• Zarejestrowany: 2020-04-18
  • Posty: 29

Temat: MWAN3 - WAN i WWAN

Cześć

Mam problem z konfiguracją mwan3 i nie widzę błędu. Konfigurowałem już kiedyś to oprogramowanie na innym routerze i wszystko działało (chociaż to było LEDE17). Teraz jednak nie chce nastąpić przełączanie na wan wifi, gdy stracę połączenie na wanie przewodowym.
Router, który posiadam to TP-Link Archer C6, wgrany OpenWrt 19.07 ze strony eko.one.pl. Skonfigurowałem WAN oraz WWAN24GHZ czyli wan z sieci wi-fi (jako klient). Zrobiłem to w następujący sposób (oczywiscie wpisalem poprawną nazwe sieci oraz haslo):

        uci set network.wwan24ghz=interface
        uci set network.wwan24ghz.proto=dhcp
        uci set wireless.default_radio1.network=wwan24ghz
        uci set wireless.default_radio1.mode=sta
        uci set wireless.default_radio1.ssid="nazwamojejsieciwifi"
        uci set wireless.default_radio1.encryption=psk-mixed
        uci set wireless.default_radio1.key="mojehaslodowifi"
        uci set wireless.radio1.disabled='0'
        uci commit

        Sprawdziłem numer zone wan na firewalu
        firewall.@zone[1].network=wan wan6 wwan24ghz 
        uci comiit

Podam w miarę kompletną konfigurację poniżej. Tworzenie nowego membera w mwan3 oparłem na tych, którzy już byli, więc może tutaj czegoś mi brakuje. Zdziwiło mnie też, że wlan1 jest podany jako Link encap: Ethernet.

ifconfig


br-lan    Link encap:Ethernet  HWaddr 98:DA:C4:ED:F4:80
          inet addr:192.168.105.1  Bcast:192.168.105.255  Mask:255.255.255.0
          inet6 addr: fd06:b728:c5f1::1/60 Scope:Global
          inet6 addr: fe80::9ada:c4ff:feed:f480/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12 errors:0 dropped:0 overruns:0 frame:0
          TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:552 (552.0 B)  TX bytes:9768 (9.5 KiB)

eth0      Link encap:Ethernet  HWaddr 98:DA:C4:ED:F4:80
          inet6 addr: fe80::9ada:c4ff:feed:f480/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:21115 errors:0 dropped:0 overruns:0 frame:0
          TX packets:13106 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:4070979 (3.8 MiB)  TX bytes:3652303 (3.4 MiB)
          Interrupt:4

eth0.1    Link encap:Ethernet  HWaddr 98:DA:C4:ED:F4:80
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12 errors:0 dropped:0 overruns:0 frame:0
          TX packets:64 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:552 (552.0 B)  TX bytes:9768 (9.5 KiB)

eth0.2    Link encap:Ethernet  HWaddr 98:DA:C4:ED:F4:80
          inet addr:192.168.1.25  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: 2a01:117f:4003:6b00:9ada:c4ff:feed:f480/64 Scope:Global
          inet6 addr: fe80::9ada:c4ff:feed:f480/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:21103 errors:0 dropped:685 overruns:0 frame:0
          TX packets:13022 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3690357 (3.5 MiB)  TX bytes:3588219 (3.4 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:643 errors:0 dropped:0 overruns:0 frame:0
          TX packets:643 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:61535 (60.0 KiB)  TX bytes:61535 (60.0 KiB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
          inet addr:10.8.0.105  P-t-P:10.8.0.105  Mask:255.255.255.0
          inet6 addr: fe80::d333:318c:21e0:10e2/64 Scope:Link
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:7139 errors:0 dropped:0 overruns:0 frame:0
          TX packets:6716 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:607568 (593.3 KiB)  TX bytes:2421122 (2.3 MiB)

wlan1     Link encap:Ethernet  HWaddr 98:DA:C4:ED:F4:80
          inet addr:192.168.43.97  Bcast:192.168.43.255  Mask:255.255.255.0
          inet6 addr: fe80::9ada:c4ff:feed:f480/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:595 errors:0 dropped:0 overruns:0 frame:0
          TX packets:603 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:55721 (54.4 KiB)  TX bytes:73280 (71.5 KiB)
cat /etc/config/network

