DNS problems and 5G Wireless could not start. Could you please look at the screenshots of my config?

kgursu · June 19, 2022, 5:47pm

Hi,

I have several DNS related problems and 5G Wireless could not start.
Here are screenshots of the wireless related config pages:

[Album] OpenWRT

Thank you...

mk24 · June 19, 2022, 6:09pm

The "GUEST" network is not up, thus br-GUEST never starts, and nothing related to that network is going to work. The root of the problem is probably in the Network->Interfaces configuration of GUEST itself, which you did not show.

The guest network interface should have static IP with a subnet range that is outside all of your other networks, and use br-GUEST as its device, and have "bring up on boot" checked.

It's a good practice to use only lowercase for network names.

kgursu · June 19, 2022, 6:16pm

I will add that section then, but the main purpose of GUEST Wireless is that it should be enabled, when needed. So, no autostart is needed.

kgursu · June 20, 2022, 3:07pm

Issue needs other people's attention. So, please...

WereCatf · June 20, 2022, 4:10pm

What do you expect anyone to be able to say? "I have DNS problems" isn't even remotely descriptive; literally no one here can just magically know what problems those are. Also, you didn't show the wireless settings or system log, so it's the same thing there.

kgursu · June 20, 2022, 4:26pm

The link on the OP shows all related config pages as screenshots.
Besides, I have Fing installed. It shows DNS errors most of the time.

WereCatf · June 20, 2022, 4:28pm

There is no screenshot of your wireless settings, nor have you provided any of the logs.

kgursu · June 20, 2022, 4:32pm

[Album] OpenWRT

Here again 30 photos on Flickr.
The main problem is I'm unable to enable 5G wireless. DNS problems seems to be liveable and probably DNSSEC related.

psherman · June 20, 2022, 4:35pm

Instead of posting screenshots, you'll be better off posting your config files. You also need to be specific about what you have tested and the results of those tests. Otherwise, nobody can really help because we don't know what you are experiencing.

Please copy the output of the following commands and post it here using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have:

cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall

kgursu · June 20, 2022, 4:36pm

Ok, will do...

WereCatf · June 20, 2022, 4:37pm

If you refuse to show what I requested, then I'm wasting my time here. Have it your way.

kgursu · June 20, 2022, 6:39pm

config interface 'loopback'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
        option device 'lo'

config globals 'globals'
        option ula_prefix 'fdaa:8260:8eb3::/48'

config interface 'lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option device 'br-lan'

config interface 'wan'
        option proto 'dhcp'
        option peerdns '0'
        option hostname 'XXX'
        option dns '208.67.220.220 208.67.222.222'
        option device 'eth0.2'

config interface 'wan6'
        option proto 'dhcpv6'
        option device 'eth0.2'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '2 3 4 5 0t'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option ports '1 0t'

config interface 'GUEST'
        option proto 'static'
        option netmask '255.255.255.0'
        option ipaddr '192.168.3.1'
        option auto '0'
        option device 'br-GUEST'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0.1'

config device
        option name 'br-GUEST'
        option type 'bridge'
        list ports 'guest'

kgursu · June 20, 2022, 6:39pm

config wifi-device 'radio0'
        option type 'mac80211'
        option hwmode '11a'
        option path 'pci0000:00/0000:00:00.0'
        option htmode 'VHT80'
        option log_level '3'
        option country 'TR'
        option cell_density '0'
        option channel 'auto'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'XXXX_5G'
        option encryption 'psk2'
        option macfilter 'allow'
        option key 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'
        option wps_pushbutton '1'
        list maclist 'X1'
        list maclist 'X2'
        list maclist 'X3'
        list maclist 'X4'
        list maclist 'X5'
        list maclist 'X6'
        list maclist 'X7'
        list maclist 'X8'
        list maclist 'X9'
        list maclist 'X10'
        list maclist 'X11'
        list maclist 'X12'
        list maclist 'X13'

config wifi-device 'radio1'
        option type 'mac80211'
        option hwmode '11g'
        option htmode 'HT20'
        option log_level '3'
        option channel 'auto'
        option country 'TR'
        option path 'platform/ahb/18100000.wmac'
        option cell_density '0'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'XXXX'
        option wpa_disable_eapol_key_retries '1'
        option encryption 'psk2'
        option macfilter 'allow'
        option key 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'
        list maclist 'Y1'
        list maclist 'Y2'
        list maclist 'Y3'
        list maclist 'Y4'
        list maclist 'Y5'
        list maclist 'Y6'
        list maclist 'Y7'
        list maclist 'Y8'
        list maclist 'Y9'
        list maclist 'Y10'
        list maclist 'Y11'
        list maclist 'Y12'
        list maclist 'Y13'
        list maclist 'Y14'
        list maclist 'Y15'
        list maclist 'Y16'

