Wlan not connecting

Nightwalker83 · October 29, 2025, 2:24am

Hi,

Trying to setup wireless on a fresh OpenWRT install but I can not connect using the ip address of the wlan interface there the wireless device is attached. Each time I try to wirelessly access my Banana Pi R64 it returns page can not be display and via ssh “host unreachable”.

Connecting to Lan is working and the ping of. openwrt.org works just fine. It is just not connectting via wireless which, is odd because it still needs to go over wireless to reach the main router to get to the internet in the first place.

Thanks,

Aaron

psherman · October 29, 2025, 2:59am

Let’s see your configs to start troubleshooting

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):

Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall

Nightwalker83 · October 29, 2025, 3:34am

system board

{
"kernel": "5.15.167",
"hostname": "OpenWrt",
"system": "ARMv8 Processor rev 4",
"model": "Bananapi BPI-R64",
"board_name": "bananapi,bpi-r64",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "23.05.5",
"revision": "r24106-10cc5fcd00",
"target": "mediatek/mt7622",
"description": "OpenWrt 23.05.5 r24106-10cc5fcd00"
}
}

dhcp

	option domainneeded '1'
	option boguspriv '1'
	option filterwin2k '0'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option nonegcache '0'
	option cachesize '1000'
	option authoritative '1'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option nonwildcard '1'
	option localservice '1'
	option ednspacket_max '1232'
	option filter_aaaa '0'
	option filter_a '0'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'
	option dhcpv4 'server'
	option dhcpv6 'server'
	option ra 'server'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'

config host
	option name 'MyCloud-1FULXY'
	option ip '192.168.1.163'
	option mac '00:00:C0:44:72:EF'

firewall

config defaults
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'

config zone
	option name 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	list network 'lan'

config zone
	option name 'wan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'
	list network 'wwan'

config forwarding
	option src 'lan'
	option dest 'wan'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	list icmp_type 'router-solicitation'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'router-advertisement'
	list icmp_type 'neighbour-advertisement'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest 'lan'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest 'lan'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fdad:ba04:6d4f::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.1'
	option netmask '255.255.255.0'
	option ip6assign '60'
	list dns '1.1.1.1'

config interface 'wwan'
	option proto 'static'
	option device 'wlan'
	option ipaddr '192.168.1.2'
	option netmask '255.255.255.0'
	option gateway '192.168.1.254'
	list dns '192.168.1.254'

wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/18000000.wmac'
	option channel '1'
	option band '2g'
	option htmode 'HT20'
	option cell_density '0'
	option country 'AU'

config wifi-iface 'wifinet0'
	option device 'radio0'
	option mode 'sta'
	option network 'wwan'
	option ssid 'redacted'
	option bssid 'redacted'
	option encryption 'psk2'
	option key 'redacted'
	option ifname 'wlan'
	option macaddr 'redacted'

frollic · October 29, 2025, 5:05am

Why is there a wwan Interface in the same subnet as br-lan ?

psherman · October 29, 2025, 5:47am

The first thing you should do is upgrade to a supported version of OpenWrt.

Then, address the issue that @frollic pointed out -- the wwan and the lan are on the same subnet. This will not work. You must change the subnet of one of the networks, so likely that will be the R64's lan. Change it to something like 192.168.23.1 so it doesn't collide with the upstream network.

Also:

the wan zone normally treats the upstream network as hostile and has the input rule set to REJECT by default. You've changed it to ACCEPT which means the upstream network will be able to reach your R64's administrative surfaces (ssh/LuCI). If the upstream network is fully trusted, this is okay. But if not -- for example, if this is connecting to a public wifi or anything that you can't assume is safe, the rule should be set back to REJECT.

Nightwalker83 · October 29, 2025, 8:06am

Is there an easier and less time consuming method of flashing new image. Keep having to completely format the sd card then rewrite the new image to the sd card which, is annoying because it takes and my laptop is the only device with an sd card reader which I put back in its storage bag afterwards.