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd06:b728:c5f1::/48'

config interface 'lan'
        option type 'bridge'
        option ifname 'eth0.1'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option ipaddr '192.168.105.1'

config interface 'wan'
        option ifname 'eth0.2'
        option proto 'dhcp'
        option metric '10'

config interface 'wan6'
        option ifname 'eth0.2'
        option proto 'dhcpv6'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option ports '2 3 4 5 0t'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option ports '1 0t'

config interface 'vpn'
        option ifname 'tun0'
        option proto 'none'

config interface 'wwan24ghz'
        option proto 'dhcp'
        option metric '20'
cat /etc/config/wireless

config wifi-device 'radio0'
        option type 'mac80211'
        option channel '36'
        option hwmode '11a'
        option path 'pci0000:00/0000:00:00.0'
        option htmode 'VHT80'
        option disabled '1'

config wifi-iface 'default_radio0'
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt'
        option encryption 'none'

config wifi-device 'radio1'
        option type 'mac80211'
        option channel '11'
        option hwmode '11g'
        option path 'platform/ahb/18100000.wmac'
        option htmode 'HT20'
        option disabled '0'

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'wwan24ghz'
        option mode 'sta'
        option encryption 'psk-mixed'
        option key 'tutajjestwpisanedobrehaslo'
        option ssid 'tutajjestwpisanadobranazwa'
cat /etc/config/firewall

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'

config zone
        option name 'wan'
        option output 'ACCEPT'
        option masq '1'
        option mtu_fix '1'
        option input 'ACCEPT'
        option forward 'ACCEPT'
        option network 'wan wan6 wwan24ghz'

config forwarding
        option src 'lan'
        option dest 'wan'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option src_ip 'fc00::/6'
        option dest_ip 'fc00::/6'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config include
        option path '/etc/firewall.user'

config vpn

config forwarding
        option src 'vpn'
        option dest 'lan'

config zone
        option name 'vpn'
        option input 'ACCEPT'
        option forward 'ACCEPT'
        option output 'ACCEPT'
        option network 'vpn'
        option masq '1'
cat /etc/config/mwan3

config globals 'globals'
        option mmx_mask '0x3F00'
        option rtmon_interval '5'

config interface 'wan'
        option enabled '1'
        list track_ip '8.8.4.4'
        list track_ip '8.8.8.8'
        list track_ip '208.67.222.222'
        list track_ip '208.67.220.220'
        option family 'ipv4'
        option reliability '2'
        option count '1'
        option timeout '2'
        option failure_latency '1000'
        option recovery_latency '500'
        option failure_loss '20'
        option recovery_loss '5'
        option interval '5'
        option down '3'
        option up '8'

config interface 'wan6'
        option enabled '0'
        list track_ip '2001:4860:4860::8844'
        list track_ip '2001:4860:4860::8888'
        list track_ip '2620:0:ccd::2'
        list track_ip '2620:0:ccc::2'
        option family 'ipv6'
        option reliability '2'
        option count '1'
        option timeout '2'
        option interval '5'
        option down '3'
        option up '8'

config interface 'wanb'
        option enabled '0'
        list track_ip '8.8.4.4'
        list track_ip '8.8.8.8'
        list track_ip '208.67.222.222'
        list track_ip '208.67.220.220'
        option family 'ipv4'
        option reliability '1'
        option count '1'
        option timeout '2'
        option failure_latency '1000'
        option recovery_latency '500'
        option failure_loss '20'
        option recovery_loss '5'
        option interval '5'
        option down '3'
        option up '8'

config interface 'wanb6'
        option enabled '0'
        list track_ip '2001:4860:4860::8844'
        list track_ip '2001:4860:4860::8888'
        list track_ip '2620:0:ccd::2'
        list track_ip '2620:0:ccc::2'
        option family 'ipv6'
        option reliability '1'
        option count '1'
        option timeout '2'
        option interval '5'
        option down '3'
        option up '8'

config member 'wan_m1_w3'
        option interface 'wan'
        option metric '1'
        option weight '3'

config member 'wan_m2_w3'
        option interface 'wan'
        option metric '2'
        option weight '3'

config member 'wanb_m1_w2'
        option interface 'wanb'
        option metric '1'
        option weight '2'

config member 'wanb_m2_w2'
        option interface 'wanb'
        option metric '2'
        option weight '2'

config member 'wan6_m1_w3'
        option interface 'wan6'
        option metric '1'
        option weight '3'

config member 'wan6_m2_w3'
        option interface 'wan6'
        option metric '2'
        option weight '3'

config member 'wanb6_m1_w2'
        option interface 'wanb6'
        option metric '1'
        option weight '2'

config member 'wanb6_m2_w2'
        option interface 'wanb6'
        option metric '2'
        option weight '2'

config policy 'wan_only'
        list use_member 'wan_m1_w3'
        list use_member 'wan6_m1_w3'

