PPPOE suddenly (constantly) disconnecting

Installing and Using OpenWrt
1

My PPPOE suddenly started dropping out this afternoon, I have made no changes on my side and no reported issues in my area - I have confirmed there is nothing wrong (as such) with the PPPOE coming into the house, as its working fine on my R7800 (Running DD-WRT).

The following happens whilst trying to connect:

It will attempt to connect, occasionally giving me "Error: Connection attempt failed" error.. It will then establish a connection (give me the WAN IP, etc), but within seconds disconnect.. It will then retry and a few minutes later make another connection... and so on..

I have enabled debugging for pppd and copied the relevant pppd log below - the disconnection happened as part of that log.

Setup:

Build: [OpenWrt SNAPSHOT (r27041-7686ce4a91)](https://openwrt.org/)
Hardware: Raspberry PI 5
Connection: TP-LINK UE300 USB 3.0 to Gigabit Ethernet Universal Adapter
Provider: Vodafone UK (Cityfibre)

Error Log: (IPs removed just in case.. XXX=Local IP, YYY=Remote IP)

Fri Aug  2 22:07:25 2024 daemon.debug pppd[31917]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:07:25 2024 daemon.debug pppd[31917]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:07:25 2024 daemon.debug pppd[31917]:  [service-name] [host-uniq  ad 7c 00 00]
Fri Aug  2 22:07:30 2024 daemon.debug pppd[31917]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:07:30 2024 daemon.debug pppd[31917]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:07:30 2024 daemon.debug pppd[31917]:  [service-name] [host-uniq  ad 7c 00 00]
Fri Aug  2 22:07:35 2024 daemon.warn pppd[31917]: Timeout waiting for PADO packets
Fri Aug  2 22:07:35 2024 daemon.err pppd[31917]: Unable to complete PPPoE Discovery
Fri Aug  2 22:07:35 2024 daemon.info pppd[31917]: Exit.
Fri Aug  2 22:07:35 2024 daemon.info pppd[32025]: Plugin pppoe.so loaded.
Fri Aug  2 22:07:35 2024 daemon.info pppd[32025]: PPPoE plugin from pppd 2.4.9
Fri Aug  2 22:07:35 2024 daemon.notice pppd[32025]: pppd 2.4.9 started by root, uid 0
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  [service-name] [host-uniq  19 7d 00 00]
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: Recv PPPOE Discovery V1T1 PADO session 0x0 length 49
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  dst 00:e0:4c:09:38:a0  src 20:e0:9c:0f:60:0b
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  [service-name] [AC-name SQYN02-BNG-C1] [host-uniq  19 7d 00 00] [AC-cookie  55 f2 c7 ae 39 64 c9 e2 2c 2e ad 1d 1d 17 c6 0a]
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: Send PPPOE Discovery V1T1 PADR session 0x0 length 32
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  dst 20:e0:9c:0f:60:0b  src 00:e0:4c:09:38:a0
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  [service-name] [host-uniq  19 7d 00 00] [AC-cookie  55 f2 c7 ae 39 64 c9 e2 2c 2e ad 1d 1d 17 c6 0a]
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: Recv PPPOE Discovery V1T1 PADS session 0x1884 length 12
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  dst 00:e0:4c:09:38:a0  src 20:e0:9c:0f:60:0b
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]:  [service-name] [host-uniq  19 7d 00 00]
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: PADS: Service-Name: ''
Fri Aug  2 22:07:35 2024 daemon.info pppd[32025]: PPP session is 6276
Fri Aug  2 22:07:35 2024 daemon.warn pppd[32025]: Connected to 20:e0:9c:0f:60:0b via interface eth1.911
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: using channel 6
Fri Aug  2 22:07:35 2024 daemon.info pppd[32025]: Using interface pppoe-wan
Fri Aug  2 22:07:35 2024 daemon.notice pppd[32025]: Connect: pppoe-wan <--> eth1.911
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: sent [LCP ConfReq id=0x1 <mru 1492> <magic 0x4297d464>]
Fri Aug  2 22:07:35 2024 daemon.debug pppd[32025]: rcvd [LCP ConfAck id=0x1 <mru 1492> <magic 0x4297d464>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [LCP ConfReq id=0x7d <mru 1492> <auth chap MD5> <magic 0x11dfe924>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [LCP ConfAck id=0x7d <mru 1492> <auth chap MD5> <magic 0x11dfe924>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [LCP EchoReq id=0x0 magic=0x4297d464]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [CHAP Challenge id=0x1 <c4307c2bdaac1f6ba0c4ad40535fe5cda9a3e6cb4a78c3716d484880395eba7e8e37a9e86448d3848d02c4e0e02b2f0ace16d5980e198a7b61527c9b>, name = "SQYN02-BNG-C1"]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [CHAP Response id=0x1 <fffbcf7af0e87454d85b276e9a77a0fa>, name = "##USERNAME##@broadband.vodafone.co.uk"]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [LCP EchoRep id=0x0 magic=0x11dfe924]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [CHAP Success id=0x1 "CHAP authentication success"]
