I have a strange problem, I have only one PC connected to 2,5 Gb port on a GL-MT6000.
Have to set dns maually in (192.168.50.1) in lan-card and after that eveything start to working.
Have someone seen anything like this?
No.
Soory for the delay
I have tested and no differnce still no connection have to add dns (192.168.46.1) haven't tested any other dns.
My feeling is there is something with driver in openwrt, but i dont know.
It would be intresting if someelse can test this
octopus:
I use SNAPSHOT-25.12
Why?
Maybe consider reflashing to an official release.
I have set up a number of MT6000s and have one here on my desk. No problems connecting to any of the ethernet ports on any of them.
My feeling is that you have a problem with your configuration.
Starting from the original installed defaults, what have you changed?
bluewavenet:
My feeling is that you have a problem with your configuration.
Starting from the original installed defaults, what have you changed?
I have two instances of dnsmasq to get http-dns-crypt to working with dnssec.
and also running PolicyBaseRouting whis also could be the culpit
I changed to SNAPSHOT to test it there are any different but it's the same.
That might be a problem.
I agree with you.
How about you share your config?
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have.
ubus call system board
root@Defcon:~# ubus call system board
{
"kernel": "6.12.93",
"hostname": "Defcon",
"system": "ARMv8 Processor rev 4",
"model": "GL.iNet GL-MT6000",
"board_name": "glinet,gl-mt6000",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "25.12-SNAPSHOT",
"firmware_url": "https://downloads.openwrt.org/",
"revision": "r32985-8e7ae1b936",
"target": "mediatek/filogic",
"description": "OpenWrt 25.12-SNAPSHOT r32985-8e7ae1b936",
"builddate": "1781742430"
}
}
cat /etc/config/network
root@Defcon:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd65:35f6:a308::/48'
option packet_steering '2'
option steering_flows '128'
option dhcp_default_duid '00042dd21d271f624cdbbda4fb3ba54dd3a4'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
list ports 'lan5'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.46.1'
option netmask '255.255.255.0'
option ip6assign '64'
option multipath 'off'
list ip6class 'wan6'
option ip6hint '1'
config interface 'wan'
option device 'eth1'
option proto 'dhcp'
option ipv6 '1'
option dns_metric '10'
option multipath 'off'
option broadcast '1'
config interface 'wan6'
option device '@wan'
option proto 'dhcpv6'
option reqaddress 'force'
option reqprefix 'auto'
option multipath 'off'
option norelease '0'
option sourcefilter '0'
config interface 'TRB140'
option proto 'static'
option device '@wan'
option ipaddr '192.168.25.2'
option netmask '255.255.255.0'
option auto '0'
option multipath 'off'
config device
option type 'bridge'
option name 'br-guest'
option bridge_empty '1'
config interface 'guest'
option proto 'static'
option device 'br-guest'
option ipaddr '192.168.16.1'
option netmask '255.255.255.0'
option multipath 'off'
option ip6assign '64'
option ip6hint '2'
config interface 'vpnserver'
option proto 'none'
option device 'tun21'
config interface 'wgserver'
option proto 'wireguard'
option private_key '<redacted>'
list addresses '172.22.28.1/24'
list addresses 'fda9:65bd:f903::1/64'
option multipath 'off'
option listen_port '12345'
config wireguard_wgserver
option description 'johan24'
option public_key '<redacted>'
option private_key '<redacted>'
option preshared_key '<redacted>'
list allowed_ips '172.22.28.2/32'
list allowed_ips 'fda9:65bd:f903::2/128'
option persistent_keepalive '25'
option route_allowed_ips '1'
option endpoint_port '12345'
config wireguard_wgserver
option description 'johanlaptop'
option public_key '<redacted>'
option private_key '<redacted>'
option preshared_key '<redacted>'
list allowed_ips '172.22.28.3/32'
