Dwa routery, jedna sieć WiFi + sieć gościnna.
Zwracam się z prośba o pomoc w zdiagnozowaniu problemu.
Próbuje uruchomić taka konfiguracje jak w temacie. Przedstawie jak się to ma na obecna chwilę:
Router pierwszy WAN, serwer DHCP, WiFi + Wifi Gosc -> Port LAN skrętka Port LAN -> Router drugi WAN połączony z LAN, wyłączony serwer DHCP, WiFi + Wifi Gosc.
Usterka polega na tym, że łącząc się poprzez Router drugi z siecia Siec-A_Gosc nie działa Internet. Wygląda na to że nie może pobrac adresów po DHCP. W pozostałych przypadkach nie ma problemu. Problem pewnie polega z routingiem, ale szczerze do konca nie ogarniam tego. Z samym Routerem nawiązuje połączenie co pokazuje:
root@OpenWrt:~# iw dev wlan0-1 station dump
Station 7c:61:93:97:50:41 (on wlan0-1)
inactive time: 1110 ms
rx bytes: 1242
rx packets: 8
tx bytes: 322
tx packets: 2
tx retries: 0
tx failed: 0
signal: -52 [-52] dBm
signal avg: -50 [-50] dBm
tx bitrate: 1.0 MBit/s
rx bitrate: 54.0 MBit/s
authorized: yes
authenticated: yes
preamble: short
WMM/WME: yes
MFP: no
TDLS peer: no
Router pierwszy TL-WR842ND Gargoyle PL 1.5.9.2 (1f082da)
Router drugi TL-WR743ND OpenWrt Attitude Adjustment 12.09-rc1 (r35351)
Ustawienia Router pierwszy
root@Gargoyle:~# cat /etc/config/network
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config interface 'lan'
option ifname 'eth0'
option type 'bridge'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.35.1'
option 'defaultroute' '0'
option 'peerdns' '0'
config interface 'wan'
option ifname 'eth1'
option proto 'dhcp'
config switch
option name 'eth0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'eth0'
option vlan '1'
option ports '0 1 2 3 4'
config interface 'gosc'
option proto 'static'
option ipaddr '192.168.55.1'
option netmask '255.255.255.0'
option 'defaultroute' '0'
option 'peerdns' '0'
root@Gargoyle:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option macaddr '64:70:02:bb:70:c8'
option hwmode '11ng'
option htmode 'HT20'
option country 'PL'
option country_ie '1'
option noscan '1'
option channel '8'
option disabled '0'
config wifi-iface
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'Siec-A'
option encryption 'psk2'
option key '12345378'
config wifi-iface 'gosc'
option device 'radio0'
option mode 'ap'
option network 'gosc'
option ssid 'Siec-A_Gosc'
option encryption 'psk2'
option key '3453789'
root@Gargoyle:~# cat /etc/config/firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
option network 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'wan'
option network 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fe80::/10'
option src_port '547'
option dest_ip 'fe80::/10'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config include
option path '/etc/firewall.user'
config include
option path '/usr/lib/gargoyle_firewall_util/gargoyle_additions.firewall'
config include 'openvpn_include_file'
option path '/etc/openvpn.firewall'
config remote_accept 'ra_22_9922'
option local_port '22'
option remote_port '9922'
option proto 'tcp'
option zone 'wan'
config zone
option name 'gosc'
option network 'gosc'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
config forwarding
option src 'gosc'
option dest 'wan'
config rule
option src 'gosc'
option proto 'udp'
option src_port '67-68'
option dest_port '67-68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option src 'gosc'
option dest_port '53'
option target 'ACCEPT'
option family 'ipv4'
option proto 'tcpudp'
root@Gargoyle:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.10.1 0.0.0.0 UG 0 0 0 eth1
192.168.10.0 * 255.255.255.0 U 0 0 0 eth1
192.168.35.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.55.0 * 255.255.255.0 U 0 0 0 wlan0-1
Ustawienia Router drugi
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config interface 'lan'
option ifname 'eth0 eth1'
option type 'bridge'
option proto 'static'
option netmask '255.255.255.0'
option ipaddr '192.168.35.2'
option dns '192.168.35.1'
option gateway '192.168.35.1'
config switch
option name 'eth0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'eth0'
option vlan '1'
option ports '0 1 2 3 4'
config interface 'gosc'
#option type 'bridge'
option proto 'static'
option ipaddr '192.168.55.2'
option netmask '255.255.255.0'
option dns '192.168.55.1'
option gateway '192.168.55.1'
root@OpenWrt:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option macaddr 'a0:f3:c1:3b:2b:e4'
option hwmode '11ng'
option htmode 'HT20'
option country 'PL'
option country_ie '1'
option noscan '1'
option channel '8'
option disabled '0'
config wifi-iface
option device 'radio0'
option network 'lan'
option mode 'ap'
option ssid 'Siec-A'
option encryption 'psk2'
option key '12345378'
config wifi-iface 'gosc'
option device 'radio0'
option mode 'ap'
option network 'gosc'
option ssid 'Siec-A_Gosc'
option encryption 'psk2'
option key '3453789'
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option syn_flood '1'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
option network 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'wan'
option network 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option src_ip 'fe80::/10'
option src_port '547'
option dest_ip 'fe80::/10'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config include
option path '/etc/firewall.user'
config zone
option name 'gosc'
option network 'gosc'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
config forwarding
option src 'gosc'
option dest 'wan'
config rule
option src 'gosc'
option proto 'udp'
option src_port '67-68'
option dest_port '67-68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option src 'gosc'
option dest_port '53'
option target 'ACCEPT'
option family 'ipv4'
option proto 'tcpudp'
root@OpenWrt:~# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
default 192.168.55.1 0.0.0.0 UG 0 0 0 wlan0-1
192.168.35.0 * 255.255.255.0 U 0 0 0 br-lan
192.168.55.0 * 255.255.255.0 U 0 0 0 wlan0-1