config wifi-iface 'wifinet3'
        option wpa_disable_eapol_key_retries '1'
        option ssid 'XXXX-misafir'
        option encryption 'psk2'
        option device 'radio1'
        option mode 'ap'
        option isolate '1'
        option key 'YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY'
        option network 'GUEST'
        option disabled '1'

kgursu · June 20, 2022, 6:40pm

config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option localservice '1'
        list server '208.67.220.220'
        list server '208.67.222.222'
        option dnssec '1'
        option confdir '/tmp/dnsmasq.d'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'

config dhcp 'lan'
        option interface 'lan'
        option leasetime '12h'
        option start '2'
        option limit '254'
        option dhcpv6 'server'
        option ra 'server'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config host
        option dns '1'
        option mac 'X1'
        option ip '192.168.1.2'
        option name 'Z1'

config host
        option dns '1'
        option mac 'X2'
        option ip '192.168.1.3'
        option name 'Z2'

config host
        option dns '1'
        option mac 'X3'
        option ip '192.168.1.4'
        option name 'Z3'

config host
        option dns '1'
        option mac 'X4'
        option ip '192.168.1.5'
        option name 'Z4'

config host
        option dns '1'
        option mac 'X5'
        option ip '192.168.1.6'
        option name 'Z5'

config host
        option dns '1'
        option mac 'X6'
        option ip '192.168.1.10'
        option name 'Z6'

config host
        option dns '1'
        option mac 'X7'
        option ip '192.168.1.11'
        option name 'Z7'

config host
        option name 'Z8'
        option dns '1'
        option mac 'X8'
        option ip '192.168.1.12'

config host
        option dns '1'
        option mac 'X9'
        option ip '192.168.1.13'
        option name 'Z9'

config host
        option name 'Z10'
        option dns '1'
        option ip '192.168.1.14'
        option mac 'X10'

config host
        option dns '1'
        option mac 'X11'
        option ip '192.168.1.15'
        option name 'Z11'

config host
        option dns '1'
        option mac 'X12'
        option ip '192.168.1.16'
        option name 'Z12'

config host
        option dns '1'
        option mac 'X13'
        option ip '192.168.1.17'
        option name 'Z13'

config host
        option dns '1'
        option mac 'X14'
        option name 'Z14'
        option ip '192.168.1.32'

config host
        option dns '1'
        option mac 'X15'
        option name 'Z15'
        option ip '192.168.1.33'

config host
        option dns '1'
        option mac 'X16'
        option name 'Z16'
        option ip '192.168.1.34'

config host
        option dns '1'
        option mac 'X17'
        option name 'Z17'
        option ip '192.168.1.35'

config host
        option dns '1'
        option mac 'X18'
        option ip '192.168.1.30'
        option name 'Z18'

config host
        option dns '1'
        option mac 'X19'
        option ip '192.168.1.31'
        option name 'Z19'

config host
        option dns '1'
        option mac 'X20'
        option ip '192.168.1.40'
        option name 'Z20'

config host
        option dns '1'
        option mac 'X21'
        option ip '192.168.1.41'
        option name 'Z21'

config host
        option dns '1'
        option mac 'X22'
        option ip '192.168.1.42'
        option name 'Z22'

config host
        option name 'Z23'
        option dns '1'
        option ip '192.168.1.44'
        option mac 'X23'

config host
        option name 'Z24'
        option dns '1'
        option mac 'X24'
        option ip '192.168.1.100'

config host
        option name 'Z25'
        option dns '1'
        option mac 'X25'
        option ip '192.168.1.101'

config host
        option name 'Z26'
        option dns '1'
        option mac 'X26'
        option ip '192.168.1.102'

config host
        option name 'Z27'
        option dns '1'
        option mac 'X27'
        option ip '192.168.1.103'

config host
        option name 'Z28'
        option dns '1'
        option mac 'X28'
        option ip '192.168.1.104'

config host
        option name 'Z29'
        option dns '1'
        option mac 'X29'
        option ip '192.168.1.105'

config host
        option dns '1'
        option mac 'X30'
        option ip '192.168.1.106'
        option name 'Z30'

config domain
        option name 'Modem'
        option ip '192.168.0.1'

config host
        option name 'Z31'
        option dns '1'
        option mac 'X31'
        option ip '192.168.1.108'

config host
        option name 'Z32'
        option dns '1'
        option mac 'X32'
        option ip '192.168.1.253'

config host
        option dns '1'
        option mac 'X33'
        option ip '192.168.1.254'
        option name 'Z33'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config host
        option name 'Z34'
        option dns '1'
        option ip '192.168.1.7'
        option mac 'X34'

config host
        option mac 'X35'
        option name 'Z35'
        option dns '1'
        option ip '192.168.1.8'

config host
        option mac 'X36'
        option name 'Z36'
        option dns '1'
        option ip '192.168.1.107'

