Opkg update Issue

Installing and Using OpenWrt
1

I am a beginner & using a Linksys WRT3200ACM & I flashed file; openwrt-24.10.4-mvebu-cortexa9-linksys_wrt3200acm-squashfs-factory.img
and it worked great and now i have;
OpenWRT Firmware Version: OpenWrt 24.10.4 r28959-29397011cc / LuCI openwrt-24.10 branch 25.292.66247~74e41cb

I then tried using the UI to follow Mullvad VPN Steps yet failed, so then i went to OpenWRT and followed the following steps;

  1. SYSTEM - ADMIN - SSH ACCESS - INTERFACE = I changed this to lan the Save & Apply.
  2. SYSTEM - SOFTWARE - UPDATE LISTS = yet this failed ultimately as; "The opkg update command failed with code 7."
  3. I then tried to use the Download & Install Package on the UI and again this failed, so then i went to "CONFIGURE OPKG" and tested in a browser every URL and all connected fine.
  4. I then went to NETWORK - INTERFACES = I then Disabled and deleted IPV6 as i dont have any ISP etc using IPV6 then i rebooted & re-tested yet to no avail.
  5. I then opened up the CLI and typed; ssh root@192.168.1.1 and logged in and then typed ping 1.1.1.1 and all was pinging.
  6. then i typed; opkg update & it Failed as following response;
    root@OpenWrt:~# opkg update
    Downloading https://downloads.openwrt.org/releases/24.10.4/targets/mvebu/cortexa9/packages/Packages.gz
    Failed to send request: Operation not permitted
    *** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/targets/mvebu/cortexa9/packages/Packages.gz
2

Downloading https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/base/Packages.gz
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/base/Packages.gz

Downloading https://downloads.openwrt.org/releases/24.10.4/targets/mvebu/cortexa9/kmods/6.6.110-1-0a0bf8358eff18b8c118787b94fe51ba/Packages.gz
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/targets/mvebu/cortexa9/kmods/6.6.110-1-0a0bf8358eff18b8c118787b94fe51ba/Packages.gz

Downloading https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.gz
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/luci/Packages.gz

Downloading https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/packages/Packages.gz
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/packages/Packages.gz

3

Downloading https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/routing/Packages.gz
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/routing/Packages.gz

Downloading https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.gz
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/24.10.4/packages/arm_cortex-a9_vfpv3-d16/telephony/Packages.gz

Collected errors:

4

How is this device connected to the internet? Is it directly connected via the wan port? Or maybe via the lan port to an upstream router (for use as a bridged AP)? Or some other connection?

Let's see your complete config.

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):

Screenshot 2025-10-20 at 8.14.14 PM

Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
5

root@OpenWrt:~#

root@OpenWrt:~# opkg install luci
Package luci installed in root is up to date.
root@OpenWrt:~#

yet the issue with OPKG seems to be ongoing & i have no idea how to fix, please help me?

6

The issue is your config/network, as indicted:

Take a deep breath, post the info requested.

1 Like
7

I dont understand the left/right arrows you mention nor what to do with them?
I am only ever on hardwire.
ISP ROUTER Ethernet CONNECTS to WAN of the WRT3200ACM then LAN from there to Laptop.

root@OpenWrt:~#** ubus call system board
{
	"kernel": "6.6.110",
	"hostname": "OpenWrt",
	"system": "ARMv7 Processor rev 1 (v7l)",
	"model": "Linksys WRT3200ACM",
	"board_name": "linksys,wrt3200acm",
	"rootfs_type": "squashfs",
	"release": {
		"distribution": "OpenWrt",
		"version": "24.10.4",
		"revision": "r28959-29397011cc",
		"target": "mvebu/cortexa9",
		"description": "OpenWrt 24.10.4 r28959-29397011cc",
		"builddate": "1760891865"
	}
}
root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'f********************
	option packet_steering '1'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'

config device
	option name 'wan'
	option macaddr 'e*******************

config interface 'wan'
	option device 'wan'
	option proto 'dhcp'