Fri Aug  2 22:07:38 2024 daemon.info pppd[32025]: CHAP authentication succeeded: CHAP authentication success
Fri Aug  2 22:07:38 2024 daemon.notice pppd[32025]: CHAP authentication succeeded
Fri Aug  2 22:07:38 2024 daemon.notice pppd[32025]: peer from calling number 20:E0:9C:0F:60:0B authorized
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [IPV6CP ConfReq id=0x1 <addr fe80::b9b2:8a8c:f7df:499e>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [IPCP ConfReq id=0x5f <addr YYY.YYY.YYY.YYY>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [IPCP ConfAck id=0x5f <addr YYY.YYY.YYY.YYY>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [IPCP ConfNak id=0x1 <addr XXX.XXX.XXX.XXX> <ms-dns1 90.255.255.90> <ms-dns2 90.255.255.255>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: sent [IPCP ConfReq id=0x2 <addr XXX.XXX.XXX.XXX> <ms-dns1 90.255.255.90> <ms-dns2 90.255.255.255>]
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: rcvd [IPCP ConfAck id=0x2 <addr XXX.XXX.XXX.XXX> <ms-dns1 90.255.255.90> <ms-dns2 90.255.255.255>]
Fri Aug  2 22:07:38 2024 daemon.notice pppd[32025]: local  IP address XXX.XXX.XXX.XXX
Fri Aug  2 22:07:38 2024 daemon.notice pppd[32025]: remote IP address YYY.YYY.YYY.YYY
Fri Aug  2 22:07:38 2024 daemon.notice pppd[32025]: primary   DNS address 90.255.255.90
Fri Aug  2 22:07:38 2024 daemon.notice pppd[32025]: secondary DNS address 90.255.255.255
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: Script /lib/netifd/ppp-up started (pid 32376)
Fri Aug  2 22:07:38 2024 daemon.debug pppd[32025]: Script /lib/netifd/ppp-up finished (pid 32376), status = 0x1
Fri Aug  2 22:07:41 2024 daemon.debug pppd[32025]: sent [IPV6CP ConfReq id=0x1 <addr fe80::b9b2:8a8c:f7df:499e>]
Fri Aug  2 22:07:44 2024 daemon.debug pppd[32025]: sent [IPV6CP ConfReq id=0x1 <addr fe80::b9b2:8a8c:f7df:499e>]
Fri Aug  2 22:07:47 2024 daemon.debug pppd[32025]: sent [IPV6CP ConfReq id=0x1 <addr fe80::b9b2:8a8c:f7df:499e>]
Fri Aug  2 22:07:50 2024 daemon.debug pppd[32025]: sent [IPV6CP ConfReq id=0x1 <addr fe80::b9b2:8a8c:f7df:499e>]
Fri Aug  2 22:07:50 2024 daemon.info pppd[32025]: Terminating on signal 15
Fri Aug  2 22:07:50 2024 daemon.info pppd[32025]: Connect time 0.2 minutes.
Fri Aug  2 22:07:50 2024 daemon.info pppd[32025]: Sent 236 bytes, received 3349 bytes.
Fri Aug  2 22:07:50 2024 daemon.debug pppd[32025]: Script /lib/netifd/ppp-down started (pid 713)
Fri Aug  2 22:07:50 2024 daemon.debug pppd[32025]: sent [LCP TermReq id=0x2 "User request"]
Fri Aug  2 22:07:50 2024 daemon.debug pppd[32025]: Script /lib/netifd/ppp-down finished (pid 713), status = 0x1
Fri Aug  2 22:07:50 2024 daemon.debug pppd[32025]: rcvd [LCP TermAck id=0x2]
Fri Aug  2 22:07:50 2024 daemon.notice pppd[32025]: Connection terminated.
Fri Aug  2 22:07:50 2024 daemon.info pppd[32025]: Exit.
Fri Aug  2 22:07:54 2024 daemon.info pppd[2301]: Plugin pppoe.so loaded.
Fri Aug  2 22:07:54 2024 daemon.info pppd[2301]: PPPoE plugin from pppd 2.4.9
Fri Aug  2 22:07:55 2024 daemon.notice pppd[2301]: pppd 2.4.9 started by root, uid 0
Fri Aug  2 22:07:55 2024 daemon.debug pppd[2301]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:07:55 2024 daemon.debug pppd[2301]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:07:55 2024 daemon.debug pppd[2301]:  [service-name] [host-uniq  fd 08 00 00]
Fri Aug  2 22:08:00 2024 daemon.debug pppd[2301]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:08:00 2024 daemon.debug pppd[2301]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:08:00 2024 daemon.debug pppd[2301]:  [service-name] [host-uniq  fd 08 00 00]
Fri Aug  2 22:08:05 2024 daemon.debug pppd[2301]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:08:05 2024 daemon.debug pppd[2301]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:08:05 2024 daemon.debug pppd[2301]:  [service-name] [host-uniq  fd 08 00 00]
Fri Aug  2 22:08:10 2024 daemon.warn pppd[2301]: Timeout waiting for PADO packets
Fri Aug  2 22:08:10 2024 daemon.err pppd[2301]: Unable to complete PPPoE Discovery
Fri Aug  2 22:08:10 2024 daemon.info pppd[2301]: Exit.
Fri Aug  2 22:08:10 2024 daemon.info pppd[2377]: Plugin pppoe.so loaded.
Fri Aug  2 22:08:10 2024 daemon.info pppd[2377]: PPPoE plugin from pppd 2.4.9
Fri Aug  2 22:08:10 2024 daemon.notice pppd[2377]: pppd 2.4.9 started by root, uid 0
Fri Aug  2 22:08:10 2024 daemon.debug pppd[2377]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 22:08:10 2024 daemon.debug pppd[2377]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 22:08:10 2024 daemon.debug pppd[2377]:  [service-name] [host-uniq  49 09 00 00]
2

