My samsung phone says no internet available on wifi

Installing and Using OpenWrt
1

Settings can be found here:

If i disable the vpn wireguard interface and make lan>wan in firewall instead of lan>wireguard, the phone connects instantly to the internet.

Weird though is that....
It worked fine last two years.
Resetting network settings did not help.
Connecting to the guest ssid on the same device that also uses the exact same wireguard vpn works fine.
My wife's samsung phone connects fine without issues. So does my laptop.

Probably a issue with the phone......although worked fine for years... im just wondering if there's stuff to try to solve this from a openwrt standpoint.

2

Apart from the annoying announcement, does the internet work?
Usually the devices are sending some probes and if they don't get the expected answer they show the no internet message.
Sometimes it happens to my windows laptop as well, after a reboot it is fixed.

3

It does now but did not for 6h or so. It loaded pages for 10s or so then gave up with a unreachable error.
It now indeed still says internet is unavailable, but is working. Wonder what this was, and is about.

4

I suppose you could run a tcpdump when it happens again with a filter for the mac address of your device, then check what is exactly failing.
tcodump -i br-lan -w /tmp/capture.pcap ether host aa:bb:cc:dd:ee:ff

5

I now have the issue at random times. no internet available at all. or just the message of no internet, and internet working fine.

I installed tcpdump, but how does one read the logs from that?
I see the capture.pcap in /tmp but its not in a readable format by text editors and readers.

6

Please clarify... which is it? Or are you sometimes unable to reach the internet, and other times able to use the internet despite the message?

Is this the only device that has problems? Do the other things on your network experience any issues at the same time?

7

it is the only device that has this problem. when my phone has the issue, i check other devices and they work without problem. including my wife's phone that is even the same brand- samsung.
And yes, it is sometimes. seems random. hour or more of no internet working. then, it -SAYS- internet is not working in the wifi settings, but internet IS actually working.

8

Sounds like it may be your phone specifically, then, and not a problem with OpenWrt.

9

Weirdly when i connect the same phone to the guest network(just a other ssid that prevents devices seeing each other, other subnet) then it works fine.

10

Ok... so let's take a look at the config and see if we can spot anything...

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
11

For most of these, i shared them in this post already:

Not wireless yet, i share it here:


config wifi-device 'radio0'
        option type 'mac80211'
        option path 'platform/soc/c000000.wifi'
        option band '5g'
        option cell_density '0'
        option htmode 'HE80'
        option channel '40'
        option country 'US'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'XXXXX'
        option encryption 'psk2'
        option key 'XXXXX'
        option disassoc_low_ack '0'
        option ieee80211r '1'
        option ft_over_ds '0'
        option ft_psk_generate_local '1'
        option ieee80211k '1'
        option bss_transition '1'
        option wnm_sleep_mode '1'

config wifi-device 'radio1'
        option type 'mac80211'
        option path 'platform/soc/c000000.wifi+1'
        option band '2g'
        option htmode 'HE40'
        option cell_density '0'
        option country 'US'
        option channel '1'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'XXXXX'
        option encryption 'psk2'
        option key 'XXXXX'
        option disassoc_low_ack '0'
        option ieee80211k '1'
        option bss_transition '1'
        option ieee80211r '1'
        option ft_over_ds '0'
        option ft_psk_generate_local '1'
        option wnm_sleep_mode '1'

config wifi-iface 'wifinet7'
        option device 'radio1'
        option mode 'mesh'
        option encryption 'sae'
        option mesh_id '189b'
        option mesh_fwding '1'
        option mesh_rssi_threshold '0'
        option key 'XXXXX'
        option network 'lan'
        option disabled '1'

config wifi-iface 'wifinet3'
        option device 'radio0'
        option mode 'mesh'
        option encryption 'sae'
        option mesh_id '188b'
        option mesh_fwding '1'
        option mesh_rssi_threshold '0'
        option key 'XXXXX'
        option network 'lan'

config wifi-iface 'wifinet4'
        option device 'radio1'
        option mode 'ap'
        option ssid 'XXXXX_Guests'
        option encryption 'psk2'
        option isolate '1'
        option network 'XXXXX_Guests'
        option key 'XXXXX'

Appriciate your time and help!

