OpenWrt One update from 24.10.6 to 25.12.2 no IP assigned

Installing and Using OpenWrt Network and Wireless Configuration
1

Hey

I have 3 openwrt router and two of them updated just fine. The third one is a bit more configuration involved, mainly to pass on VLANS.

After the update there is no IP assigned for the OpenWrt One router. So might be an DHCP issue but I haven’t figured it out yet. Could be also related to the VLAN configuration.

I’ll leave the configs below. Maybe someone had the issue as well?

OpenWrt One:

{
        "kernel": "6.6.127",
        "hostname": "OpenWrt-One",
        "system": "ARMv8 Processor rev 4",
        "model": "OpenWrt One",
        "board_name": "openwrt,one",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "24.10.6",
                "revision": "r29141-81be8a8869",
                "target": "mediatek/filogic",
                "description": "OpenWrt 24.10.6 r29141-81be8a8869",
                "builddate": "1773709139"
        }
}

DHCP:

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'
        option filter_aaaa '0'
        option filter_a '0'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config dhcp 'one'
        option interface 'one'
        option start '100'
        option limit '150'
        option leasetime '12h'

config dhcp 'one_only'
        option interface 'one_only'
        option start '100'
        option limit '150'
        option leasetime '12h'

firewall:

config defaults
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'
        list network 'wan6'

config rule
        option src 'wan'
        option name 'Allow HTTP, HTTPS from WAN'
        list proto 'tcp'
        option dest_port '80 443'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config redirect
        option target 'DNAT'
        list proto 'tcp'
        option src 'wan'
        option src_dport '38745'
        option dest_ip '192.168.1.1'
        option dest_port '38745'
        option name 'Allow ssh on wan'

config zone
        option name 'one_only'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'one_only'

config forwarding
        option src 'one_only'
        option dest 'wan'

network:

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdd5:cea4:57d9::/48'
        option packet_steering '1'

config device
        option name 'VLANS'
        option type 'bridge'
        list ports 'eth0'
        list ports 'eth1'

config bridge-vlan
        option device 'VLANS'
        option vlan '1'
        list ports 'eth0:t'
        list ports 'eth1:t'

config bridge-vlan
        option device 'VLANS'
        option vlan '3'
        list ports 'eth0:u*'

config bridge-vlan
        option device 'VLANS'
        option vlan '50'
        list ports 'eth0:t'
        list ports 'eth1:t'

config bridge-vlan
        option device 'VLANS'
        option vlan '55'
        list ports 'eth0:t'
        list ports 'eth1:t*'

config bridge-vlan
        option device 'VLANS'
        option vlan '80'
        list ports 'eth0:t'
        list ports 'eth1:t'

config interface 'one_only'
        option proto 'static'
        option device 'VLANS.1'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        list dns '192.168.50.215'

config interface 'private50'
        option proto 'none'
        option device 'VLANS.50'

config interface 'checks'
        option proto 'none'
        option device 'VLANS.55'

config interface 'IoT80'
        option proto 'none'
        option device 'VLANS.80'

config interface 'wan'
        option device 'VLANS.3'
        option proto 'dhcp'

config interface 'wan6'
        option device 'VLANS.3'
        option proto 'dhcpv6'

So once I update to the latest version 25.12.2 I’m also not able to connect directly or via switch to the device anymore.

As I mentioned above, it might be related to the VLANS and/or DHCP configuration. Both ports are VLAN tagged.

Thanks!

2

The problem has nothing to do with the update. The issue is instead with the firewall config. You do not allow input from the one_only network and the one network doesn’t isn’t associated with a firewall zone.

3

Thanks!

I’ll test it once the issue OSError: [Errno 28] No space left on device: '/srv/store/…' is solved.

The one network is probably something related from some setups before one_only. I got rid off it.

Didn’t noticed the input reject option. Thanks. Need to allow dhcp. Just wondering why does it work this way on v24.10.6 but not with v25.12.2?

Edit:

I just installed the squashfs-sysupgrade file and restored the backup with the same issue. I think its something else. The switch at least works though.

4

You linked another thread - can you show the post(s) that discuss the issue?

5

Nah, it’s the right one LuCI Attended Sysupgrade support thread - #791 by BIGFAT. Just scroll to the bottom. Just a few ran into that issue.

This is probably a similar one Can't upgrade 25.10.0 on WRT32X

Edit:

But it seems to be solved anyway. I can also use the firmware-selector again which ran into the same issue.

6

It's over 700 posts. Surely you jest.

Cool.

I see now, this is an error on the server. That wasn't clear initially. Thanks for the clarification.

7

Hehe, nope no jest. That’s actually poping up if you run into that issue via sysupgrade. There is this link LuCI Attended Sysupgrade support thread - #791 by BIGFAT to get support.

Yeah, I thought an issue on the device itself but makes totally sense.