OpenWrt Forum Archive

Topic: mwan3; multi-wan policy routing (general topic)

The content of this topic has been archived between 22 May 2013 and 6 May 2018. Unfortunately there are posts – most likely complete pages – missing.

Post #601
arfett
17 Feb 2014, 22:37
eriche wrote:

I am using the latest build from Trunk r39586 for my ASUS N16.

For the WAN-Interface I set up a UMTS Huawei Stick
For the WAN2-Interface I have a WLAN Client Connection to another Router.

MWAN3 never Shows both Interfaces green in the Overview.
But both are active and working,...

Whats wrong?
What do I have to check or Change?

GreeT`s eRich

We may never know if you don't post any information at all. Try reading the first post in this thread.

(Last edited by arfett on 18 Feb 2014, 19:53)

Post #602
eriche
19 Feb 2014, 10:27

Finally I get it working.
When making a Speedtest, the result of the Download speed was like supposed, almost double.
BUT
The Uploadtest failed at all sad

Is this a normal behavior because the other site doesn`t know on which Internetprovider it sould send the data back?

After a reboot, nothing was working again - both Internet Providers where online, but no site was opening.
Now I buyed a TP-Link 1043 in the hope that it works more stable then my ASUS Routers.
I always had troubles with OpenWRT and ASUS,...

Greet`s Erich

Post #603
arfett
19 Feb 2014, 21:17
eriche wrote:

Finally I get it working.
When making a Speedtest, the result of the Download speed was like supposed, almost double.
BUT
The Uploadtest failed at all sad

Is this a normal behavior because the other site doesn`t know on which Internetprovider it sould send the data back?

After a reboot, nothing was working again - both Internet Providers where online, but no site was opening.
Now I buyed a TP-Link 1043 in the hope that it works more stable then my ASUS Routers.
I always had troubles with OpenWRT and ASUS,...

Greet`s Erich

You really need to post some troubleshooting information. At the least what it shows in the first post of this thread or from the troubleshooting page on the LuCI application. We can't and won't help you if you don't help us.

Also please be more detailed when describing what you are doing. If we don't know what or where you are downloading/uploading then we can't tell you what is normal behavior.

(Last edited by arfett on 19 Feb 2014, 21:32)

Post #604
eriche
20 Feb 2014, 18:38

Hello Arfett

I understand that you need more details to give me Support wink

My scenario is as following
I have on my Openwrt Router a wireless client Interface to get Internet from another Router.
Sadly the line is very slow in the area I live and also it breaks once a week,…
So I bought a 3g USB Modem as backup or for loadbalancing – maybe I get 6Mbit, than I am happy.

I have to use Openwrt from Trunk because I own an ASUS N16 and a TPLink WR1042ND.
With both Routers it fails to get run 2 Internetproviders at the same time.
I am sure I didn`t have that problems with the 10.3 version of Openwrt on my broken Router.
With the trunk firmware a wireless client bridge works without doing something – in the past I had to build a relayed stuff to bring the shared network to LAN ports.
So I guess the basic Switch settings and the routes are different on a basic installation.

Basically I don`t understand the “Switch” settings and VLAN/ Firewall - Gateway stuff – that’s for sure the problem.

Here you can see my General Overview - everything is green - both Interfaces are up.
http://imagizer.imageshack.us/v2/280x200q90/809/r670.jpg


The Switch is Default because I don`t understand the wiki
http://imagizer.imageshack.us/v2/280x200q90/577/d0tm.jpg


My Interfaces look like following
http://imagizer.imageshack.us/v2/280x200q90/199/nkc9.jpg


The Firewall I set up like in Tutorials shown
http://imagizer.imageshack.us/v2/280x200q90/35/6sr5.jpg


MultiWAN Overview
http://imagizer.imageshack.us/v2/280x200q90/268/2zx3.jpg


MultiWAN Rules
http://imagizer.imageshack.us/v2/280x200q90/22/p9bv.jpg


My IFCONFIG

root@OpenWrt:~# ifconfig
3g-wan    Link encap:Point-to-Point Protocol
          inet addr:46.206.51.47  P-t-P:10.64.64.64  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:47 errors:0 dropped:0 overruns:0 frame:0
          TX packets:50 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:3972 (3.8 KiB)  TX bytes:3649 (3.5 KiB)

br-lan    Link encap:Ethernet  HWaddr xyz
          inet addr:192.168.1.100  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fdcc:e3bb:588f::1/60 Scope:Global
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2889 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2534 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:302100 (295.0 KiB)  TX bytes:1109458 (1.0 MiB)

eth0      Link encap:Ethernet  HWaddr xyz
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:22 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:4

eth0.1    Link encap:Ethernet  HWaddr xyz
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2889 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2537 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:302100 (295.0 KiB)  TX bytes:1109584 (1.0 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:277 errors:0 dropped:0 overruns:0 frame:0
          TX packets:277 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:24564 (23.9 KiB)  TX bytes:24564 (23.9 KiB)

wlan0     Link encap:Ethernet  HWaddr xyz
          inet addr:192.168.1.8  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1189 errors:0 dropped:0 overruns:0 frame:0
          TX packets:528 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:659147 (643.6 KiB)  TX bytes:53991 (52.7 KiB)

My route -n

root@OpenWrt:~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    0      0        0 br-lan
0.0.0.0         192.168.1.1     0.0.0.0         UG    10     0        0 wlan0
0.0.0.0         10.64.64.64     0.0.0.0         UG    20     0        0 3g-wan
10.64.64.64     0.0.0.0         255.255.255.255 UH    0      0        0 3g-wan
192.168.1.0     0.0.0.0         255.255.255.0   U     0      0        0 br-lan
192.168.1.0     0.0.0.0         255.255.255.0   U     10     0        0 wlan0

Pinging is not possible.

If you Need some more Information please let me know.
It would be the greatest if this MultiWAN would work and gives me freedom with my Internet Connection.

Thanks Erich

Post #605
arfett
20 Feb 2014, 19:10
eriche wrote:

If you Need some more Information please let me know.

I recommend editing the last post and remove ifconfig/route -n sections and just put in the contents of the troubleshooting page from the GUI. It shows just about anything we'll need.

(Last edited by arfett on 20 Feb 2014, 19:23)

Post #606
eriche
20 Feb 2014, 19:30

Here you find the whole Page of the Troubleshooting of MWAN3

Software versions : 

OpenWrt - OpenWrt Barrier Breaker r39586 (r39586)
mwan3 - 1.3-0
luci-app-mwan3 - 1.1-17

Firewall default output policy (must be ACCEPT) : 

ACCEPT

Output of "ip route show" : 

default via 192.168.1.1 dev br-lan  proto static 
default via 192.168.1.1 dev wlan0  proto static  metric 10 
default via 10.64.64.64 dev 3g-wan  proto static  metric 20 
10.64.64.64 dev 3g-wan  proto kernel  scope link  src 46.206.51.47 
192.168.1.0/24 dev br-lan  proto kernel  scope link  src 192.168.1.100 
192.168.1.0/24 dev wlan0  proto static  scope link  metric 10

Output of "ip rule show" : 

0:    from all lookup local 
1001:    from all fwmark 0x100/0xff00 lookup 1001 
1002:    from all fwmark 0x200/0xff00 lookup 1002 
1016:    from all fwmark 0x1000/0xff00 lookup 1016 
1017:    from all fwmark 0x1100/0xff00 lookup 1017 
1018:    from all fwmark 0x1200/0xff00 lookup 1018 
1019:    from all fwmark 0x1300/0xff00 lookup 1019 
1020:    from all fwmark 0x1400/0xff00 lookup 1020 
32766:    from all lookup main 
32767:    from all lookup default

