Need a sanity check on BPI‑R4 SFP cages – both ports link but pull a 169.254.x.x (self‑assigned) every time

Installing and Using OpenWrt Network and Wireless Configuration
1

Hardware: Banana Pi R4, OpenWrt 24.10 snapshot (also tried OMR v0.62‑6.6).

Optics tried so far:

  • Generic‑compatible Ubiquiti UF‑RJ45‑10G (10 GBASE‑T SFP+, 30 m)
  • FS SFP‑2.5G‑T‑I (Industrial 2.5 GBASE‑T, 100 m)

Link LEDs come up and dmesg shows 10 000/2500 Mb, but neither DHCP nor static IP works; Windows/Mac hosts fall back to APIPA. Copper WAN port is fine, so it’s just the cages.

ethtool sfp-wan

Settings for sfp-wan:
	Supported ports: [ TP ]
	Supported link modes:   10000baseSR/Full 
	Supported pause frame use: Symmetric Receive-only
	Supports auto-negotiation: Yes
	Supported FEC modes: Not reported
	Advertised link modes:  10000baseSR/Full 
	Advertised pause frame use: Symmetric Receive-only
	Advertised auto-negotiation: Yes
	Advertised FEC modes: Not reported
	Speed: Unknown!
	Duplex: Unknown! (255)
	Port: Twisted Pair
	PHYAD: 0
	Transceiver: internal
	Auto-negotiation: on
	MDI-X: Unknown
	Current message level: 0x000000ff (255)
			       drv probe link timer ifdown ifup rx_err tx_err
	Link detected: no

ethtool sfp-lan

Settings for sfp-lan:
	Supported ports: [ TP ]
	Supported link modes:   10000baseSR/Full 
	Supported pause frame use: Symmetric Receive-only
	Supports auto-negotiation: Yes
	Supported FEC modes: Not reported
	Advertised link modes:  10000baseSR/Full 
	Advertised pause frame use: Symmetric Receive-only
	Advertised auto-negotiation: Yes
	Advertised FEC modes: Not reported
	Speed: Unknown!
	Duplex: Unknown! (255)
	Port: Twisted Pair
	PHYAD: 0
	Transceiver: internal
	Auto-negotiation: on
	MDI-X: Unknown
	Current message level: 0x000000ff (255)
			       drv probe link timer ifdown ifup rx_err tx_err
	Link detected: no

ethtool -m sfp-wan

Offset		Values
------		------
0x0000:		03 04 22 10 00 00 00 20 40 04 80 06 67 00 00 00 
0x0010:		00 00 64 00 55 62 69 71 75 69 74 69 20 49 6e 63 
0x0020:		2e 20 20 20 00 24 5a 4c 55 41 43 43 2d 43 4d 2d 
0x0030:		52 4a 34 35 2d 4d 47 20 55 30 38 20 03 52 00 ea 
0x0040:		00 00 00 00 41 56 32 34 31 30 37 35 30 32 35 38 
0x0050:		34 20 20 20 32 34 31 30 32 37 20 20 00 00 08 a5 
0x0060:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0070:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0080:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0090:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00a0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00b0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00c0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00d0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00e0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00f0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0100:		50 00 f6 00 4b 00 fb 00 00 00 00 00 00 00 00 00 
0x0110:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0120:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0130:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0140:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0150:		00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 8d 
0x0160:		26 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0170:		c0 00 00 00 c0 00 00 00 00 ff 00 00 00 00 00 00 
0x0180:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0190:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01a0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01b0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01c0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01d0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01e0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01f0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ethtool -m sfp-lan

Offset		Values
------		------
0x0000:		03 04 22 10 00 00 00 20 40 04 80 06 67 00 00 00 
0x0010:		00 00 64 00 55 62 69 71 75 69 74 69 20 49 6e 63 
0x0020:		2e 20 20 20 00 24 5a 4c 55 41 43 43 2d 43 4d 2d 
0x0030:		52 4a 34 35 2d 4d 47 20 55 30 38 20 03 52 00 ea 
0x0040:		00 00 00 00 41 56 32 34 31 30 37 35 30 32 39 35 
0x0050:		38 20 20 20 32 34 31 30 32 37 20 20 00 00 08 aa 
0x0060:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0070:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0080:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0090:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00a0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00b0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00c0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00d0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00e0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x00f0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0100:		50 00 f6 00 4b 00 fb 00 00 00 00 00 00 00 00 00 
0x0110:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0120:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0130:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0140:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0150:		00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 8d 
0x0160:		30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0170:		c0 00 00 00 c0 00 00 00 03 ff 00 00 00 00 00 00 
0x0180:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x0190:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01a0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01b0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01c0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01d0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01e0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 
0x01f0:		00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

