Hello,
I have a Xiaomi AX3600 router with OpenWRT 24.10.1.
For a few weeks now, I've been having trouble pinging Android phones from one machine.
When I test the ping from the router, it works.
From another machine (Raspberry/Windows, etc.), it doesn't always work.
Sometimes it works, sometimes it doesn't, and without any action.
I don't know what file or screenshot to give you to help me diagnose the problem.
Thank you.
Since you're double NATing, from where to where, network wise ?
all ips are from Lan (192.168.1.XXX)
all ips are static
Then Openwrt isn't really touching the traffic.
Post your /etc/config/network file.
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fde5:cc23:855c::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
Ok, do the same with the wireless file.
`
config wifi-device 'radio0'
option type 'mac80211'
option path 'soc@0/20000000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
option channel '36'
option band '5g'
option htmode 'VHT80'
option cell_density '0'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'pirouette'
option encryption 'psk2'
option key 'XXXXXXXXXXXXXXXXXX
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc@0/c000000.wifi'
option channel '36'
option band '5g'
option htmode 'HE80'
option cell_density '0'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'pirouette'
option encryption 'psk2'
option key 'XXXXXXXXXXXXX'
config wifi-device 'radio2'
option type 'mac80211'
option path 'platform/soc@0/c000000.wifi+1'
option channel '1'
option band '2g'
option htmode 'HE20'
option cell_density '0'
config wifi-iface 'default_radio2'
option device 'radio2'
option network 'lan'
option mode 'ap'
option ssid 'pirouette'
option encryption 'psk2'
option key 'XXXXXXXXXXXXXXX'
`
Probably Windows AV firewall blocking traffic? Maybe phones ignore pings when asleep (Wi-Fi power saving feature)? Your configs look good but still go to wireless Luci & check if AP/client isolation is disabled.
Try keeping only one radio either radio0 or radio1 (they have same SSID) so clients won't jump between them & cause issues with ARP binding.
all is ok as you said. with only one wireless network, the problem is the same.
I've tried on linux, windows and android plateform : always the same behavior: it doesn't work and sometimes it does!
i'm tried with arp binding. It's the same :
on the openWRT :
192.168.1.221 0x1 0x2 5a:8e:cd:25:17:81 * br-lan
on another ip :
192.168.1.221 (incomplete) wlan0
arp -i 192.168.1.221 5a:8e:cd:25:17:81
5a:8e:cd:25:17:81: Unknown host
I've tried to run arp-scan on openwrt :
Interface: br-lan, type: EN10MB, MAC: 9c:9d:7e:75:b4:f7, IPv4: 192.168.1.1
Starting arp-scan 1.10.0 with 256 hosts (https://github.com/royhills/arp-scan)
192.168.1.156 94:b9:7e:10:18:bb (Unknown)
192.168.1.117 50:ec:50:1a:9b:30 (Unknown)
192.168.1.152 74:e2:0c:a3:67:04 (Unknown)
192.168.1.121 78:a0:3f:69:98:f3 (Unknown)
192.168.1.115 44:23:7c:58:ab:94 (Unknown)
192.168.1.123 74:38:b7:01:39:2d (Unknown)
192.168.1.119 70:ee:50:a9:2c:c4 (Unknown)
192.168.1.120 0c:ee:99:9d:3a:18 (Unknown)
192.168.1.122 68:a4:0e:5e:46:92 (Unknown)
192.168.1.114 20:df:b9:d2:d0:58 (Unknown)
192.168.1.125 24:ce:33:54:c0:e6 (Unknown)
192.168.1.208 bc:dd:c2:5a:48:5f (Unknown)
192.168.1.206 18:69:d8:25:73:e4 (Unknown)
192.168.1.192 dc:a6:32:e3:b8:fe (Unknown)
192.168.1.222 78:11:dc:78:b7:9a (Unknown)
192.168.1.209 50:8b:b9:47:aa:2d (Unknown)
192.168.1.195 e8:4c:4a:57:c0:6b (Unknown)
192.168.1.204 18:69:d8:25:74:eb (Unknown)
192.168.1.196 1c:e8:9e:cc:e5:16 (Unknown)
192.168.1.236 50:ec:50:c6:d8:7a (Unknown)
192.168.1.205 18:69:d8:25:76:4b (Unknown)
192.168.1.207 18:69:d8:25:78:69 (Unknown)
192.168.1.187 44:3e:07:3e:9b:79 (Unknown)
72 packets received by filter, 0 packets dropped by kernel
Ending arp-scan 1.10.0: 256 hosts scanned in 1.975 seconds (129.62 hosts/sec). 23 responded
WARNING: Cannot open MAC/Vendor file /usr/share/arp-scan/ieee-oui.txt: No such file or directory
WARNING: Cannot open MAC/Vendor file /etc/arp-scan/mac-vendor.txt: No such file or directory
my mobile doesn't appear.
Have you disabled MAC randomization on phones?
yes, Unfortunately 
Just saw this here ARP requests are not forwarded to Wifi Client after some time --> devices unreachable · Issue #9555 · openwrt/openwrt On MediaTek-based OpenWrt builds there’s a bug where ARP replies from wifi stations are broadcast over the air correctly but then dropped by the AP on their way back to the LAN bridge
Like I previously said it could be Android power saving mode. When the router sends any unicast packet to a client the AP wakes the client out of power save mode & delivers the frame, hence phone responds. Other LAN hosts’ ARP broadcasts don’t generate the same wake-up behavior on many AP drivers. So, the client never sees the ARP and doesn’t reply. Do you only get this issue when phone is locked? If yes, then this could be it.