Wireguard tunnel splitting

thushk101 · January 18, 2024, 6:25am

Hi, i already configured wire guard on my router, but i need to free one lan port or 5ghz wifi band from wire guard tunnel, and get direct internet without speed loss,
dear team please help , how i can do that?

frollic · January 18, 2024, 6:39am

https://openwrt.org/docs/guide-user/network/routing/pbr ?

thushk101 · January 18, 2024, 6:56am

Just want to exclude my 5ghz wifi from vpn tunnel? what is the possible way ?

trendy · January 18, 2024, 10:13am

mk24 · January 19, 2024, 12:47am

In conventional terms, a "split tunnel" means that some destination IPs (such as a remote site's LAN) go by VPN and the rest go by regular Internet. That is not what you want. Searching for "split tunnel" will not get useful instructions.

Routing based on the source requires multiple routing tables. The pbr package automates the creation of these tables.

thushk101 · January 19, 2024, 10:56am

is any GUI guide for pbr policy creation according to my scenario?

egc · January 19, 2024, 1:28pm

See @trendy's response: Wireguard tunnel splitting - #4 by trendy

thushk101 · January 19, 2024, 5:22pm

Access the LuCI web interface by entering the IP address of your OpenWrt router (e.g., 192.168.1.1) in a web browser.
Log in to the LuCI interface using your username and password.
Navigate to the "Network" section in the LuCI interface.
Click on "Interfaces" to view the list of network interfaces.
Locate the WireGuard interface that you want to modify and click on "Edit" next to it.
In the WireGuard interface configuration, look for the "Allowed IPs" field. This field specifies the IP addresses or subnets that are routed through the WireGuard tunnel.
Remove the IP address or subnet corresponding to the LAN port you want to free from the WireGuard tunnel. In this case, if your LAN IP range is 192.168.2.1, you would remove the corresponding subnet (e.g., 192.168.2.0/24) from the "Allowed IPs" field.
Save the changes to the WireGuard interface configuration.
Restart the network service to apply the changes. You can do this by navigating to the "System" section in LuCI and clicking on "Restart" or "Apply & Restart".

By removing the LAN port's subnet from the "Allowed IPs" field in the WireGuard interface configuration, that specific LAN port should now have direct internet access instead of going through the WireGuard tunnel.Preformatted text

i got this from chatgpt ,,,, isit correct ?

egc · January 19, 2024, 5:32pm

I asked chatgpt:
"What is a user who, instead of following the provided instructions and reading the manual, asked chatgpt"

Chatgpt answered:
"Not very smart"

thushk101 · January 19, 2024, 5:35pm

lol.. its too hard for me to understand , command interface. i checked that article you mentioned , but its almost command type .. i dont understand anything really..

if its in luci interface its much more helpfull to understand since i am coming from windows os

egc · January 19, 2024, 5:43pm

Scroll down in the guide, there are screenshot and paragraph 8 has a link to an instructional video how to use the Gui.
Although I must confess I have never seen it.

thushk101 · January 20, 2024, 8:20am

my connection is coming from another router 192.168.0.1 ,, and my router lan ip is 192.168.2.1
my assumption that, i have 4 free lan port on my router ,, if i can isolate from wireguard tunnel these 4 ports can be used as like switch. my wifi 2.4 and 5 ghz can passed through wireguard tunnel.
so how i can make that lan ports work as a switch to get direct internet access?

that means..... i need to get ip range....192.168.0.1 that wan range on my those 4 ports then i can connect my pc through those lan port get full speed, without caping due wireguard tunnel

my question is
1 how i can isolate my lan ports from wireguard tunnel?
2 how i can merge wan +lan to get direct internet access on those lan port ,

if anyone can provide step by step.. its much helpfull

egc · January 20, 2024, 8:26am

I suggest that you make a guest wifi for 2.4 and 5 GHZ.
That has another subnet and you route this subnet via the WG tunnel.

So you still have your LAN ports and your regular 2.4 and 5 GHz going via the WAN.
This way you can easily switch between WG and WAN by switching wifi.

thushk101 · January 20, 2024, 1:15pm

i configured guest wifi according to this video https://www.youtube.com/watch?v=pGlEmqiTcck
but its only change my 5ghz main wifi, instead of another one.
tried many times with many guide... all its not getting worked... really disappointed.
better to buy another router and configure that as second direct wifi instead of wireguard tunnel

trendy · January 21, 2024, 10:38am

Please run the following commands (copy-paste the whole block) and paste the output here, using the "Preformatted text </> " button:

Remember to redact passwords, MAC addresses and any public IP addresses you may have

ubus call system board; \
uci export network; uci export wireless; \
uci export dhcp; uci export firewall; \
ip -4 addr ; ip -4 ro li tab all ; ip -4 ru

thushk101 · January 21, 2024, 7:02pm


 OpenWrt 23.05.2, r23630-842932a63d
 -----------------------------------------------------
root@OpenWrt:~# ubus call system board; \
> uci export network; uci export wireless; \
> ip -4 addr ; ip -4 ro li tab all ; ip -4 ru
{
        "kernel": "5.15.137",
        "hostname": "OpenWrt",
        "system": "MediaTek MT7621 ver:1 eco:3",
        "model": "D-Link DIR-853 A3",
        "board_name": "dlink,dir-853-a3",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.2",
                "revision": "r23630-842932a63d",
                "target": "ramips/mt7621",
                "description": "OpenWrt 23.05.2 r23630-842932a63d"
        }
}
package network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fddd:82f2:217f::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        option bridge_empty '1'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan4'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.2.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'wan'
        option proto 'dhcp'
        option metric '20'
        option peerdns '0'
        list dns '1.1.1.1'
        list dns '1.0.0.1'
        option type 'bridge'

config interface 'wan6'
        option device 'wan'
        option proto 'dhcpv6'
        option type 'bridge'

config interface 'wireguard'
        option proto 'wireguard'
        option private_key '  '
        list addresses '10.134.84.44/32'
        list addresses '\     /128'
        list dns '198.51.100.2'

config wireguard_wireguard
        option description 'credentials(1).conf'
        option public_key '      ='
        list allowed_ips '0.0.0.0/0'
        list allowed_ips '::/0'
        option persistent_keepalive '10'
        option endpoint_host '    '
        option endpoint_port '51820'
        option route_allowed_ips '1'

package wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
        option channel '1'
        option band '2g'
        option htmode 'HT20'
        option cell_density '0'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'JAGUAR'
        option encryption 'psk2'
        option key 

config wifi-device 'radio1'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0+1'
        option band '5g'
        option htmode 'VHT80'
        option cell_density '0'
        option channel 'auto'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'OPENWRT'
        option encryption 'psk2'
        option key '   '

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
3: wan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    inet 192.168.0.79/24 brd 192.168.0.255 scope global wan
       valid_lft forever preferred_lft forever
10: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    inet 192.168.2.1/24 brd 192.168.2.255 scope global br-lan
       valid_lft forever preferred_lft forever
15: wireguard: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 10.134.84.44/32 brd 255.255.255.255 scope global wireguard
       valid_lft forever preferred_lft forever
default dev wireguard proto static scope link
default via 192.168.0.1 dev wan proto static src 192.168.0.79 metric 20
176.125.231.42 via 192.168.0.1 dev wan proto static metric 20
192.168.0.0/24 dev wan proto static scope link metric 20
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
local 10.134.84.44 dev wireguard table local proto kernel scope host src 10.134.84.44
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
local 192.168.0.79 dev wan table local proto kernel scope host src 192.168.0.79
broadcast 192.168.0.255 dev wan table local proto kernel scope link src 192.168.0.79
local 192.168.2.1 dev br-lan table local proto kernel scope host src 192.168.2.1
broadcast 192.168.2.255 dev br-lan table local proto kernel scope link src 192.168.2.1
0:      from all lookup local
32766:  from all lookup main
32767:  from all lookup default
root@OpenWrt:~# root@OpenWrt:~# ubus call system board; \
{
> > uci export network; uci export wireless; \
> > ip -4 addr ; ip -4 ro li tab all ; ip -4 ru
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.2",
                "revision": "r23630-842932a63d",
                "target": "ramips/mt7621",
                "description": "OpenWrt 23.05.2 r23630-842932a63d"
        }
}
package network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
-ash: root@OpenWrt:~#: not found
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fddd:82f2:217f::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        option bridge_empty '1'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan4'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.2.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'wan'
        option proto 'dhcp'
        option metric '20'
        option peerdns '0'
package wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
        option channel '1'
        option band '2g'
        option htmode 'HT20'
        option cell_density '0'
        list dn
config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'JAGUAR'
        option encryption 'psk2'
s '1.1.1.1'
        list d  ns '1.0.0.1'
option key  '

config wifi-device 'radio1'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0+1'
        option band '5g'
        option htmode 'VHT80'
        option cell_density '0'
        option channel 'auto'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option type 'br option network 'lan'
idge'

        option mode 'ap'
        option ssid 'OPENWRT'
        option encryption 'psk2'
        option key '   '

config interface 'wan6'
        option device 'wan'
        option proto 'dhcpv6'
        option type 'bridge'
-ash: -4: not found