Output of "ip route list table 1001-1099" (1001-1015 = interface tables, 1016-1099 = policy tables) : 

1001
default via 10.64.64.64 dev 3g-wan 
1002
default via 192.168.1.1 dev wlan0 
1016
default via 10.64.64.64 dev 3g-wan  metric 1 
1017
default via 192.168.1.1 dev wlan0  metric 1 
1018
default  metric 1 
    nexthop via 10.64.64.64  dev 3g-wan weight 3
    nexthop via 192.168.1.1  dev wlan0 weight 2
1019
default via 10.64.64.64 dev 3g-wan  metric 1 
default via 192.168.1.1 dev wlan0  metric 2 
1020
default via 192.168.1.1 dev wlan0  metric 1 
default via 10.64.64.64 dev 3g-wan  metric 2

Output of "iptables -L -t mangle -v -n | awk '/mwan3/' RS=" : 

Chain PREROUTING (policy ACCEPT 8043 packets, 1061K bytes)
 pkts bytes target     prot opt in     out     source               destination         
10812 1837K mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 8043 1061K fwmark     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 6540 packets, 617K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 8972 1307K mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 6580 packets, 1363K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 9289 2359K mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 6582 packets, 1364K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 9290 2359K mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_default (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1491  442K MARK       all  --  *      *       0.0.0.0/0            224.0.0.0/3          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    2   120 MARK       all  --  *      *       0.0.0.0/0            127.0.0.0/8          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            127.0.0.1            mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            10.64.64.64          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
  161 22568 MARK       all  --  *      *       0.0.0.0/0            192.168.1.0/24       mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            192.168.1.0/24       mark match 0x0/0xff00 MARK xset 0x7f00/0xff00

Chain mwan3_interfaces (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 4084  341K mwan3_wan2  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 3740  313K mwan3_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_post (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 1829  154K MARK       all  --  *      3g-wan  0.0.0.0/0           !10.64.64.64          mark match ! 0x7f00/0xff00 MARK xset 0x100/0xff00
 2394  194K MARK       all  --  *      wlan0   0.0.0.0/0           !192.168.1.0/24       mark match ! 0x7f00/0xff00 MARK xset 0x200/0xff00
 4338  850K MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x8000/0x8000 MARK and 0xffff7fff
18262 3666K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK save mask 0xff00

Chain mwan3_pre (2 references)
 pkts bytes target     prot opt in     out     source               destination         
20101 4196K CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK restore mask 0xff00
 1805  156K MARK       all  --  3g-wan *      !10.64.64.64          0.0.0.0/0            mark match ! 0x7f00/0xff00 MARK xset 0x8100/0xff00
 2546  697K MARK       all  --  wlan0  *      !192.168.1.0/24       0.0.0.0/0            mark match ! 0x7f00/0xff00 MARK xset 0x8200/0xff00
 6137  894K mwan3_default  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
 4088  341K mwan3_interfaces  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
  288 21839 mwan3_rules  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
  127 10639 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00 MARK xset 0x7f00/0xff00

Chain mwan3_rules (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   89  6276 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00 MARK xset 0x1200/0xff00

Chain mwan3_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1716  144K MARK       all  --  *      *       46.206.51.47         0.0.0.0/0            MARK xset 0x100/0xff00

Chain mwan3_wan2 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 2084  175K MARK       all  --  *      *       192.168.1.8          0.0.0.0/0            MARK xset 0x200/0xff00

Output of "ifconfig" : 

3g-wan    Link encap:Point-to-Point Protocol  
          inet addr:46.206.51.47  P-t-P:10.64.64.64  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:1813 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1837 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3 
          RX bytes:155767 (152.1 KiB)  TX bytes:154586 (150.9 KiB)

br-lan    Link encap:Ethernet  HWaddr xyz  
          inet addr:192.168.1.100  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fdcc:e3bb:588f::1/60 Scope:Global
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5587 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4939 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:628988 (614.2 KiB)  TX bytes:2087586 (1.9 MiB)

eth0      Link encap:Ethernet  HWaddr xyz  
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:22 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:4 

eth0.1    Link encap:Ethernet  HWaddr xyz  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5587 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4942 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:628988 (614.2 KiB)  TX bytes:2087712 (1.9 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:297 errors:0 dropped:0 overruns:0 frame:0
          TX packets:297 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:26621 (25.9 KiB)  TX bytes:26621 (25.9 KiB)

wlan0     Link encap:Ethernet  HWaddr xyz  
          inet addr:192.168.1.8  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:7510 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2755 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:1580384 (1.5 MiB)  TX bytes:299382 (292.3 KiB)

Output of "cat /etc/config/mwan3" : 

config rule 'ruleErich2'
    option dest_ip 'whatismyipaddress.com'
    option proto 'all'
    option use_policy 'wan2_only'

config rule 'ruleErich1'
    option proto 'all'
    option dest_ip 'obsolete.whatsmyip.org'
    option use_policy 'wan1_only'

config rule 'rule6'
    option use_policy 'wan1_wan2_loadbalanced'
    option proto 'all'

config interface 'wan'
    option enabled '1'
    list track_ip '8.8.8.8'
    list track_ip '208.67.220.220'
    option reliability '1'
    option count '1'
    option timeout '2'
    option interval '5'
    option down '3'
    option up '8'
    option reroute '0'

config interface 'wan2'
    option enabled '1'
    list track_ip '8.8.8.8'
    list track_ip '208.67.220.220'
    option reliability '1'
    option count '1'
    option timeout '2'
    option interval '5'
    option down '3'
    option up '8'
    option reroute '0'

config member 'wan1_m1_w3'
    option interface 'wan'
    option metric '1'
    option weight '3'

config member 'wan1_m2_w3'
    option interface 'wan'
    option metric '2'
    option weight '3'

config member 'wan2_m1_w2'
    option interface 'wan2'
    option metric '1'
    option weight '2'

config member 'wan2_m2_w2'
    option interface 'wan2'
    option metric '2'
    option weight '2'

config policy 'wan1_only'
    list use_member 'wan1_m1_w3'

config policy 'wan2_only'
    list use_member 'wan2_m1_w2'

config policy 'wan1_wan2_loadbalanced'
    list use_member 'wan1_m1_w3'
    list use_member 'wan2_m1_w2'

config policy 'wan1_pri_wan2_sec'
    list use_member 'wan1_m1_w3'
    list use_member 'wan2_m2_w2'

config policy 'wan2_pri_wan1_sec'
    list use_member 'wan1_m2_w3'
    list use_member 'wan2_m1_w2'

Output of "cat /etc/config/network" : 

config switch 'eth0'
    option name 'switch0'
    option reset '1'
    option enable_vlan '1'

config switch_vlan 'eth0_1'
    option device 'switch0'
    option vlan '1'
    option ports '1 2 3 4 8t'

config switch_vlan 'eth0_2'
    option device 'switch0'
    option vlan '2'
    option ports '0 8t'

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fdcc:e3bb:588f::/48'

config interface 'lan'
    option ifname 'eth0.1'
    option type 'bridge'
    option proto 'static'
    option ipaddr '192.168.1.100'
    option netmask '255.255.255.0'
    option dns '8.8.8.8'
    option ip6assign '60'
    option gateway '192.168.1.1'

config interface 'wan'
    option _orig_ifname 'eth0.2 radio0.network1'
    option _orig_bridge 'true'
    option proto '3g'
    option service 'umts'
    option apn 'a1.net'
    PASSWORD HIDDEN
    USERNAME HIDDEN
    option device '/dev/ttyUSB0'
    option peerdns '0'
    option dns '8.8.8.8'
    option metric '20'

config interface 'wan2'
    option proto 'dhcp'
    option metric '10'


Powered by LuCI Trunk (svn-r9955) OpenWrt Barrier Breaker r39586
Post #607
arfett
20 Feb 2014, 20:03

eriche,

Please try changing your LAN from 192.168.1.100 to 192.168.2.100 or some other subnet and reboot the router. Let me know what happens.

