Hi all.
I've been working on the HooToo for a few days now. I have a general understanding of networks in general but am having a problem with this device. I tried fiddling around on my own and I feel like I'm very close. All the work I've done is through Luci as I'm terrible at using VI. I'll copy/paste my configs as well to see if that'll help. According to my research, what I wanted done was to do a RoutedAP. I did most of the work on my own without consultation of the Recipes wiki, but it more or less coincides with what's on there. I will probably end up just restarting the config and following the recipe verbatim, just wondering what exactly i'm doing wrong here.
I unbridged the interfaces and made/modified the two interfaces as follows (the two interfaces show up under Network -> Interfaces):
1. Wifi - assigned to the Wireless network I created and is assigned to the LAN firewall zone. Has IP 192.168.25.1 and am able to access web portal over wifi. It is configured as a DHCP server and confirmed it works.
2. WAN - assigned to the eth0 interface and is assigned to the WAN firewall zone. I have it set up as a DHCP client to get an IP from my upstream router. Have confirmed working and can access web portal through hardwire connection.
Under Network -> Firewall I have only 2 zones, WAN & LAN and they correspond to the two interfaces I list above. The two Zone Forwardings I have are:
Lan -> Wan: Input - Accept. Output - Accept. Forward - Reject. Masquerade - 1. MSS clamping 1 (I tried this with nothing checked and all accept as well)
Wan -> LAN: Input - Accept. Output - Accept. Forward - Reject. Masquerade - 0. MSS clamping 0
Under the traffic rules, i kept everything as is, but added two rules:
Name - lan to wan all traffic.
Match - Any traffic From any host in lan to any host in wan
Accept Forward
Name - wan to lan all traffic.
Match - Any traffic From any host in wan to any host in lan
Accept Forward
I'm unable to to get any packet flow upstream or downstream - Can't ping upstream router (192.168.1.1) from wifi client (192.168.25.x). Can't access the internet. Nada. Below are my configs:
/etc/config/network
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fde7:63ca:4ff6::/48'
config switch
option name 'switch0'
option reset '1'
option enable_vlan '0'
config interface 'wifi'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.25.1'
config interface 'WAN'
option ifname 'eth0'
option _orig_ifname 'eth0'
option _orig_bridge 'false'
/etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option channel '11'
option hwmode '11g'
option path '10180000.wmac'
option htmode 'HT20'
option txpower '20'
option country '00'
config wifi-iface
option device 'radio0'
option mode 'ap'
option ssid 'PortRoute'
option network 'wifi'
option encryption 'psk2'
option key 'Welcome1'
/etc/config/dhcp
config dnsmasq
option domainneeded '1'
option boguspriv '1'
option filterwin2k '0'
option localise_queries '1'
option rebind_protection '1'
option rebind_localhost '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option nonegcache '0'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option resolvfile '/tmp/resolv.conf.auto'
option localservice '1'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
option dhcpv6 'server'
option ra 'server'
option ra_management '1'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config odhcpd 'odhcpd'
option maindhcp '0'
option leasefile '/tmp/hosts/odhcpd'
option leasetrigger '/usr/sbin/odhcpd-update'
config dhcp 'wifi'
option start '100'
option leasetime '12h'
option limit '150'
option interface 'wifi'
/etc/config/firewall
config rule
option target 'ACCEPT'
option src 'lan'
option dest 'wan'
option name 'lan to wan all traffic'
config rule
option target 'ACCEPT'
option name 'wan to lan all traffic'
option src 'wan'
option dest 'lan'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
option network 'wifi'
config zone
option name 'wan'
option output 'ACCEPT'
option input 'ACCEPT'
option network 'WAN'
option forward 'REJECT'
config include
option path '/etc/firewall.user'
config forwarding
option dest 'wan'
option src 'lan'
config forwarding
option dest 'lan'
option src 'wan'