list allowed_ips 'fda9:65bd:f903::3/128'
option route_allowed_ips '1'
option persistent_keepalive '25'
option endpoint_port '12345'
option disabled '1'
config wireguard_wgserver
option description 'johanpc'
option public_key '<redacted>'
option private_key '<redacted>'
option preshared_key '<redacted>'
option route_allowed_ips '1'
option persistent_keepalive '25'
list allowed_ips '172.22.28.4/32'
list allowed_ips 'fda9:65bd:f903::4/128'
option endpoint_port '12345'
option disabled '1'
config wireguard_wgserver
option description 'rt-ax86u'
option public_key '<redacted>'
option private_key '<redacted>'
option preshared_key '<redacted>'
list allowed_ips '172.22.28.5/32'
list allowed_ips 'fda9:65bd:f903::5/128'
option route_allowed_ips '1'
option persistent_keepalive '25'
option endpoint_port '12345'
option disabled '1'
config wireguard_wgserver
option description 'reserv1'
option public_key '<redacted>'
option private_key '<redacted>'
option preshared_key '<redacted>'
list allowed_ips '172.22.28.6/32'
list allowed_ips 'fda9:65bd:f903::6/128'
option route_allowed_ips '1'
option persistent_keepalive '25'
option endpoint_port '12345'
option disabled '1'
config interface 'USBWAN'
option proto 'dhcp'
option device 'usb0'
option dns_metric '40'
option multipath 'off'
option auto '0'
config interface 'rtbe86u'
option proto 'none'
option device 'tun10'
config interface 'wgc_vpn10'
option proto 'wireguard'
option private_key '<redacted>'
option multipath 'off'
list dns '10.2.0.1'
list dns '2a07:b944::2:1'
list addresses '10.2.0.2/24'
list addresses '2a07:b944::2:2/128'
config wireguard_wgc_vpn10
option description 'wg-SE-189'
option public_key '<redacted>'
option private_key '<redacted>'
option endpoint_host '169.150.208.158'
option endpoint_port '51820'
option persistent_keepalive '25'
list allowed_ips '0.0.0.0/0'
list allowed_ips '::/1'
list allowed_ips '::/0'
list allowed_ips '8000::/1'
config interface 'vpn_SE_437'
option proto 'none'
option device 'tun11'
option multipath 'off'
config route
option interface 'lan'
option type 'local'
option target '192.168.50.0/24'
option gateway '10.8.44.1'
option table 'pbr_rtbe86u'
config wireguard_wgc_vpn10
option description 'wg-SE-233'
option public_key '<redacted>'
option private_key '<redacted>'
option endpoint_port '51820'
option persistent_keepalive '25'
option endpoint_host '169.150.208.187'
option disabled '1'
list allowed_ips '0.0.0.0/0'
list allowed_ips '::/0'
list allowed_ips '8000::/1'
list allowed_ips '::/1'
config route
option interface 'lan'
option target '192.168.50.0/24'
option metric '10'
option table 'main'
option disabled '1'
cat /etc/config/wireless
root@Defcon:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/18000000.wifi'
option band '2g'
option channel 'auto'
option htmode 'HE40'
option cell_density '0'
option txpower '20'
option country 'SE'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'Defcon.2'
option encryption 'sae-mixed'
option disassoc_low_ack '0'
option key '<redacted>'
option ocv '0'
option dtim_period '3'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/18000000.wifi+1'
option band '5g'
option channel 'auto'
option htmode 'HE160'
option cell_density '0'
option country 'SE'
option txpower '20'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'Defcon.5'
option encryption 'sae-mixed'
option dtim_period '3'
option key '<redacted>'
option ocv '0'
option disassoc_low_ack '0'
config wifi-iface 'wifinet2'
option device 'radio0'
option mode 'ap'
option ssid 'Defcon.2-guest'
option encryption 'sae-mixed'
option key 'internet2400'
option ocv '0'
option network 'guest'
option dtim_period '3'
cat /etc/config/dhcp
root@Defcon:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'network.lan'
option expandhosts '1'
option cachesize '5000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option localservice '0'
option ednspacket_max '1280'