ip a

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host proto kernel_lo 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1504 qdisc mq state UP group default qlen 1000
    link/ether d2:10:fd:94:73:51 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::d010:fdff:fe94:7351/64 scope link proto kernel_ll 
       valid_lft forever preferred_lft forever
3: sfp-lan: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether d2:10:fd:94:73:52 brd ff:ff:ff:ff:ff:ff
    inet 10.10.4.1/24 brd 10.10.4.255 scope global sfp-lan
       valid_lft forever preferred_lft forever
4: sfp-wan: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
    link/ether 6e:9d:29:00:a5:7d brd ff:ff:ff:ff:ff:ff
    inet 10.10.5.1/24 brd 10.10.5.255 scope global sfp-wan
       valid_lft forever preferred_lft forever
5: wan@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 2000
    link/ether d2:10:fd:94:73:51 brd ff:ff:ff:ff:ff:ff
    inet 192.168.100.1/24 brd 192.168.100.255 scope global wan
       valid_lft forever preferred_lft forever
6: lan1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether d2:10:fd:94:73:51 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.74/24 brd 192.168.1.255 scope global lan1
       valid_lft forever preferred_lft forever
7: lan2@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state LOWERLAYERDOWN group default qlen 1000
    link/ether d2:10:fd:94:73:51 brd ff:ff:ff:ff:ff:ff
8: lan3@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state LOWERLAYERDOWN group default qlen 1000
    link/ether d2:10:fd:94:73:51 brd ff:ff:ff:ff:ff:ff
9: ip6tnl0@NONE: <NOARP> mtu 1452 qdisc noop state DOWN group default qlen 1000
    link/tunnel6 :: brd :: permaddr 52f1:e1a9:5b44::
10: sit0@NONE: <NOARP> mtu 1480 qdisc noop state DOWN group default qlen 1000
    link/sit 0.0.0.0 brd 0.0.0.0
11: gre0@NONE: <NOARP> mtu 1476 qdisc noop state DOWN group default qlen 1000
    link/gre 0.0.0.0 brd 0.0.0.0
12: gretap0@NONE: <BROADCAST,MULTICAST> mtu 1462 qdisc noop state DOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
13: erspan0@NONE: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default qlen 1000
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
14: ip6gre0@NONE: <NOARP> mtu 1448 qdisc noop state DOWN group default qlen 1000
    link/gre6 :: brd :: permaddr 4676:82f1:c7f::
15: teql0: <NOARP> mtu 1500 qdisc noop state DOWN group default qlen 100
    link/void 
32: ifb4lan2: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 32
    link/ether 52:74:5c:01:58:c6 brd ff:ff:ff:ff:ff:ff
35: ifb4lan3: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 32
    link/ether a6:8c:98:07:7f:a1 brd ff:ff:ff:ff:ff:ff
38: ifb4lan1: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 32
    link/ether c6:2a:55:73:d4:23 brd ff:ff:ff:ff:ff:ff

root@OpenMPTCProuter:~# ubus call system board
{
	"kernel": "6.12.35",
	"hostname": "OpenMPTCProuter",
	"system": "ARMv8 Processor rev 0",
	"model": "Banana Pi BPI-R4 (2x SFP+)",
	"board_name": "bananapi,bpi-r4",
	"rootfs_type": "squashfs",
	"release": {
		"distribution": "openmptcprouter",
		"version": "v0.63-snapshot-6.12",
		"firmware_url": "https://downloads.openwrt.org/",
		"revision": "r0+30292-77b9393d2f",
		"target": "mediatek/filogic",
		"description": "openmptcprouter v0.63-snapshot-6.12 r0+30292-77b9393d2f",
		"builddate": "1751832330"
	}
}



root@OpenMPTCProuter:~# cat /etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'
	option multipath 'off'
	option metric '7'
	option ip4table '7'
	option ip6table '67'

config globals 'globals'
	option ula_prefix 'fdab:f42f:dbff::/48'
	option packet_steering '0'
	option multipath 'enable'
	option mptcp_path_manager 'fullmesh'
	option mptcp_scheduler 'blest'
	option congestion 'bbr'
	option mptcp_checksum '0'
	option mptcp_debug '0'
	option mptcp_syn_retries '4'
	option mptcp_subflows '8'
	option mptcp_add_addr_accepted '8'
	option mptcp_add_addr_timeout '120'
	option mptcp_pm_type '0'
	option mptcp_disable_initial_config '0'
	option mptcp_force_multipath '1'
	option mptcpd_enable '0'
	option mptcp_fullmesh_num_subflows '1'
	option mptcp_fullmesh_create_on_err '1'
	option mptcp_ndiffports_num_subflows '1'

config interface 'lan'
	option device 'wan'
	option proto 'static'
	option ipaddr '192.168.100.1'
	option netmask '255.255.255.0'
	option ip6assign '60'
	option ifname 'wan'
	option metric '9999'
	option ipv6 '0'
	option delegate '0'
	option addlatency '0'
	option txqueuelen '2000'
	option multipath 'off'
	option ip4table '9999'
	option ip6table '69999'

config device
	option name 'br-wan'
	option type 'bridge'
	list ports 'wan'
	list ports 'eth2'

config device
	option name 'eth2'
	option macaddr 'd2:10:fd:94:73:52'

config rule 'lan_rule'
	option lookup 'lan'
	option priority '100'

config interface 'wan1'
	option device 'lan1'
	option proto 'dhcp'
	option peerdns '0'
	option metric '6'
	option ip4table '6'
	option ip6table '66'
	option defaultroute '0'
	option ipv6 '0'

config device 'wan1_dev'
	option name 'lan1'
	option txqueuelen '1000'

config interface 'wan2'
	option device 'lan2'
	option proto 'static'
	option ip4table '8'
	option multipath 'on'
	option defaultroute '0'
	option delegate '0'
	option addlatency '0'
	option metric '8'
	option ip6table '68'
	option peerdns '0'
	option ipv6 '0'

