xendo
March 27, 2024, 6:17pm
1
Hello all,
I've used OpenWrt on my AVM FRITZ!Box 7362 SL for 3 years as a dumb W-Fi AP, without any issues. But now I'm struggling on setting up the guest Wi-Fi. I've followed more then one time this tutorial and have read the forum topics which adress the same problem, but I'm still unable to solve the problem.
I'm using OpenWrt 23.05.2, the dumb Wi-Fi AP is set up to use a DHCP address. I've set up the dumb guest Wi-Fi AP according to the tutorial, with and without "Custom DNS" and "DNS forwardings", but still no internet connection. As far as I understood it correctly, I don't need these settings if i'm on DHCP, but they shouldn't disturb, right? Secondly, using static address for LAN isn't mandatory, so DHCP is valid as well?
So what could be the problem here?
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
xendo
March 27, 2024, 6:31pm
3
root@OpenWrt:~# ubus call system board
{
"kernel": "5.15.137",
"hostname": "OpenWrt",
"system": "xRX200 rev 1.2",
"model": "AVM FRITZ!Box 7362 SL",
"board_name": "avm,fritz7362sl",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "23.05.2",
"revision": "r23630-842932a63d",
"target": "lantiq/xrx200",
"description": "OpenWrt 23.05.2 r23630-842932a63d"
}
}
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'XXX'
config atm-bridge 'atm'
option vpi '1'
option vci '32'
option encaps 'llc'
option payload 'bridged'
option nameprefix 'dsl'
config dsl 'dsl'
option annex 'b'
option tone 'av'
option ds_snr_offset '0'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
config device
option name 'lan1'
option macaddr 'XXX'
config device
option name 'lan2'
option macaddr 'XXX'
config device
option name 'lan3'
option macaddr 'XXX'
config device
option name 'lan4'
option macaddr 'XXX'
config interface 'lan'
option device 'br-lan'
option proto 'dhcp'
option force_link '1'
config device
option name 'dsl0'
option macaddr 'XXX'
config device
option type 'bridge'
option name 'br-guest'
option bridge_empty '1'
config interface 'guest'
option proto 'static'
option device 'br-guest'
option ipaddr '192.168.2.1'
option netmask '255.255.255.0'
root@OpenWrt:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'pci0000:00/0000:00:00.0/0000:01:00.0'
option channel '1'
option band '2g'
option htmode 'HT20'
option cell_density '0'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'XXX'
option encryption 'psk2'
option key 'XXX'
config wifi-iface 'wifinet1'
option device 'radio0'
option mode 'ap'
option ssid 'Wrtgst'
option encryption 'psk2'
option key 'XXX'
option network 'guest'
root@OpenWrt:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
list server '192.168.178.1'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config dhcp 'guest'
option interface 'guest'
option start '100'
option limit '150'
option leasetime '12h'
192.168.178.1 is the IP of my main router
Remove this line from the dnsmasq configuration.
Restart after that. If that doesn't fix the problem, please post your firewall config.
1 Like
xendo
March 27, 2024, 6:40pm
5
Still not working. But as I said, I tried it with and without the IP on different positions...
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'lan'
option masq '1'
config zone
option name 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'guest'
config rule
option name 'Guest-DNS'
option src 'guest'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'Guest_DHCP'
list proto 'udp'
option src 'guest'
option dest_port '67-68'
option target 'ACCEPT'
config forwarding
option src 'guest'
option dest 'lan'
config rule
option name 'Block_guests_from_Lan'
list proto 'all'
option src 'guest'
option dest 'lan'
option target 'REJECT'
Remove this rule or edit it:
To edit, you’ll add 192.168.178.0/24 as the destination ip
1 Like
xendo
March 27, 2024, 6:55pm
7
Thanks, that was the solution!
Now I can see that I obviously overlooked this in the tutorial
system
April 6, 2024, 6:59pm
8
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.
