Not able to ping lan router (also running openwrt)

Installing and Using OpenWrt Network and Wireless Configuration
1

my main router ip & gateway 192.168.1.1 (running openwrt 22.03.05, tplink archer c2600) the three routers are in a V topology. 2.4gh wifi ap is set to channel 6/20mhz.
i am pinging the two routers from luci's diagnostic section. one router pings fine, the other does not. im trying to figure out why.

secondary router 192.168.1.100 (running openwrt 22.03.5, tplink archer c7 v2)
responds to ping, connected via wifi 5g link to main router via client ap mode

third router 192.168.1.101 (running older last supported openwrt 17.01.7, dlink 615 c1) connected to main router by 2.4ghz via client ap mode, this router does not respond to ping. if i change main router's beacon from 100 to 50 or 25. pinging this router will respond with 40%-80% packet loss right after, then 2nd ping will go back to 100% packet loss. Im thinking the ping is not geting thru because the wireless link not waking up properly.
main router reports connection strength to third router as -42/-91 dBm @ 6.0 Mbits/s & 1.0 Mbits/s @20MHz, using wpa2-psk(aes)
any remedies to try?
maybe i need to force higher connection speeds?

cat /etc/config/network

config interface 'loopback'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
        option device 'lo'

config globals 'globals'
        option ula_prefix 'fd31:fb86:4901::/48'

config interface 'lan'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option _orig_ifname 'eth1 wlan0 wlan1'
        option _orig_bridge 'true'
        option ipaddr '192.168.0.1'
        option device 'br-lan'

config interface 'wan'
        option proto 'dhcp'
        option device 'eth0'

config interface 'wan6'
        option proto 'dhcpv6'
        option device 'eth0'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '1 2 3 4 6'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option ports '5 0'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth1'

cat /etc/config/wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option hwmode '11a'
        option path 'soc/1b500000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
        option htmode 'VHT80'
        option country 'CA'
        option cell_density '0'
        option distance '50'
        option channel '149'

config wifi-device 'radio1'
        option type 'mac80211'
        option hwmode '11g'
        option path 'soc/1b700000.pci/pci0001:00/0001:00:00.0/0001:01:00.0'
        option country 'CA'
        option cell_density '0'
        option htmode 'HT20'
        option channel '6'
        option distance '50'
        option beacon_int '100'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option mode 'ap'
        option ssid '2.4Gnetwork'
        option encryption 'psk2'
        option network 'lan'

config wifi-iface 'wifinet1'
        option device 'radio0'
        option mode 'ap'
        option ssid '5Gnetwork'
        option encryption 'psk2'
        option network 'lan'

cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option localservice '1'
        option nonwildcard '0'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'

config dhcp 'lan'
        option interface 'lan'
        option dhcpv6 'server'
        option ra 'server'
        option ra_management '1'
        option leasetime '48h'
        option start '10'
        option limit '200'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'

config host
        option name 'ArcherC7v2'
        option dns '1'
        option ip '192.168.0.100'

cat /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config include
        option path '/etc/firewall.user'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin0.1:60080'
        option family 'ipv4'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60080'
        option dest_ip '192.168.0.1'
        option dest_port '80'
        option src_ip '144.128.0.0/9'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin0.1:60080'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60080'
        option dest_ip '192.168.0.1'
        option dest_port '80'
        option src_ip '88.233.0.0/16'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin0.1:60080'
        list proto 'tcp'
        option src 'wan'
        option src_ip '44.114.0.0/16'
        option src_dport '60080'
        option dest_ip '192.168.0.1'
        option dest_port '80'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin1.1:60081'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60081'
        option dest_ip '192.168.0.100'
        option dest_port '80'
        option src_ip '144.128.0.0/9'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin1.1:60081'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60081'
        option dest_ip '192.168.0.100'
        option dest_port '80'
        option src_ip '88.233.0.0/16'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin1.1:60081'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60081'
        option dest_ip '192.168.0.100'
        option dest_port '80'
        option src_ip '44.114.0.0/16'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin2.1:60082'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60082'
        option dest_port '80'
        option dest_ip '192.168.0.101'
        option src_ip '144.128.0.0/9'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'webadmin2.1:60082'
        option family 'ipv4'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60082'
        option dest_ip '192.168.0.101'
        option dest_port '80'
        option src_ip '99.233.0.0/16'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'webadmin2.1:60082'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60082'
        option dest_ip '192.168.0.101'
        option dest_port '80'
        option src_ip '44.144.0.0/16'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option family 'ipv4'
        list proto 'tcp'
        option src 'wan'
        option dest_ip '192.168.0.1'
        option src_dport '60022'
        option dest_port '60022'
        option name 'WebAdmin0.1:60022'
        option src_ip '144.128.0.0/9'

config redirect
        option dest 'lan'
        option target 'DNAT'
        list proto 'tcp'
        option src 'wan'
        option dest_ip '192.168.0.100'
        option dest_port '22'
        option src_dport '60122'
        option name 'Webadmin:1.1:60122'
        option src_ip '144.128.0.0/9'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Webadmin2.2:60222'
        list proto 'tcp'
        option src 'wan'
        option src_dport '60222'
        option dest_ip '192.168.0.101'
        option dest_port '22'
        option src_ip '144.128.0.0/9'
2

Welcome to the community!

  • Why did you share the config of the main device?
  • I thought it was 192.168.1.101 with the issue, correct?

This seems odd.