**root@OpenWrt:~#** cat /etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'soc/soc:pcie/pci0000:00/0000:00:01.0/0000:01:00.0'
	option band '5g'
	option channel '36'
	option htmode 'VHT80'
	option disabled '1'
	option country 'FR'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'
	option macaddr 'e*****************

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'soc/soc:pcie/pci0000:00/0000:00:02.0/0000:02:00.0'
	option band '2g'
	option channel '1'
	option htmode 'VHT20'
	option disabled '1'
	option country 'FR'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'
	option macaddr 'e**************

config wifi-device 'radio2'
	option type 'mac80211'
	option path 'platform/soc/soc:internal-regs/f1********.sdhci/mmc_host/mmc0/mmc0:0001/mmc0:0001:1'
	option band '5g'
	option channel '34'
	option htmode 'VHT80'
	option disabled '1'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'

**root@OpenWrt:~#** cat /etc/config/dhcp

config dnsmasq
	option domainneeded '1'
	option boguspriv '1'
	option filterwin2k '0'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option nonegcache '0'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option nonwildcard '1'
	option localservice '1'
	option ednspacket_max '1232'
	option filter_aaaa '0'
	option filter_a '0'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	option ra_slaac '1'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'
	option piofolder '/tmp/odhcpd-piofolder'

**root@OpenWrt:~#** cat /etc/config/firewall

config defaults
	option syn_flood '1'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	list network 'lan'

config zone
	option name 'wan'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'
	list network 'wan'

config forwarding
	option src 'lan'
	option dest 'wan'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'router-advertisement'
	list icmp_type 'neighbour-advertisement'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

root@OpenWrt:~#
8

It's a button on top of the message window, as shown in the tiny screen shot.

What are the 1st two digits of the WAN port IP ?

9

but what do i do with it etc?

10

I fixed the formatting for you. Next time, be sure to click the </> button in the formatting bar and then paste your config/log output into the section that says (between the three backticks (```):

type or paste code here

Meanwhile, the config itself looks fine, but as @frollic indicated, there could be an issue with overlapping subnets. Since you're connected to an upstream ISP router, chances are that this address is could conflict:

ifstatus wan | grep address

What is the output of that above command (if it begins with anything other than 192.168, 172.16-31 or 10., only post the first two octets in bold: aaa.bbb.ccc.ddd){

1 Like
11

Make sure your wan connection (upstream) is not 192.168.1.X.

nslookup downloads.openwrt.org

ping -4 downloads.openwrt.org

ping -6 downloads.openwrt.org

12 
ipv4-address 192.168

Theres nothing for the IPV6

13

Since it's not public, you can post the full IP.

Try disabling the wan6 interface too.

14 
root@OpenWrt:~# nslookup downloads.openwrt.org
;; connection timed out; no servers could be reached

root@OpenWrt:~# ping -4 downloads.openwrt.org
ping: bad address 'downloads.openwrt.org'
root@OpenWrt:~# ping -6 downloads.openwrt.org
ping: bad address 'downloads.openwrt.org'
root@OpenWrt:~#
15

What is the complete output of ifstatus wan (this is safe to post because we know that the wan does not have a public IP on it).

16

how do i know if its public or not?
how to disable WAN6 as i thought i already did in the UI before?

17 
192.168
18

Because we told you ?
Google "192.168 subnet".

The WAN IP and LAN subnet overlap.

Change the LAN side IP and the problem's solved.

19

how do you know that and how do i know what to change what to and where to do it, do you mean the router main ip adress?

20

This should help:

I'd recommend that you change the lan IP to something like 192.168.23.1 (the .23 part is somewhat arbitrary, but must be between 0 and 255, and must avoid 1 because of the fact that it conflicts with the upstream network).

1 Like