Hi Openwrt,
I am new to openwrt, I am trying to establish a router using raspberry PI-4 B board with the help of openwrt.
I have successfully able to flash the openwrt image for the board and connect to the board console using ssh.
I have made few changes in the network and firewall which are as shown below:
/etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd73:8fe6:5485::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth0'
list ports 'wlan0'
list ports 'wlan1'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '16.19.98.2'
option netmask '255.255.255.0'
option ip6assign '60'
option force_link '1'
config interface 'wwan'
option proto 'dhcp'
option peerdns '0'
option dns '1.1.1.1 8.8.8.8'
/etc/config/firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
list network 'wan6'
list network 'wwan'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fc00::/6'
option dest_ip 'fc00::/6'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config rule
option name 'Support-UDP-Traceroute'
option src 'wan'
option dest_port '33434:33689'
option proto 'udp'
option family 'ipv4'
option target 'REJECT'
option enabled 'false'
config include
option path '/etc/firewall.user'
Later in LUCI I have configured the wireless with my home network and was able to establish network and via LAN cable i was able to get internet support.
Further I have bought a TPLINK AC600 WIFI adapter for which I have installed kmod-rtl8812au-ct package and was able to get IP address using ifconfig wlan1 192.168.100.1 up. Down mentioned the details of if config:
br-lan Link encap:Ethernet HWaddr DC:A6:32:AE:81:F7
inet addr:16.19.98.2 Bcast:16.19.98.255 Mask:255.255.255.0
inet6 addr: fd73:8fe6:5485::1/60 Scope:Global
inet6 addr: fe80::dea6:32ff:feae:81f7/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:39749 errors:0 dropped:0 overruns:0 frame:0
TX packets:97456 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4025762 (3.8 MiB) TX bytes:124272521 (118.5 MiB)
eth0 Link encap:Ethernet HWaddr DC:A6:32:AE:81:F7
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:39939 errors:0 dropped:0 overruns:0 frame:0
TX packets:97456 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4593134 (4.3 MiB) TX bytes:124272521 (118.5 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:1751 errors:0 dropped:0 overruns:0 frame:0
TX packets:1751 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:144069 (140.6 KiB) TX bytes:144069 (140.6 KiB)
wlan0 Link encap:Ethernet HWaddr DC:A6:32:AE:81:F8
inet addr:192.168.0.103 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::dea6:32ff:feae:81f8/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:105049 errors:0 dropped:0 overruns:0 frame:0
TX packets:33620 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:122329968 (116.6 MiB) TX bytes:4461571 (4.2 MiB)
wlan1 Link encap:Ethernet HWaddr 5C:62:8B:76:5A:58
inet addr:192.168.100.1 Bcast:192.168.100.255 Mask:255.255.255.0
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
at the end my wireless configuration looks like below in which I have manually changed the encryption, SSID and KEY
/etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option channel '7'
option hwmode '11g'
option path 'platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1'
option htmode 'HT20'
option disabled '0'
option short_gi_40 '0'
option cell_density '0'
config wifi-iface 'wifinet1'
option device 'radio0'
option mode 'sta'
option network 'wwan'
option ssid '*****************'
option encryption 'psk2'
option key '*****************'
config wifi-device 'radio1'
option type 'mac80211'
option channel '36'
option hwmode '11a'
option htmode 'HT20'
option path 'scb/fd500000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0/usb1/1-1/1-1.4/1-1.4:1.0'
option disabled '0'
option short_gi_40 '0'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid '**************'
option encryption 'psk2'
option key '**************'
I am trying to scan for the WIFI name in my mobile but it dosent show's up can any one help me to configure the access point.