(Last edited by arfett on 20 Feb 2014, 20:06)

Post #608
eriche
20 Feb 2014, 22:45

Thank you so much Arfett for your help!
We come on step closer, but it still is not working stable.

I changed the IP Address of the LAN Interface from 192.168.1.100 to 192.168.2.100
And I removed the Gateway and the DNS of the LAN Interface.

http://imagizer.imageshack.us/v2/280x200q90/809/mbzw.jpg


As well I changed the settings from my PC
From
  IP: 192.168.1.6
  Mask: 255.255.255.0
  GW: 192.168.1.1 (IP of the WLAN Internet Router)
  DNS: 192.168.1.1
To
  IP: 192.168.2.6
  Mask: 255.255.255.0
  GW: 192.168.2.100 (OpenWRT Multiwan Router)
  DNS: 192.168.2.100


Then it was working somehow.
But from 1 second to the other is seems laggy.

Also strange was – I set 2 Rules for the WhatIsMyIP Websites.
And when I was refreshing them permanently, the IP Address was changing too.
For me it seems that the MWAN3 tries to synchronize the Providers and then looses the sync, and so on,…

After a reboot I had again the Problem, that the speedtest gave me a doubled download but the upload test fails.

http://imagizer.imageshack.us/v2/280x200q90/843/tkvr.jpg


Software versions : 

OpenWrt - OpenWrt Barrier Breaker r39586 (r39586)
mwan3 - 1.3-0
luci-app-mwan3 - 1.1-17

Firewall default output policy (must be ACCEPT) : 

ACCEPT

Output of "ip route show" : 

default via 192.168.1.1 dev wlan0  proto static  metric 10 
default via 10.64.64.64 dev 3g-wan  proto static  metric 20 
10.64.64.64 dev 3g-wan  proto kernel  scope link  src 46.75.93.140 
192.168.1.0/24 dev wlan0  proto static  scope link  metric 10 
192.168.2.0/24 dev br-lan  proto kernel  scope link  src 192.168.2.100

Output of "ip rule show" : 

0:    from all lookup local 
1001:    from all fwmark 0x100/0xff00 lookup 1001 
1002:    from all fwmark 0x200/0xff00 lookup 1002 
1016:    from all fwmark 0x1000/0xff00 lookup 1016 
1017:    from all fwmark 0x1100/0xff00 lookup 1017 
1018:    from all fwmark 0x1200/0xff00 lookup 1018 
1019:    from all fwmark 0x1300/0xff00 lookup 1019 
1020:    from all fwmark 0x1400/0xff00 lookup 1020 
32766:    from all lookup main 
32767:    from all lookup default

Output of "ip route list table 1001-1099" (1001-1015 = interface tables, 1016-1099 = policy tables) : 

1001
default via 10.64.64.64 dev 3g-wan 
1002
default via 192.168.1.1 dev wlan0 
1016
default via 10.64.64.64 dev 3g-wan  metric 1 
1017
default via 192.168.1.1 dev wlan0  metric 1 
1018
default  metric 1 
    nexthop via 10.64.64.64  dev 3g-wan weight 3
    nexthop via 192.168.1.1  dev wlan0 weight 2
1019
default via 10.64.64.64 dev 3g-wan  metric 1 
default via 192.168.1.1 dev wlan0  metric 2 
1020
default via 192.168.1.1 dev wlan0  metric 1 
default via 10.64.64.64 dev 3g-wan  metric 2

Output of "iptables -L -t mangle -v -n | awk '/mwan3/' RS=" : 

Chain PREROUTING (policy ACCEPT 12808 packets, 10M bytes)
 pkts bytes target     prot opt in     out     source               destination         
14373   11M mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
12808   10M fwmark     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 1561 packets, 167K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2759  281K mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 1736 packets, 581K bytes)
 pkts bytes target     prot opt in     out     source               destination         
 2984 1059K mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 12866 packets, 11M bytes)
 pkts bytes target     prot opt in     out     source               destination         
14242   11M mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_default (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   80 25095 MARK       all  --  *      *       0.0.0.0/0            224.0.0.0/3          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            127.0.0.0/8          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            127.0.0.1            mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            10.64.64.64          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
   55  3797 MARK       all  --  *      *       0.0.0.0/0            192.168.1.0/24       mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
   42  2435 MARK       all  --  *      *       0.0.0.0/0            192.168.2.0/24       mark match 0x0/0xff00 MARK xset 0x7f00/0xff00

Chain mwan3_interfaces (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  643 44065 mwan3_wan2  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
  309 22223 mwan3_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_post (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 2202  208K MARK       all  --  *      3g-wan  0.0.0.0/0           !10.64.64.64          mark match ! 0x7f00/0xff00 MARK xset 0x100/0xff00
 2295  181K MARK       all  --  *      wlan0   0.0.0.0/0           !192.168.1.0/24       mark match ! 0x7f00/0xff00 MARK xset 0x200/0xff00
 7564   10M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x8000/0x8000 MARK and 0xffff7fff
17001   12M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK save mask 0xff00

Chain mwan3_pre (2 references)
 pkts bytes target     prot opt in     out     source               destination         
17357   12M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK restore mask 0xff00
 3832 5067K MARK       all  --  3g-wan *      !10.64.64.64          0.0.0.0/0            mark match ! 0x7f00/0xff00 MARK xset 0x8100/0xff00
 3734 4948K MARK       all  --  wlan0  *      !192.168.1.0/24       0.0.0.0/0            mark match ! 0x7f00/0xff00 MARK xset 0x8200/0xff00
 1006  110K mwan3_default  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
  652 46558 mwan3_interfaces  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
  268 14721 mwan3_rules  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
   20  3941 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00 MARK xset 0x7f00/0xff00

Chain mwan3_rules (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    2   104 MARK       all  --  *      *       0.0.0.0/0            66.80.82.69          mark match 0x0/0xff00 MARK xset 0x1100/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            67.203.139.148       mark match 0x0/0xff00 MARK xset 0x1100/0xff00
   24  1080 MARK       all  --  *      *       0.0.0.0/0            208.64.38.55         mark match 0x0/0xff00 MARK xset 0x1000/0xff00
   70  3420 MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00 MARK xset 0x1200/0xff00

Chain mwan3_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   94  7896 MARK       all  --  *      *       46.75.93.140         0.0.0.0/0            MARK xset 0x100/0xff00

Chain mwan3_wan2 (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  290 23941 MARK       all  --  *      *       192.168.1.8          0.0.0.0/0            MARK xset 0x200/0xff00

Output of "ifconfig" : 