config device 'wan2_dev'
	option name 'lan2'
	option txqueuelen '1000'

config interface 'wan3'
	option device 'lan3'
	option proto 'static'
	option ip4table '9'
	option multipath 'on'
	option defaultroute '0'
	option delegate '0'
	option addlatency '0'
	option metric '9'
	option ip6table '69'
	option peerdns '0'
	option ipv6 '0'

config device 'wan3_dev'
	option name 'lan3'
	option txqueuelen '1000'

config device 'tun0'
	option name 'tun0'
	option mtu '1500'

config rule6 'wan_fw_rule6'
	option priority '1'
	option mark '0x65399999'
	option lookup '9999'

config rule6 'lan1_fw_rule6'
	option priority '1'
	option mark '0x65396'
	option lookup '6'

config rule6 'lan2_fw_rule6'
	option priority '1'
	option mark '0x65398'
	option lookup '8'

config rule6 'lan3_fw_rule6'
	option priority '1'
	option mark '0x65399'
	option lookup '9'

config rule6 'tun0_fw_rule6'
	option priority '1'
	option mark '0x65391500'
	option lookup '1500'

config rule6 'all_fw_rule6'
	option priority '1'
	option mark '0x6539'
	option lookup '6991337'

config interface 'sfp_lan'
	option proto 'static'
	option device 'sfp-lan'
	option ipaddr '10.10.4.1'
	option netmask '255.255.255.0'
	option multipath 'off'
	option addlatency '0'
	option metric '13'
	option ip4table '13'
	option ip6table '613'

config rule6 'sfp_wan_fw_rule6'
	option priority '1'
	option mark '0x653911'
	option lookup '11'

config rule6 'sfp_lan_fw_rule6'
	option priority '1'
	option mark '0x653913'
	option lookup '13'

config device
	option name 'sfp-lan'

config device
	option name 'sfp-wan'

config interface 'sfp_wan'
	option proto 'static'
	option device 'sfp-wan'
	option ipaddr '10.10.5.1'
	option netmask '255.255.255.0'
	option multipath 'off'
	option addlatency '0'
	option metric '11'
	option ip4table '11'
	option ip6table '611'

config rule 'wan_fw_rule'
	option priority '1'
	option mark '0x45399999'
	option lookup '9999'

config rule 'lan1_fw_rule'
	option priority '1'
	option mark '0x45396'
	option lookup '6'

config rule 'lan2_fw_rule'
	option priority '1'
	option mark '0x45398'
	option lookup '8'

config rule 'lan3_fw_rule'
	option priority '1'
	option mark '0x45399'
	option lookup '9'

config rule 'sfp_lan_fw_rule'
	option priority '1'
	option mark '0x453913'
	option lookup '13'

config rule 'sfp_wan_fw_rule'
	option priority '1'
	option mark '0x453911'
	option lookup '11'

config rule 'all_fw_rule'
	option priority '1'
	option mark '0x4539'
	option lookup '991337'


root@OpenMPTCProuter:~# cat /etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option radio '0'
	option band '2g'
	option channel '1'
	option htmode 'EHT20'
	option disabled '1'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option radio '1'
	option band '5g'
	option channel '36'
	option htmode 'EHT80'
	option disabled '1'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'

config wifi-device 'radio2'
	option type 'mac80211'
	option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option radio '2'
	option band '6g'
	option channel 'auto'
	option htmode 'EHT80'
	option disabled '1'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'

root@OpenMPTCProuter:~# cat /etc/config/dhcp

config dnsmasq
	option domainneeded '1'
	option boguspriv '1'
	option filterwin2k '0'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option nonegcache '1'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option nonwildcard '1'
	option localservice '1'
	option ednspacket_max '1232'
	option filter_aaaa '0'
	option filter_a '0'
	list server '127.0.0.1#5353'
	list server '/lan/'
	list server '/use-application-dns.net/'
	option noresolv '1'
	list rebind_domain 'plex.direct'
	option dnsforwardmax '1500'
	option quietdhcp '1'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option ra_slaac '1'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'
	option force '1'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'

config dhcp 'wan1'
	option interface 'wan1'
	option start '100'
	option limit '150'
	option leasetime '12h'

config dhcp 'sfp_lan'
	option interface 'sfp_lan'
	option start '100'
	option limit '150'
	option leasetime '12h'

config ipset 'omr_dscp_cs0'
	list name 'omr_dscp_cs0_4'

config ipset 'omr_dscp_cs1'
	list name 'omr_dscp_cs1_4'
	list domain 'download.qq.com'
	list domain 'steamcontent.com'
	list domain 'gs2.ww.prod.dl.playstation.net'
	list domain 'dropbox.com'
	list domain 'dropboxstatic.com'
	list domain 'dropbox-dns.com'
	list domain 'log.getdropbox.com'
	list domain 'drive.google.com'
	list domain 'drive-thirdparty.googleusercontent.com'
	list domain 'docs.google.com'
	list domain 'docs.googleusercontent.com'
	list domain 'gvt1.com'
	list domain 'mmg-fna.whatsapp.net'
	list domain 'upload.youtube.com'
	list domain 'upload.video.google.com'
	list domain 'windowsupdate.com'
	list domain 'update.microsoft.com'