config interface 'wireguard'
        option proto 'wireguard'
        option private_key '  '
        list addresses '10.134.84.44/32'
        list addresses 'fd00:0:   :84:/128'
        list dns '198.51.100.2'

config wireguard_wireguard
        option description 'credentials(1).conf'
        option public_key '   ='
        list allowed_ips '0.0.0.0/0'
        list allowed_ips '::/0'
        option persistent_keepalive '10'
        option endpoint_host '  '
        option endpoint_port '51820'
        option route_allowed_ips '1'

package wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
        option channel '1'
        option band '2g'
        option htmode 'HT20'
        option cell_density '0'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'JAGUAR'
default dev wireguard proto static scope link
        option encryption 'psk2'
        option key ''
default via 192.168.0.1 dev wan proto static src 192.168.0.79 metric 20
176.125.231.42 via 192.168.0.1 dev wan proto static metric 20
192.168.0.0/24 dev wan proto static scope link metric 20

192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
local 10.134.84.44 dev wireguard table local proto kernel scope host src 10.134.84.44
config wifi-device 'radio1'
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
        option type 'mac80211'
local 192.168.0.79 dev wan table local proto kernel scope host src 192.168.0.79
broadcast 192.168.0.255 dev wan table local proto kernel scope link src 192.168.0.79
        option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0+1'
local 192.168.2.1 dev br-lan table local proto kernel scope host src 192.168.2.1
broadcast 192.168.2.255 dev br-lan table local proto kernel scope link src 192.168.2.1
        option band '5g'
        option htmode 'VHT80'
        option cell_density '0'
        option channel 'auto'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'OPENWRT'
        option encryption 'psk2'
        option key '    '

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
3: wan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    inet 192.168.0.79/24 brd 192.168.0.255 scope global wan
       valid_lft forever preferred_lft forever
10: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    inet 192.168.2.1/24 brd 192.168.2.255 scope global br-lan
       valid_lft forever preferred_lft forever
0:      from all lookup local
32766:  from all lookup main
32767:  from all lookup default
15: wireguard: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN group default qlen 1000
    inet   --/32 brd 255.255.255.255 scope global wireguard
       valid_lft forever preferred_lft forever
default dev wireguard proto static scope link
root@OpenWrt:~# {
>         "kernel": "5.15.137",
>         "hostname": "OpenWrt",
>         "system": "MediaTek MT7621 ver:1 eco:3",
>         "model": "D-Link DIR-853 A3",
>         "board_name": "dlink,dir-853-a3",
>         "rootfs_type": "squashfs",
>         "release": {
c >                 "distribution": "OpenWrt",
>                 "version": "23.05.2",
>                 "revision": "r23630-842932a63d",
>                 "target": "ramips/mt7621",
>                 "description": "OpenWrt 23.05.2 r23630-842932a63d"
>         }
oa-ash: kernel:: not found
-ash: hostname:: not found
-ash: system:: not found
-ash: model:: not found
-ash: board_name:: not found
-ash: rootfs_type:: not found
-ash: release:: not found
-ash: distribution:: not found
-ash: version:: not found
-ash: revision:: not found
-ash: target:: not found
-ash: description:: not found
root@OpenWrt:~# }
dc-ash: syntax error: unexpected "}"
root@OpenWrt:~# package network
-ash: package: not found
root@OpenWrt:~#
root@OpenWrt:~# config interface 'loopback'
roto k-ash: config: not found
root@OpenWrt:~#         option device 'lo'
-ash: option: not found
root@OpenWrt:~#         option proto 'static'
-ash: option: not found
root@OpenWrt:~#         option ipaddr '127.0.0.1'
-ash: option: not found
root@OpenWrt:~#         option netmask '255.0.0.0'
 1-ash: option: not found
root@OpenWrt:~#
9root@OpenWrt:~# config globals 'globals'
ta-ash: config: not found
root@OpenWrt:~#         option ula_prefix 'fddd:82f2:217f::/48'
-ash: option: not found
root@OpenWrt:~#         option packet_steering '1'