config host
        option mac 'X37'
        option name 'Z37'
        option dns '1'
        option ip '192.168.1.60'

config host
        option mac 'X38'
        option name 'Z38'
        option dns '1'
        option ip '192.168.1.18'

config host
        option mac 'X39'
        option name 'Z39'
        option dns '1'
        option ip '192.168.1.45'

config host
        option mac 'X40'
        option name 'Z40'
        option dns '1'
        option ip '192.168.1.46'

config host
        option mac 'X41'
        option name 'Z41'
        option dns '1'
        option ip '192.168.1.47'

config host
        option mac 'X42'
        option name 'Z42'
        option dns '1'
        option ip '192.168.1.48'

config host
        option mac 'X43'
        option dns '1'
        option ip '192.168.1.50'
        option name 'Z43'

config host
        option mac 'X44'
        option name 'Z44'
        option dns '1'
        option ip '192.168.1.51'

config host
        option mac 'X45'
        option name 'Z45'
        option dns '1'
        option ip '192.168.1.9'

config host
        option mac 'X46'
        option name 'Z46'
        option dns '1'
        option ip '192.168.1.25'

config host
        option mac 'X47'
        option name 'Z47'
        option dns '1'
        option ip '192.168.1.26'

config host
        option mac 'X48'
        option name 'Z48'
        option dns '1'
        option ip '192.168.1.52'

config host
        option mac 'X49'
        option name 'Z49'
        option dns '1'
        option ip '192.168.1.53'

config host
        option mac 'X50'
        option name 'Z50'
        option dns '1'
        option ip '192.168.1.252'

config host
        option mac 'X51'
        option name 'Z51'
        option dns '1'
        option ip '192.168.1.251'

config host
        option mac 'X52'
        option name 'Z52'
        option dns '1'
        option ip '192.168.1.19'

config host
        option mac 'X53'
        option name 'Z53'
        option dns '1'
        option ip '192.168.1.20'

config host
        option mac 'X54'
        option name 'Z54'
        option dns '1'
        option ip '192.168.1.21'

config host
        option mac 'X55'
        option name 'Z55'
        option dns '1'
        option ip '192.168.1.54'

config host
        option mac 'X56'
        option name 'Z56'
        option dns '1'
        option ip '192.168.1.55'

config host
        option mac 'X57'
        option name 'Z57'
        option dns '1'
        option ip '192.168.1.56'

config host
        option mac 'X58'
        option name 'Z58'
        option dns '1'
        option ip '192.168.1.57'

config host
        option mac 'X59'
        option name 'Z59'
        option dns '1'
        option ip '192.168.1.22'

config host
        option mac 'X60'
        option name 'Z60'
        option dns '1'
        option ip '192.168.1.23'

config host
        option mac 'X61'
        option name 'Z61'
        option dns '1'
        option ip '192.168.1.49'

config host
        option mac 'X62'
        option name 'Z62'
        option dns '1'
        option ip '192.168.1.36'

config host
        option mac 'X63'
        option name 'Z63'
        option dns '1'
        option ip '192.168.1.58'

config host
        option mac 'X64'
        option name 'Z64'
        option dns '1'
        option ip '192.168.1.109'

config host
        option name 'Z65'
        option dns '1'
        option mac 'X65'
        option ip '192.168.1.110'

config host
        option name 'Z66'
        option dns '1'
        option mac 'X66'
        option ip '192.168.1.111'

kgursu · June 20, 2022, 6:40pm

config defaults
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config forwarding
        option dest 'wan'
        option src 'lan'

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config include
        option path '/etc/firewall.user'

config zone
        option name 'guest'
        option input 'REJECT'
        option forward 'REJECT'
        list network 'GUEST'
        option output 'ACCEPT'

config include 'miniupnpd'
        option type 'script'
        option path '/usr/share/miniupnpd/firewall.include'
        option family 'any'
        option reload '1'

mk24 · June 20, 2022, 7:23pm

You've listed a non-existent device as a port in br-GUEST. When the only devices in a bridge will be wifi, don't list any ports in the network section.
The guest wifi AP is disabled.
There's no config dhcp for GUEST. It needs a section like the one for lan.
When you set the default as input REJECT on a guest zone, you need exception rules to allow guests to reach DHCP and usually DNS services on the router. For testing, set input ACCEPT to make guest more like lan so it will work, though not secure.
There is no forwarding from guest to wan. Guests will not be able to reach the Internet.

kgursu · June 20, 2022, 7:27pm

Sorry, I completely forgot them. Starting from main page, which included before.

5G and 2.4G will follow.

kgursu · June 20, 2022, 7:28pm

Ok, will fix that...

kgursu · June 20, 2022, 7:34pm

5G

kgursu · June 20, 2022, 7:34pm

2.4G