OpenWRT One 5ghz no IP address

Installing and Using OpenWrt Network and Wireless Configuration
1

I just received my OpenWRT One and started configuring it. I am only using it as a WAP at the moment, so DHCP has been disabled, and DNS as well. (similar config on two existing OpenWRT devices).

Hostname OpenWrtOne
Model OpenWrt One
Architecture ARMv8 Processor rev 4
Target Platform mediatek/filogic
Firmware Version OpenWrt 25.12.4 r32933-4ccb782af7 / LuCI openwrt-25.12 branch 26.134.75701~cd18b8e
Kernel Version 6.12.87
Local Time May 18, 2026, 22:45:24 GMT+2

I got to the Wifi setup and created a 2.4Ghz SSID with WPA2-PSK/WPA3-SAE with no issues. it worked right away.

radio0

Type: MediaTek MT7981 802.11ax/b/g/n
Channel: 1 (2.412 GHz)
Country Code: DK
Noise: -86.00 dBm
TX Power: 20.00 dBm

SSID: Beaubatons
Mode: Master
BSSID: 20:05:B7:00:A1:A2
Encryption: mixed WPA2/WPA3 PSK, SAE (CCMP)
Associations: -

___

radio1

Type: MediaTek MT7981 802.11ac/ax/n
Channel: 120 (5.600 GHz)
Country Code: DK
Noise: -91.00 dBm
TX Power: 25.00 dBm

SSID: Owlery
Mode: Master
BSSID: 20:05:B7:00:A1:A9
Encryption: mixed WPA2/WPA3 PSK, SAE (CCMP)
Associations: -

And this is where the issue lies: all attempts to set up a 5Ghz SSID fail at the "getting IP" stage.

Only other thing is that I switched the ports to the 2.5Gbit is LAN and the 1Gbit is WAN (after first attempts at the Wifi)

the log is quite unhelpful to me:

[May 18, 2026, 22:17:23 GMT+2] daemon.info: hostapd: phy1-ap0: STA de:42:51:32:76:62 IEEE 802.11: authenticated
[May 18, 2026, 22:17:23 GMT+2] daemon.info: hostapd: phy1-ap0: STA de:42:51:32:76:62 IEEE 802.11: associated (aid 1)
[May 18, 2026, 22:17:23 GMT+2] daemon.notice: hostapd: phy1-ap0: AP-STA-CONNECTED de:42:51:32:76:62 auth_alg=open
[May 18, 2026, 22:17:23 GMT+2] daemon.info: hostapd: phy1-ap0: STA de:42:51:32:76:62 WPA: pairwise key handshake completed (RSN)
[May 18, 2026, 22:17:23 GMT+2] daemon.notice: hostapd: phy1-ap0: EAPOL-4WAY-HS-COMPLETED de:42:51:32:76:62
[May 18, 2026, 22:17:42 GMT+2] daemon.notice: hostapd: phy1-ap0: AP-STA-DISCONNECTED de:42:51:32:76:62

for comparison here is the 2.4Ghz log for a connection to that

[May 18, 2026, 22:40:23 GMT+2] daemon.info: hostapd: phy0-ap0: STA 0e:ed:f9:9a:f4:ee IEEE 802.11: associated (aid 1)
[May 18, 2026, 22:40:23 GMT+2] daemon.notice: hostapd: phy0-ap0: AP-STA-CONNECTED 0e:ed:f9:9a:f4:ee auth_alg=sae
[May 18, 2026, 22:40:23 GMT+2] daemon.info: hostapd: phy0-ap0: STA 0e:ed:f9:9a:f4:ee WPA: pairwise key handshake completed (RSN)
[May 18, 2026, 22:40:23 GMT+2] daemon.notice: hostapd: phy0-ap0: EAPOL-4WAY-HS-COMPLETED 0e:ed:f9:9a:f4:ee

Is this a known Issue I have been unable to find already documented?

2

Start by not using mixed wifi encryption.

3

Sole WPA2 or WPA3 acts the same - that was just the setting it was at when I wrote the post.

