I have a google wifi mesh set up on 192.168.10.0/24 and my wired devices are on the default 192.168.1.0/24 from the BGW320. I can't get devices to ping from the wired side, but I can ping the wired devices from the wireless side.
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdaa:9f85:6010::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan'
option promisc '0'
option acceptlocal '0'
config device
option name 'lan'
option macaddr 'xxxxx'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.10.1'
option netmask '255.255.255.0'
option ip6assign '60'
config device
option name 'wan'
option macaddr 'xxxxx'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
config route
option interface 'loopback'
option target '192.168.10.0/24'
option gateway '192.168.1.196'
option type 'multicast'
Here's the packet filter config on the BGW320
Here's the pings
brada4
October 5, 2024, 7:26pm
2
Two lines clash?
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
ubus call system board
{
"kernel": "5.15.150",
"hostname": "Phasma",
"system": "ARMv7 Processor rev 5 (v7l)",
"model": "Google WiFi (Gale)",
"board_name": "google,wifi",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "23.05.3",
"revision": "r23809-234f1a2efa",
"target": "ipq40xx/chromium",
"description": "OpenWrt 23.05.3 r23809-234f1a2efa"
}
}
cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdaa:9f85:6010::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan'
option promisc '0'
option acceptlocal '0'
config device
option name 'lan'
option macaddr 'xxxxxx'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.10.1'
option netmask '255.255.255.0'
option ip6assign '60'
config device
option name 'wan'
option macaddr 'xxxxxx'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
config route
option interface 'loopback'
option target '192.168.10.0/24'
option gateway '192.168.1.196'
option type 'multicast'
cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/a000000.wifi'
option channel '3'
option band '2g'
option htmode 'HT20'
option txpower '30'
option cell_density '0'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'Darkside'
option encryption 'psk2'
option key 'xxxxxxxx'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/a800000.wifi'
option channel '149'
option band '5g'
option htmode 'VHT80'
option cell_density '0'
option txpower '30'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'Darkside5'
option encryption 'psk2'
option key 'xxxxxxx'
config wifi-iface 'wifinet2'
option device 'radio0'
option mode 'mesh'
option encryption 'sae'
option mesh_id 'Vader'
option mesh_fwding '1'
option mesh_rssi_threshold '0'
option key 'xxxxx'
option network 'lan'
config wifi-iface 'wifinet3'
option device 'radio1'
option mode 'mesh'
option encryption 'sae'
option mesh_id 'Vader5'
option mesh_fwding '1'
option mesh_rssi_threshold '0'
option network 'lan'
option key 'xxxxxxx'
option disabled '1'
cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option nonwildcard '1'
option localservice '1'
option ednspacket_max '1232'
option filter_aaaa '0'
option filter_a '0'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
cat /etc/config/firewall
config defaults
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option synflood_protect '1'
option flow_offloading '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
option mtu_fix '1'
list network 'wan'
list network 'wan6'
option masq '1'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'xbox1'
list proto 'udp'
option src 'wan'
option src_dport '88'
option dest_ip '192.168.10.159'
option dest_port '88'
config redirect
option dest 'lan'
option target 'DNAT'
option src 'wan'
option src_dport '3074'
option dest_ip '192.168.10.159'
option dest_port '3074'
option name 'xbox2'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'xbox3'
option src 'wan'
option src_dport '53'
option dest_ip '192.168.10.159'
option dest_port '53'
config redirect
option dest 'lan'
option target 'DNAT'
list proto 'tcp'
option src 'wan'
option src_dport '80'
option dest_ip '192.168.10.159'
option dest_port '80'
option name 'xbox4'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'xbox5'
list proto 'udp'
option src 'wan'
option src_dport '500'
option dest_ip '192.168.10.159'
option dest_port '500'
config redirect
option dest 'lan'
option target 'DNAT'
list proto 'udp'
option src 'wan'
option src_dport '3544'
option dest_ip '192.168.10.159'
option dest_port '3544'
option name 'xbox7'
config redirect
option dest 'lan'
option target 'DNAT'
option name 'xbox6'
list proto 'udp'
option src 'wan'
option src_dport '4500'
option dest_ip '192.168.10.159'
option dest_port '4500'
config forwarding
option src 'wan'
option dest 'lan'
brada4
October 5, 2024, 7:58pm
4
You need to add route in your router and disable w`n masquerade for bidirectional forwarding.
I have this route already?
brada4
October 5, 2024, 8:06pm
6
Should be unicast for starters.
1 Like
_bernd
October 5, 2024, 8:52pm
7
Shouldn't the interface the actual interface where the gateway is reachable aka where 192.168.1.0/24 is assigned?@brada4 mentioned, the type should be unicast or just not specified.
1 Like
Anyone else able to assist me with solving this? It is frustrating I can ping vlan1 from vlan10 but not the other way around.
What VLANs - I guess you're just referring to the IP scheme of 192.168.1.0 and 192.168.10.0?
Since there's no VLANs specified in your config, where are you testing when you say you've tested ping "from VLAN 10" and "from VLAN 1" ?
As already noted, this route is incorrect for multiple reasons.
The network exists on lan (PHY br-lan), not lo
The router already has a route for 192.168.10.0/24 - on LAN
The IP 192.168.1.196 is not on lo (in fact, I don't see this network listed anywhere in your config, maybe it's WAN?)
The route should be unicast, not mulitcast
It's unclear why you created this bad route.
