No internet on fresh install 24.10.1

Hello Again, i have installed the openwrt firmware few minutes ago as a fresh install and i have no internet i have also tried to reset and set firmware a lot of times which did not worked anymore, I am on mi 3c router, I also tried wireguard on different ssid which totally works fine. "I also tried changing the dns for lan, even after that i did not get internet" And router does have the internet as dashboard says. from luci diagnostics i get

PING openwrt.org (64.226.122.113): 56 data bytes

--- openwrt.org ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss
traceroute to openwrt.org (64.226.122.113), 20 hops max, 46 byte packets
 1  192.168.0.1  1.060 ms
 2  10.131.16.1  1.029 ms
 3  172.17.22.1  5.971 ms

from router

ping google.com
PING google.com (142.250.206.14): 56 data bytes
^C
--- google.com ping statistics ---
4 packets transmitted, 0 packets received, 100% packet loss

from pc

ping google.com
PING google.com (142.250.206.14) 56(84) bytes of data.
^C
--- google.com ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 1009ms

Ok now the configs.

cat /etc/config/network 

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fdd5:3cfc:28f9::/48'

config interface 'wan'
	option device 'eth0.1'
	option proto 'dhcp'

config interface 'wan6'
	option device 'eth0.1'
	option proto 'dhcpv6'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'eth0.2'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config switch
	option name 'switch0'
	option reset '1'
	option enable_vlan '1'

config switch_vlan
	option device 'switch0'
	option vlan '1'
	option ports '0 6t'

config switch_vlan
	option device 'switch0'
	option vlan '2'
	option ports '2 4 6t'
cat /etc/config/wireless 

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/10300000.wmac'
	option band '2g'
	option channel '1'
	option htmode 'HT20'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'
cat /etc/config/dhcp 

config dnsmasq
	option domainneeded '1'
	option boguspriv '1'
	option filterwin2k '0'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option nonegcache '0'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option nonwildcard '1'
	option localservice '1'
	option ednspacket_max '1232'
	option filter_aaaa '0'
	option filter_a '0'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	option ra_slaac '1'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'
cat /etc/config/system 

config system
	option hostname 'OpenWrt'
	option timezone 'UTC'
	option ttylogin '0'
	option log_size '128'
	option urandom_seed '0'

config timeserver 'ntp'
	option enabled '1'
	option enable_server '0'
	list server '0.openwrt.pool.ntp.org'
	list server '1.openwrt.pool.ntp.org'
	list server '2.openwrt.pool.ntp.org'
	list server '3.openwrt.pool.ntp.org'
cat /etc/config/firewall 
config defaults
	option syn_flood	1
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
# Uncomment this line to disable ipv6 rules
#	option disable_ipv6	1

config zone
	option name		lan
	list   network		'lan'
	option input		ACCEPT
	option output		ACCEPT
	option forward		ACCEPT

config zone
	option name		wan
	list   network		'wan'
	list   network		'wan6'
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
	option masq		1
	option mtu_fix		1

config forwarding
	option src		lan
	option dest		wan

# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
	option name		Allow-DHCP-Renew
	option src		wan
	option proto		udp
	option dest_port	68
	option target		ACCEPT
	option family		ipv4

# Allow IPv4 ping
config rule
	option name		Allow-Ping
	option src		wan
	option proto		icmp
	option icmp_type	echo-request
	option family		ipv4
	option target		ACCEPT

config rule
	option name		Allow-IGMP
	option src		wan
	option proto		igmp
	option family		ipv4
	option target		ACCEPT

# Allow DHCPv6 replies
# see https://github.com/openwrt/openwrt/issues/5066
config rule
	option name		Allow-DHCPv6
	option src		wan
	option proto		udp
	option dest_port	546
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-MLD
	option src		wan
	option proto		icmp
	option src_ip		fe80::/10
	list icmp_type		'130/0'
	list icmp_type		'131/0'
	list icmp_type		'132/0'
	list icmp_type		'143/0'
	option family		ipv6
	option target		ACCEPT

# Allow essential incoming IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Input
	option src		wan
	option proto	icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	list icmp_type		router-solicitation
	list icmp_type		neighbour-solicitation
	list icmp_type		router-advertisement
	list icmp_type		neighbour-advertisement
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

# Allow essential forwarded IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Forward
	option src		wan
	option dest		*
	option proto		icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-IPSec-ESP
	option src		wan
	option dest		lan
	option proto		esp
	option target		ACCEPT

config rule
	option name		Allow-ISAKMP
	option src		wan
	option dest		lan
	option dest_port	500
	option proto		udp
	option target		ACCEPT


### EXAMPLE CONFIG SECTIONS
# do not allow a specific ip to access wan
#config rule
#	option src		lan
#	option src_ip	192.168.45.2
#	option dest		wan
#	option proto	tcp
#	option target	REJECT

