Google puck and occasional no connection for clients

First thank you devs for working on this project!

I've been using openwrt for over a year on my google wifi pucks (and just recently flashed CPE710 to fix issues), I moved to openwrt due to so many dhcp issues and lack of extra wifi networks/vlans. I've been running 23.05 for a while and it's been great, no issues. I have 3 pucks, two are wired into my router (mikrotik which provides dhcp, routing etc) and one is using gre to one of the wired pucks.

I upgraded to 24.10.0 a couple months back, and occasionally I will see a client show that the wifi has no internet connection but it still connected to that ssid. If I change to another ssid (which is on the same puck) then it works. If I switch back sometimes it works, sometimes not. When it does not work, I still have an IP address but I can't ping the gateway. I mostly notice this on my phone because I am roaming a lot, but I have had this happen on a couple Roku's as well. I also moved to 24.10.1 but that did not help. I've seen this with 2.4 and 5g ssid's. I use different names for 2.4 and 5g

I just downgraded back to 23.05.5 and will see how it goes over the next few weeks. It doesn't happen that often so hard to tell if it helped but I didn't have an issue for a very long time running 23.05.5.

If anyone has any suggestions/troubleshooting steps please let me know (logs etc).

One extra note is I did also upgrade my mikrotik router around the same time.

{
        "kernel": "5.15.167",
        "hostname": "OpenWrt-main",
        "system": "ARMv7 Processor rev 5 (v7l)",
        "model": "Google WiFi (Gale)",
        "board_name": "google,wifi",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.5",
                "revision": "r24106-10cc5fcd00",
                "target": "ipq40xx/chromium",
                "description": "OpenWrt 23.05.5 r24106-10cc5fcd00"
        }
}

# Interfaces
config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix '<removed>'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan'

config device
        option name 'lan'
        option macaddr '<removed>'

config interface 'lan'
        option device 'br-lan.1'
        option proto 'static'
        option ipaddr '192.168.86.21'
        option netmask '255.255.255.0'
        option ip6assign '60'
        list dns '192.168.86.1'
        option gateway '192.168.86.1'

config device
        option name 'wan'
        option macaddr '<removed>'

config interface 'wan'
        option device 'wan'
        option proto 'dhcp'

config interface 'wan6'
        option device 'wan'
        option proto 'dhcpv6'

config bridge-vlan
        option device 'br-lan'
        option vlan '1'
        list ports 'lan:u*'

config bridge-vlan
        option device 'br-lan'
        option vlan '2'
        list ports 'lan:t'

config interface 'wifi_main'
        option proto 'none'
        option device 'br-lan.2'
        option type 'bridge'
        option defaultroute '0'
        option force_link '1'

config interface 'IOT'
        option proto 'none'
        option device 'br-lan.4'
        option force_link '1'
        option defaultroute '0'

config interface 'guest'
        option proto 'none'
        option device 'br-lan.3'

config device
        option type 'bridge'
        option name 'br-iot'
        option bridge_empty '1'
        list ports 'br-lan.4'
        list ports '@trunk.4'

config interface 'trunk'
        option proto 'gretap'
        option force_link '1'
        option peeraddr '192.168.86.22'
        option ipaddr '192.168.86.21'
        option tunlink 'lan'
        option df '0'
        option defaultroute '0'
        option mtu '1500'

config interface 'iot'
        option proto 'none'
        option device 'br-iot'
        option force_link '1'
        option defaultroute '0'

config device
        option type 'bridge'
        option name 'br-foo-guest'
        option bridge_empty '1'
        list ports 'br-lan.3'
        list ports '@trunk.3'

config interface 'foo_guest'
        option proto 'none'
        option device 'br-foo-guest'
        option force_link '1'
        option defaultroute '0'

config device
        option type 'bridge'
        option name 'br-foo-main'
        option bridge_empty '1'
        list ports 'br-lan.2'
        list ports '@trunk.2'

config interface 'foo_main'
        option proto 'none'
        option device 'br-foo-main'
        option force_link '1'
        option defaultroute '0'


# wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option path 'platform/soc/a000000.wifi'
        option channel '1'
        option band '2g'
        option htmode 'HT20'
        option cell_density '0'
        option country 'US'

config wifi-device 'radio1'
        option type 'mac80211'
        option path 'platform/soc/a800000.wifi'
        option channel '36'
        option band '5g'
        option htmode 'VHT80'
        option cell_density '0'
        option country 'US'

config wifi-iface 'wifinet2'
        option device 'radio0'
        option mode 'ap'
        option ssid 'iot'
        option encryption 'psk2'
        option network 'IOT'
        option key 'removed'
        option macfilter 'deny'
        list maclist '<removed>'
        option ieee80211r '1'
        option mobility_domain 'cccc'
        option ft_over_ds '0'
        option ft_psk_generate_local '1'

config wifi-iface 'wifinet3'
        option device 'radio0'
        option mode 'ap'
        option ssid 'foo-guest'
        option encryption 'psk2'
        option key 'removed'
        option network 'guest'
        option ieee80211r '1'
        option mobility_domain 'bbbb'
        option reassociation_deadline '20000'
        option ft_over_ds '0'
        option ft_psk_generate_local '1'

config wifi-iface 'wifinet4'
        option device 'radio0'
        option mode 'ap'
        option ssid 'foo'
        option encryption 'psk2'
        option key 'removed'
        option network 'wifi_main'
        option ieee80211r '1'
        option mobility_domain 'aaaa'
        option reassociation_deadline '20000'
        option ft_over_ds '0'
        option ft_psk_generate_local '1'

config wifi-iface 'mesh'
        option device 'radio1'
        option mode 'mesh'
        option encryption 'sae'
        option mesh_id '1'
        option mesh_fwding '1'
        option mesh_rssi_threshold '0'
        option ifname 'mesh0'
        option key 'removed'
        option network 'lan'

config wifi-iface 'wifinet5'
        option device 'radio1'
        option mode 'ap'
        option ssid 'iot-5g'
        option encryption 'psk2'
        option key 'removed'
        option network 'iot'
        option wmm '0'

# dhcp (not used)

config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option cachesize '1000'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option localservice '1'
        option ednspacket_max '1232'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'
        option ignore '1'
        option dns_service '0'

config dhcp 'wifi_main'
        option interface 'wifi_main'
        option ignore '1'

config dhcp 'IOT'
        option interface 'IOT'
        option ignore '1'
        option start '100'
        option limit '150'

# firewall

config defaults
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'
        list network 'wan6'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config zone
        option name 'IOT'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config forwarding
        option src 'IOT'
        option dest 'lan'

config forwarding
        option src 'lan'
        option dest 'IOT'

config zone
        option name 'guest'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'

Please post your complete config here (not on 3rd party sites).

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
1 Like