Hi all!
I have installed Openwrt 23.05 on a ZyXEL WSM20.
This will only work as a plain basic dumb AP (wired Lan to router).
The router it's a ISP router and gateway and I cannot touch on any settings...
my settings on my openwrt
/etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdfd:3eef:69ce::/48'
option packet_steering '1'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'wan'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.21'
option netmask '255.255.255.0'
option gateway '192.168.1.254'
option broadcast '192.168.1.255'
list dns '1.1.1.1'
list dns '8.8.8.8'
option delegate '0'
/etc/config/wireless
config wifi-device 'radio1'
option type 'mac80211'
option path '1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0+1'
option channel '40'
option band '5g'
option htmode 'HE80'
option txpower '20'
option cell_density '0'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'MySSID'
option encryption 'psk-mixed'
option key 'test123456'
On the associated stations, I don't have the ipv4 ip... only ipv6, but I don't want to bypass or use the ipv6 from the router...
Can anyone see if the settings are ok and what to do to avoid ipv6?
Thanks
did you disable dhcp on dump-ap?
post your /etc/config/dhcp
as for the IPs, if dnsmasq (DHCP) is disabled, they're coming from your main router, the WSM20 have nothing to do with them.
also, don't use psk-mixed as encryption.
1 Like
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option nonwildcard '1'
option localservice '1'
option ednspacket_max '1232'
option filter_aaaa '0'
option filter_a '0'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
wich one to use it, instead psk-mixed?
frollic
October 16, 2024, 10:04am
6
PSK-WPA3 provides the highest security, but not all devices like it.
that is why I have choosen this, cause to have the same Encryption as the router...
frollic
October 16, 2024, 10:22am
8
does the router really have mixed?
and why is it important to have the same as the router ?
older people that use
Once config the same ssid and key, they move all around the house with no need to change...
frollic
October 16, 2024, 10:28am
10
you can obviously have same SSID and pass with different encryption...
yes, I know, but with iOS devices we "buy problems"
in this house, all of them have iOS, some brand new (iPhone 15), and others really old ones, like iPhone 7...
With this, so far it's TOP
frollic
October 16, 2024, 10:31am
12
IOS doesn't like PSK-mixed, AFAIK, but hey, if it works, it works.
1 Like
So, with this associated stations, I can not see the ipv4 ip?
frollic
October 16, 2024, 10:42am
14
are you sure your clients get an ipv4 IP from your main router ?
Make sure dnsmasq, firewall and odhcpd aren't running on the AP, disable in system > startup and make sure it survives upgrades by putting this into rc.local:
for i in firewall dnsmasq odhcpd; do
if /etc/init.d/"$i" enabled; then
/etc/init.d/"$i" disable
/etc/init.d/"$i" stop
fi
done
2 Likes
for sure they receive ipv4 ip's
evs
October 16, 2024, 11:00am
17
If this is a dumb AP and the clients are getting the IP leases from the main ISP router, then if you want the hostnames/IP's to come up in the dumb AP, you'll need to do use ethers, or use fping and reverse DNS?
https://openwrt.org/docs/guide-user/network/wifi/wifiextenders/bridgedap#populate_hostnames_in_associated_stations
frollic
October 16, 2024, 11:03am
18
ah, ethers have to be populated to get the ipv4:s showing, didn't know this.
evs
October 16, 2024, 11:04am
19
Nah, ethers is to get the hostnames. Just a MAC to hostname lookup as the AP will have the MAC addresses as it's talking to it over wifi. No IP required.
Alternative is fping or populate arp table somehow and then get do reverse lookup on the main ISP router's DNS server if it does that.
frollic
October 16, 2024, 11:06am
20
indeed, but if I remove the name from the ethers entry, only leave the MAC, the ipv4 isn't shown anymore.