327-ash: option: not found
root@OpenWrt:~#
6root@OpenWrt:~# config device
l l-ash: config: not found
root@OpenWrt:~#         option name 'br-lan'
-ash: option: not found
root@OpenWrt:~#         option type 'bridge'
-ash: option: not found
root@OpenWrt:~#         option bridge_empty '1'
-ash: option: not found
root@OpenWrt:~#         list ports 'lan1'
-ash: list: not found
root@OpenWrt:~#         list ports 'lan2'
-ash: list: not found
root@OpenWrt:~#         list ports 'lan4'
-ash: list: not found
root@OpenWrt:~#
root@OpenWrt:~# config interface 'lan'
-ash: config: not found
root@OpenWrt:~#         option device 'br-lan'
-ash: option: not found
root@OpenWrt:~#         option proto 'static'
-ash: option: not found
root@OpenWrt:~#         option ipaddr '192.168.2.1'
-ash: option: not found
root@OpenWrt:~#         option netmask '255.255.255.0'
-ash: option: not found
root@OpenWrt:~#         option ip6assign '60'
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# config interface 'wan'
-ash: config: not found
root@OpenWrt:~#         option device 'wan'
-ash: option: not found
root@OpenWrt:~#         option proto 'dhcp'
-ash: option: not found
root@OpenWrt:~#         option metric '20'
-ash: option: not found
root@OpenWrt:~#         option peerdns '0'
-ash: option: not found
root@OpenWrt:~#         list dns '1.1.1.1'
-ash: list: not found
root@OpenWrt:~#         list dns '1.0.0.1'
-ash: list: not found
root@OpenWrt:~#         option type 'bridge'
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# config interface 'wan6'
-ash: config: not found
root@OpenWrt:~#         option device 'wan'
-ash: option: not found
root@OpenWrt:~#         option proto 'dhcpv6'
-ash: option: not found
root@OpenWrt:~#         option type 'bridge'
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# config interface 'wireguard'
-ash: config: not found
root@OpenWrt:~#         option proto 'wireguard'
-ash: option: not found
root@OpenWrt:~#         option private_key ''
-ash: option: not found
root@OpenWrt:~#         list addresses '  /32'
-ash: list: not found
root@OpenWrt:~#         list addresses 'fd00:0:1:12::67:84:44/128'
-ash: list: not found
root@OpenWrt:~#         list dns '198.51.100.2'
-ash: list: not found
root@OpenWrt:~#
root@OpenWrt:~# config wireguard_wireguard
-ash: config: not found
root@OpenWrt:~#         option description 'credentials(1).conf'
-ash: option: not found
root@OpenWrt:~#         option public_key 
PJblg4='
-ash: option: not found
root@OpenWrt:~#         list allowed_ips '0.0.0.0/0'
-ash: list: not found
root@OpenWrt:~#         list allowed_ips '::/0'
-ash: list: not found
root@OpenWrt:~#         option persistent_keepalive '10'
-ash: option: not found
root@OpenWrt:~#         option endpoint_host '  '
-ash: option: not found
root@OpenWrt:~#         option endpoint_port '51820'
-ash: option: not found
root@OpenWrt:~#         option route_allowed_ips '1'
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# package wireless
-ash: package: not found
root@OpenWrt:~#
root@OpenWrt:~# config wifi-device 'radio0'
-ash: config: not found
root@OpenWrt:~#         option type 'mac80211'
-ash: option: not found
root@OpenWrt:~#         option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:
01:00.0'
-ash: option: not found
root@OpenWrt:~#         option channel '1'
-ash: option: not found
root@OpenWrt:~#         option band '2g'
-ash: option: not found
root@OpenWrt:~#         option htmode 'HT20'
-ash: option: not found
root@OpenWrt:~#         option cell_density '0'
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# config wifi-iface 'default_radio0'
-ash: config: not found
root@OpenWrt:~#         option device 'radio0'
-ash: option: not found
root@OpenWrt:~#         option network 'lan'
-ash: option: not found
root@OpenWrt:~#         option mode 'ap'
-ash: option: not found
root@OpenWrt:~#         option ssid 'JAGUAR'
-ash: option: not found
root@OpenWrt:~#         option encryption 'psk2'
-ash: option: not found
root@OpenWrt:~#         option key ' '
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# config wifi-device 'radio1'
-ash: config: not found
root@OpenWrt:~#         option type 'mac80211'
-ash: option: not found
root@OpenWrt:~#         option path '1e140000.pcie/pci0000:00/0000:00:00.0/0000:
01:00.0+1'
-ash: option: not found
root@OpenWrt:~#         option band '5g'
-ash: option: not found
root@OpenWrt:~#         option htmode 'VHT80'
-ash: option: not found
root@OpenWrt:~#         option cell_density '0'