config ipset 'omr_dscp_cs2'
	list name 'omr_dscp_cs2_4'
	list domain 'googletagmanager.com'
	list domain 'googleusercontent.com'
	list domain 'google.com'
	list domain 'fbcdn.net'
	list domain 'akamaihd.net'
	list domain 'whatsapp.net'
	list domain 'whatsapp.com'
	list domain 'zoom.us'
	list domain 'googleapis.com'
	list domain '1e100.net'
	list domain 'hwcdn.net'

config ipset 'omr_dscp_cs3'
	list name 'omr_dscp_cs3_4'

config ipset 'omr_dscp_cs4'
	list name 'omr_dscp_cs4_4'
	list domain 'googlevideo.com'
	list domain 'nflxvideo.net'
	list domain 's3.ll.dash.row.aiv-cdn.net'
	list domain 'd25xi40x97liuc.cloudfront.net'
	list domain 'aiv-delivery.net'
	list domain 'fbcdn.net'
	list domain 'ttvnw.net'
	list domain 'vevo.com'
	list domain 'audio-fa.scdn.com'
	list domain 'deezer.com'
	list domain 'sndcdn.com'
	list domain 'last.fm'
	list domain 'v.redd.it'

config ipset 'omr_dscp_cs5'
	list name 'omr_dscp_cs5_4'
	list domain 'tv.milkywan.fr'

config ipset 'omr_dscp_cs6'
	list name 'omr_dscp_cs6_4'

config ipset 'omr_dscp_cs7'
	list name 'omr_dscp_cs7_4'

config ipset 'omr_dscp_ef'
	list name 'omr_dscp_ef_4'

config ipset 'omr_dst_bypass_wan'
	list name 'omr_dst_bypass_wan_4'
	list name 'omr_dst_bypass_wan_6'

config ipset 'omr_dst_bypass_tcp'
	list name 'omr_dst_bypass_wan_4_tcp'
	list name 'omr_dst_bypass_wan_6_tcp'
	list name 'omr_dst_bypass_lan1_4_tcp'
	list name 'omr_dst_bypass_lan1_6_tcp'
	list name 'omr_dst_bypass_lan2_4_tcp'
	list name 'omr_dst_bypass_lan2_6_tcp'
	list name 'omr_dst_bypass_lan3_4_tcp'
	list name 'omr_dst_bypass_lan3_6_tcp'
	list name 'omr_dst_bypass_sfp_lan_4_tcp'
	list name 'omr_dst_bypass_sfp_lan_6_tcp'
	list name 'omr_dst_bypass_sfp_wan_4_tcp'
	list name 'omr_dst_bypass_sfp_wan_6_tcp'
	list name 'omr_dst_bypass_all_4_tcp'
	list name 'omr_dst_bypass_all_6_tcp'

config ipset 'omr_dst_bypass_udp'
	list name 'omr_dst_bypass_wan_4_udp'
	list name 'omr_dst_bypass_wan_6_udp'
	list name 'omr_dst_bypass_lan1_4_udp'
	list name 'omr_dst_bypass_lan1_6_udp'
	list name 'omr_dst_bypass_lan2_4_udp'
	list name 'omr_dst_bypass_lan2_6_udp'
	list name 'omr_dst_bypass_lan3_4_udp'
	list name 'omr_dst_bypass_lan3_6_udp'
	list name 'omr_dst_bypass_sfp_lan_4_udp'
	list name 'omr_dst_bypass_sfp_lan_6_udp'
	list name 'omr_dst_bypass_sfp_wan_4_udp'
	list name 'omr_dst_bypass_sfp_wan_6_udp'
	list name 'omr_dst_bypass_all_4_udp'
	list name 'omr_dst_bypass_all_6_udp'

config ipset 'omr_dst_bypass_lan1'
	list name 'omr_dst_bypass_lan1_4'
	list name 'omr_dst_bypass_lan1_6'

config ipset 'omr_dst_bypass_lan2'
	list name 'omr_dst_bypass_lan2_4'
	list name 'omr_dst_bypass_lan2_6'

config ipset 'omr_dst_bypass_lan3'
	list name 'omr_dst_bypass_lan3_4'
	list name 'omr_dst_bypass_lan3_6'

config ipset 'omr_dst_bypass_sfp_lan'
	list name 'omr_dst_bypass_sfp_lan_4'
	list name 'omr_dst_bypass_sfp_lan_6'

config ipset 'omr_dst_bypass_sfp_wan'
	list name 'omr_dst_bypass_sfp_wan_4'
	list name 'omr_dst_bypass_sfp_wan_6'

config ipset 'omr_dst_bypass_all'
	list name 'omr_dst_bypass_all_4'
	list name 'omr_dst_bypass_all_6'
4

First...