config policy 'wanb_only'
        list use_member 'wanb_m1_w2'
        list use_member 'wanb6_m1_w2'

config policy 'balanced'
        list use_member 'wan_m1_w3'
        list use_member 'wanb_m1_w2'
        list use_member 'wan6_m1_w3'
        list use_member 'wanb6_m1_w2'

config policy 'wan_wanb'
        list use_member 'wan_m1_w3'
        list use_member 'wanb_m2_w2'
        list use_member 'wan6_m1_w3'
        list use_member 'wanb6_m2_w2'

config policy 'wanb_wan'
        list use_member 'wan_m2_w3'
        list use_member 'wanb_m1_w2'
        list use_member 'wan6_m2_w3'
        list use_member 'wanb6_m1_w2'

config rule 'https'
        option sticky '1'
        option dest_port '443'
        option proto 'tcp'
        option use_policy 'balanced'

config rule 'default_rule'
        option dest_ip '0.0.0.0/0'
        option use_policy 'wan_wwan24ghz'

config interface 'wwan24ghz'
        option enabled '1'
        option family 'ipv4'
        list track_ip '8.8.8.8'
        list track_ip '8.8.4.4'
        list track_ip '208.67.222.222'
        list track_ip '208.67.220.220'
        option reliability '2'
        option count '1'
        option timeout '2'
        option failure_latency '1000'
        option recovery_latency '500'
        option failure_loss '20'
        option recovery_loss '5'
        option interval '5'
        option down '3'
        option up '8'

config member 'wwan24ghz_m1_w4'
        option interface 'wwan24ghz'
        option metric '1'
        option weight '4'

config member 'wwan24ghz_m2_w4'
        option interface 'wwan24ghz'
        option metric '2'
        option weight '4'

config policy 'wan_wwan24ghz'
        list use_member 'wan_m1_w3'
        list use_member 'wwan24ghz_m2_w4'

Chcę osiągnąć taki efekt, że domyślnym wanem jest wan na eth0.2 przez kabel, a wanem zapasowym jest wlan1 czyli wwan24ghz przez wifi.
Wiem, że te wanb wanb6, niektóre policy itp są niepotrzebne, ale nie powinny one przeszkadzać, bo w default rule ustawiłem swoje policy.
Pingi zarówno przez eth0.2 jak i wlan1 przechodzą.
Nie wiem też czy nie pomieszałem czegoś z interfejsami? Może tego wwan24ghz w ogóle nie powinienm tworzyć?

 mwan3 status

Interface status:
 interface wan is online and tracking is active
 interface wan6 is disabled and tracking is down
 interface wanb is offline and tracking is down
 interface wanb6 is offline and tracking is down
 interface wwan24ghz is online and tracking is active

Current ipv4 policies:
balanced:
 wan (100%)
wan_only:
 wan (100%)
wan_wanb:
 wan (100%)
wan_wwan24ghz:
 wan (100%)
wanb_only:
 unreachable
wanb_wan:
 wan (100%)

Current ipv6 policies:
balanced:
 unreachable
wan_only:
 unreachable
wan_wanb:
 unreachable
wan_wwan24ghz:
 unreachable
wanb_only:
 unreachable
wanb_wan:
 unreachable

Directly connected ipv4 networks:
127.255.255.255
224.0.0.0/3
192.168.1.25
192.168.43.0
10.8.0.0/24
10.8.0.0
10.8.0.105
10.8.0.255
192.168.43.255
192.168.1.255
127.0.0.1
192.168.43.0/24
127.0.0.0
192.168.105.255
192.168.43.97
127.0.0.0/8
192.168.105.0/24
192.168.1.0/24
192.168.105.0
192.168.50.0/24
192.168.1.0
192.168.105.1

Directly connected ipv6 networks:
2a01:117f:4003:6b00::/64
fd06:b728:c5f1::/64
fe80::/64

Active ipv4 user rules:
    0     0 S https  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport sports 0:65535 multiport dports 443
 1496  126K - wan_wwan24ghz  all  --  *      *       0.0.0.0/0            0.0.0.0/0

Active ipv6 user rules:
    0     0 S https  tcp      *      *       ::/0                 ::/0                 multiport sports 0:65535 multiport dports 443
  373  156K - wan_wwan24ghz  all      *      *       ::/0                 ::/0

Coś jednak robię źle, bo po odłączeniu kabla tracę internet, interesuje mnie jednak co?. Za wszelkie porady i wskazówki bardzo dziękuję

2 Odpowiedź przez kubekWkubek

  • Zarejestrowany: 2020-04-18
  • Posty: 29

Odp: MWAN3 - WAN i WWAN

Hmm, chyba ciężki przypadek. Nikt nie ma żadnego pomysłu co może być nie tak?

