Wireless devices have internet access but running whatsmyip shows either my Starlink IP connected to a Starlink Mini or my ISP IP connected to my fiber-optic and not the VPN IP so appears to not be working. Running luci-app-v2raya. I have tried all combinations of the settings in the first 4 fields in Setup.
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):
Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
Nothing fancy, pretty much default fresh install with luci-app-v2raya, v2raya, xray-core. Subscribed to new VPN provider and tested successfully running both Hiddify and Haap on desktop.
root@OpenWrt:~# ubus call system board
{
"kernel": "6.6.110",
"hostname": "OpenWrt",
"system": "ARMv7 Processor rev 5 (v7l)",
"model": "GL.iNet GL-A1300",
"board_name": "glinet,gl-a1300",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "24.10.4",
"revision": "r28959-29397011cc",
"target": "ipq40xx/generic",
"description": "OpenWrt 24.10.4 r28959-29397011cc",
"builddate": "1760891865"
}
}
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdaa:6d1f:2bb3::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
option delegate '0'
option ipv6 '1'
list dns '208.67.220.220'
list dns '208.67.222.222'
config interface 'wan'
option device 'wan'
option proto 'dhcp'
option ipv6 '1'
config interface 'wan6'
option device 'wan'
option proto 'dhcpv6'
option auto '0'
option reqaddress 'try'
option reqprefix 'auto'
option norelease '1'
root@OpenWrt:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/soc/a000000.wifi'
option band '2g'
option channel '1'
option cell_density '0'
config wifi-iface 'default_radio0'
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt-2'
option encryption 'psk2'
option key 'xxx'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/soc/a800000.wifi'
option band '5g'
option channel '36'
option htmode 'VHT80'
option cell_density '0'
config wifi-iface 'default_radio1'
option device 'radio1'
option network 'lan'
option mode 'ap'
option ssid 'OpenWrt-5'
option encryption 'psk2'
option key 'xxx'
root@OpenWrt:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option cachesize '1000'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
option localservice '1'
option ednspacket_max '1232'
config dhcp 'lan'
option interface 'lan'
option start '2'
option limit '50'
option leasetime '12h'
option dhcpv4 'server'
option dhcpv6 'server'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
option loglevel '4'
option piofolder '/tmp/odhcpd-piofolder'
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option syn_flood 1
option input REJECT
option output ACCEPT
option forward REJECT
# Uncomment this line to disable ipv6 rules
# option disable_ipv6 1
config zone
option name lan
list network 'lan'
option input ACCEPT
option output ACCEPT
option forward ACCEPT
config zone
option name wan
list network 'wan'
list network 'wan6'
option input REJECT
option output ACCEPT
option forward REJECT
option masq 1
option mtu_fix 1
config forwarding
option src lan
option dest wan
# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
option name Allow-DHCP-Renew
option src wan
option proto udp
option dest_port 68
option target ACCEPT
option family ipv4
# Allow IPv4 ping
config rule
option name Allow-Ping
option src wan
option proto icmp
option icmp_type echo-request
option family ipv4
option target ACCEPT
config rule
option name Allow-IGMP
option src wan
option proto igmp
option family ipv4
option target ACCEPT
# Allow DHCPv6 replies
# see https://github.com/openwrt/openwrt/issues/5066
config rule
option name Allow-DHCPv6
option src wan
option proto udp
option dest_port 546
option family ipv6
option target ACCEPT
config rule
option name Allow-MLD
option src wan
option proto icmp
option src_ip fe80::/10
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family ipv6
option target ACCEPT
# Allow essential incoming IPv6 ICMP traffic
config rule
option name Allow-ICMPv6-Input
option src wan
option proto icmp
list icmp_type echo-request
list icmp_type echo-reply
list icmp_type destination-unreachable
list icmp_type packet-too-big
list icmp_type time-exceeded
list icmp_type bad-header
list icmp_type unknown-header-type
list icmp_type router-solicitation
list icmp_type neighbour-solicitation
list icmp_type router-advertisement
list icmp_type neighbour-advertisement
option limit 1000/sec
option family ipv6
option target ACCEPT
# Allow essential forwarded IPv6 ICMP traffic
config rule
option name Allow-ICMPv6-Forward
option src wan
option dest *
option proto icmp
list icmp_type echo-request
list icmp_type echo-reply
list icmp_type destination-unreachable
list icmp_type packet-too-big
list icmp_type time-exceeded
list icmp_type bad-header
list icmp_type unknown-header-type
option limit 1000/sec
option family ipv6
option target ACCEPT
config rule
option name Allow-IPSec-ESP
option src wan
option dest lan
option proto esp
option target ACCEPT
config rule
option name Allow-ISAKMP
option src wan
option dest lan
option dest_port 500
option proto udp
option target ACCEPT
Your config is quite default.
1/ if you use network lists then likely typical whats my ip sites are passed via normal connection
2/ indeed if not using those consider PBR, especially the killswitch part to disallow non-tunnel traffic.
Thanks for that. 40 yr retired IT and spoiled from using my ASUS-Merlin routers for years. Need OpenWRT to support the new VPN provider and it's all a bit of a brain overload starting out. Selected v2raya as others have stated it's as easy as: install, simple config, and you're VPN connected. No need for fancy (and complicated) pbr, it should just work with defaults.
1 Like
I see tproxy in your setup. Im running just a sock5-tproxy setup on my openwrt box, and have to note, that the correct config of the firewall rules (nftables) was a serious challenge. The firewallsetup from the package hev-socks5-tproxy was/is terribly incomplete. I suspect something similar in your case. You might setup something (much more) simpler, for a first try. 40yrs … That was my time coding device drivers for PDP11s or was it VAX11 already ….
So I just installed WireGuard with my current provider and it isn't working on OpenWRT either. I've now burned a whole day off my life clock and still dead in the water. I followed this tutorial:
Try the guides at https://github.com/egc112/OpenWRT-egc-add-on/tree/main/notes
You have to configure wireguard besides installing, it does not read your thoughts.
I didn't just fall off the turnip truck. Used this: https://vpn.ac/knowledgebase/125/WireGuard-on-OpenWRT.html
Working now. A copy/paste of priv key from .conf didn't get the whole thing.
Now to get v2raya working with the other VPN provider...
I set up my new GL.iNet A1300 router and installed v2RayA. Changed the default IP to 192.168.3.1 and connected the WAN to my home router 192.168.1.1. Added my new VPN provider by subscription. IP check shows the ISP IP not the VPN server IP.
Unplugged and moved it to my Starlink Mini in bypass mode. IP check shows the Starlink IP and not the VPN server IP so it's not working with Starlink either.
This is a fresh v2RayA install with default settings. Changed the Proxy settings and tried all options with no luck. v2RayA-Xray-VLESS simply isn't working with OpenVPN as installed unless there are some undocumented hidden cryptic settings that need to be changed. I've wasted an entire day on this.
To get VLESS working I uninstalled v2RayA and installed podkop - uses sing-box and easy to config.
This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.