option dnssec '1'
option proxydnssec '1'
option localuse '1'
list server '/use-application-dns.net/'
list server '/mask.icloud.com/'
list server '/mask-h2.icloud.com/'
list server '127.0.0.1#5053'
list server '127.0.0.1#5054'
list server '127.0.0.1#5055'
list addnmount '/var/run/pbr.dnsmasq'
option doh_backup_noresolv '-1'
option noresolv '1'
list doh_backup_server '/use-application-dns.net/'
list doh_backup_server '/mask.icloud.com/'
list doh_backup_server '/mask-h2.icloud.com/'
list doh_server '127.0.0.1#5053'
list doh_server '127.0.0.1#5054'
list doh_server '127.0.0.1#5055'
config dnsmasq 'lan2_dns'
option enabled '1'
option port '54'
option bind_interfaces '1'
option localservice '0'
option noresolv '1'
option dnssec '1'
option proxydnssec '1'
option rebind_protection '1'
option cachesize '5000'
list notinterface 'loopback'
option local '/lan2/'
option ednspacket_max '1280'
option localuse '1'
list server '/mask.icloud.com/'
list server '/mask-h2.icloud.com/'
list server '/use-application-dns.net/'
list server '127.0.0.1#5053'
list server '127.0.0.1#5054'
list server '127.0.0.1#5055'
list addnmount '/var/run/pbr.dnsmasq'
option doh_backup_noresolv '1'
list doh_backup_server '/mask.icloud.com/'
list doh_backup_server '/mask-h2.icloud.com/'
list doh_backup_server '/use-application-dns.net/'
list doh_server '127.0.0.1#5053'
list doh_server '127.0.0.1#5054'
list doh_server '127.0.0.1#5055'
config dhcp 'lan2'
option interface 'lan2'
option instance 'lan2_dns'
option start '100'
option limit '150'
option leasetime '2h'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '4h'
option dhcpv4 'server'
option ra 'server'
option force '1'
option dhcpv6 'server'
list ra_flags 'other-config'
option ra_default '1'
option ra_preference 'medium'
list ntp '2.se.pool.ntp.org'
list ntp '2.europe.pool.ntp.org'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option leasefile '/tmp/odhcpd.leases'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
option piodir '/tmp/odhcpd-piodir'
option hostsdir '/tmp/hosts'
config dhcp 'guest'
option interface 'guest'
option start '100'
option limit '150'
option leasetime '2h'
option ra 'server'
option dhcpv6 'server'
option dhcpv4 'server'
option ra_flags 'other-config'
option ra_default '1'
option ra_management '0'
option ra_preference 'medium'
option force '1'
cat /etc/config/firewall
root@Defcon:~# cat /etc/config/firewall
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
config zone 'lan'
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone 'wan'
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option mtu_fix '1'
list masq_src 'fda9:65bd:f903::0/64'
option masq '1'
list network 'USBWAN'
list network 'wan'
list network 'wan6'
option masq6 '1'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config zone
option name 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'guest'
config forwarding
option src 'guest'
option dest 'wan'
config rule
option src 'guest'
option name 'Allow-DNS-Guest'
option dest_port '53'
option target 'ACCEPT'
config rule
option src 'guest'
option name 'Allow-DHCP-Guest'
list proto 'udp'
option dest_port '67'
option target 'ACCEPT'
config rule
option src 'lan'
option dest 'wan'
option name 'Block-8.8.8.8'
option target 'REJECT'
option family 'ipv4'
list dest_ip '8.8.8.8'
option enabled '0'
config rule
option src 'lan'
option dest 'wan'
option name 'Block-8.8.4.4'
option target 'REJECT'
option family 'ipv4'
list dest_ip '8.8.4.4'
option enabled '0'
config rule 'ovpn'
option name 'Allow-OpenVPN'
option src 'wan'
option proto 'udp'
option dest_port '678'
option target 'ACCEPT'
config rule
option src 'wan'
option name 'Allow-Wireguard'
list proto 'udp'
option dest_port '12345'
option target 'ACCEPT'
config rule
option src 'lan'
option dest '*'
option name 'Allow-WSD-TCP'
list proto 'tcp'
option dest_port '5357'