I set keepalive to "5 5" as suggested in one thread, and also tried to set "Force Link", which I found somewhere else..

The connection stayed up for 2 minutes this time and I got this in the log (drop out at 23:31:26)

Fri Aug  2 23:29:23 2024 daemon.info pppd[4721]: CHAP authentication succeeded: CHAP authentication success
Fri Aug  2 23:29:23 2024 daemon.notice pppd[4721]: CHAP authentication succeeded
Fri Aug  2 23:29:23 2024 daemon.notice pppd[4721]: peer from calling number 20:E0:9C:0F:60:0B authorized
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: sent [IPCP ConfReq id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns2 0.0.0.0>]
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: rcvd [IPCP ConfReq id=0x54 <addr YYY.YYY.YYY.YYY>]
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: sent [IPCP ConfAck id=0x54 <addr YYY.YYY.YYY.YYY>]
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: rcvd [IPCP ConfNak id=0x1 <addr XXX.XXX.XXX.XXX> <ms-dns1 90.255.255.255> <ms-dns2 90.255.255.90>]
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: sent [IPCP ConfReq id=0x2 <addr XXX.XXX.XXX.XXX> <ms-dns1 90.255.255.255> <ms-dns2 90.255.255.90>]
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: rcvd [IPCP ConfAck id=0x2 <addr XXX.XXX.XXX.XXX> <ms-dns1 90.255.255.255> <ms-dns2 90.255.255.90>]
Fri Aug  2 23:29:23 2024 daemon.notice pppd[4721]: local  IP address XXX.XXX.XXX.XXX
Fri Aug  2 23:29:23 2024 daemon.notice pppd[4721]: remote IP address YYY.YYY.YYY.YYY
Fri Aug  2 23:29:23 2024 daemon.notice pppd[4721]: primary   DNS address 90.255.255.255
Fri Aug  2 23:29:23 2024 daemon.notice pppd[4721]: secondary DNS address 90.255.255.90
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: Script /lib/netifd/ppp-up started (pid 5135)
Fri Aug  2 23:29:23 2024 daemon.notice netifd: Network device 'pppoe-wan' link is up
Fri Aug  2 23:29:23 2024 daemon.debug pppd[4721]: Script /lib/netifd/ppp-up finished (pid 5135), status = 0x1
Fri Aug  2 23:29:23 2024 user.notice firewall: Reloading firewall due to ifup of wan (pppoe-wan)
Fri Aug  2 23:29:23 2024 user.notice nlbwmon: Reloading nlbwmon due to ifup of wan (pppoe-wan)
Fri Aug  2 23:29:24 2024 user.notice pbr [2068]: Setting up routing for 'wan/pppoe-wan/YYY.YYY.YYY.YYY' [✓]
Fri Aug  2 23:29:24 2024 user.notice pbr [2068]: service (nft mode) started with gateways: wan/pppoe-wan/YYY.YYY.YYY.YYY [✓] wg0/0.0.0.0
Fri Aug  2 23:29:29 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:32 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:35 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:38 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:41 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:44 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:47 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:50 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:53 2024 daemon.debug pppd[4721]: sent [IPV6CP ConfReq id=0x1 <addr fe80::9945:6e18:57a9:a44a>]
Fri Aug  2 23:29:56 2024 daemon.warn pppd[4721]: IPV6CP: timeout sending Config-Requests
Fri Aug  2 23:31:26 2024 daemon.info pppd[4721]: Terminating on signal 15
Fri Aug  2 23:31:26 2024 daemon.info pppd[4721]: Connect time 2.0 minutes.
Fri Aug  2 23:31:26 2024 daemon.info pppd[4721]: Sent 1140269 bytes, received 5224770 bytes.
Fri Aug  2 23:31:26 2024 daemon.notice netifd: Network device 'pppoe-wan' link is down
