Limited access join to network wifi openwrt!

horasjey · March 6, 2025, 1:19am

Hallo sir,

Why does my WiFi AP often experience denied access / limited access? and when I restarted the WiFi, I could join the WiFi again
my wifi restart command is
wifi up

this my log Openwrt in logread

Mar  5 14:54:25 XD9300Q kern.warn kernel: [23614.970000] ath_tx_sched_aggr: Recovering from error condition: Flushing TID queue until head                        is within the window
Mar  5 14:54:25 XD9300Q kern.warn kernel: [23614.980000] ath_tx_sched_aggr: TID[0] seq_start:2825 seq_next:2879 Head:1 Tail:2 BAW size:64 seqno:2824
Mar  5 14:54:26 XD9300Q kern.warn kernel: [23615.990000] ath_tx_sched_aggr: Recovering from error condition: Flushing TID queue until head                        is within the window
Mar  5 14:54:26 XD9300Q kern.warn kernel: [23616.000000] ath_tx_sched_aggr: TID[0] seq_start:2828 seq_next:2880 Head:2 Tail:3 BAW size:64 seqno:2827

and this happens every 1 x 24 hours, and my solution is just to up the wifi so I can rejoin the wifi network,

My access point is not used as a router, only in bridge mode, WLAN with VLAN

root@192.168.1.2:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br-lan          7fff.000123059192       no              ath0
                                                        eth0.100

please help me, what is the main cause of something like this..?

psherman · March 6, 2025, 1:22am

Does the problem happen with more than one network, or just one?

Can you please translate this error to English?

Let's take a look at the configuration of your AP.

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall

horasjey · March 6, 2025, 1:45am

Coincidentally, the AP now only has one network, VLAN 100 br with ath0

deny access

my device can't commend

> root@XD9300Q:~# ubus call system board
> Command failed: Not found
root@XD9300Q:~# ubus list
network
network.device
network.interface
network.interface.lan
network.interface.loopback
network.interface.wan

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config interface 'lan'
        option ifname 'eth0.100'
        option type 'bridge'
        option proto 'static'

config interface 'wan'
        option ifname 'eth0.10'
        option proto 'static'
        option ipaddr '10.*.*.*'
        option gateway '10.*.*.*'
        option netmask '255.255.255.0'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config wifi-device 'wifi0'
        option type 'qcawifi'
        option country 'CN'
        option channel '3'
        option htmode 'HT20'
        option txpower '30'
        option hwmode '11ng'
        option AMPDU '1'
        option rssi_thres '-90'
        option acktimeout '64'

config wifi-iface
        option device 'wifi0'
        option id '00'
        option mode 'ap'
        option encryption 'open'
        option key '66666666'
        option ssid 'SECURITY'
        option network 'lan'
        option wmm '1'
        option hidden '0'
        option disabled '0'
        option bintval '100'
        option shortgi '1'
#       option frag '2346'
#       option rts '2346'
        option maxsta '64'
        option isolate '0'
        option wds '0'
        option extap '0'
        option disablecoext '1'


config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.auto'

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'lan'
        option network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        option network 'wan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fe80::/10'
        option src_port '547'
        option dest_ip 'fe80::/10'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config include
        option path '/etc/firewall.user'

config rule
        option src 'lan'
        option name 'L2TP'
        option proto 'udp'
        option target 'REJECT'
        option dest_port '1701'
        option dest '*'
        option enabled '0'

config rule
        option src 'lan'
        option name 'PPTP'
        option target 'REJECT'
        option dest_port '1723'
        option dest '*'
        option enabled '0'

config rule
        option src 'lan'
        option name 'IPSEC'
        option dest '*'
        option dest_port '500'
        option target 'REJECT'
        option proto 'udp'
        option enabled '0'

config redirect
        option target 'DNAT'
        option src 'wan'
        option dest 'lan'
        option proto 'tcp udp'
        option dest_port '80'
        option name 'MGT_PORT'
        option src_dport '8080'
        option enabled '1'

config mode

config include 'miniupnpd'
        option type 'script'
        option path '/usr/share/miniupnpd/firewall.include'
        option family 'IPv4'
        option reload '1'

this sir my config AP

psherman · March 6, 2025, 1:47am

This suggests that your device is not running official OpenWrt. As does your network configuration.

It appears you are using firmware that is not from the official OpenWrt project.

When using forks/offshoots/vendor-specific builds that are "based on OpenWrt", there may be many differences compared to the official versions (hosted by OpenWrt.org). Some of these customizations may fundamentally change the way that OpenWrt works. You might need help from people with specific/specialized knowledge about the firmware you are using, so it is possible that advice you get here may not be useful.

You may find that the best options are:

Install an official version of OpenWrt, if your device is supported (see https://firmware-selector.openwrt.org).
Ask for help from the maintainer(s) or user community of the specific firmware that you are using.
Provide the source code for the firmware so that users on this forum can understand how your firmware works (OpenWrt forum users are volunteers, so somebody might look at the code if they have time and are interested in your issue).

If you believe that this specific issue is common to generic/official OpenWrt and/or the maintainers of your build have indicated as such, please feel free to clarify.

horasjey · March 6, 2025, 1:52am

this my opkg device sir
https://archive.openwrt.org/attitude_adjustment/12.09/ar71xx/generic/packages/

lleachii · March 6, 2025, 1:53am

12.09 is extremely old.

psherman · March 6, 2025, 1:53am

Attitude adjustment (OpenWrt 12.09) should not be used under any circumstances. It is 13 years old, and has been EOL and unsupported for well over a decade. It has extreme security vulnerabilities. Take that offline immediately.

horasjey · March 6, 2025, 2:00am

this is my device,
Can I install the official OpenWRT?

psherman · March 6, 2025, 2:04am

No. That device is not supported.

You can always check the firmware selector to find supported devices... if the model is not found, it is not supported.

horasjey · March 6, 2025, 2:05am

please suggest me a firmware that can be used for office openwrt from my device

psherman · March 6, 2025, 2:06am

Ask the vendor. They sold it to you -- they should have firmware for it.

It is not supported by OpenWrt, so you won't find anything here.

horasjey · March 6, 2025, 2:06am

What is the command to check my device model?

psherman · March 6, 2025, 2:07am

Well, your device is not supported. But in general, you just type in the brand + model. Try it... type in "YunCore" and you'll see a bunch of devices... "YunCore XD" will drop it down to just 2 supported models -- yours is not.

system · March 16, 2025, 2:07am

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.