12

What do you mean by this? you shared a wireless config that appears to be active.

Do you have multiple APs?

I recommend removing all of the 802.11r and 802.11k related items. Just delete all of the lines below the key.

Do the same for the other radio.

remove the above unless you're actually using mesh (with other OpenWrt APs).

Same with the below:

13

And please post your other config files.

14

They are in linked in the first post, and in my last reply to you, want me to post them here again? The configuration did not change, except some MTU experimentation on the wireguard peer.

I am using mesh, i have 3 AP's in total to provide wireless coverage in all of our house and garden.

15

Ok... are all of them running OpenWrt?

Yes, please. This will be important to ensure that this thread contains all the relevant info

16

Either locally with tcpdump -r /tmp/capture.pcap or transfer it to your desktop and open with wireshark.

1 Like
17

Yes, all of those other access points run openWrt and are configured as dumb access points.

ubus call system board

{
        "kernel": "5.15.162",
        "hostname": "MainRouter",
        "system": "ARMv8 Processor rev 4",
        "model": "Dynalink DL-WRX36",
        "board_name": "dynalink,dl-wrx36",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.4",
                "revision": "r24012-d8dd03c46f",
                "target": "ipq807x/generic",
                "description": "OpenWrt 23.05.4 r24012-d8dd03c46f"
        }
}

cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'xxx::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'lan4'
        option ipv6 '0'
        option igmp_snooping '1'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option delegate '0'

config interface 'wan'
        option device 'wan'
        option proto 'dhcp'
        option metric '1'
        option dns_metric '10'
        option delegate '0'
        option type 'bridge'

config interface 'wan6'
        option device 'wan'
        option proto 'dhcpv6'
        option reqaddress 'try'
        option reqprefix 'auto'

config interface 'vpnwireguard'
        option proto 'wireguard'
        option private_key 'xxx'
        option metric '0'
        option delegate '0'
        option mtu '1280'
        list addresses 'xxx/32'
        list addresses 'fc00:bbbb:bbbb:xxx/128'
        list dns 'xxx'

config interface 'ovpn'
        option proto 'none'
        option device 'tun0'
        option delegate '0'
        option auto '0'

config device 'guest_dev'
        option name 'br-guest'

config interface 'xxx'
        option proto 'static'
        option ipaddr '192.168.2.1'
        option netmask '255.255.255.0'
        list dns '8.8.8.8'

config wireguard_xxx
        option description 'xxx.conf'
        option public_key 'xxx'
        list allowed_ips '0.0.0.0/0'
        list allowed_ips '::0/0'
        option endpoint_host 'xxx'
        option endpoint_port '51820'
        option route_allowed_ips '1'
        option persistent_keepalive '25'

cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option cachesize '1000'
        option dnsforwardmax '350'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option localservice '1'
        option ednspacket_max '1232'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'
        option ra_slaac '0'
        option dns_service '0'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config host
        option name 'Samsung'
        option ip '192.168.1.154'
        option mac 'xxx'

config host
        option name 'HarmonyHub'
        option ip '192.168.1.160'
        option mac 'xxx'

config host
        option name 'hubv3-4011035646'
        option ip '192.168.1.179'
        option mac 'xxx'

config host
        option name 'Samsung'
        option ip '192.168.1.151'
        option mac 'xxx'

config host
        option name 'everything-presence-st-fa2d68'
        option ip '192.168.1.229'
        option mac 'xxx'

config host
        option name 'everything-presence-st-700718'
        option ip '192.168.1.208'
        option mac 'xxx'

config host
        option name 'everything-presence-st-7e8058'
        option ip '192.168.1.171'
        option mac 'xxx'

config host
        option name 'Meshpoint2'
        option ip '192.168.1.106'
        option mac 'xxx'

