[Solved] 24.10.0-rc2 on a Wavlink AC1800 and DHCP/setup issues

Installing and Using OpenWrt
1

Im new to OpenWRT, (been a pfsense user on PC hardware for years) I installed owrt on a wavlink device and was attempting to go through the setup but the wavlink device started ignoring/rejecting my pcs not not giving them DHCP addresses.

Ive got my Starlink Ethernet into the Wavlink AC1800 port and it seems completely random if I can connect a device to the wifi, and then I was able to see internet for a few moments, randomly on a few devices, then the wifi started acting up again, DHCP issues etc.

24.10.0-rc2 installed on WN573HX1 (wavlink ac1800) https://files.catbox.moe/h19m91.PNG

Right now I reset the device to fresh OpenWRT settings, and can access it with my laptop through the lan port.

Edit/Update of Process:

Fresh OpenWRT install on device.
Connect to device with lan port directly.
Create new WAN interface with DCHP server. (No issues at this step, I can connect and disconnect at will, can get ip address and can reconnect to Luci)
Turn on Wifi in wireless, basic settings. (No issues at this step, I can connect and disconnect at will, can get ip address and can reconnect to Luci) https://files.catbox.moe/40ymni.PNG

At this point I am confident the DHCP server is working correctly, I can connect lan port and get an ip and reach LUCI, I can connect to wifi and get ip address and reach LUCI.

Then I connect the Starlink ethernet cable to the Device, and everything goes wonky. I can no longer get an IP, I get an ipv6? Cant get to Luci (192.168.1.1) Last night it was very strange that some devices were connecting and come were not, and 'randomly' I was able to see the internet for a few moments, I was even able to pull up a live stream, then the wifi would disconnect me and would give me a bad dhcp and more of the same symptoms. https://files.catbox.moe/4yfgow.PNG https://files.catbox.moe/ml7bv3.PNG

I reset the device and unplug the Starlink ethernet cable, device boots and I can see and connect to wifi again with DHCP apparently working correctly.

2

I'm confused... why are you putting a DHCP server on a wan interface? This doesn't sound logical, but maybe I'm not understanding your config and intent.

Let's take a look at your configuration:

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
3

DHCP on Wan? Lol, that was my next thought but I didnt want to change anything because it appeared to be working correctly.

root@OpenWrt:~# ubus call system board
{
        "kernel": "6.6.63",
        "hostname": "OpenWrt",
        "system": "MediaTek MT7621 ver:1 eco:3",
        "model": "WAVLINK WL-WN573HX1",
        "board_name": "wavlink,wl-wn573hx1",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "24.10.0-rc2",
                "revision": "r28161-ea17e958b9",
                "target": "ramips/mt7621",
                "description": "OpenWrt 24.10.0-rc2 r28161-ea17e958b9",
                "builddate": "1733226068"
        }
}
root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdb6:e6f9:6b51::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'Wan'
        option proto 'dhcp'
        option device 'eth0'

root@OpenWrt:~# cat /etc/config/wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0'
        option band '2g'
        option channel '1'
        option htmode 'HE20'
        option cell_density '0'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt'
        option encryption 'none'

config wifi-device 'radio1'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0+1'
        option band '5g'
        option channel '36'
        option htmode 'HE80'
        option disabled '1'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt'
        option encryption 'none'

root@OpenWrt:~# cat /etc/config/dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'
        option filter_aaaa '0'
        option filter_a '0'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'
        option dhcpv6 'server'
        option ra 'server'
        option ra_slaac '1'
        list ra_flags 'managed-config'
        list ra_flags 'other-config'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

config dhcp 'Wan'
        option interface 'Wan'

root@OpenWrt:~# cat /etc/config/firewall
config defaults
        option syn_flood        1
        option input            REJECT
        option output           ACCEPT
        option forward          REJECT
# Uncomment this line to disable ipv6 rules
#       option disable_ipv6     1

config zone
        option name             lan
        list   network          'lan'
        option input            ACCEPT
        option output           ACCEPT
        option forward          ACCEPT

config zone
        option name             wan
        list   network          'wan'
        list   network          'wan6'
        option input            REJECT
        option output           ACCEPT
        option forward          REJECT
        option masq             1
        option mtu_fix          1

config forwarding
        option src              lan
        option dest             wan

# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
        option name             Allow-DHCP-Renew
        option src              wan
        option proto            udp
        option dest_port        68
        option target           ACCEPT
        option family           ipv4

# Allow IPv4 ping
config rule
        option name             Allow-Ping
        option src              wan
        option proto            icmp
        option icmp_type        echo-request
        option family           ipv4
        option target           ACCEPT

config rule
        option name             Allow-IGMP
        option src              wan
        option proto            igmp
        option family           ipv4
        option target           ACCEPT

# Allow DHCPv6 replies
# see https://github.com/openwrt/openwrt/issues/5066
config rule
        option name             Allow-DHCPv6
        option src              wan
        option proto            udp
        option dest_port        546
        option family           ipv6
        option target           ACCEPT

config rule
        option name             Allow-MLD
        option src              wan
        option proto            icmp
        option src_ip           fe80::/10
        list icmp_type          '130/0'
        list icmp_type          '131/0'
        list icmp_type          '132/0'
        list icmp_type          '143/0'
        option family           ipv6
        option target           ACCEPT