You don't provide enough information:

  • If it's a client, is it connected by WWAN; does it have a firewall?
  • I would advise not entering a value less than 100
  • I believe 100 is the default Beacon Interval anyways

You have an IP mismatch between your post and the config:

  • To be clear, did you mean you main router is 192.168.0.1?
  • Can you verify the IPs you're testing

Kinda good you did provide the config.

1 Like
3
  • Why did you share the config of the main device?
  • I thought it was 192.168.1.101 with the issue, correct?
    i will connect to the router and upload the config, right now remotely i have no access as its denying any remote connections

thank you for your reply, you have a good eye, my mistake gateway ip is 192.168.0.1 not 192.168.1.1

You don't provide enough information:

  • If it's a client, is it connected by WWAN; does it have a firewall?

all the 3 routers have firewall enabled and dchp enabled with their own subnets, 2 satellite routers using ap-client mode in wifi to connect to the main gateway router, wan is shared by the gateway to the 2 other routers 192.168.100 & .101 in a V configuration, where 100 and 101 are the ends of the V, all the routers share the internet to other wifi client devices. i have setup one of the routers the same as the second router but one can be pinged from gateway the other cannot be pinged, both have internet currently.

i changed the distance on gateway router to 100 and cannot ping 192.168.0.101
changed the distance on gateway to 0 and could ping the first time, second test were all packet loss. it could be 0.101's wifi driver or something too.

4

for your main router, please provide the output of:

ubus call system board

Then for the one that isn't responding properly (192.168.0.101), please provide the following:

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
2 Likes
5

thank you for your input psherman,

settings for 192.168.0.101 (not responding router) settings
playing around with the two routers, i can ping from 192.168.0.101 to 192.168.0.1(gateway) no problems via luci, pinging the other way from gateway 0.1 to 0.101 occasionally works if i do an save and apply just before the ping command. but many of the pings are dropped. it seems like 0.101 does not answer to 0.1 packets if it is not already awake or expecting a packet from the gateway.

here are the requested settings info:

cat /etc/config/network

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'
config globals 'globals'
        option ula_prefix 'fdb8:4abc:e288::/48'
config interface 'lan'
        option type 'bridge'
        option ifname 'eth0'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option ipaddr '192.168.2.1'
        option gateway '192.168.0.1'
config interface 'wan'
        option ifname 'eth1'
        option proto 'dhcp'
config interface 'wan6'
        option ifname 'eth1'
        option proto 'dhcpv6'
config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'
config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '1 2 3 4 0'
config interface 'wwan'
        option proto 'dhcp'

cat /etc/config/wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option hwmode '11g'
        option path 'platform/ath9k'
        option country 'CA'
        option disabled '0'
        option channel 'auto'
        option distance '100'
        option htmode 'HT20'
config wifi-iface
        option device 'radio0'
        option mode 'ap'
        option ssid 'somebroadcastssid-ap'
        option network 'lan'
        option encryption 'psk2'
        option key 'somepassword'
config wifi-iface
        option network 'wwan'
        option encryption 'psk2'
        option device 'radio0'
        option mode 'sta'
        option ssid  'ssidofgatewayrouter'
        option key 'passwordofgatewayrouter'

cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.auto'
        option localservice '1'
config dhcp 'lan'
        option interface 'lan'
        option dhcpv6 'server'
        option ra 'server'
        option start '50'
        option limit '200'
        option leasetime '24h'
        option ra_management '1'
config dhcp 'wan'
        option interface 'wan'
        option ignore '1'
config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'

cat /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        option network 'lan'
config zone
        option name 'wan'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        option input 'ACCEPT'
        option network 'wan wan6 wwan'
config forwarding
        option src 'lan'
        option dest 'wan'
config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'
config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'
config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'
config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'
config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'
config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'
config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'
config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'
config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'
config include
        option path '/etc/firewall.user'

ubus call system board

{
        "kernel": "4.4.182",
        "hostname": "Dir615C1",
        "system": "Atheros AR9130 rev 2",
        "model": "D-Link DIR-615 rev. C1",
        "board_name": "dir-615-c1",
        "release": {
                "distribution": "LEDE",
                "version": "17.01.7",
                "revision": "r4030-6028f00df0",
                "codename": "reboot",
                "target": "ar71xx\/generic",
                "description": "LEDE Reboot 17.01.7 r4030-6028f00df0"
        }

The gateway 192.168.0.1 info: ubus call system board

{
        "kernel": "5.10.176",
        "hostname": "TplinkC2600",
        "system": "ARMv7 Processor rev 0 (v7l)",
        "model": "TP-Link Archer C2600",
        "board_name": "tplink,c2600",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "22.03.5",
                "revision": "r20134-5f15225c1e",
                "target": "ipq806x/generic",
                "description": "OpenWrt 22.03.5 r20134-5f15225c1e"
        }
}
6

Yikes... this is old. It has been EOL and unsupported for many years, and I don't recall the nuances of how to configure this version properly (there have been numerous changes to the syntax and the underlying operation). Further, this version has many known vunlerabilities and shouldn't be actively used anymore.

I would highly recommend considering retiring this device and obtaining a device that can run a modern version of OpenWrt.

2 Likes
7

One thing I do see that is wrong... remove the gateway from the lan interface...

3 Likes
8

thank you, i will try that, and see if it works.

9

i removed the gateway from the lan interface (from 192.168.0.101)
rebooted both routers
192.168.0.1 still could not ping 192.168.0.101 (192.168.2.1)
100% packets dropped, same as before

10

Maybe now would be a good time to upgrade to a more recent version of OpenWrt. You're running a very old version -- so old that there may be nuances that I'm not remembering and won't find.