Please use the "Preformatted text </>" button for logs, scripts, configs and general console output.
grafik
Please edit your post accordingly. Thank you! :slight_smile:

Second, please use that to post your configs for review:

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
8

continuation of firewall code blurb:

config ipset 'omr_dst_bypass_lan2_4_udp'
	option name 'omr_dst_bypass_lan2_4_udp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_lan2_6_udp'
	option name 'omr_dst_bypass_lan2_6_udp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config rule 'omr_dst_bypass_lan2_dstip_4_lan'
	option name 'omr_dst_bypass_lan2_dstip_4_lan_rule'
	option ipset 'omr_dst_bypass_lan2_4'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option set_mark '0x45398'

config rule 'omr_dst_bypass_lan2_dstip_4_lan_udp'
	option name 'omr_dst_bypass_lan2_dstip_4_lan_udp_rule'
	option ipset 'omr_dst_bypass_lan2_4_udp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'udp'
	option set_mark '0x45398'

config rule 'omr_dst_bypass_lan2_dstip_4_lan_tcp'
	option name 'omr_dst_bypass_lan2_dstip_4_lan_tcp_rule'
	option ipset 'omr_dst_bypass_lan2_4_tcp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'tcp'
	option set_mark '0x45398'

config rule 'omr_dst_bypass_lan2_dstip_4_lan_accept'
	option name 'omr_dst_bypass_lan2_dstip_4_lan_rule_accept'
	option target 'ACCEPT'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option mark '0x45398'

config rule 'omr_dst_bypass_lan2_srcip_4_lan'
	option name 'omr_dst_bypass_lan2_srcip_4_lan'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x45398'

config rule 'omr_dst_bypass_lan2_mac_4_lan'
	option name 'omr_dst_bypass_lan2_mac_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x45398'

config rule 'omr_dst_bypass_lan2_srcport_tcp_4_lan'
	option name 'omr_dst_bypass_lan2_srcport_tcp_4_lan'
	option proto 'tcp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x45398'

config rule 'omr_dst_bypass_lan2_srcport_udp_4_lan'
	option name 'omr_dst_bypass_lan2_srcport_udp_4_lan'
	option proto 'udp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x45398'

config rule 'omr_dst_bypass_lan2_dstport_tcp_4_lan'
	option name 'omr_dst_bypass_lan2_dstport_tcp_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option proto 'tcp'
	option enabled '0'
	option set_xmark '0x45398'

config rule 'omr_dst_bypass_lan2_dstport_udp_4_lan'
	option name 'omr_dst_bypass_lan2_dstport_udp_4_lan'
	option src 'lan'
	option dest '*'
	option proto 'udp'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x45398'

config ipset 'omr_dst_bypass_lan3_4'
	option name 'omr_dst_bypass_lan3_4'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_lan3_6'
	option name 'omr_dst_bypass_lan3_6'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_lan3_4_tcp'
	option name 'omr_dst_bypass_lan3_4_tcp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_lan3_6_tcp'
	option name 'omr_dst_bypass_lan3_6_tcp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_lan3_4_udp'
	option name 'omr_dst_bypass_lan3_4_udp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_lan3_6_udp'
	option name 'omr_dst_bypass_lan3_6_udp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config rule 'omr_dst_bypass_lan3_dstip_4_lan'
	option name 'omr_dst_bypass_lan3_dstip_4_lan_rule'
	option ipset 'omr_dst_bypass_lan3_4'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option set_mark '0x45399'

config rule 'omr_dst_bypass_lan3_dstip_4_lan_udp'
	option name 'omr_dst_bypass_lan3_dstip_4_lan_udp_rule'
	option ipset 'omr_dst_bypass_lan3_4_udp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'udp'
	option set_mark '0x45399'

config rule 'omr_dst_bypass_lan3_dstip_4_lan_tcp'
	option name 'omr_dst_bypass_lan3_dstip_4_lan_tcp_rule'
	option ipset 'omr_dst_bypass_lan3_4_tcp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'tcp'
	option set_mark '0x45399'

config rule 'omr_dst_bypass_lan3_dstip_4_lan_accept'
	option name 'omr_dst_bypass_lan3_dstip_4_lan_rule_accept'
	option target 'ACCEPT'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option mark '0x45399'

config rule 'omr_dst_bypass_lan3_srcip_4_lan'
	option name 'omr_dst_bypass_lan3_srcip_4_lan'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x45399'

config rule 'omr_dst_bypass_lan3_mac_4_lan'
	option name 'omr_dst_bypass_lan3_mac_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x45399'

config rule 'omr_dst_bypass_lan3_srcport_tcp_4_lan'
	option name 'omr_dst_bypass_lan3_srcport_tcp_4_lan'
	option proto 'tcp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x45399'

config rule 'omr_dst_bypass_lan3_srcport_udp_4_lan'
	option name 'omr_dst_bypass_lan3_srcport_udp_4_lan'
	option proto 'udp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x45399'

config rule 'omr_dst_bypass_lan3_dstport_tcp_4_lan'
	option name 'omr_dst_bypass_lan3_dstport_tcp_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option proto 'tcp'
	option enabled '0'
	option set_xmark '0x45399'

config rule 'omr_dst_bypass_lan3_dstport_udp_4_lan'
	option name 'omr_dst_bypass_lan3_dstport_udp_4_lan'
	option src 'lan'
	option dest '*'
	option proto 'udp'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x45399'