-ash: option: not found
root@OpenWrt:~#         option channel 'auto'
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# config wifi-iface 'default_radio1'
-ash: config: not found
root@OpenWrt:~#         option device 'radio1'
-ash: option: not found
root@OpenWrt:~#         option network 'lan'
-ash: option: not found
root@OpenWrt:~#         option mode 'ap'
-ash: option: not found
root@OpenWrt:~#         option ssid 'OPENWRT'
-ash: option: not found
root@OpenWrt:~#         option encryption 'psk2'
-ash: option: not found
root@OpenWrt:~#         option key ''
-ash: option: not found
root@OpenWrt:~#
root@OpenWrt:~# 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKN
OWN group default qlen 1000
-ash: can't open LOOPBACK,UP,LOWER_UP: no such file
root@OpenWrt:~#     inet 127.0.0.1/8 scope host lo
-ash: inet: not found
root@OpenWrt:~#        valid_lft forever preferred_lft forever
-ash: valid_lft: not found
root@OpenWrt:~# 3: wan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq stat
e UP group default qlen 1000
-ash: can't open BROADCAST,MULTICAST,UP,LOWER_UP: no such file
root@OpenWrt:~#     inet 192.168.0.79/24 brd 192.168.0.255 scope global wan
-ash: inet: not found
root@OpenWrt:~#        valid_lft forever preferred_lft forever
-ash: valid_lft: not found
root@OpenWrt:~# 10: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noq
ueue state UP group default qlen 1000
-ash: can't open BROADCAST,MULTICAST,UP,LOWER_UP: no such file
root@OpenWrt:~#     inet 192.168.2.1/24 brd 192.168.2.255 scope global br-lan
-ash: inet: not found
root@OpenWrt:~#        valid_lft forever preferred_lft forever
-ash: valid_lft: not found
root@OpenWrt:~# 15: wireguard: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc no
queue state UNKNOWN group default qlen 1000
-ash: can't open POINTOPOINT,NOARP,UP,LOWER_UP: no such file
root@OpenWrt:~#     inet 10.134.84.44/32 brd 255.255.255.255 scope global wiregu
ard
-ash: inet: not found
root@OpenWrt:~#        valid_lft forever preferred_lft forever
-ash: valid_lft: not found
root@OpenWrt:~# default dev wireguard proto static scope link
-ash: default: not found
root@OpenWrt:~# default via 192.168.0.1 dev wan proto static src 192.168.0.79 me
tric 20
-ash: default: not found
root@OpenWrt:~# 176.125.231.42 via 192.168.0.1 dev wan proto static metric 20
-ash: 176.125.231.42: not found
root@OpenWrt:~# 192.168.0.0/24 dev wan proto static scope link metric 20
-ash: 192.168.0.0/24: not found
root@OpenWrt:~# 192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.
1
-ash: 192.168.2.0/24: not found
root@OpenWrt:~# local 10.134.84.44 dev wireguard table local proto kernel scope
host src 10.134.84.44
-ash: local: not in a function
root@OpenWrt:~# local 127.0.0.0/8 dev lo table local proto kernel scope host src
 127.0.0.1
-ash: local: not in a function
root@OpenWrt:~# local 127.0.0.1 dev lo table local proto kernel scope host src 1
27.0.0.1
-ash: local: not in a function
root@OpenWrt:~# broadcast 127.255.255.255 dev lo table local proto kernel scope
link src 127.0.0.1
-ash: broadcast: not found
root@OpenWrt:~# local 192.168.0.79 dev wan table local proto kernel scope host s
rc 192.168.0.79
-ash: local: not in a function
root@OpenWrt:~# broadcast 192.168.0.255 dev wan table local proto kernel scope l
ink src 192.168.0.79
-ash: broadcast: not found
root@OpenWrt:~# local 192.168.2.1 dev br-lan table local proto kernel scope host
 src 192.168.2.1
-ash: local: not in a function
root@OpenWrt:~# broadcast 192.168.2.255 dev br-lan table local proto kernel scop
e link src 192.168.2.1
-ash: broadcast: not found
root@OpenWrt:~# 0:      from all lookup local
-ash: 0:: not found
root@OpenWrt:~# 32766:  from all lookup main
-ash: 32766:: not found
root@OpenWrt:~# 32767:  from all lookup default
-ash: 32767:: not found
root@OpenWrt:~# root@OpenWrt:~#
-ash: root@OpenWrt:~#: not found
root@OpenWrt:~#

trendy · January 22, 2024, 11:28am

It isn't evident from the configuration you posted where is the guest interface. There is only a lan interface and both SSIDs are assigned to it.

thushk101 · January 22, 2024, 12:34pm

i restored it with previous configuration..because of it didn't worked.

normally if we create a guest wifi the ssid like this..

wifi 2.4ghz A
wifi 5ghz B
and wifi 5ghz guest or wifi 2.4ghz guest
but it didnt happened

trendy · January 22, 2024, 2:18pm

We need to see what have you done to understand where is the mistake.

thushk101 · January 22, 2024, 2:24pm

I will recreate again, then i will post the configuration