config host
        option name 'Meshpoint3'
        option ip '192.168.1.219'
        option mac 'xxx'

config host
        option ip '192.168.1.243'
        option mac 'xxx'

config host
        option name 'Saurons-Eye'
        option ip '192.168.1.184'
        option mac 'xxx'

config host
        option name 'WYZE_CAKP2JFUS-D03F2718B832'
        option ip '192.168.1.216'
        option mac 'xxx'

config host
        option name 'WYZE_CAKP2JFUS-D03F27015093'
        option ip '192.168.1.152'
        option mac 'xxx'

config host
        option name 'WYZE_CAKP2JFUS-7C78B2846F6E'
        option ip '192.168.1.205'
        option mac 'xxx'

config host
        option name 'WYZE_CAKP2JFUS-7C78B28345FB'
        option ip '192.168.1.133'
        option mac 'xxx'

config host
        option name 'HL_CAM3P-D03F27A2F149'
        option ip '192.168.1.226'
        option mac 'xxx'

config host
        option name 'HL_CAM3P-D03F27992CD7'
        option ip '192.168.1.120'
        option mac 'xxx'

config host
        option name 'HL_PAN3-D03F27B97DA4'
        option ip '192.168.1.198'
        option mac 'xxx'

config host
        option ip '192.168.1.114'
        option mac 'xxx'

config host
        option ip '192.168.1.209'
        option mac 'xxx'

config host
        option ip '192.168.1.242'
        option mac 'xxx'

config host
        option ip '192.168.1.218'
        option mac 'xxx'

config host
        option ip '192.168.1.109'
        option mac 'xxx'

config host
        option name 'yi-hack'
        option ip '192.168.1.181'
        option mac 'xxx'

config host
        option ip '192.168.1.116'
        option mac 'xxx'

config dhcp 'xxx'
        option interface 'xxx'
        option start '100'
        option limit '150'
        option leasetime '12h'

config host
        option name 'NOMI-IPC-GK2C-5C0WR'
        option ip '192.168.1.170'
        option mac 'xxx'

config host
        option ip '192.168.1.234'
        option mac 'xxx'

config host
        option name 'C225'
        option ip '192.168.1.166'
        option mac 'xxx'

config host
        option ip '192.168.1.185'
        option mac 'xxx'

config host
        option name 'C225'
        option ip '192.168.1.102'
        option mac 'xxx'

config host
        option ip '192.168.1.172'
        option mac 'xxx'

config host
        option name 'BroadLink-Remote-25-f9-d7'
        option ip '192.168.1.180'
        option mac 'xxx'

config host
        option name 'X6'
        option ip '192.168.1.186'
        option mac 'xxx'

config host
        option name 'OpenWrt'
        option ip '192.168.1.183'
        option mac 'xxx'

config host
        option name 'HarmonyHub'
        option ip '192.168.1.134'
        option mac 'xxx'

config host
        option name 'C120'
        option ip '192.168.1.187'
        option mac 'xxx'

config host
        option ip '192.168.1.182'
        option mac 'xxx'

config host
        option ip '192.168.1.145'
        option mac 'xxx'

config host
        option name 'C125'
        option ip '192.168.1.210'
        option mac 'xxx'

config host
        option ip '192.168.1.158'
        option mac 'xxx'

config host
        option ip '192.168.1.156'
        option mac 'xxx'

config host
        option ip '192.168.1.199'
        option mac 'xxx'

config host
        option ip '192.168.1.248'
        option mac 'xxx'

config host
        option name 'Presence-Sensor-FP2-E374'
        option ip '192.168.1.189'
        option mac 'xxx'

config host
        option name 'Presence-Sensor-FP2-DC2E'
        option ip '192.168.1.221'
        option mac 'xxx'

config host
        option name 'espressif'
        option ip '192.168.1.190'
        option mac 'xxx'

config host
        option ip '192.168.1.127'
        option mac 'xxx'