config ipset 'omr_dst_bypass_sfp_lan_4'
	option name 'omr_dst_bypass_sfp_lan_4'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_lan_6'
	option name 'omr_dst_bypass_sfp_lan_6'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_lan_4_tcp'
	option name 'omr_dst_bypass_sfp_lan_4_tcp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_lan_6_tcp'
	option name 'omr_dst_bypass_sfp_lan_6_tcp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_lan_4_udp'
	option name 'omr_dst_bypass_sfp_lan_4_udp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_lan_6_udp'
	option name 'omr_dst_bypass_sfp_lan_6_udp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config rule 'omr_dst_bypass_sfp_lan_dstip_4_lan'
	option name 'omr_dst_bypass_sfp_lan_dstip_4_lan_rule'
	option ipset 'omr_dst_bypass_sfp_lan_4'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option set_mark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_dstip_4_lan_udp'
	option name 'omr_dst_bypass_sfp_lan_dstip_4_lan_udp_rule'
	option ipset 'omr_dst_bypass_sfp_lan_4_udp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'udp'
	option set_mark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_dstip_4_lan_tcp'
	option name 'omr_dst_bypass_sfp_lan_dstip_4_lan_tcp_rule'
	option ipset 'omr_dst_bypass_sfp_lan_4_tcp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'tcp'
	option set_mark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_dstip_4_lan_accept'
	option name 'omr_dst_bypass_sfp_lan_dstip_4_lan_rule_accept'
	option target 'ACCEPT'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option mark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_srcip_4_lan'
	option name 'omr_dst_bypass_sfp_lan_srcip_4_lan'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_mac_4_lan'
	option name 'omr_dst_bypass_sfp_lan_mac_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_srcport_tcp_4_lan'
	option name 'omr_dst_bypass_sfp_lan_srcport_tcp_4_lan'
	option proto 'tcp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_srcport_udp_4_lan'
	option name 'omr_dst_bypass_sfp_lan_srcport_udp_4_lan'
	option proto 'udp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_dstport_tcp_4_lan'
	option name 'omr_dst_bypass_sfp_lan_dstport_tcp_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option proto 'tcp'
	option enabled '0'
	option set_xmark '0x453913'

config rule 'omr_dst_bypass_sfp_lan_dstport_udp_4_lan'
	option name 'omr_dst_bypass_sfp_lan_dstport_udp_4_lan'
	option src 'lan'
	option dest '*'
	option proto 'udp'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x453913'

config ipset 'omr_dst_bypass_sfp_wan_4'
	option name 'omr_dst_bypass_sfp_wan_4'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_wan_6'
	option name 'omr_dst_bypass_sfp_wan_6'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_wan_4_tcp'
	option name 'omr_dst_bypass_sfp_wan_4_tcp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_wan_6_tcp'
	option name 'omr_dst_bypass_sfp_wan_6_tcp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_wan_4_udp'
	option name 'omr_dst_bypass_sfp_wan_4_udp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_sfp_wan_6_udp'
	option name 'omr_dst_bypass_sfp_wan_6_udp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config rule 'omr_dst_bypass_sfp_wan_dstip_4_lan'
	option name 'omr_dst_bypass_sfp_wan_dstip_4_lan_rule'
	option ipset 'omr_dst_bypass_sfp_wan_4'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option set_mark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_dstip_4_lan_udp'
	option name 'omr_dst_bypass_sfp_wan_dstip_4_lan_udp_rule'
	option ipset 'omr_dst_bypass_sfp_wan_4_udp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'udp'
	option set_mark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_dstip_4_lan_tcp'
	option name 'omr_dst_bypass_sfp_wan_dstip_4_lan_tcp_rule'
	option ipset 'omr_dst_bypass_sfp_wan_4_tcp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'tcp'
	option set_mark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_dstip_4_lan_accept'
	option name 'omr_dst_bypass_sfp_wan_dstip_4_lan_rule_accept'
	option target 'ACCEPT'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option mark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_srcip_4_lan'
	option name 'omr_dst_bypass_sfp_wan_srcip_4_lan'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_mac_4_lan'
	option name 'omr_dst_bypass_sfp_wan_mac_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_srcport_tcp_4_lan'
	option name 'omr_dst_bypass_sfp_wan_srcport_tcp_4_lan'
	option proto 'tcp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_srcport_udp_4_lan'
	option name 'omr_dst_bypass_sfp_wan_srcport_udp_4_lan'
	option proto 'udp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_dstport_tcp_4_lan'
	option name 'omr_dst_bypass_sfp_wan_dstport_tcp_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option proto 'tcp'
	option enabled '0'
	option set_xmark '0x453911'

config rule 'omr_dst_bypass_sfp_wan_dstport_udp_4_lan'
	option name 'omr_dst_bypass_sfp_wan_dstport_udp_4_lan'
	option src 'lan'
	option dest '*'
	option proto 'udp'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x453911'

config ipset 'omr_dst_bypass_all_4'
	option name 'omr_dst_bypass_all_4'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_all_6'
	option name 'omr_dst_bypass_all_6'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_all_4_tcp'
	option name 'omr_dst_bypass_all_4_tcp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_all_6_tcp'
	option name 'omr_dst_bypass_all_6_tcp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config ipset 'omr_dst_bypass_all_4_udp'
	option name 'omr_dst_bypass_all_4_udp'
	option match 'dest_net'
	option family 'ipv4'
	option enabled '1'

config ipset 'omr_dst_bypass_all_6_udp'
	option name 'omr_dst_bypass_all_6_udp'
	option match 'dest_net'
	option family 'ipv6'
	option enabled '1'