option target 'ACCEPT'
config zone
option name 'wgserver'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'wgserver'
option masq6 '1'
list masq_dest 'fda9:65bd:f903::0/64'
config forwarding
option src 'wgserver'
option dest 'lan'
config forwarding
option src 'wgserver'
option dest 'wan'
config forwarding
option src 'lan'
option dest 'wgserver'
config zone
option name 'vpnclient'
option input 'ACCEPT'
option forward 'ACCEPT'
option output 'ACCEPT'
list network 'rtbe86u'
option masq '1'
option mtu_fix '1'
config zone
option name 'wgc_vpn10'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
option masq6 '1'
list network 'wgc_vpn10'
config forwarding
option src 'lan'
option dest 'wgc_vpn10'
config forwarding
option src 'wgc_vpn10'
option dest 'lan'
config zone
option name 'vpn_SE_437'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'vpn_SE_437'
config rule
option name 'Allow-ICMPv6-Guest'
option src 'guest'
option proto 'icmp'
option family 'ipv6'
option target 'ACCEPT'
config forwarding
option src 'vpnclient'
option dest 'lan'
config forwarding
option src 'lan'
option dest 'vpnclient'
config zone
option name 'vpnserver'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'vpnserver'
option masq6 '1'
list masq_dest 'fda9:65bd:f903::0/64'
config forwarding
option src 'vpnserver'
option dest 'lan'
config forwarding
option src 'vpnserver'
option dest 'wan'
config forwarding
option src 'lan'
option dest 'vpnserver'
config forwarding
option src 'lan'
option dest 'vpn_SE_437'
config forwarding
option src 'vpn_SE_437'
option dest 'lan'
config rule
option src 'lan'
option dest 'wan'
option name 'DoH via WAN'
list proto 'tcp'
list src_ip '192.168.2.1'
option dest_port '443'
option target 'ACCEPT'
I'm surprised a lot of people haven't responded, given there's quite a few issues with your configurations. Nonetheless, I'll start with this.
Out of curiosity, where's the host 10.8.44.1?
I ask because, from the information provided, 10.8.44.1 should be an invalid gateway to 192.168.50.0/24.
Your 2 DHCPs setup on LAN is invalid.
Why are you running a 25.12 snapshot ?
Some fix not available in stable yet ?
I have moved back to stable 25.12.4
That is my router to other router with lanip 192.168.50.0/24 (rtbe86u/tun10/10.8.44.2)
I have a second dnsmasq, I'm using PBR and have to get https-dns-proxy working with dnsmasq.
Any suggestion to get second dnsmasq working with https-dns-proxy is welcome.
.
Nonetheless, this seem OK if it works when you configure 192.168.50.x it on a client.
I do, and it would be in fixing you dnsmasq configuration. But first:
incorrectly ] adding dnsmasq to a non-existent interface lan2 (that's an Ethernet port attached to br-lan) and to interface LAN (br-lan)?
Is it you desire to isolate Ethernet port lan2 from br-lan?
lleachii:
What is tun10?
that in name on my openvpn client.
lleachii:
Why are you [incorrectly] adding dnsmasq to a non-existent interface lan2 (that's an Ethernet port attached to br-lan) and to interface LAN (br-lan)?
Is it you desire to isolate Ethernet port lan2 from br-lan?
Honestly, I don't know, the attempt was to get https-dns-crypt to work with dnssec, add a second dnsmasq to get it works. I got the suggestion from @egc Link to posting:https://forum.openwrt.org/t/pbr-and-https-dns-crypt-config-problem/248517/5
lleachii:
You never explained what the this host is
Is this related to https-dns-proxy?
.It's not related, that is needed to get my pc connect to lan.
Sorry for the confusion, but first qustion was to get pc connect to lan at start.
topsbr
June 21, 2026, 1:23pm
15
I strongly believe you have serious driver issues.
And of course, since you're using a snapshot version, it may have bugs. Have you considered flashing to a stable version?
I'm using windows 11 pro. (Realtek RTL8125 card and Intel I225-V)
I have changed back to stable 25.12.4
Why are you [