config host
        option name 'Camera1'
        option ip '192.168.1.249'
        option mac 'xxx'

config host
        option ip '192.168.1.129'
        option mac 'xxx'

config host
        option name 'yukabridge'
        option ip '192.168.1.168'
        option mac 'xxx'

config host
        option name 'roborock-vacuum-a97'
        option ip '192.168.1.110'
        option mac 'xxx'

config host
        option name 'Tab-16'
        option ip '192.168.1.214'
        option mac 'xxx'

config host
        option ip '192.168.1.107'
        option mac 'xxx'

config host
        option ip '192.168.1.233'
        option mac 'xxx'

config host
        option ip '192.168.1.204'
        option mac 'xxx'
18

cat /etc/config/firewall

config defaults
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'
        option flow_offloading '1'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option mtu_fix '1'
        option masq '1'
        list network 'wan'
        list network 'wan6'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'
        option enabled '0'

config zone
        option name 'surfshark'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'surfshark'

config rule
        option name 'exceptions'
        option src 'lan'
        list src_ip '192.168.1.179'
        list src_ip '192.168.1.151'
        option dest 'wan'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Block Cams from Interwebz'
        option src 'lan'
        option dest 'wireguardvpn'
        option target 'REJECT'
        list src_ip '192.168.1.133'
        list src_ip '192.168.1.152'
        list src_ip '192.168.1.205'
        list src_ip '192.168.1.216'
        list src_ip '192.168.1.209'
        list src_ip '192.168.1.114'
        list src_ip '192.168.1.242'
        list src_ip '192.168.1.121'
        list src_ip '192.168.1.109'
        list src_ip '192.168.1.218'
        list src_ip '192.168.1.116'
        list src_ip '192.168.1.181'
        list src_ip '192.168.1.170'
        list src_ip '192.168.1.234'
        list src_ip '192.168.1.166'
        list src_ip '192.168.1.185'
        list src_ip '192.168.1.102'
        list src_ip '192.168.1.172'
        list src_ip '192.168.1.187'
        list src_ip '192.168.1.210'
        list src_ip '192.168.1.145'
        list src_ip '192.168.1.182'
        list src_ip '192.168.1.158'
        list src_ip '192.168.1.199'
        list src_ip '192.168.1.248'
        list src_ip '192.168.1.129'
        list proto 'all'

config zone
        option name 'ovpntest'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        option family 'ipv4'
        list network 'surfsharkovpn'

config include 'pbr'
        option fw4_compatible '1'
        option type 'script'
        option path '/usr/share/pbr/pbr.firewall.include'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'ntp'
        list proto 'udp'
        option src 'lan'
        option src_dport '123'
        option dest_port '123'
        list src_mac 'xxx'
        list src_mac 'xxx'
        list src_mac 'xxx'
        list src_mac 'xxx'
        list src_mac 'xxx'

config zone
        option name 'Guestwlan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        list network 'xxx'

config rule
        option name 'guestDHCP'
        list proto 'udp'
        option src 'Guestwlan'
        option dest_port '67'
        option target 'ACCEPT'

config rule
        option name 'GuestDNS'
        option src 'Guestwlan'
        option dest_port '53'
        option target 'ACCEPT'

config forwarding
        option src 'Guestwlan'
        option dest 'wireguardvpn'

config rule

config rule
        option name 'Block Android Panels from internet'
        option src 'lan'
        list src_ip '192.168.1.107'
        option dest 'wireguardvpn'
        option target 'REJECT'
        option enabled '0'

config rule
        option name 'temp'
        list proto 'udp'
        option src 'lan'
        option dest 'wireguardvpn'
        option target 'DROP'
        list src_ip '192.168.1.184'
        option enabled '0'

config forwarding
        option src 'lan'
        option dest 'wireguardvpn'
19

thank you!
Here is a snippet from the log, maybe this can help?
It's full of these errors as you can see on the overview bar on the right side.

image
image2123×619 77.6 KB

20

Which device is .240 and .216?