3g-wan    Link encap:Point-to-Point Protocol  
          inet addr:46.75.93.140  P-t-P:10.64.64.64  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:3840 errors:1 dropped:0 overruns:0 frame:0
          TX packets:2209 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3 
          RX bytes:5067595 (4.8 MiB)  TX bytes:208250 (203.3 KiB)

br-lan    Link encap:Ethernet  HWaddr xy
          inet addr:192.168.2.100  Bcast:192.168.2.255  Mask:255.255.255.0
          inet6 addr: fdcc:e3bb:588f::1/60 Scope:Global
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6728 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9748 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:665590 (649.9 KiB)  TX bytes:11149928 (10.6 MiB)

eth0      Link encap:Ethernet  HWaddr xy
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:4 

eth0.1    Link encap:Ethernet  HWaddr xy
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6728 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9748 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:665590 (649.9 KiB)  TX bytes:11149928 (10.6 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:26 errors:0 dropped:0 overruns:0 frame:0
          TX packets:26 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:2775 (2.7 KiB)  TX bytes:2775 (2.7 KiB)

wlan0     Link encap:Ethernet  HWaddr xy
          inet addr:192.168.1.8  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::beae:c5ff:fec4:1583/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4074 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2419 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:5072181 (4.8 MiB)  TX bytes:272077 (265.7 KiB)

Output of "cat /etc/config/mwan3" : 

config rule 'ruleErich2'
    option dest_ip 'whatismyipaddress.com'
    option proto 'all'
    option use_policy 'wan2_only'

config rule 'ruleErich1'
    option proto 'all'
    option dest_ip 'obsolete.whatsmyip.org'
    option use_policy 'wan1_only'

config rule 'rule6'
    option use_policy 'wan1_wan2_loadbalanced'
    option proto 'all'

config interface 'wan'
    option enabled '1'
    list track_ip '8.8.8.8'
    list track_ip '208.67.220.220'
    option reliability '1'
    option count '1'
    option timeout '2'
    option interval '5'
    option down '3'
    option up '8'
    option reroute '0'

config interface 'wan2'
    option enabled '1'
    list track_ip '8.8.8.8'
    list track_ip '208.67.220.220'
    option reliability '1'
    option count '1'
    option timeout '2'
    option interval '5'
    option down '3'
    option up '8'
    option reroute '0'

config member 'wan1_m1_w3'
    option interface 'wan'
    option metric '1'
    option weight '3'

config member 'wan1_m2_w3'
    option interface 'wan'
    option metric '2'
    option weight '3'

config member 'wan2_m1_w2'
    option interface 'wan2'
    option metric '1'
    option weight '2'

config member 'wan2_m2_w2'
    option interface 'wan2'
    option metric '2'
    option weight '2'

config policy 'wan1_only'
    list use_member 'wan1_m1_w3'

config policy 'wan2_only'
    list use_member 'wan2_m1_w2'

config policy 'wan1_wan2_loadbalanced'
    list use_member 'wan1_m1_w3'
    list use_member 'wan2_m1_w2'

config policy 'wan1_pri_wan2_sec'
    list use_member 'wan1_m1_w3'
    list use_member 'wan2_m2_w2'

config policy 'wan2_pri_wan1_sec'
    list use_member 'wan1_m2_w3'
    list use_member 'wan2_m1_w2'

Output of "cat /etc/config/network" : 

config switch 'eth0'
    option name 'switch0'
    option reset '1'
    option enable_vlan '1'

config switch_vlan 'eth0_1'
    option device 'switch0'
    option vlan '1'
    option ports '1 2 3 4 8t'

config switch_vlan 'eth0_2'
    option device 'switch0'
    option vlan '2'
    option ports '0 8t'

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fdcc:e3bb:588f::/48'

config interface 'lan'
    option ifname 'eth0.1'
    option type 'bridge'
    option proto 'static'
    option ip6assign '60'
    option ipaddr '192.168.2.100'
    option netmask '255.255.255.0'

config interface 'wan'
    option _orig_ifname 'eth0.2 radio0.network1'
    option _orig_bridge 'true'
    option proto '3g'
    option service 'umts'
    option apn 'a1.net'
    PASSWORD HIDDEN
    USERNAME HIDDEN
    option device '/dev/ttyUSB0'
    option peerdns '0'
    option dns '8.8.8.8'
    option metric '20'

config interface 'wan2'
    option proto 'dhcp'
    option metric '10'


Powered by LuCI Trunk (svn-r9955) OpenWrt Barrier Breaker r39586

Greet`s eRich

Post #609
arfett
20 Feb 2014, 23:21

eriche,

Install the resolvip package from your software tab. SSH into your router and run:

resolvip whatismyipaddress.com
resolvip obsolete.whatsmyip.org

Show me the results.

Also I don't think mwan3 is at fault for the speed test error. Can you try a different speed test website?

(Last edited by arfett on 20 Feb 2014, 23:25)

Post #610
eriche
21 Feb 2014, 11:13

I will do this when I am back @ home.

Today I played around with the TP-Link WR1042ND at work wink
But also here I have even more troubles then with the ASUS.

I installed the "old" Multilan-luci package from the Trunk Repository.

My 3g Modem shows under Interfaces, that it is connected
http://imagizer.imageshack.us/v2/150x100q90/198/4prn.jpg

BUT in the overview Page it shows only an "X".
http://imagizer.imageshack.us/v2/150x100q90/30/unov.jpg

Do you know how the old Multilan finds the correct Interface?
There is nothing to configure,...
So I guess it should find instead of an "x" the right interface?

GreeT`s erich

(Last edited by eriche on 21 Feb 2014, 11:14)

Post #611
arfett
21 Feb 2014, 20:20

eriche,

We did not write that multi WAN package and can only help you with MWAN3 in this thread. You should start another thread if you want to discuss that package.

I would just use MWAN3. I'm pretty sure your MWAN3 configuration is working flawlessly and that speedtest site was just not working. After we see the resolvip results we can sort out the whatismyip issue.

(Last edited by arfett on 21 Feb 2014, 22:04)

Post #612
eriche
22 Feb 2014, 16:53

I have to say Arfett - you are awesome wink
After 1 hour testing, I have the Feeling - that everything is running stable smile

What can you see with the resolveip command?
Wouldn`t there be an fallback to the other Interface if one is down and both URL would be resolved anyway?

root@OpenWrt:~# resolveip whatismyipaddress.com
67.203.139.148
66.80.82.69
root@OpenWrt:~# resolveip obsolete.whatsmyip.org
208.64.38.55

So we figured out that it doesn`t seam possible to make a Multiwan Connection when one Interface is in the same IP Range then the other or the Router itself?1?

I was really surprised that I could reach all my LAN devices in the 192.168.1.x range - even if I set my PC to 192.168.2.x

Can you explain me why is this working?
I was afraid, that I Need a Bridge or forwarding rules.

Why isn`t MuliWAN3 at the package feed?
I thoulght you also developed the other MuliLAN from the feed - but it seams I don`t Need the other one anymore wink

ThanX Erich

(Last edited by eriche on 22 Feb 2014, 16:54)

Post #613
md55
23 Feb 2014, 21:17

Hello!
I've installed latest builds of openwrt and mwan3.

1) Is there a good way to apply changes in /etc/conf/mwan3 without reboot?
2) How can I get mwan interfaces status without luci from command line?
3) Do mwan need defaultroute on pppoe interface?

bug: luci mwan / edit member / optional fields Metric and Weight are marked as required.

(Last edited by md55 on 23 Feb 2014, 22:57)

Post #614
arfett
24 Feb 2014, 00:37
md55 wrote:

Hello!
I've installed latest builds of openwrt and mwan3.

1) Is there a good way to apply changes in /etc/conf/mwan3 without reboot?
2) How can I get mwan interfaces status without luci from command line?
3) Do mwan need defaultroute on pppoe interface?

bug: luci mwan / edit member / optional fields Metric and Weight are marked as required.