Fri Aug  2 23:31:26 2024 daemon.debug pppd[4721]: Script /lib/netifd/ppp-down started (pid 7389)
Fri Aug  2 23:31:26 2024 daemon.debug pppd[4721]: sent [LCP TermReq id=0x2 "User request"]
Fri Aug  2 23:31:26 2024 daemon.debug pppd[4721]: rcvd [LCP TermAck id=0x2]
Fri Aug  2 23:31:26 2024 daemon.notice pppd[4721]: Connection terminated.
Fri Aug  2 23:31:26 2024 daemon.debug pppd[4721]: Script /lib/netifd/ppp-down finished (pid 7389), status = 0x1
Fri Aug  2 23:31:26 2024 daemon.info pppd[4721]: Exit.
Fri Aug  2 23:31:27 2024 daemon.info pppd[7762]: Plugin pppoe.so loaded.
Fri Aug  2 23:31:27 2024 daemon.info pppd[7762]: PPPoE plugin from pppd 2.4.9
Fri Aug  2 23:31:27 2024 daemon.notice pppd[7762]: pppd 2.4.9 started by root, uid 0
Fri Aug  2 23:31:27 2024 daemon.debug pppd[7762]: Send PPPOE Discovery V1T1 PADI session 0x0 length 12
Fri Aug  2 23:31:27 2024 daemon.debug pppd[7762]:  dst ff:ff:ff:ff:ff:ff  src 00:e0:4c:09:38:a0
Fri Aug  2 23:31:27 2024 daemon.debug pppd[7762]:  [service-name] [host-uniq  52 1e 00 00]
3

1st day on the month? i'd check the post box for bills.

4

Except the connection works fine when connected to another router, as mentioned in the original post.

5

Whats original post? Why you did not continue over there?

6

Sorry, Initial post, at the top of this page:

I have confirmed there is nothing wrong (as such) with the PPPOE coming into the house, as its working fine on my R7800 (Running DD-WRT).

Screenshot from DD-WRT router running happily with the PPPOE over night:
image

7

Try disabling IPv6 on the interface.

1 Like
8

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/dhcp
cat /etc/config/firewall
9

Please find output below.. For completeness, I am currently running (as temp workaround) the WAN off 192.168.0.2, in case you wonder why gateway is set to that IP, etc). Also build in this post is different than the first post, as I wanted to test an older build I had.

ubus call system board

root@RPi5:~# ubus call system board
{
        "kernel": "6.6.36",
        "hostname": "RPi5",
        "system": "ARMv8 Processor rev 1",
        "model": "Raspberry Pi 5 Model B Rev 1.0",
        "board_name": "raspberrypi,5-model-b",
        "rootfs_type": "ext4",
        "release": {
                "distribution": "OpenWrt",
                "version": "SNAPSHOT",
                "revision": "r26915-7a96d36188",
                "target": "bcm27xx/bcm2712",
                "description": "OpenWrt SNAPSHOT r26915-7a96d36188"
        }
}

cat /etc/config/network

root@RPi5:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix '#REDACTED#::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'
        list ports 'eth1'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.0.1'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option gateway '192.168.0.2'

config interface 'wan'
        option proto 'pppoe'
        option device 'eth1.911'
        option username '######@broadband.vodafone.co.uk'
        option password '#######'
        option ipv6 'auto'
        option metric '20'
        option keepalive '5 1'

config interface 'wg0'
        option proto 'wireguard'
        option private_key '#REDACTED#'
        list addresses '10.8.0.5/24'
        list dns '1.1.1.1'
        option metric '10'
        option route_allowed_ips '0'

