Eap245 how to configure after flashing?

Keltere · January 1, 2021, 9:53am

Happy new year to everyone.
I've started the new year by flashing my Eap245 because of a bug that it would constantly need a unplug-plugin of the cable otherwise the wifi will not work and just a Studio.u would appear.
I've flashed my openwrt and oh boy i was careless and naive in thinking that would be an easy journey.
I did access to ssh and setup an changed ip under /etc/configure/network from the stock 192.168.1.1 to 192.168.0.24 but i can't still access the internet, and it's not a dns problem because even 8.8.8.8 i can't ping.
There are some configuration i need to do in order to get this work?
Thanks for your help.

frollic · January 1, 2021, 9:57am

Did you set up a default gateway?
Can you ping your router?

eduperez · January 1, 2021, 10:06am

Please copy the output of the following commands and post it here using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have:

cat /etc/config/network
cat /etc/config/dhcp
cat /etc/config/firewall

Keltere · January 1, 2021, 10:08am

Thanks it was that. What a dumb mistake.

frollic · January 1, 2021, 10:29am

Although the device itself doesn't need to have a default gw, for its client(s) to work properly.

Keltere · January 1, 2021, 12:27pm

Now i'm trying to get each ssid with his own vlan to work but except for the unmanaged one i can't get it to work. I can't get the ip from the router, i've tried with dhcp client, static ip and unmanaged interfaces but i can't get it to work

My vlan is structured as this, the router configuration it's fine because i've tested with the stock firmware

Keltere-Tasmota -> VLAN 60 -> 192.168.16.0
Keltere-IOT -> VLAN 50 -> 192.168.15.0

cat /etc/config/network

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd88:768d:901e::/48'

config interface 'lan'
        option type 'bridge'
        option ifname 'eth0.1'
        option proto 'static'
        option ipaddr '192.168.0.24'
        option netmask '255.255.255.0'
        option gateway '192.168.0.1'
        list dns '8.8.8.8'
        list dns '8.8.4.4'
        option ip6assign '60'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '0t 2 5'
        option vid '1'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option description 'Keltere_IOT'
        option vid '50'
        option ports '0t'

config switch_vlan
        option device 'switch0'
        option vlan '3'
        option vid '60'
        option description 'Keltere_Tasmota'
        option ports '0t'

config switch_vlan
        option device 'switch0'
        option vlan '4'
        option vid '69'
        option description 'Keltere_Guest'
        option ports '0t'

config interface 'Tasmota'
        option type 'bridge'
        option ifname 'eth0.60'
        option stp '1'
        option proto 'dhcp'

config interface 'IOT'
        option type 'bridge'
        option ifname 'eth0.50'
        option proto 'static'
        option ipaddr '192.168.15.2'
        option netmask '255.255.255.0'
        option gateway '192.168.15.1'
        option broadcast '192.168.15.255'
        list dns '192.168.0.1'

cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv6 'server'
        option ra 'server'
        option ra_slaac '1'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

cat /etc/config/firewall

config defaults
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option network 'lan IOT'

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config rule
        option name 'Support-UDP-Traceroute'
        option src 'wan'
        option dest_port '33434:33689'
        option proto 'udp'
        option family 'ipv4'
        option target 'REJECT'
        option enabled 'false'

config include
        option path '/etc/firewall.user'

config zone
        option name 'Vlan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

Keltere · January 1, 2021, 2:26pm

Resolved by adding the tag to both eth0 and lan1 and setup dhcp client for all interfaces.

system · January 11, 2021, 2:26pm

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.