1) /etc/init.d/mwan3 restart
2) you'll need to play with the /etc/hotplug.d/iface/16-mwan3custom script
3) Every interface used by mwan3 needs a default route

They are not optional. This is not a bug.

(Last edited by arfett on 24 Feb 2014, 00:47)

Post #615
arfett
24 Feb 2014, 00:40
eriche wrote:

What can you see with the resolveip command?

root@OpenWrt:~# resolveip whatismyipaddress.com
67.203.139.148
66.80.82.69
root@OpenWrt:~# resolveip obsolete.whatsmyip.org
208.64.38.55

Try changing your mwan3 rules to use these IP addresses instead. For whatismyipaddress.com make two rules, one for each IP addresses the domain resolves to and test again. Another option is not using mwan3 rules for these addresses and just create static routes to the addresses specifying the correct interface to use.

eriche wrote:

So we figured out that it doesn`t seam possible to make a Multiwan Connection when one Interface is in the same IP Range then the other or the Router itself?1?

This has nothing to do with mwan3. Your LAN interface always has the highest priority when routing traffic. If your WAN is on the same subnet as your LAN then you will have no internet on any router as your LAN "owns" your default gateway.

eriche wrote:

I was really surprised that I could reach all my LAN devices in the 192.168.1.x range - even if I set my PC to 192.168.2.x

I suspect it's due to the router doing an ARP sometime after bootup and being aware of those devices on the LAN.

eriche wrote:

Why isn`t MuliWAN3 at the package feed?

It probably will be soon.

(Last edited by arfett on 24 Feb 2014, 00:51)

Post #616
md55
24 Feb 2014, 08:02
arfett wrote:

1) /etc/init.d/mwan3 restart

Sometimes connections after mwan3 restart work different, not like after reboot.
So should I do also network restart or firewall restart for reliability?

arfett wrote:

They are not optional. This is not a bug.

But wiki says they are optional http://wiki.openwrt.org/doc/howto/mwan3 … figuration

(Last edited by md55 on 24 Feb 2014, 08:11)

Post #617
auzziedingo
25 Feb 2014, 20:26

Im only slightly perplexed as why failover from wan to 3g doesnt seem to work when i pull the wan cable from the device.

my config is

cat /etc/config/network

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config interface 'lan'
        option ifname 'eth1'
        option type 'bridge'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option ifname 'eth0'
        option proto 'dhcp'
        option metric '10'

config interface 'wan6'
        option ifname '@wan'
        option proto 'dhcpv6'

config globals 'globals'
        option ula_prefix 'fd61:c698:9591::/48'

config interface 'wwan'
        option proto '3g'
        option device '/dev/ttyUSB2'
        option service 'umts'
        option apn 'wap.voicestream.com'
        option metric '20'
        option demand '0'

and mwan3

cat /etc/config/mwan3

config member 'wan1_m1_w3'
        option metric '1'
        option weight '3'
        option interface 'wan'

config member 'wan1_m2_w3'
        option metric '2'
        option weight '3'
        option interface 'wwan'

config policy 'wan1_only'
        list use_member 'wan1_m1_w3'

config policy 'wan2_only'
        list use_member 'wan1_m2_w3'

config policy 'wan1_pri_wan2_sec'
        list use_member 'wan1_m1_w3'
        list use_member 'wan1_m2_w3'

config policy 'wan2_pri_wan1_sec'
        list use_member 'wan1_m2_w3'
        list use_member 'wan1_m1_w3'

config interface 'wan'
        option enabled '1'
        list track_ip '8.8.8.8'
        list track_ip '8.8.4.4'
        option reliability '1'
        option count '5'
        option timeout '2'
        option interval '5'
        option down '2'
        option up '2'

config interface 'wwan'
        option enabled '1'
        list track_ip '8.8.8.8'
        list track_ip '8.8.4.4'
        option reliability '1'
        option count '5'
        option timeout '8'
        option interval '5'
        option down '2'
        option up '2'


id prefer 3g not be on all the time, and only come up when wan was offline, and go down when wan came back.
right now both wan and 3g run at boot.
ifconfig
3g-wwan   Link encap:Point-to-Point Protocol 
          inet addr:21.90.149.79  P-t-P:10.64.64.64  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:245 errors:0 dropped:0 overruns:0 frame:0
          TX packets:246 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:30438 (29.7 KiB)  TX bytes:29582 (28.8 KiB)

br-lan    Link encap:Ethernet  HWaddr 00:0D:B9:31:E9:CD 
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fd61:c698:9591::1/60 Scope:Global
          inet6 addr: fe80::20d:b9ff:fe31:e9cd/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5034 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6154 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:733891 (716.6 KiB)  TX bytes:5565294 (5.3 MiB)

eth0      Link encap:Ethernet  HWaddr 00:0D:B9:31:E9:CC 
          inet addr:192.168.0.157  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::20d:b9ff:fe31:e9cc/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5418 errors:0 dropped:0 overruns:0 frame:0
          TX packets:4239 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:5215924 (4.9 MiB)  TX bytes:692438 (676.2 KiB)

eth1      Link encap:Ethernet  HWaddr 00:0D:B9:31:E9:CD 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:5034 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6155 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:804367 (785.5 KiB)  TX bytes:5565424 (5.3 MiB)

lo        Link encap:Local Loopback 
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:38 errors:0 dropped:0 overruns:0 frame:0
          TX packets:38 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:3393 (3.3 KiB)  TX bytes:3393 (3.3 KiB)

wlan0     Link encap:UNSPEC  HWaddr 00-15-6D-64-93-F5-80-00-00-00-00-00-00-00-00-00 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:580 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:57371 (56.0 KiB)  TX bytes:0 (0.0 B)

wlan0-1   Link encap:Ethernet  HWaddr 02:15:6D:64:93:F5 
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:824 (824.0 B)


ip route
default via 192.168.0.1 dev eth0  proto static  metric 10
default via 10.64.64.64 dev 3g-wwan  proto static  metric 20
10.64.64.64 dev 3g-wwan  proto kernel  scope link  src 21.90.149.79
192.168.0.0/24 dev eth0  proto static  scope link  metric 10
192.168.1.0/24 dev br-lan  proto kernel  scope link  src 192.168.1.1


ideads to fix /or resolve ??

(Last edited by auzziedingo on 25 Feb 2014, 20:28)

Post #618
arfett
25 Feb 2014, 20:36
auzziedingo wrote:

ideads to fix /or resolve ??

Install the LuCI app and paste the contents of the troubleshooting page from before and after you disconnect the ethernet WAN.

Also please put the troubleshooting data in forum code blocks.

Post #619
arfett
25 Feb 2014, 20:39
md55 wrote:

Sometimes connections after mwan3 restart work different, not like after reboot.
So should I do also network restart or firewall restart for reliability?

MWAN3 restart doesn't affect the system. It just removes any rules it has created and recreates them. I don't see how restarting the MWAN3 service would make your interfaces behave any differently.

md55 wrote:

But wiki says they are optional http://wiki.openwrt.org/doc/howto/mwan3 … figuration

The wiki should be updated.

