I have a configuration of 5 Openwrt Routers (4 Archer C7 v2, 1 Ubiquity), all setup as a dumb AP using the LAN ports to connect ot the network. 3 of these dumb APs have an additional Guest interface/network (br-guest) that uses a VLAN to connect to the Fritzbox. In normal operation everything works ok. However, If I try to download a new firmware using wget, or if I do an opkg update, It doesn´t work and I get an operation not permitted failure. Ping does work, so the DNS is not the issue. Anybody a clue what the problem could be? And how can I solve this?
What is the error code reported ?
view:
https://www.reddit.com/r/openwrt/comments/q9vy0c/the_opkg_update_command_failed_with_code_6_help/
Failed to send request: Operation not permitted
*** Failed to download the package list from https://downloads.openwrt.org/releases/23.05.2/targets/ath79/generic/packages/Packages.gz
Because it reports Failed to send request I think the command doesn´t know which interface to use for sending the request or it uses the wrong interface.
connect to router/device ssh and test:
traceroute -n downloads.openwrt.org
opkg_download: Failed to download https://downloads.openwrt.org/releases/23.05.2/packages/mips_24kc/telephony/Packages.gz, wget returned 4.
Strange, traceroute shows that my guest network is used for connecting downloads.openwrt.org. Should be my main network....
I use a log in page for the guest network. I disabled it and OPKG Update works!
However, I would like to use my main network (untagged), and not the guest network (VLAN 5)
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
Remember to redact passwords, MAC addresses and any public IP addresses you may have:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
Iĺl do later.; I disabled the firewall, and dhcp....
I think there are 2 ways to avoid this; 1. prioritization of my main network in the device IP config, or 2. use the firewall to prevent traffic from the device to the guest VLAN.
These are configurations that you have to decide on...
if you have solved this problem, close the post and if this router/device is an AC dump I recommend you read the relevant documentation.
What you want is to convert the router to a dumbAP.
The firewall option didn't work. I changed the prioritisation of the network by changing the gateway metric on both interfaces: main value 1, guest value 10. The lower metric is the preferred network. This solved the issue!
Thanks for the help! Traceroute put me on the right track.
1 Like
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.