# Allow essential incoming IPv6 ICMP traffic
config rule
        option name             Allow-ICMPv6-Input
        option src              wan
        option proto    icmp
        list icmp_type          echo-request
        list icmp_type          echo-reply
        list icmp_type          destination-unreachable
        list icmp_type          packet-too-big
        list icmp_type          time-exceeded
        list icmp_type          bad-header
        list icmp_type          unknown-header-type
        list icmp_type          router-solicitation
        list icmp_type          neighbour-solicitation
        list icmp_type          router-advertisement
        list icmp_type          neighbour-advertisement
        option limit            1000/sec
        option family           ipv6
        option target           ACCEPT

# Allow essential forwarded IPv6 ICMP traffic
config rule
        option name             Allow-ICMPv6-Forward
        option src              wan
        option dest             *
        option proto            icmp
        list icmp_type          echo-request
        list icmp_type          echo-reply
        list icmp_type          destination-unreachable
        list icmp_type          packet-too-big
        list icmp_type          time-exceeded
        list icmp_type          bad-header
        list icmp_type          unknown-header-type
        option limit            1000/sec
        option family           ipv6
        option target           ACCEPT

config rule
        option name             Allow-IPSec-ESP
        option src              wan
        option dest             lan
        option proto            esp
        option target           ACCEPT

config rule
        option name             Allow-ISAKMP
        option src              wan
        option dest             lan
        option dest_port        500
        option proto            udp
        option target           ACCEPT


### EXAMPLE CONFIG SECTIONS
# do not allow a specific ip to access wan
#config rule
#       option src              lan
#       option src_ip   192.168.45.2
#       option dest             wan
#       option proto    tcp
#       option target   REJECT

# block a specific mac on wan
#config rule
#       option dest             wan
#       option src_mac  *
#       option target   REJECT

# block incoming ICMP traffic on a zone
#config rule
#       option src              lan
#       option proto    ICMP
#       option target   DROP

# port redirect port coming in on wan to lan
#config redirect
#       option src                      wan
#       option src_dport        80
#       option dest                     lan
#       option dest_ip          192.168.16.235
#       option dest_port        80
#       option proto            tcp

# port redirect of remapped ssh port (22001) on wan
#config redirect
#       option src              wan
#       option src_dport        22001
#       option dest             lan
#       option dest_port        22
#       option proto            tcp

### FULL CONFIG SECTIONS
#config rule
#       option src              lan
#       option src_ip   192.168.45.2
#       option src_mac  *
#       option src_port 80
#       option dest             wan
#       option dest_ip  194.25.2.129
#       option dest_port        120
#       option proto    tcp
#       option target   REJECT

#config redirect
#       option src              lan
#       option src_ip   192.168.45.2
#       option src_mac  *
#       option src_port         1024
#       option src_dport        80
#       option dest_ip  194.25.2.129
#       option dest_port        120
#       option proto    tcp
root@OpenWrt:~#
4

Whats so funny? The issue is your excess creativity, reset device and do not run dhcp server on wan again.

5

Please post your configs directly into this forum instead of using external sites.

6

done, posted settings are with the Starlink cable disconnected.

7

looks like your device is close enough to the defaults that it's easier just to reset it to defaults for a known good starting point.

1 Like
8

give me a min

9

Device reset, can connect to with lan and get local ip and LUCI

10

"Im new to OpenWRT"

11

ok... now, if you connect to your upstream (starlink), what is the output of the first to octets (in bold: aaa.bbb.ccc.ddd) of the following command:

ifstatus wan | grep address

Edit: nevermind, I see that this is a single port device.

12

note: there is only 1 lan port on this device. if I connect the starlink cable, I will be unable to connect to LUCI because I have not set up the wifi yet

13

Yeah, just figured this out.

What is your intent for this device? Do you want it to be a router/firewall, or do you want it to be an access point (AP) that provides wifi while the existing router does all the routing work?

14

Starlink > Device (is the AP and the Router)

The Starlink AP/router drops connection and has no option to connect to VPNs or manage firewall.

15

Ok.... go through this process:

  1. Configure wifi (set your country code, SSID, encryption type, passphrase, and then enable wifi)
  2. Connect to your router via wifi (physically disconnect the cable from your computer and use wifi to connect this router)
  3. We'll make a few small changes to your network config file. I need to see that file in its current/default state:
cat /etc/config/network
16

"cat /etc/config/network"

This will be with ssh? or luci? Im unfamiliar.

17

Please ssh into the device and issue that command. Post the output here.

18

created wifi, connected to wifi, stuck on ssh (public key) error, troubleshooting.

19

fixed. just enabled password. Note: Starlink cable is not connected yet

root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdc5:f557:1058::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

root@OpenWrt:~#
20

Ok... remove the lan port from the bridge and add a "bridge empty" line... the following will go from this:

To this:

config device
        option name 'br-lan'
        option type 'bridge'
        option bridge_empty '1'

Then create a wan interface exactly as shown below:

config interface 'wan'
        option device 'lan'
        option proto 'dhcp'

Restart once that is done. You'll connect for your computer again via wifi, and now you can connect your starlink router to the ethernet port.

Finally, we need to see output of the first to octets (in bold: aaa.bbb.ccc.ddd) of the following command (again via ssh):

ifstatus wan | grep address