Post #620
auzziedingo
25 Feb 2014, 22:43

the luci app was installed, heres the data you asked for

Software versions : 

OpenWrt - OpenWrt Barrier Breaker r39751 (r39751)
mwan3 - 1.3-0
luci-app-mwan3 - 1.1-17

Firewall default output policy (must be ACCEPT) : 

ACCEPT

Output of "ip route show" : 

default via 10.64.64.64 dev 3g-wwan  proto static  metric 20 
10.64.64.64 dev 3g-wwan  proto kernel  scope link  src 21.90.149.79 
192.168.0.0/24 dev eth0  proto static  scope link  metric 10 
192.168.1.0/24 dev br-lan  proto kernel  scope link  src 192.168.1.1

Output of "ip rule show" : 

0:    from all lookup local 
1001:    from all fwmark 0x100/0xff00 lookup 1001 
1002:    from all fwmark 0x200/0xff00 lookup 1002 
1016:    from all fwmark 0x1000/0xff00 lookup 1016 
1017:    from all fwmark 0x1100/0xff00 lookup 1017 
1018:    from all fwmark 0x1200/0xff00 lookup 1018 
1019:    from all fwmark 0x1300/0xff00 lookup 1019 
32766:    from all lookup main 
32767:    from all lookup default

Output of "ip route list table 1001-1099" (1001-1015 = interface tables, 1016-1099 = policy tables) : 

1001
default via 192.168.0.1 dev eth0 
1002
default via 10.64.64.64 dev 3g-wwan 
1016
default via 192.168.0.1 dev eth0  metric 1 
1017
default via 10.64.64.64 dev 3g-wwan  metric 2 
1018
default via 192.168.0.1 dev eth0  metric 1 
default via 10.64.64.64 dev 3g-wwan  metric 2 
1019
default via 192.168.0.1 dev eth0  metric 1 
default via 10.64.64.64 dev 3g-wwan  metric 2

Output of "iptables -L -t mangle -v -n | awk '/mwan3/' RS=" : 

Chain PREROUTING (policy ACCEPT 255K packets, 127M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 435K  250M mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 255K  127M fwmark     all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 26495 packets, 2857K bytes)
 pkts bytes target     prot opt in     out     source               destination         
46299 4996K mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 26973 packets, 4617K bytes)
 pkts bytes target     prot opt in     out     source               destination         
47108 8497K mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 255K packets, 129M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 436K  253M mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_default (1 references)
 pkts bytes target     prot opt in     out     source               destination         
   80  2514 MARK       all  --  *      *       0.0.0.0/0            224.0.0.0/3          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
  157 10362 MARK       all  --  *      *       0.0.0.0/0            127.0.0.0/8          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            127.0.0.1            mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    0     0 MARK       all  --  *      *       0.0.0.0/0            10.64.64.64          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
    2   758 MARK       all  --  *      *       0.0.0.0/0            192.168.0.0/24       mark match 0x0/0xff00 MARK xset 0x7f00/0xff00
  836 54588 MARK       all  --  *      *       0.0.0.0/0            192.168.1.0/24       mark match 0x0/0xff00 MARK xset 0x7f00/0xff00

Chain mwan3_interfaces (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 6902  493K mwan3_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 6883  491K mwan3_wwan  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_post (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 9537  758K MARK       all  --  *      3g-wwan  0.0.0.0/0           !10.64.64.64          mark match ! 0x7f00/0xff00 MARK xset 0x200/0xff00
 8734 1284K MARK       all  --  *      eth0    0.0.0.0/0           !192.168.0.0/24       mark match ! 0x7f00/0xff00 MARK xset 0x100/0xff00
17485 2246K MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x8000/0x8000 MARK and 0xffff7fff
 483K  258M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK save mask 0xff00

Chain mwan3_pre (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 483K  258M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0            CONNMARK restore mask 0xff00
 8872  828K MARK       all  --  3g-wwan *      !10.64.64.64          0.0.0.0/0            mark match ! 0x7f00/0xff00 MARK xset 0x8200/0xff00
 8613 1419K MARK       all  --  eth0   *      !192.168.0.0/24       0.0.0.0/0            mark match ! 0x7f00/0xff00 MARK xset 0x8100/0xff00
 8607  604K mwan3_default  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
 6914  494K mwan3_interfaces  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
 2181  142K mwan3_rules  all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00
 2181  142K MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0            mark match 0x0/0xff00 MARK xset 0x7f00/0xff00

Chain mwan3_rules (1 references)
 pkts bytes target     prot opt in     out     source               destination         

Chain mwan3_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1501  119K MARK       all  --  *      *       192.168.0.157        0.0.0.0/0            MARK xset 0x100/0xff00

Chain mwan3_wwan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 3232  233K MARK       all  --  *      *       21.90.149.79         0.0.0.0/0            MARK xset 0x200/0xff00

Output of "ifconfig" : 

3g-wwan   Link encap:Point-to-Point Protocol  
          inet addr:21.90.149.79  P-t-P:10.64.64.64  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:213226 errors:0 dropped:0 overruns:0 frame:0
          TX packets:131908 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3 
          RX bytes:189824770 (181.0 MiB)  TX bytes:11864217 (11.3 MiB)

br-lan    Link encap:Ethernet  HWaddr 00:0D:B9:31:E9:CD  
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fd61:c698:9591::1/60 Scope:Global
          inet6 addr: fe80::20d:b9ff:fe31:e9cd/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:179299 errors:0 dropped:0 overruns:0 frame:0
          TX packets:273838 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:18653990 (17.7 MiB)  TX bytes:241266134 (230.0 MiB)

eth0      Link encap:Ethernet  HWaddr 00:0D:B9:31:E9:CC  
          inet addr:192.168.0.157  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: fe80::20d:b9ff:fe31:e9cc/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:44978 errors:0 dropped:0 overruns:0 frame:0
          TX packets:31913 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:42413050 (40.4 MiB)  TX bytes:4381924 (4.1 MiB)

eth1      Link encap:Ethernet  HWaddr 00:0D:B9:31:E9:CD  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:179299 errors:0 dropped:0 overruns:0 frame:0
          TX packets:273839 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:21164176 (20.1 MiB)  TX bytes:241266264 (230.0 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:638 errors:0 dropped:0 overruns:0 frame:0
          TX packets:638 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:71707 (70.0 KiB)  TX bytes:71707 (70.0 KiB)

wlan0     Link encap:UNSPEC  HWaddr 00-15-6D-64-93-F5-80-00-00-00-00-00-00-00-00-00  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:8016 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:760006 (742.1 KiB)  TX bytes:0 (0.0 B)

wlan0-1   Link encap:Ethernet  HWaddr 02:15:6D:64:93:F5  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:39 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:7212 (7.0 KiB)

Output of "cat /etc/config/mwan3" : 

config member 'wan1_m1_w3'
    option metric '1'
    option weight '3'
    option interface 'wan'

config member 'wan1_m2_w3'
    option metric '2'
    option weight '3'
    option interface 'wwan'

config policy 'wan1_only'
    list use_member 'wan1_m1_w3'

config policy 'wan2_only'
    list use_member 'wan1_m2_w3'

config policy 'wan1_pri_wan2_sec'
    list use_member 'wan1_m1_w3'
    list use_member 'wan1_m2_w3'

config policy 'wan2_pri_wan1_sec'
    list use_member 'wan1_m2_w3'
    list use_member 'wan1_m1_w3'

config interface 'wan'
    option enabled '1'
    list track_ip '8.8.8.8'
    list track_ip '8.8.4.4'
    option reliability '1'
    option count '5'
    option timeout '2'
    option interval '5'
    option down '2'
    option up '2'

config interface 'wwan'
    option enabled '1'
    list track_ip '8.8.8.8'
    list track_ip '8.8.4.4'
    option reliability '1'
    option count '5'
    option timeout '8'
    option interval '5'
    option down '2'
    option up '2'

Output of "cat /etc/config/network" : 

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config interface 'lan'
    option ifname 'eth1'
    option type 'bridge'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'
    option ip6assign '60'

config interface 'wan'
    option ifname 'eth0'
    option proto 'dhcp'
    option metric '10'

config interface 'wan6'
    option ifname '@wan'
    option proto 'dhcpv6'

config globals 'globals'
    option ula_prefix 'fd61:c698:9591::/48'

config interface 'wwan'
    option proto '3g'
    option device '/dev/ttyUSB2'
    option service 'umts'
    option apn 'wap.voicestream.com'
    USERNAME HIDDEN
    PASSWORD HIDDEN
    option metric '20'
    option demand '0'

(Last edited by auzziedingo on 27 Feb 2014, 02:07)

Post #621
AndiTails
26 Feb 2014, 15:01

Hi all,

I am wishing to use mwan3 with OpenVPN to route certain sites & one particular machine through my VPN, and all other traffic through WAN.

