected)
   Create mask: 0666 (0777 makes no difference)
   Directory mask: 0777 (0666 makes no difference)
   Vfs objects: [empty]
   Apple time...: [empty]
   Time machine...: [empty]

Any help?

[Benoit]

I did additional tests about WPA2 Enterprise problem with WRT3200ACM (systematic disconnection after one hour) :

• tried several older 88W8964 firmwares (9.3.2.6, 9.3.2.5), same symptoms.
• tried with stock Linksys firmware (1.0.8.198828_prod), same symptoms.

I will try with a different RADIUS server to see if that makes a difference. Today I am using the RADIUS service from a Synology NAS, which has been working fine for several years on my WRT1200AC.

I will report about the results.

Edit : Same problem. My Radius server (FreeRADIUS running on pfSense) is showing a successful re-authentication, the Wifi client seems to remain connected Wifi-wise, but is loses its IP address, and is unable to renew it (tried manually).

My conclusion is that WRT3200ACM cannot handle WPA2 Enterprise properly

Other reports of the problem here.

Workaround : in fact adding option eap_reauth_period '0' do seem to fix the problem

[Andy2244]

@gregas

PROBLEM I face with network shares is write/delete files and folders from mounted 64GB USB key via WindowsExplorer.

What filesystem are you using on the stick?

@gregas

/mnt/sda1

Try this via shell (ensure the share root folder also has 0777 access):
chmod 0777 /mnt/sda1

[gregas]

I use NTFS on my test USB 64GB. Further I want to attach my 5TB Seagate HDD with all data.

"chmod 0777 /mnt/sda1" via Putty says No such file or directory
After my first post I did try to figure out the problem myself and flashed Linksys and DavidWRT numerous times with factory resets. I assume my new problem related to USB drives not showing up in MountedFileSystems.

Yesterday 64GB USB and 5TB HDD showed up in Mounted File Systems and I was able at least read data.
Today despite I manually MountPoint my external storage and tick Enabled and Save/Apply, those storage do not show up in MountedFileSystem list.

[Andy2244]

@gregas

I use NTFS on my test USB 64GB. Further I want to attach my 5TB Seagate HDD with all data.

There are reported write problems using NTFS, try fat32 or better exfat (needs enabled patented, is this enabled by davids builds?).

If you don't need to actually access directly via windows, a linux native filesystem is recommend. For HDD use ext4 and for SSD use F2FS.

PS: You can format ext4 under windows via MiniTool Portable Partition Magic

[WiteWulf]

Just run into the same issue here updating a WRT32X to the latest build. WAN and LAN interfaces swapped their MAC addresses and I had to power cycle the cable modem (thank $deity it's on a switched PDU as I'm on crutches at the moment!).

[sunchar]

Hi!

I had the same problem with latest releases, i had to add this:

• Edit template and add ntlm auth = yes
• Add option read_only 'no' to file /etc/config/samba4

That fixed the write protected issue.

Hope this helps

[Andy2244]

@sunchar

Edit template and add ntlm auth = yes

Alternative use the new UCI/Luci config option for samba4:

config samba
	option allow_legacy_protocols '1'

[sunchar]

I'll check it out.

Thanks!

[gregas]

Sorry, but I am Windows user. Could you please point how to edit template.
I found template Edit template under Network shares, but I don't know to which line to add. Besides search did not find any samba4 as keyword.
Sorry for now and in advance for stupid questions

p.s. where do I get older builds to test my problem?
also what if i give you remote access e.g. via TeamViewer?

[sunchar]

Hi.

For editing template, go to Services menu, Network shares. There you will see "Edit template" on top.
To edit etc/config/samba4, first login with ssh, then write vi /etc/config/samba4 and add option read_only 'no' line to that file.
Of course, if you need help, we can do it with TeamViewer

Sorry for my text, i'm writing with cell phone on the hurry

[gregas]

Thank you for your response. Just used Putty for SSD and option was already "no":
option read_only 'no'

Meanwhile I have formated my usb do ext4 and everything run smoothly. I did also checked same firmware on my both WRT1900ACS v2 and WRT3200ACM. Same problem on both.
Seems problem related to NTFS file system. No matter what size 64GB USB or 5TB HDD, GPT or MBR.

Anyway I am Microsoft Windows user and would want to use ext4 if there is no solution for NTFS.
Now I need to go to sleep 11:54PM here and I need to get up at 6AM

See you tomorrow.
Greetings from Lithuania!