config rule 'omr_dst_bypass_all_dstip_4_lan'
	option name 'omr_dst_bypass_all_dstip_4_lan_rule'
	option ipset 'omr_dst_bypass_all_4'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option set_mark '0x4539'

config rule 'omr_dst_bypass_all_dstip_4_lan_udp'
	option name 'omr_dst_bypass_all_dstip_4_lan_udp_rule'
	option ipset 'omr_dst_bypass_all_4_udp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'udp'
	option set_mark '0x4539'

config rule 'omr_dst_bypass_all_dstip_4_lan_tcp'
	option name 'omr_dst_bypass_all_dstip_4_lan_tcp_rule'
	option ipset 'omr_dst_bypass_all_4_tcp'
	option target 'MARK'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'tcp'
	option set_mark '0x4539'

config rule 'omr_dst_bypass_all_dstip_4_lan_accept'
	option name 'omr_dst_bypass_all_dstip_4_lan_rule_accept'
	option target 'ACCEPT'
	option dest '*'
	option family 'ipv4'
	option enabled '0'
	option proto 'all'
	option mark '0x4539'

config rule 'omr_dst_bypass_all_srcip_4_lan'
	option name 'omr_dst_bypass_all_srcip_4_lan'
	option src 'lan'
	option dest '*'
	option family 'ipv4'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x4539'

config rule 'omr_dst_bypass_all_mac_4_lan'
	option name 'omr_dst_bypass_all_mac_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option proto 'all'
	option set_xmark '0x4539'

config rule 'omr_dst_bypass_all_srcport_tcp_4_lan'
	option name 'omr_dst_bypass_all_srcport_tcp_4_lan'
	option proto 'tcp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x4539'

config rule 'omr_dst_bypass_all_srcport_udp_4_lan'
	option name 'omr_dst_bypass_all_srcport_udp_4_lan'
	option proto 'udp'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x4539'

config rule 'omr_dst_bypass_all_dstport_tcp_4_lan'
	option name 'omr_dst_bypass_all_dstport_tcp_4_lan'
	option src 'lan'
	option dest '*'
	option target 'MARK'
	option proto 'tcp'
	option enabled '0'
	option set_xmark '0x4539'

config rule 'omr_dst_bypass_all_dstport_udp_4_lan'
	option name 'omr_dst_bypass_all_dstport_udp_4_lan'
	option src 'lan'
	option dest '*'
	option proto 'udp'
	option target 'MARK'
	option enabled '0'
	option set_xmark '0x4539'
9

This is not OpenWrt.

It appears you are using firmware that is not from the official OpenWrt project.

When using forks/offshoots/vendor-specific builds that are "based on OpenWrt", there may be many differences compared to the official versions (hosted by OpenWrt.org). Some of these customizations may fundamentally change the way that OpenWrt works. You might need help from people with specific/specialized knowledge about the firmware you are using, so it is possible that advice you get here may not be useful.

You may find that the best options are:

  1. Install an official version of OpenWrt, if your device is supported (see https://firmware-selector.openwrt.org).
  2. Ask for help from the maintainer(s) or user community of the specific firmware that you are using.
  3. Provide the source code for the firmware so that users on this forum can understand how your firmware works (OpenWrt forum users are volunteers, so somebody might look at the code if they have time and are interested in your issue).

If you believe that this specific issue is common to generic/official OpenWrt and/or the maintainers of your build have indicated as such, please feel free to clarify.

1 Like
10

While I understand this is not OpenWRT specifically I do believe it to be an issue even with OpenWRT.

11

Because the firmware you are using is a very heavily modified fork, it's most certainly not the same as official OpenWrt.

Please try installing official OpenWrt:

12

So I installed the latest bpir4 firmware and the same issue is happening so it seems to be OpenWRT or the BPiR4 hardware itself causing the issue.

root@OpenWrt:~# ubus call system board
{
	"kernel": "6.6.93",
	"hostname": "OpenWrt",
	"system": "ARMv8 Processor rev 0",
	"model": "Bananapi BPI-R4",
	"board_name": "bananapi,bpi-r4",
	"rootfs_type": "squashfs",
	"release": {
		"distribution": "OpenWrt",
		"version": "24.10.2",
		"revision": "r28739-d9340319c6",
		"target": "mediatek/filogic",
		"description": "OpenWrt 24.10.2 r28739-d9340319c6",
		"builddate": "1750711236"
	}
}

root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd7d:530e:1c11::/48'
	option packet_steering '1'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'eth1'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config device
	option name 'br-wan'
	option type 'bridge'
	list ports 'wan'
	list ports 'eth2'

config device
	option name 'wan'
	option macaddr 'fa:72:a2:91:7a:f5'

config device
	option name 'eth2'
	option macaddr 'fa:72:a2:91:7a:f5'

config interface 'wan'
	option device 'br-wan'
	option proto 'dhcp'

config interface 'wan6'
	option device 'br-wan'
	option proto 'dhcpv6'

config interface 'sfp_wan'
	option proto 'dhcp'
	option device 'eth2'

config interface 'sfp_lan'
	option proto 'dhcp'
	option device 'eth1'

