WRT3200ACM on Openwrt no internet

Installing and Using OpenWrt Network and Wireless Configuration
1

Trying to install openwrt on WRT3200acm (router2), i am using a backup of config from another openwrt wrt3200acm (router 1) which is identical in hardware. For unknown reason i cant connect to internet even when i disable openvpn and wireguard config adn reboot. Both routers are on the same network, is that an issue?

Please can someone help me

My config is as below

root@OpenWrt:~# ubus call system board
{
        "kernel": "5.15.162",
        "hostname": "OpenWrt",
        "system": "ARMv7 Processor rev 1 (v7l)",
        "model": "Linksys WRT3200ACM",
        "board_name": "linksys,wrt3200acm",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.4",
                "revision": "r24012-d8dd03c46f",
                "target": "mvebu/cortexa9",
                "description": "OpenWrt 23.05.4 r24012-d8dd03c46f"
        }
}
root@OpenWrt:~#

root@OpenWrt:~# cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdb6:f6e7:56f8::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'lan4'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config device
        option name 'wan'
        option macaddr '62:38:e0:b7:c9:10'

config interface 'wan'
        option device 'wan'
        option proto 'dhcp'
        option peerdns '0'
        list dns '8.8.8.8'
        list dns '8.8.4.4'

config interface 'wan6'
        option device 'wan'
        option proto 'dhcpv6'

config interface 'nordvpntun'
        option proto 'none'
        option device 'tun0'
        option disabled '1'
        option auto '0'

config interface 'wg2'
        option proto 'wireguard'
        option private_key '********'
        list addresses '10.5.0.2'
        option mtu '1499'
        list dns '103.86.96.100'
        list dns '103.86.99.100'
        option disabled '1'
        option auto '0'

config wireguard_wg2
        option description 'us8103.nordvpn.com'
        list allowed_ips '0.0.0.0/0'
        option route_allowed_ips '1'
        option endpoint_host '185.247.70.67'
        option endpoint_port '51820'
        option persistent_keepalive '25'
        option public_key '**********'

config wireguard_wg2
        option description '185.255.130.149'
        list allowed_ips '0.0.0.0/0'
        option endpoint_host '185.255.130.149'
        option endpoint_port '51820'
        option persistent_keepalive '25'
        option public_key '*********'
        option disabled '1'

config wireguard_wg2
        option description 'us9157'
        option public_key '*******************'
        list allowed_ips '0.0.0.0/0'
        option route_allowed_ips '1'
        option endpoint_host '2.56.190.73'
        option endpoint_port '51820'
        option persistent_keepalive '25'
        option disabled '1'

root@OpenWrt:~# cat /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wan'
        list network 'wan6'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config zone
        option name 'vpnfirewall'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'nordvpntun'

config forwarding
        option src 'lan'
        option dest 'vpnfirewall'

config zone
        option name 'wgfirewall'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'
        list network 'wg2'

config forwarding
        option src 'lan'
        option dest 'wgfirewall'

root@OpenWrt:~# ip ro
192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.1
root@OpenWrt:~#
2

Note router 1 config as below

root@OpenWrt:~# ubus call system board
{
        "kernel": "5.15.150",
        "hostname": "OpenWrt",
        "system": "ARMv7 Processor rev 1 (v7l)",
        "model": "Linksys WRT3200ACM",
        "board_name": "linksys,wrt3200acm",
        "rootfs_type": "squashfs",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.3",
                "revision": "r23809-234f1a2efa",
                "target": "mvebu/cortexa9",
                "description": "OpenWrt 23.05.3 r23809-234f1a2efa"
        }
}
3

Identical on the same network as in you made NO changes i.e. IPs, MACs, DHCP

2 Likes
4

That's right, i just connected router 2 to the same network with the same config on router 1 restored on router 2

5

Can you please explain your expected outcome for Router 1 and Router 2?

6

There is an issue on router 1 where wireguard config is not working for MS teams. I dont want to disrupt the connection while troubleshooting router 1, so i created router 2 with the same config, trying to figure out the issue in router 1.

7

To clarify: you have 2 routers simultaneously connected to the same network and both of them assign themselves the same local ip address 192.168.1.1? If so then obviously things are not going to work.

If you have only 1 router active at a time then possibly the host device you are using caches something from router 1 which is irrelevant to router 2, such as MAC address.

Regardless, it would help if you describe (or better draw) the topology of your network. As in, what is connected to what and in which way.

8

I seem to recall a similar issue where it was the mtu which was responsible for the problem. I'll see if I can find that thread.

In the meantime, @antonk has described why two identically configured devices will not work when connected to each other.

1 Like
9
1 Like
10

here is the screenshot of the drawing, how can i change the IP to be something different, command or change in luci, pls can you provide instructions

image
image1593×907 38.5 KB

11

Pls can you tell me how to change the MTU pls

12

I may be wrong but I don't think that there is a way to have 2 routers on the same local network. So if you really need to have both devices active simultaneously, you should be looking at creating a separate network segment for the 2nd device. I can not immediately provide instructions for that but this is surely covered in OpenWrt documentation.

13

Most residential ISPs will only issue a single IPv4 address to you, so there will be no way to achieve what you have in your diagram.

I would recommend simply removing the second router from the picture (and the unmanaged switch, too) and work to resolve the issue on router 1. It is true you may have momentary interruptions of your internet, but that is going to be the best way to achieve the goal.

Or, alternatively, reset router 2 to defaults. Set it up behind router 1 (and change the lan IP of router 2 to a different subnet) and then setup wireguard (your wireguard tunnel must be disabled on router 1).

1 Like
14

You will add the line as shown in the linked thread. Or, from the LuCI web interface:

Network > Interfaces > [edit the wireguard interface] > Advanced Settings > MTU

Try a value of 1420, or maybe lower.

You can calculate it with methods like those outlined here:

1 Like
15

Thank you sir, that seems to be working