config wireguard_wg0
        option description 'TAA'
        option public_key '#REDACTED#'
        option preshared_key '#REDACTED#'
        list allowed_ips '0.0.0.0/0'
        list allowed_ips '::/0'
        option endpoint_host '#REDACTED#'
        option endpoint_port '51820'
        option persistent_keepalive '25'

config interface 'wg_home'
        option proto 'wireguard'
        option private_key '#REDACTED#'
        option listen_port '51830'
        list addresses '10.0.0.1/24'

config wireguard_wg_home
        option description 'Client1'
        option public_key '#REDACTED#'
        option private_key '#REDACTED#'
        option preshared_key '#REDACTED#'
        list allowed_ips '10.0.0.2/32'
        option route_allowed_ips '1'
        option endpoint_host '#REDACTED#'
        option endpoint_port '51830'

config route
        option interface 'lan'
        option target '192.168.2.0/24'
        option gateway '192.168.0.2'

config wireguard_wg_home
        option description 'Client2'
        option public_key '#REDACTED#'
        option private_key '#REDACTED#'
        option preshared_key '#REDACTED#'
        option endpoint_host '#REDACTED#'
        option endpoint_port '51830'
        list allowed_ips '10.0.0.3/32'
        option route_allowed_ips '1'

config route
        option interface 'lan'
        option target '192.168.3.0/24'
        option gateway '192.168.0.3'

cat /etc/config/dhcp

root@RPi5:~# cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option localise_queries '1'
        option rebind_protection '0'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option cachesize '1000'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option localservice '1'
        option ednspacket_max '1232'
        option authoritative '1'
        option port '54'
        list server '192.168.0.1'
        option quietdhcp '1'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '99'
        option leasetime '12h'
        option dhcpv4 'server'
        list dhcp_option '6,192.168.0.1'
        list dhcp_option '3,192.168.0.1'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config domain
        option name 'ping-host'
        option ip '1.1.1.1'

cat /etc/config/firewall

root@RPi5:~# cat /etc/config/firewall

config defaults
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'
        list network 'wg_home'

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'Plex'
        list proto 'tcp'
        option src 'wan'
        option src_dport '32400'
        option dest_ip '192.168.0.8'
        option dest_port '32400'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'HTTPS'
        list proto 'tcp'
        option src 'wan'
        option src_dport '443'
        option dest_ip '192.168.0.8'
        option dest_port '443'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'HTTP'
        list proto 'tcp'
        option src 'wan'
        option src_dport '80'
        option dest_ip '192.168.0.8'
        option dest_port '80'


config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'WireguardNAS'
        option src 'wan'
        option src_dport '51820'
        option dest_ip '192.168.0.8'
        option dest_port '51820'

config zone
        option name 'wg0'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        list network 'wg0'
        option masq '1'

config forwarding
        option src 'lan'
        option dest 'wg0'

config redirect
        option dest 'lan'
        option target 'DNAT'
        option name 'wg'
        list proto 'udp'
        option src 'wan'
        option src_dport '51830'
        option dest_ip '10.0.0.1'
        option dest_port '51830'
10

What tools you used to connect pppoe? Luci does not add redundant default parameters.

11

Could you try disabling IPv6 on the wan link (just for testing) since it seems to fail there, but that might simply be a timing issue? Mind you, this is not intended as solution, just to see whether it is the IPv6 negotiations that cause the termination.

2 Likes
12

Made no difference..

On the wan I disabled "Obtain IPv6 address" and "Delegate IPv6 prefixes".

1 Like
13

I used Luci.. Is there are any default parameters in there (such as keepalive), it would have been added by me using nano, to try suggestions I've found.

The config I have been running successfully for the last 2 weeks is:

config interface 'wan'
        option proto 'pppoe'
        option device 'eth1.911'
        option username 'XXXX@broadband.vodafone.co.uk'
        option password 'XXXX'
        option ipv6 'auto'
        option metric '20'

I have restored my OpenWrt back to the last known good backup (2 weeks ago) just to be on the safe side, to rule out any changes to anything, but no luck.

14

Although I tried with keepalive set to "5 5" earlier, I have now set it to "10 10", and it has stayed connected for 1h 30min (and still connected).. Does this change make sense with the above log entries in mind? Would this potentially be the fix for my problems?

image
image835×137 4.19 KB

1 Like
15

It seems IPv6 negotiations were the canary not the root cause... something on the other side just seems to be a tad slow, so upping the keep alive interval seems fine... assuming that this reliably fixes the issue.

1 Like