root@OpenWrt:~# ubus call system board
{
	"kernel": "6.6.93",
	"hostname": "OpenWrt",
	"system": "ARMv8 Processor rev 0",
	"model": "Bananapi BPI-R4",
	"board_name": "bananapi,bpi-r4",
	"rootfs_type": "squashfs",
	"release": {
		"distribution": "OpenWrt",
		"version": "24.10.2",
		"revision": "r28739-d9340319c6",
		"target": "mediatek/filogic",
		"description": "OpenWrt 24.10.2 r28739-d9340319c6",
		"builddate": "1750711236"
	}
}
root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd7d:530e:1c11::/48'
	option packet_steering '1'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'eth1'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config device
	option name 'br-wan'
	option type 'bridge'
	list ports 'wan'
	list ports 'eth2'

config device
	option name 'wan'
root@OpenWrt:~# cat /etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option radio '0'
	option band '2g'
	option channel '1'
	option htmode 'EHT20'
	option disabled '1'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option radio '1'
	option band '5g'
	option channel '36'
	option htmode 'EHT80'
	option disabled '1'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'

config wifi-device 'radio2'
	option type 'mac80211'
	option path 'soc/11300000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
	option radio '2'
	option band '6g'
	option channel 'auto'
	option htmode 'EHT80'
	option disabled '1'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'



root@OpenWrt:~# cat /etc/config/dhcp

config dnsmasq
	option domainneeded '1'
	option boguspriv '1'
	option filterwin2k '0'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option nonegcache '0'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option nonwildcard '1'
	option localservice '1'
	option ednspacket_max '1232'
	option filter_aaaa '0'
	option filter_a '0'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	option ra_slaac '1'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'
13

You've got a problem here:

Both eth1 and eth2 are already claimed in bridges:

If you want to use eth1 or eth2 separately, make sure you remove them from the bridges first. Then restart and test again.

Also...

It's unusual for the lan to be a dhcp client... are you sure that's what you want??

Do you want to have the sfp_lan as an independent logical interface relative to the main lan already defined?

14

Hey I just want to say thank you for the quick replies it means alot. As for the sfp_lan, I did that just to make sure I wasn't plugged into the wrong port, I've heard of BPiR4 having the wan port be eth2 or eth1 depending on the version you're on, but yeah I agree that it shouldn't normally be a wan

15

It didn't work without it so I tried adding it like this:

image
image1982×378 52.8 KB

I'll go ahead and remove them though (that was about all the tweaking I did)

16

Did you remove eth1 and eth2 from the bridges?

And:

  • do you know for sure that your sfp modules are working properly
  • do you know for sure that the upstream to which those modules are connected has a DHCP server running? Important to note that the DHCP server itself could potentially not issue a lease under some circumstances (for example, a cable modem service won't issue a DHCP lease to a different MAC than was previously learned)
17

Yeah, the 10G SFP Copper is what I use for my Unify Router/Switch to go upstream, it's worked flawlessly for about a year since I made my network rack

that could be a potential issue! however on the normal RJ45 ports for wan it connects without issue and is given a dhcp ip to my network switch that gives it internet

  • Also, I haven't removed eth1 and eth2, I only tried adding it as a device in the Interface tab as shown in the image I uploaded above

hope this helps to give more info, i wanted to change text color to highlight my reply but it doesn't seem to be an option so i blurred it lol

18

I fixed the formatting issue with your previous post.

Ports can only be used in one place. That is, either a bridge or an interface, but not both. These must be removed from the bridges in your config.

19

I've done 0 modifying to this page, but I hope this helps:

image
image2098×1378 301 KB

20

Screen grabs don't really help. Config file text is the best way to see the whole story.

But as I said before, the ports cannot live in two places, so remove them from the bridges.

21

Will do! Sorry about the screengrabs.
I've removed eth1 & 2 from the br-wan and br-lan bridges respectively, and I added a DHCP and static address for the sfp wan and lan on the interfaces (I'm guessing this is what I need to do) but I still can't get anything. Any console shots that you want me to send let me know

22

How many sfp+ modules do you have? And what Unifi device were you using previously?

I'd like to try the following, if it's possible:

  • Unifi router as the upstream
  • Use the lan SFP+ port on your Unifi device (assuming it's got one available) to connect to the SFP+ port on your BPI-R4.
  • With the upstream Unifi lan providing a DHCP address, does the BPI-R4 get a link and an address?

If you have a UDM Pro/SE/Max, or a Cloud Gateway Fiber, this should be possible.

If not, tell me what options devices and options we can try.

23

Woah okay! So some good and bad news, I'll try to explain first what I did to see if this is what you meant.

  • Connected Unify SFP to router via downstream 10G port, and the other end of that cable to the SFP WAN port on the BPiR4

For the first time I was able to see some movement in data! I ssh'ed into the BPiR4 and tried to ping google but nothing, and my laptop connected via an RJ45 lan port can't either obviously, but now I'm guessing it's a firewall issue perhaps? I assigned the sfp wan on the bpir4 to the default wan firewall

24

Likely.

If you are using the SFP wan port on the BPiR4, that means that it is by default going to reject input. The result is that you cannot connect inbound (ssh/web) from that port.

But... connect a computer to one of the lan ports of your BPi-R4 and then you can check the status of the SFP wan port -- sounds like it has an address, but you'll be able to verify.

25

Yeah good catch and yeah I'm doing all my monitoring of the BPiR4 via a RJ45 connected to my laptop, that's what I meant previously I should've been clearer