Edit:

Managed to get the wlan on the image version "23.05.5" again! For some reason installing "openwrt-24.10.4-711c90c157df-mediatek-mt7622-bananapi_bpi-r64-squashfs-sysupgrade.itb" gives me this error:

Image check failed:

Wed Oct 29 12:22:05 UTC 2025 upgrade: The device is supported, but the config is incompatible to the new image (1.1->1.2). Please upgrade without keeping config (sysupgrade -n). Wed Oct 29 12:22:05 UTC 2025 upgrade: SPI-NAND flash layout changes require bootloader update Image check failed.

Nightwalker83 · October 29, 2025, 8:10pm

I will be installing relayd which, requires changing it anyway this it so I passthrough the main routers ip addresses to the devices behind the pi other it will think it is on two different networks instead of one.

psherman · October 29, 2025, 8:19pm

It that's the case, then I'd recommend the following:

Upgrade your device and start from a fresh/default config.
- You can follow the directions on the R64 page to update the bootloader and then install 24.10.
From the fresh configuration, follow the relayd documentation to configure your device for this mode of operation.

Nightwalker83 · October 30, 2025, 8:30am

New configuration which, seem to be working:

System

{
"kernel": "6.6.110",
"hostname": "OpenWrt",
"system": "ARMv8 Processor rev 4",
"model": "Bananapi BPI-R64",
"board_name": "bananapi,bpi-r64",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "24.10.4",
"revision": "r28959-29397011cc",
"target": "mediatek/mt7622",
"description": "OpenWrt 24.10.4 r28959-29397011cc",
"builddate": "1760891865"
}
}

dhcp

config dnsmasq
        option domainneeded '1'
        option boguspriv '1'
        option filterwin2k '0'
        option localise_queries '1'
        option rebind_protection '1'
        option rebind_localhost '1'
        option local '/lan/'
        option domain 'lan'
        option expandhosts '1'
        option nonegcache '0'
        option cachesize '1000'
        option authoritative '1'
        option readethers '1'
        option leasefile '/tmp/dhcp.leases'
        option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
        option nonwildcard '1'
        option localservice '1'
        option ednspacket_max '1232'
        option filter_aaaa '0'
        option filter_a '0'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option leasetime '12h'
        option dhcpv4 'server'

Firewall

config defaults
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option synflood_protect '1'

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'
        list network 'wlan'

config zone
        option name 'relay'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'
        list network 'relay'
        list network 'wlan'

network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd90:d3d7:941c::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'lan4'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.2.1'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option gateway '192.168.1.2'
        list dns '1.1.1.1'
config interface 'wlan'
        option proto 'static'
        option device 'radio0.network1'
        option ipaddr '192.168.1.2'
        option netmask '255.255.255.0'
        option gateway '192.168.1.254'
        list dns '192.168.1.254'

config interface 'relay'
        option proto 'relay'
        option ipaddr '192.168.1.2'
        list network 'lan'
        list network 'wlan'

wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option phy 'wl0'
        option country 'AU'
        option cell_density '0'

config wifi-iface 'wifinet1'
        option device 'radio0'
        option mode 'sta'
        option ssid 'redacted'
        option encryption 'psk2'
        option ifname 'wlan'
        option macaddr 'redacted'
        option key 'redacted'
        option network 'wlan'

psherman · October 30, 2025, 4:48pm

A network must be in a maximum of one zone. Here you have two zones containing the lan and wlan. Delete them from one of the zones.

Nightwalker83:

config zone
        option name 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'
        list network 'wlan'

config zone
        option name 'relay'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'ACCEPT'
        list network 'lan'
        list network 'relay'
        list network 'wlan'

Nightwalker83 · October 30, 2025, 10:37pm

Should have realized when the tutorial on relay said setup a new zone that I could have just used the existing zone instead.