The VPN is on interface tun0 and I can ping through it:

root@OpenWrt_Master_AP:~# ping -I tun0 google.com
PING google.com (173.194.77.101): 56 data bytes
64 bytes from 173.194.77.101: seq=0 ttl=47 time=128.308 ms
64 bytes from 173.194.77.101: seq=1 ttl=47 time=128.569 ms
64 bytes from 173.194.77.101: seq=2 ttl=47 time=128.625 ms

However it is shown as offline in mwan3.
I suspect it's because of the (default) routing, but I don't know how to do this without forcing all traffic through the VPN!
Please help. I suspect it's just one command I'm missing but I don't know what to type.

MWAN3 troubleshooting output:

Software versions : 

OpenWrt - OpenWrt Attitude Adjustment 12.09 (r36088)
mwan3 - 1.3-0
luci-app-mwan3 - 1.1-17

Firewall default output policy (must be ACCEPT) : 

ACCEPT

Output of "ip route show" : 

default via 82.45.196.1 dev eth0.2  proto static  metric 10 
10.108.1.5 dev tun0  proto kernel  scope link  src 10.108.1.6 
82.45.196.0/23 dev eth0.2  proto static  scope link  metric 10 
192.168.1.0/24 dev br-lan  proto kernel  scope link  src 192.168.1.1

Output of "ip rule show" : 

0:    from all lookup local 
1001:    from all fwmark 0x100/0xff00 lookup 1001 
1016:    from all fwmark 0x1000/0xff00 lookup 1016 
1018:    from all fwmark 0x1200/0xff00 lookup 1018 
1019:    from all fwmark 0x1300/0xff00 lookup 1019 
32766:    from all lookup main 
32767:    from all lookup default

Output of "ip route list table 1001-1099" (1001-1015 = interface tables, 1016-1099 = policy tables) : 

1001
default via 82.45.196.1 dev eth0.2 
1016
default via 82.45.196.1 dev eth0.2  metric 1 
1018
default via 82.45.196.1 dev eth0.2  metric 1 
1019
default via 82.45.196.1 dev eth0.2  metric 2

Output of "iptables -L -t mangle -v -n | awk '/mwan3/' RS=" : 

Chain PREROUTING (policy ACCEPT 612K packets, 324M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 613K  325M mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain INPUT (policy ACCEPT 226K packets, 95M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 227K   95M mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain OUTPUT (policy ACCEPT 230K packets, 98M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 230K   98M mwan3_pre  all  --  *      *       0.0.0.0/0            0.0.0.0/0           
 219K   97M qos_Default  all  --  *      eth0.2  0.0.0.0/0            0.0.0.0/0           

Chain POSTROUTING (policy ACCEPT 616K packets, 327M bytes)
 pkts bytes target     prot opt in     out     source               destination         
 616K  327M mwan3_post  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_default (1 references)
 pkts bytes target     prot opt in     out     source               destination         
  689 53348 MARK       all  --  *      *       0.0.0.0/0            224.0.0.0/3         mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 
    7   478 MARK       all  --  *      *       0.0.0.0/0            127.0.0.0/8         mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 
    0     0 MARK       all  --  *      *       0.0.0.0/0            127.0.0.1           mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 
    0     0 MARK       all  --  *      *       0.0.0.0/0            10.167.1.5          mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 
    0     0 MARK       all  --  *      *       0.0.0.0/0            82.45.196.0/23      mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 
 2148  166K MARK       all  --  *      *       0.0.0.0/0            192.168.1.0/24      mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 

Chain mwan3_interfaces (1 references)
 pkts bytes target     prot opt in     out     source               destination         
51797 4909K mwan3_wan  all  --  *      *       0.0.0.0/0            0.0.0.0/0           

Chain mwan3_post (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 218K   97M MARK       all  --  *      eth0.2  0.0.0.0/0           !82.45.196.0/23      mark match !0x7f00/0xff00 MARK xset 0x100/0xff00 
 210K   88M MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           mark match 0x8000/0x8000 MARK and 0xffff7fff 
 843K  423M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK save mask 0xff00 

Chain mwan3_pre (2 references)
 pkts bytes target     prot opt in     out     source               destination         
 843K  423M CONNMARK   all  --  *      *       0.0.0.0/0            0.0.0.0/0           CONNMARK restore mask 0xff00 
 210K   88M MARK       all  --  eth0.2 *      !82.45.196.0/23       0.0.0.0/0           mark match !0x7f00/0xff00 MARK xset 0x8100/0xff00 
54819 5153K mwan3_default  all  --  *      *       0.0.0.0/0            0.0.0.0/0           mark match 0x0/0xff00 
51886 4916K mwan3_interfaces  all  --  *      *       0.0.0.0/0            0.0.0.0/0           mark match 0x0/0xff00 
 5006 1039K mwan3_rules  all  --  *      *       0.0.0.0/0            0.0.0.0/0           mark match 0x0/0xff00 
 5006 1039K MARK       all  --  *      *       0.0.0.0/0            0.0.0.0/0           mark match 0x0/0xff00 MARK xset 0x7f00/0xff00 

Chain mwan3_rules (1 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MARK       tcp  --  *      *       192.168.21.0/24      0.0.0.0/0           multiport sports 0:65535 multiport dports 563 mark match 0x0/0xff00 MARK xset 0x1100/0xff00 
    0     0 MARK       tcp  --  *      *       192.168.21.0/24      0.0.0.0/0           multiport sports 0:65535 multiport dports 995 mark match 0x0/0xff00 MARK xset 0x1000/0xff00 
    0     0 MARK       tcp  --  *      *       0.0.0.0/0            77.11.41.0/24       multiport sports 0:65535 multiport dports 1024:65535 mark match 0x0/0xff00 MARK xset 0x1200/0xff00 
    0     0 MARK       udp  --  *      *       0.0.0.0/0            112.136.0.0/16      multiport sports 0:65535 multiport dports 5352 mark match 0x0/0xff00 MARK xset 0x1300/0xff00 

Chain mwan3_wan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
46829 3874K MARK       all  --  *      *       82.45.197.222        0.0.0.0/0           MARK xset 0x100/0xff00