4

Let's take a look at the complete configuration:

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):

Screenshot 2025-10-20 at 8.14.14 PM

Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
5

ubus call system board

{
"kernel": "6.12.87",
"hostname": "OpenWrtOne",
"system": "ARMv8 Processor rev 4",
"model": "OpenWrt One",
"board_name": "openwrt,one",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "25.12.4",
"firmware_url": "``https://downloads.openwrt.org/``",
"revision": "r32933-4ccb782af7",
"target": "mediatek/filogic",
"description": "OpenWrt 25.12.4 r32933-4ccb782af7",
"builddate": "1778712129"
}
}

cat /etc/config/network

config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'

config globals 'globals'
option ula_prefix 'fdec:e04d:87c3::/48'
option dhcp_default_duid 'ffff'
option packet_steering '1'

config device
option name 'br-lan'
option type 'bridge'
list ports 'eth0'

config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.167'
option netmask '255.255.255.0'
option ip6assign '60'
option gateway '192.168.1.254'
option multipath 'off'
list dns '192.168.1.254'
list dns '8.8.8.8'
list dns '8.8.4.4'

config interface 'wan'
option device 'eth1'
option proto 'dhcp'

config interface 'wan6'
option device 'eth1'
option proto 'dhcpv6'

cat /etc/config/wireless

config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/18000000.wifi'
option band '2g'
option channel '1'
option htmode 'HE20'
option num_global_macaddr '7'
option cell_density '0'

config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'GreatHall'
option encryption 'sae-mixed'
option key 'something cryptic'
option ocv '0'

config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/18000000.wifi+1'
option band '5g'
option channel '120'
option htmode 'HE80'
option num_global_macaddr '7'
option cell_density '0'
option country 'DK'

config wifi-iface 'wifinet1'
option device 'radio1'
option mode 'ap'
option ssid 'Owlery'
option encryption 'psk2'
option key 'equally cryptic'
option wpa_disable_eapol_key_retries '1'

cat /etc/dhcp

cat: can't open '/etc/dhcp': No such file or directory

cat /etc/config/firewall

config defaults
	option syn_flood	1
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
# Uncomment this line to disable ipv6 rules
#	option disable_ipv6	1

config zone
	option name		lan
	list   network		'lan'
	option input		ACCEPT
	option output		ACCEPT
	option forward		ACCEPT

config zone
	option name		wan
	list   network		'wan'
	list   network		'wan6'
	option input		REJECT
	option output		ACCEPT
	option forward		REJECT
	option masq		1
	option mtu_fix		1

config forwarding
	option src		lan
	option dest		wan

# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
	option name		Allow-DHCP-Renew
	option src		wan
	option proto		udp
	option dest_port	68
	option target		ACCEPT
	option family		ipv4

# Allow IPv4 ping
config rule
	option name		Allow-Ping
	option src		wan
	option proto		icmp
	option icmp_type	echo-request
	option family		ipv4
	option target		ACCEPT

config rule
	option name		Allow-IGMP
	option src		wan
	option proto		igmp
	option family		ipv4
	option target		ACCEPT

# Allow DHCPv6 replies
# see https://github.com/openwrt/openwrt/issues/5066
config rule
	option name		Allow-DHCPv6
	option src		wan
	option proto		udp
	option dest_port	546
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-MLD
	option src		wan
	option proto		icmp
	option src_ip		fe80::/10
	list icmp_type		'130/0'
	list icmp_type		'131/0'
	list icmp_type		'132/0'
	list icmp_type		'143/0'
	option family		ipv6
	option target		ACCEPT

# Allow essential incoming IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Input
	option src		wan
	option proto	icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	list icmp_type		router-solicitation
	list icmp_type		neighbour-solicitation
	list icmp_type		router-advertisement
	list icmp_type		neighbour-advertisement
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

# Allow essential forwarded IPv6 ICMP traffic
config rule
	option name		Allow-ICMPv6-Forward
	option src		wan
	option dest		*
	option proto		icmp
	list icmp_type		echo-request
	list icmp_type		echo-reply
	list icmp_type		destination-unreachable
	list icmp_type		packet-too-big
	list icmp_type		time-exceeded
	list icmp_type		bad-header
	list icmp_type		unknown-header-type
	option limit		1000/sec
	option family		ipv6
	option target		ACCEPT

config rule
	option name		Allow-IPSec-ESP
	option src		wan
	option dest		lan
	option proto		esp
	option target		ACCEPT

config rule
	option name		Allow-ISAKMP
	option src		wan
	option dest		lan
	option dest_port	500
	option proto		udp
	option target		ACCEPT
6

This is missing the network...

you need to add:

option network 'lan'
7

Thank you. I didn't think to compare the configs. apparently configuring everything in LuCi is not always the operational way. I will be comparing the files more from now on.

8

LuCI should always present the option to connect an SSID with the network (in the Interface Configuration section)... are you seeing something different?

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks! :slight_smile:

9

By default it is, this was self-inflicted.

10

agreed. i will be more vigilant