# block a specific mac on wan
#config rule
#	option dest		wan
#	option src_mac	00:11:22:33:44:66
#	option target	REJECT

# block incoming ICMP traffic on a zone
#config rule
#	option src		lan
#	option proto	ICMP
#	option target	DROP

# port redirect port coming in on wan to lan
#config redirect
#	option src			wan
#	option src_dport	80
#	option dest			lan
#	option dest_ip		192.168.16.235
#	option dest_port	80
#	option proto		tcp

# port redirect of remapped ssh port (22001) on wan
#config redirect
#	option src		wan
#	option src_dport	22001
#	option dest		lan
#	option dest_port	22
#	option proto		tcp

### FULL CONFIG SECTIONS
#config rule
#	option src		lan
#	option src_ip	192.168.45.2
#	option src_mac	00:11:22:33:44:55
#	option src_port	80
#	option dest		wan
#	option dest_ip	194.25.2.129
#	option dest_port	120
#	option proto	tcp
#	option target	REJECT

#config redirect
#	option src		lan
#	option src_ip	192.168.45.2
#	option src_mac	00:11:22:33:44:55
#	option src_port		1024
#	option src_dport	80
#	option dest_ip	194.25.2.129
#	option dest_port	120
#	option proto	tcp

So your Wireguard VPN works, but not Internet thru the router?

Are all 3 devices your routers?

1 Like

Yes my Wireguard vpn on different SSID works perfectly, But ethernet and different normal SSID internet does not work, Also i installed wireguard for internet this is how i am able to reply now, And even on fresh installation the internet from default ssid is not working nor the ethernet.

Are these my devices like laptop or phones, no, And are these routers? Can be. As i am getting the internet from my uncle's router, And uncles have the main router, And my openwrt router is for me and for my room.

Your configurations show:

  • 1 LAN network
  • 1 2.4GHz SSID named OpenWrt - connected to that LAN
  • 0 Wireguard configurations

Did you forget to provide important information?

The traceroute shows your upstream routers to the destination IP tested. Your response about other clients was unclear.

Yes, Let me explain, The fresh installation does not have the internet, It had before like when i tried to have wireguard setup, that time at least 8 months ago fresh installation did had the internet by default, but now it does have internet but does not provide the internet to the SSID and eithernet.
Now Wireguard i set later, but the main issue is by default the openwrt is not providing the internet to SSID and eithernet, I posted the config for the default config, Then now i am using the wireguard as internet, No matter what i try from my end it does not give me the internet by default, even after fresh installation with it's default config provided by openwrt.

So, with the installation of Wireguard on a client - Internet works?

It's unclear how Wireguard is being used to make the connection work.

What is this device?

Wireguard config works, And i uploaded the stock/fresh/default firmware from openwrt which by default is not giving the internet as in normal SSID but for wireguard SSID it is, And i have updated the config but still i am not getting any internet on normal SSID, and here is the config of new configs.

cat /etc/config/network 

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd8f:aad0:9662::/48'
	option packet_steering '1'

config interface 'wan'
	option device 'eth0.1'
	option proto 'dhcp'

config interface 'wan6'
	option device 'eth0.1'
	option proto 'dhcpv6'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'eth0.2'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '10.0.0.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config switch
	option name 'switch0'
	option reset '1'
	option enable_vlan '1'

config switch_vlan
	option device 'switch0'
	option vlan '1'
	option ports '0 6t'

config switch_vlan
	option device 'switch0'
	option vlan '2'
	option ports '2 4 6t'

config interface 'wf_home'
	option proto 'static'
	option ipaddr '10.0.5.1'
	option netmask '255.255.255.0'

config interface 'wireguard_usa'
	option proto 'wireguard'
	option private_key 'QNbkDD6Kq/='
	list addresses '10.2.0.2/24'
	list dns '10.2.0.1'

config interface 'wf_wireguard'
	option proto 'static'
	option ipaddr '10.0.7.1'
	option netmask '255.255.255.0'

config route
	option interface 'wireguard_usa'
	option target '0.0.0.0/0'
	option table '102'
	option source '10.2.0.2/24'

config route
	option interface 'wireguard_usa'
	option target '0.0.0.0/0'
	option table '102'
	option source '10.2.0.1'

config rule
	option in 'wf_wireguard'
	option lookup '102'

config interface 'wf_main'
	option proto 'static'
	option ipaddr '10.0.3.1'
	option netmask '255.255.255.0'

config wireguard_wireguard_usa
	option description 'ProtonVPN WireGuard US-FREE#25'
	option public_key '6ed/B1Lc+='
	list allowed_ips '0.0.0.0/0'
	option endpoint_host '149.40.62.51'
	option endpoint_port '51820'
cat /etc/config/firewall 

config defaults
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'
	option flow_offloading '1'
	option flow_offloading_hw '1'

config zone
	option name 'lan'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'

config zone
	option name 'wan'
	list network 'wan'
	list network 'wan6'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'

config forwarding
	option src 'lan'
	option dest 'wan'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'router-advertisement'
	list icmp_type 'neighbour-advertisement'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

config zone
	option name 'wf_home'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wf_home'