Output of "ifconfig" : 

br-lan    Link encap:Ethernet  HWaddr F8:D1:11:4B:59:64  
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:172871 errors:0 dropped:308 overruns:0 frame:0
          TX packets:244378 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:20196128 (19.2 MiB)  TX bytes:220152040 (209.9 MiB)

eth0      Link encap:Ethernet  HWaddr F8:D1:11:4B:59:64  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:584617 errors:0 dropped:0 overruns:58613 frame:0
          TX packets:576028 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:331170633 (315.8 MiB)  TX bytes:288237212 (274.8 MiB)
          Interrupt:4 

eth0.1    Link encap:Ethernet  HWaddr F8:D1:11:4B:59:64  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:140654 errors:0 dropped:0 overruns:0 frame:0
          TX packets:202156 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:16015410 (15.2 MiB)  TX bytes:170836780 (162.9 MiB)

eth0.2    Link encap:Ethernet  HWaddr F8:D1:11:4B:59:64  
          inet addr:82.45.197.222  Bcast:82.45.197.255  Mask:255.255.254.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:443907 errors:0 dropped:0 overruns:0 frame:0
          TX packets:373867 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:5 
          RX bytes:304620948 (290.5 MiB)  TX bytes:115094985 (109.7 MiB)

ifb0      Link encap:Ethernet  HWaddr 3A:BB:EF:5A:9B:23  
          UP BROADCAST RUNNING NOARP  MTU:1500  Metric:1
          RX packets:442584 errors:0 dropped:0 overruns:0 frame:0
          TX packets:442584 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:5 
          RX bytes:312525893 (298.0 MiB)  TX bytes:312525893 (298.0 MiB)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:7392 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7392 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:849450 (829.5 KiB)  TX bytes:849450 (829.5 KiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.108.1.6  P-t-P:10.108.1.5  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:3 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8977 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:252 (252.0 B)  TX bytes:3401398 (3.2 MiB)

wlan0     Link encap:Ethernet  HWaddr F8:D1:11:4B:59:64  
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:49476 errors:0 dropped:0 overruns:0 frame:0
          TX packets:64821 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:32 
          RX bytes:7656245 (7.3 MiB)  TX bytes:52534183 (50.0 MiB)

Output of "cat /etc/config/mwan3" : 

config interface 'wan'
    option enabled '1'
    option count '1'
    option timeout '2'
    option interval '5'
    option reroute '0'
    list track_ip '8.8.4.4'
    list track_ip '8.8.8.8'
    list track_ip '208.67.222.222'
    list track_ip '208.67.220.220'
    option reliability '1'
    option down '5'
    option up '2'

config interface 'vpn'
    option enabled '1'
    option reliability '1'
    option count '1'
    option interval '5'
    option reroute '0'
    list track_ip '8.8.4.4'
    list track_ip '8.8.8.8'
    list track_ip '208.67.222.222'
    list track_ip '208.67.220.220'
    option timeout '5'
    option down '8'
    option up '1'

config member 'wan1_m1_w3'
    option interface 'wan'
    option metric '1'
    option weight '3'

config member 'wan1_m2_w3'
    option interface 'wan'
    option metric '2'
    option weight '3'

config member 'wan2_m1_w2'
    option interface 'vpn'
    option metric '1'
    option weight '2'

config member 'wan2_m2_w2'
    option interface 'vpn'
    option metric '2'
    option weight '2'

config policy 'wan_only'
    list use_member 'wan1_m1_w3'

config policy 'vpn_only'
    list use_member 'wan2_m1_w2'

config policy 'wan_pri_vpn_sec'
    list use_member 'wan1_m1_w3'
    list use_member 'wan2_m2_w2'

config policy 'vpn_pri_wan_sec'
    list use_member 'wan1_m2_w3'
    list use_member 'wan2_m1_w2'

config rule 'rule1'
    option src_ip '192.168.21.0/24'
    option proto 'tcp'
    option dest_port '563'
    option use_policy 'vpn_only'

config rule 'rule2'
    option src_ip '192.168.21.0/24'
    option proto 'tcp'
    option dest_port '995'
    option use_policy 'wan_only'

config rule 'rule4'
    option dest_ip '77.11.41.0/24'
    option proto 'tcp'
    option dest_port '1024:65535'
    option use_policy 'wan_pri_vpn_sec'

config rule 'rule5'
    option dest_ip '112.136.0.0/16'
    option proto 'udp'
    option dest_port '5352'
    option use_policy 'vpn_pri_wan_sec'

Output of "cat /etc/config/network" : 

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config interface 'lan'
    option type 'bridge'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'
    option _orig_ifname 'eth0.1 wlan0'
    option _orig_bridge 'true'
    option ifname 'eth0.1 tun'

config interface 'wan'
    option ifname 'eth0.2'
    option proto 'dhcp'
    option broadcast '1'
    option peerdns '0'
    option dns '208.67.220.220 208.67.222.222'
    option metric '10'

config switch
    option name 'rtl8366rb'
    option reset '1'
    option enable_vlan '1'

config switch_vlan
    option device 'rtl8366rb'
    option vlan '1'
    option ports '1 2 3 4 5t'

config switch_vlan
    option device 'rtl8366rb'
    option vlan '2'
    option ports '0 5t'

config interface 'vpn'
    option ifname 'tun0'
    option _orig_ifname 'tun0'
    option _orig_bridge 'false'
    option proto 'dhcp'
    option metric '20'

And if it helps at all:
/etc/config/network http://pastebin.com/ua1ZjggT
/etc/config/openvpn http://pastebin.com/G6e5y9FP
/etc/config/firewall http://pastebin.com/XJP3Ec96

Thanks in advance for any help! smile

(Last edited by AndiTails on 26 Feb 2014, 15:10)

Post #622
arfett
27 Feb 2014, 01:04
AndiTails wrote:

However it is shown as offline in mwan3.
I suspect it's because of the (default) routing, but I don't know how to do this without forcing all traffic through the VPN!

MWAN3 troubleshooting output:

Output of "ip route show" : 

default via 82.45.196.1 dev eth0.2  proto static  metric 10 
10.108.1.5 dev tun0  proto kernel  scope link  src 10.108.1.6 
82.45.196.0/23 dev eth0.2  proto static  scope link  metric 10 
192.168.1.0/24 dev br-lan  proto kernel  scope link  src 192.168.1.1

All WAN interfaces used by MWAN3 need a default route in your routing table. Just create one and give your VPN WAN interface a metric of 20 and see what happens.

Post #623
arfett
27 Feb 2014, 01:05

auzziedingo,

Please edit your post and put [ code ] before the output and [ /code ] after to keep the forum pages uncluttered (remove the spaces in the brackets so it will work)

Also I only see one output. Please post your before and after in code blocks and let me know which is which.

(Last edited by arfett on 27 Feb 2014, 01:06)

Post #624
AndiTails
27 Feb 2014, 02:05
arfett wrote:
AndiTails wrote:

I suspect it's just one command I'm missing but I don't know what to type

All WAN interfaces used by MWAN3 need a default route in your routing table. Just create one and give your VPN WAN interface a metric of 20 and see what happens.

Thank you for the reply, but I'm not sure how to add a default route.
I've searched but cannot find an explanation I understand. Could you provide the command? Will it stick after a reboot? (Thank you) 

Tun0 does already have a metric of 20, however.

(Last edited by AndiTails on 27 Feb 2014, 02:18)

Post #625
auzziedingo
27 Feb 2014, 02:08
arfett wrote:

auzziedingo,

Please edit your post and put [ code ] before the output and [ /code ] after to keep the forum pages uncluttered (remove the spaces in the brackets so it will work)

Also I only see one output. Please post your before and after in code blocks and let me know which is which.

Not quite sure what you mean... you asked for the output of luci-mwan2 app debug page, i pasted it.

Sorry, posts 626 to 625 are missing from our archive.