Hello,
I've created a Guest WiFi using the tutorial on the Wiki and everything's fine, but I only get IPv4 address on a connected device, not IPv6.
This is on a Belkin RT3200 running OpenWRT SNAPSHOT r27722.:
{
"kernel": "6.6.54",
"hostname": "CharlieNet",
"system": "ARMv8 Processor rev 4",
"model": "Belkin RT3200 (UBI)",
"board_name": "linksys,e8450-ubi",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "SNAPSHOT",
"revision": "r27722-e00b6ba0c8",
"target": "mediatek/mt7622",
"description": "OpenWrt SNAPSHOT r27722-e00b6ba0c8"
}
}
/etc/config/network:
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option packet_steering '1'
option steering_flows '128'
option ula_prefix 'fd54:8b9a:84db::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
option peerdns '0'
list dns '1.1.1.1'
list dns '1.0.0.1'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
option reqaddress 'try'
option reqprefix 'auto'
option peerdns '0'
list dns '2606:4700:4700::1111'
list dns '2606:4700:4700::1001'
config device
option name 'wan'
config interface 'modem'
option proto 'static'
option device '@wan'
option ipaddr '192.168.100.2'
option netmask '255.255.255.0'
config interface 'guest'
option proto 'static'
option device 'wl0-ap1'
option ipaddr '192.168.2.1'
option netmask '255.255.255.0'
/etc/config/wireless:
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/18000000.wmac'
option band '2g'
option country 'PA'
option cell_density '0'
option noscan '1'
option htmode 'HT40'
option channel '11'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid '[redacted]'
option encryption 'psk2'
option key '[redacted]'
config wifi-device 'radio1'
option type 'mac80211'
option path '1a143000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
option band '5g'
option country 'PA'
option cell_density '0'
option htmode 'HE160'
option channel '52'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid '[redacted]'
option key '[redacted]'
option ieee80211r '1'
option mobility_domain '4f58'
option ft_over_ds '0'
option dtim_period '3'
option ieee80211k '1'
option time_advertisement '2'
option time_zone 'GMT-4'
option wnm_sleep_mode '1'
option bss_transition '1'
option encryption 'psk2+ccmp'
option skip_inactivity_poll '1'
option pmk_r1_push '1'
option nasid '[redacted]'
option r1_key_holder '[redacted]'
list r0kh '[redacted]'
list r0kh '[redacted]'
list r1kh '[redacted]'
list r1kh '[redacted]'
option ft_psk_generate_local '1'
config wifi-iface 'wifinet2'
option device 'radio0'
option mode 'ap'
option ssid 'CharlieGuests'
option encryption 'psk2'
option key '[redacted]'
option network 'guest'
/etc/config/firewall:
config defaults
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
option flow_offloading '1'
option flow_offloading_hw '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
list network 'wan6'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'Torrent'
option src 'wan'
option dest_ip '192.168.1.234'
option src_dport '63486'
option dest_port '63486'
list proto 'tcp'
list proto 'udp'
config zone
option name 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'guest'
config forwarding
option src 'guest'
option dest 'wan'
config rule
option name 'Guest DNS'
option src 'guest'
option dest_port '53'
option target 'ACCEPT'
config rule
option name 'Guest DHCP'
list proto 'udp'
option src 'guest'
option dest_port '67-68'
option target 'ACCEPT'
config rule
option name 'Guest ICMP'
option family 'ipv6'
list proto 'icmp'
option src 'guest'
option target 'ACCEPT'
list icmp_type 'echo-reply'
list icmp_type 'echo-request'
list icmp_type 'neighbour-advertisement'
list icmp_type 'neighbour-solicitation'
list icmp_type 'port-unreachable'
list icmp_type 'protocol-unreachable'
list icmp_type 'router-solicitation'
list icmp_type 'time-exceeded'
option limit '1000/second'
option limit_burst '100'
/etc/config/dhcp:
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
option ra_slaac '1'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
config domain
option name 'charlienetplus.lan'
option ip '192.168.1.2'
config domain
option name 'modem.lan'
option ip '192.168.100.1'
config host
option name '[redacted]'
option ip '192.168.1.234'
list mac '[redacted]'
config dhcp 'guest'
option interface 'guest'
option start '100'
option limit '150'
option leasetime '6h'
option ra 'server'
option dhcpv6 'server'
option ra_slaac '0'
list ra_flags 'other-config'
I know, I can connect to the internet with only IPv4, but I'd like to have IPv6, too.
If there's something else I need to change, I'd appreciate it.
Thanks in advance!