config forwarding
	option src 'wf_home'
	option dest 'wan'

config rule
	option name 'WF_Main DHCP'
	list proto 'udp'
	option src 'wf_main'
	option dest_port '67'
	option target 'ACCEPT'

config rule
	option name 'WF_Main DNS'
	option src 'wf_main'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'WF_Home DNS'
	option src 'wf_home'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'WF_Home DHCP'
	list proto 'udp'
	option src 'wf_home'
	option dest_port '67'
	option target 'ACCEPT'

config zone
	option name 'wg_usa'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wireguard_usa'
	option masq '1'
	option mtu_fix '1'

config zone
	option name 'wf_wg'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wf_wireguard'

config forwarding
	option src 'wf_wg'
	option dest 'wg_usa'

config rule
	option name 'WF_WireGuard DNS'
	option src 'wf_wg'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'WF_WireGuard DHCP'
	list proto 'udp'
	option src 'wf_wg'
	option dest_port '67'
	option target 'ACCEPT'

config zone
	option name 'wf_main'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wf_main'

config forwarding
	option src 'wf_main'
	option dest 'wan'
cat /etc/config/firewall 

config defaults
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'
	option flow_offloading '1'
	option flow_offloading_hw '1'

config zone
	option name 'lan'
	list network 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'

config zone
	option name 'wan'
	list network 'wan'
	list network 'wan6'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'

config forwarding
	option src 'lan'
	option dest 'wan'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'router-advertisement'
	list icmp_type 'neighbour-advertisement'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

config zone
	option name 'wf_home'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wf_home'

config forwarding
	option src 'wf_home'
	option dest 'wan'

config rule
	option name 'WF_Main DHCP'
	list proto 'udp'
	option src 'wf_main'
	option dest_port '67'
	option target 'ACCEPT'

config rule
	option name 'WF_Main DNS'
	option src 'wf_main'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'WF_Home DNS'
	option src 'wf_home'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'WF_Home DHCP'
	list proto 'udp'
	option src 'wf_home'
	option dest_port '67'
	option target 'ACCEPT'

config zone
	option name 'wg_usa'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wireguard_usa'
	option masq '1'
	option mtu_fix '1'

config zone
	option name 'wf_wg'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wf_wireguard'

config forwarding
	option src 'wf_wg'
	option dest 'wg_usa'

config rule
	option name 'WF_WireGuard DNS'
	option src 'wf_wg'
	option dest_port '53'
	option target 'ACCEPT'

config rule
	option name 'WF_WireGuard DHCP'
	list proto 'udp'
	option src 'wf_wg'
	option dest_port '67'
	option target 'ACCEPT'

config zone
	option name 'wf_main'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'wf_main'

config forwarding
	option src 'wf_main'
	option dest 'wan'

root@OpenWrt:~# cat /etc/config/dhcp 

config dnsmasq
	option domainneeded '1'
	option boguspriv '1'
	option filterwin2k '0'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option nonegcache '0'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option nonwildcard '1'
	option localservice '1'
	option ednspacket_max '1232'
	option filter_aaaa '0'
	option filter_a '0'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'

config dhcp 'wf_home'
	option interface 'wf_home'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'
	list dhcp_option '6,1.1.1.3,1.0.0.3'

config dhcp 'wf_wireguard'
	option interface 'wf_wireguard'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'
	list dhcp_option '6,9.9.9.11,149.112.112.11'

config dhcp 'wf_main'
	option interface 'wf_main'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option force '1'
	list dhcp_option '6,9.9.9.11,149.112.112.11'
cat /etc/config/wireless 

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/10300000.wmac'
	option channel '13'
	option band '2g'
	option htmode 'HT20'
	option country 'KR'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan wf_main'
	option mode 'ap'
	option ssid 'Wireless Freedom'
	option encryption 'psk2'
	option isolate '1'
	option key '@#$%^&*'

config wifi-iface 'wifinet1'
	option device 'radio0'
	option mode 'ap'
	option ssid 'Wireless Freedom Home'
	option encryption 'psk2'
	option isolate '1'
	option key '@'
	option network 'wf_home'

config wifi-iface 'wifinet2'
	option device 'radio0'
	option mode 'ap'
	option ssid 'Wireless Freedom WireGuard'
	option encryption 'psk2'
	option isolate '1'
	option key '@#$%^&*'
	option network 'wf_wireguard'

I don't know. Can be my pc but totally not sure.

  • If it's your PC, theres a routing loop
  • Why would your PC have an IP from a range not in your config?

And the old one was what?

I really can't help until your response to inquires match your traceroute (i.e. actual test results).

Again to be clear: traceroute shows routers along the path to the destination (OpenWrt.org) - therefore:

This can't be your PC.

  • Your first post had no Wireguard configuration
  • Your new config is significantly different from first posting

It really looks like you posted a default configuration - but described an issue involving the latter.

  • Please allow time to re-read and un-confuse
  • Please provide a traceroute using the correct configuration