i finally got MWAN3 working semi properly but i have one small problem with seeing one of the 2 WAN routers on the front side of the network. for WAN1 its a slow DSL connection which i can connect to that router through the network. WAN2 is a wavlink outdoor router running openWRT that connects to an xfinitywifi access point, the wavlink i cannot connect to from any PC on the network but when i ping the wavlink with the router using MWAN3 it does perfectly fine with pinging that WAN.
Now my network numbering is a little goofy and i dont know if that affects everything but its working over all. my DSL router assigns from its ip of 192.168.1.1 with a range of 192.168.1.2-1.5. doesnt need much. the wavlink's address is 192.168.1.10 and starts assigning from 192.168.1.11-1.15. not much there either. the router running MWAN3 is 192.168.2.1 with a repeater thats 192.168.2.2 and the address range for DHCP is 192.168.2.100-2.150.
hope i didnt miss any miformation to help sort this out.
firewall zones look like this. wan=DSL and wanb=xfinity/wavlink outdoor AP.
this is what the interfaces look like in load balancing.
MWAN members tab
MWAN policies
MWAN status
MWAN interface status
Interface status:
interface wan is online and tracking is active
interface wanb is online and tracking is active
Current ipv4 policies:
balanced:
wanb (40%)
wan (60%)
wan_only:
wan (100%)
wan_wanb:
wan (100%)
wanb_only:
wanb (100%)
wanb_wan:
wanb (100%)
Current ipv6 policies:
balanced:
unreachable
wan_only:
unreachable
wan_wanb:
unreachable
wanb_only:
unreachable
wanb_wan:
unreachable
Directly connected ipv4 networks:
192.168.2.255
192.168.1.0
224.0.0.0/3
192.168.2.0/24
192.168.1.0/24
192.168.2.0
192.168.2.1
192.168.1.2
127.0.0.0
192.168.1.52
127.0.0.0/8
192.168.1.255
127.255.255.255
127.0.0.1
Directly connected ipv6 networks:
fe80::/64
fd66:35cb:881a::/64
Active ipv4 user rules:
2450 141K S https tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport sports 0:65535 multiport dports 443
11060 1244K - balanced all -- * * 0.0.0.0/0 0.0.0.0/0
Active ipv6 user rules:
1 84 S https tcp * * ::/0 ::/0 multiport sports 0:65535 multiport dports 443
1237 143K - balanced all * * ::/0 ::/0
MWAN3 diagnostics output.
Software-Version
-------------------------------------------------
OpenWrt - OpenWrt 19.07.1 r10911-c155900f66
LuCI - git-20.062.72596-c7b5ee3
Output of "ip a show"
-------------------------------------------------
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000
link/ether 30:23:03:fe:9b:01 brd ff:ff:ff:ff:ff:ff
inet6 fe80::3223:3ff:fefe:9b01/64 scope link
valid_lft forever preferred_lft forever
3: ifb0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 32
link/ether 72:b2:d4:85:32:c1 brd ff:ff:ff:ff:ff:ff
4: ifb1: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 32
link/ether f6:f9:89:f4:28:68 brd ff:ff:ff:ff:ff:ff
6: wlan1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 30:23:03:fe:9b:04 brd ff:ff:ff:ff:ff:ff
12: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 30:23:03:fe:9b:01 brd ff:ff:ff:ff:ff:ff
inet 192.168.2.1/24 brd 192.168.2.255 scope global br-lan
valid_lft forever preferred_lft forever
inet6 fd66:35cb:881a::1/60 scope global noprefixroute
valid_lft forever preferred_lft forever
inet6 fe80::3223:3ff:fefe:9b01/64 scope link
valid_lft forever preferred_lft forever
13: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 30:23:03:fe:9b:01 brd ff:ff:ff:ff:ff:ff
14: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 30:23:03:fe:9b:02 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.2/24 brd 192.168.1.255 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fe80::3223:3ff:fefe:9b02/64 scope link
valid_lft forever preferred_lft forever
15: eth0.3@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 30:23:03:fe:9b:01 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.52/24 brd 192.168.1.255 scope global eth0.3
valid_lft forever preferred_lft forever
inet6 fe80::3223:3ff:fefe:9b01/64 scope link
valid_lft forever preferred_lft forever
16: wlan0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP group default qlen 1000
link/ether 30:23:03:fe:9b:03 brd ff:ff:ff:ff:ff:ff
inet6 fe80::3223:3ff:fefe:9b03/64 scope link
valid_lft forever preferred_lft forever
Output of "ip route show"
-------------------------------------------------
default via 192.168.1.1 dev eth0.2 proto static src 192.168.1.2 metric 10
default via 192.168.1.10 dev eth0.3 proto static src 192.168.1.52 metric 20
192.168.1.0/24 dev eth0.2 proto static scope link metric 10
192.168.1.0/24 dev eth0.3 proto static scope link metric 20
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
Output of "ip rule show"
-------------------------------------------------
0: from all lookup local
1001: from all iif eth0.2 lookup 1
1002: from all iif eth0.3 lookup 2
2001: from all fwmark 0x100/0x3f00 lookup 1
2002: from all fwmark 0x200/0x3f00 lookup 2
2061: from all fwmark 0x3d00/0x3f00 blackhole
2062: from all fwmark 0x3e00/0x3f00 unreachable
32766: from all lookup main
32767: from all lookup default
Output of "ip route list table 1-250"
-------------------------------------------------
