hello, I tried to update the firmware of my router to the new firmware - and now, despite the radios appearing to be active, I can no longer connect to the internet through this router - I tried to remove my custom settings but it's not working.
this is a screenshot, of my radios
here is also, another ... thing that happened
not sure how i made this happen
If you had put the PoE port as LAN, it will get reset back to WAN too.
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):
Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
so I tried to upload a settings archive - and I know it's having trouble because wireguard isn't actually installed for example - but as far as I can tell it is supposed to reset radios and it should work?
is there a way to completely reset settings except the SSID of my networks?
or is it likely I need to hard reset again
ubus call system board
{
"kernel": "6.12.74",
"hostname": "OpenWrt",
"system": "ARMv8 Processor rev 4",
"model": "OpenWrt One",
"board_name": "openwrt,one",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "25.12.2",
"firmware_url": "https://downloads.openwrt.org/",
"revision": "r32802-f505120278",
"target": "mediatek/filogic",
"description": "OpenWrt 25.12.2 r32802-f505120278",
"builddate": "1774469393"
}
}
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd5b:3471:deac::/48'
option packet_steering '1'
option dhcp_default_duid '0004cbcc8de0ff7945908f838bdb3e4502bc'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth1'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config interface 'wan'
option device 'eth0'
option proto 'dhcp'
config interface 'wan6'
option device 'eth0'
option proto 'dhcpv6'
config interface 'WGINTERFACE'
option proto 'wireguard'
option private_key 'sssss'
list addresses '10.70.114.5/32'
list addresses 'fc00:bbbb:bbbb:bb01::7:7204/128'
list dns '100.64.0.7'
config wireguard_WGINTERFACE
option description 'WG IMPORTED PEER'
option public_key 'sssss'
list allowed_ips '0.0.0.0/0'
list allowed_ips '::0/0'
option endpoint_host '185.213.193.3'
option endpoint_port '51820'
option persistent_keepalive '25'
option route_allowed_ips '1'
config device
option type 'bridge'
option name 'donkeykonguest'
option bridge_empty '1'
config interface 'donkeykonguest'
option proto 'static'
option device 'donkeykonguest'
option ipaddr '192.168.51.1'
option netmask '255.255.255.0'
root@OpenWrt:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/18000000.wifi'
option band '2g'
option channel '1'
option htmode 'HE20'
option num_global_macaddr '7'
option cell_density '0'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'donkeykong2'
option encryption 'psk2'
option hidden '1'
option key 'xxx'
option isolate '1'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/18000000.wifi+1'
option band '5g'
option channel '36'
option htmode 'HE80'
option num_global_macaddr '7'
option cell_density '0'
config wifi-iface 'wifinet2'
option device 'radio1'
option mode 'ap'
option ssid 'konkeydong2'
option encryption 'psk2'
option hidden '1'
option key 'xx'
option network 'lan'
config wifi-iface 'wifinet3'
option device 'radio0'
option mode 'ap'
option ssid 'donkeykonguest'
option encryption 'psk2'
option hidden '1'
option network 'donkeykonguest'
option key xxx
root@OpenWrt:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option localservice '1'
option ednspacket_max '1232'
list server '/mask.icloud.com/'
list server '/mask-h2.icloud.com/'
list server '/use-application-dns.net/'
list server '127.0.0.1#5053'
option noresolv '1'
option doh_backup_noresolv '1'
list doh_backup_server '9.9.9.9'
list doh_backup_server '149.112.112.112'
list doh_server '127.0.0.1#5053'
list addnmount '/var/run/pbr.dnsmasq'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
option ra 'server'
option ra_slaac '1'
list ra_flags 'managed-config'
list ra_flags 'other-config'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/odhcpd.leases'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
option piodir '/tmp/odhcpd-piodir'
option hostsdir '/tmp/hosts'
config dhcp 'donkeykonguest'
option interface 'donkeykonguest'
option start '100'
option limit '150'
option leasetime '12h'
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option synflood_protect '1'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'WGINTERFACE'
list network 'wan'
list network 'wan6'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config zone
option name 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
list network 'donkeykonguest'
config forwarding
option src 'guest'
option dest 'wan'
config rule
option src 'guest'
option name 'allow-dns-guest'
option dest_port '53'
option target 'ACCEPT'
config rule
option src 'guest'
option name 'allow-dhcp-guest'
option dest_port '67'
option target 'ACCEPT'
So why didn't you install Wireguard or include it in your firmware?
Neither do we.
What were they?
Run the following commands:
ping dns.google
nslookup dns.google
ping 8.8.8.8
nslookup 8.8.8.8
If this is indeed a DNS issue as the previous post tries to ascertain then after fixing it you can try to do another owut upgrade that would bring the latest luci* packages and a newer owut. The point here being that the newer luci* packages might fix that issue seen in a screenshot above where the page was blank.
The user already installed a firmware missing their previous packages. How would owut solve that?
Not exactly. I think the user needed Wireguard.
If it gets to internet through the WireGuard then sure it is a bigger issue. But if not then I don’t see why missing the wg package couldn’t be fixed after addressing the DNS issue.
Either there’s something in the output the user posted that points to the missing WireGuard as the issue and I don’t see it or there’s something more fundamental about doing an upgrade on Openwrt while missing a package that I don’t know about? Anyway I’m following this thread to see where the solution is
From experience with previous discussions with the OP, perhaps the solution possibly lies with the custom settings that were removed. We'd never know in that case.
unfortunately I can't figure out how to install packages because it can't connect to the internet
If your desktop computer or laptop has a wifi then you could set up a hotspot wifi by using your mobile phone connect over the mobile network if you have available mobile data and make your computer connect to your phone’s wifi temporarily and try to download using https://firmware-selector.openwrt.org/ so you can drop a wireguard package in there and request build and then finally you can download a new openwrt firmware with custom packages.
thanks much! I ended up resetting the entire settings to just rebuild from scratch - but this is extremely helpful thank you!