Table 1: default via 192.168.1.1 dev eth0.2 metric 10
192.168.1.0/24 dev eth0.2 proto static scope link metric 10
192.168.1.0/24 dev eth0.3 proto static scope link metric 20
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
Table 2: default via 192.168.1.10 dev eth0.3 metric 20
192.168.1.0/24 dev eth0.2 proto static scope link metric 10
192.168.1.0/24 dev eth0.3 proto static scope link metric 20
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
Output of "iptables -L -t mangle -v -n"
-------------------------------------------------
Chain PREROUTING (policy ACCEPT 1359K packets, 934M bytes)
pkts bytes target prot opt in out source destination
1361K 935M mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0
Chain INPUT (policy ACCEPT 115K packets, 10M bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 1238K packets, 923M bytes)
pkts bytes target prot opt in out source destination
5380 286K TCPMSS tcp -- * eth0.2 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 /* !fw3: Zone wan MTU fixing */ TCPMSS clamp to PMTU
1875 105K TCPMSS tcp -- * eth0.3 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 /* !fw3: Zone wanb MTU fixing */ TCPMSS clamp to PMTU
Chain OUTPUT (policy ACCEPT 153K packets, 37M bytes)
pkts bytes target prot opt in out source destination
153K 37M mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 1391K packets, 960M bytes)
pkts bytes target prot opt in out source destination
Chain mwan3_connected (2 references)
pkts bytes target prot opt in out source destination
714K 779M MARK all -- * * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected dst MARK or 0x3f00
Chain mwan3_hook (2 references)
pkts bytes target prot opt in out source destination
1514K 972M CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK restore mask 0x3f00
34620 3454K mwan3_ifaces_in all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
29555 2507K mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
13623 1403K mwan3_rules all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
1514K 972M CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK save mask 0x3f00
1253K 924M mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0x3f00/0x3f00
Chain mwan3_iface_in_wan (1 references)
pkts bytes target prot opt in out source destination
5029 942K MARK all -- eth0.2 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0x3f00 /* default */ MARK or 0x3f00
36 4415 MARK all -- eth0.2 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wan */ MARK xset 0x100/0x3f00
Chain mwan3_iface_in_wanb (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- eth0.3 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0x3f00 /* default */ MARK or 0x3f00
0 0 MARK all -- eth0.3 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb */ MARK xset 0x200/0x3f00
Chain mwan3_ifaces_in (1 references)
pkts bytes target prot opt in out source destination
34616 3454K mwan3_iface_in_wan all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
29505 2494K mwan3_iface_in_wanb all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
Chain mwan3_policy_balanced (2 references)
pkts bytes target prot opt in out source destination
4523 525K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 statistic mode random probability 0.39999999991 /* wanb 2 5 */ MARK xset 0x200/0x3f00
6615 726K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wan 3 3 */ MARK xset 0x100/0x3f00
Chain mwan3_policy_wan_only (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wan 3 3 */ MARK xset 0x100/0x3f00
Chain mwan3_policy_wan_wanb (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wan 3 3 */ MARK xset 0x100/0x3f00
Chain mwan3_policy_wanb_only (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb 2 2 */ MARK xset 0x200/0x3f00
Chain mwan3_policy_wanb_wan (0 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* wanb 2 2 */ MARK xset 0x200/0x3f00
Chain mwan3_rule_https (1 references)
pkts bytes target prot opt in out source destination
2451 141K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 MARK xset 0x200/0x3f00
2060 113K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x200/0x3f00 ! match-set mwan3_sticky_https src,src MARK and 0xffffc0ff
2060 113K MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 MARK xset 0x100/0x3f00
24 1374 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x100/0x3f00 ! match-set mwan3_sticky_https src,src MARK and 0xffffc0ff
24 1374 mwan3_policy_balanced all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00
2451 141K SET all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xfc00/0xfc00 del-set mwan3_sticky_https src,src
2451 141K SET all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xfc00/0xfc00 add-set mwan3_sticky_https src,src
Chain mwan3_rules (1 references)
pkts bytes target prot opt in out source destination
2451 141K mwan3_rule_https tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport sports 0:65535 multiport dports 443 mark match 0x0/0x3f00 /* https */
11112 1248K mwan3_policy_balanced all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0x3f00 /* default_rule */