3 Odpowiedź przez axelf

  • axelf
  • Użytkownik
  • Nieaktywny
  • Zarejestrowany: 2013-06-12
  • Posty: 34

Odp: MWAN3 - WAN i WWAN

Chyba tutaj:

Current ipv4 policies:
balanced:
 wan (100%)
wan_only:
 wan (100%)
wan_wanb:
 wan (100%)
wan_wwan24ghz:
 wan (100%)
wanb_only:
 unreachable
wanb_wan:
 wan (100%)

4 Odpowiedź przez kubekWkubek

  • Zarejestrowany: 2020-04-18
  • Posty: 29

Odp: MWAN3 - WAN i WWAN

W sensie że inaczej powinno to wyglądać? To się generuje automatycznie na polecenie mwan3 status, musi być coś co źle to ustawia. Powinno się pojawiać wwan24ghz gdzieś w tym statusie?

5 Odpowiedź przez Cezary (edytowany przez Cezary 2020-04-28 08:19:59)

  • Skąd: Warszawa
  • Zarejestrowany: 2006-02-25
  • Posty: 115,993

Odp: MWAN3 - WAN i WWAN

Bo tu nie ma co kombinować - działa, co najwyżej kolejność reguł w man3 ma znaczenie. Zobacz:
- oba wany są:

root@OpenWrt:/tmp# mwan3 status
Interface status:
 interface wan is online and tracking is active
 interface wwan_24ghz is online and tracking is active
 interface wan6 is offline and tracking is down
 interface wanb is offline and tracking is down
 interface wanb6 is offline and tracking is down

Current ipv4 policies:
balanced:
 wan (100%)
wan_only:
 wan (100%)
wan_wanb:
 wan (100%)
wan_wwan_24ghz:
 wan (100%)
wanb_only:
 unreachable
wanb_wan:
 wan (100%)

Current ipv6 policies:
balanced:
 unreachable
wan_only:
 unreachable
wan_wanb:
 unreachable
wan_wwan_24ghz:
 unreachable
wanb_only:
 unreachable
wanb_wan:
 unreachable

Directly connected ipv4 networks:
127.0.0.0
192.168.34.255
192.168.1.0
192.168.12.0
192.168.12.255
192.168.1.147
224.0.0.0/3
192.168.34.0/24
192.168.1.0/24
192.168.12.1
127.0.0.1
192.168.34.192
192.168.12.0/24
192.168.1.255
127.0.0.0/8
192.168.34.0
127.255.255.255

Directly connected ipv6 networks:
fd43:e791:700a::/64
fe80::/64

Active ipv4 user rules:
    0     0 S https  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport sports 0:65535 multiport dports 443 
    8   672 - wan_wwan_24ghz  all  --  *      *       0.0.0.0/0            0.0.0.0/0            

Active ipv6 user rules:
    0     0 S https  tcp      *      *       ::/0                 ::/0                 multiport sports 0:65535 multiport dports 443 
    0     0 - wan_wwan_24ghz  all      *      *       ::/0                 ::/0                 

root@OpenWrt:/tmp# ping onet.pl
PING onet.pl (213.180.141.140): 56 data bytes
64 bytes from 213.180.141.140: seq=0 ttl=54 time=23.431 ms
64 bytes from 213.180.141.140: seq=1 ttl=54 time=31.707 ms
64 bytes from 213.180.141.140: seq=2 ttl=54 time=20.738 ms
64 bytes from 213.180.141.140: seq=3 ttl=54 time=24.393 ms
^C
--- onet.pl ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 20.738/25.067/31.707 ms
root@OpenWrt:/tmp# traceroute onet.pl
traceroute to onet.pl (213.180.141.140), 30 hops max, 38 byte packets
 1  192.168.1.1 (192.168.1.1)  0.445 ms  0.308 ms  0.280 ms
 2  *^C

Fizycznie odłączyłem kabel na wanie:

root@OpenWrt:/tmp# mwan3 status
Interface status:
 interface wan is offline and tracking is active
 interface wwan_24ghz is online and tracking is active
 interface wan6 is offline and tracking is down
 interface wanb is offline and tracking is down
 interface wanb6 is offline and tracking is down

Current ipv4 policies:
balanced:
 unreachable
wan_only:
 unreachable
wan_wanb:
 unreachable
wan_wwan_24ghz:
 wwan_24ghz (100%)
wanb_only:
 unreachable
wanb_wan:
 unreachable

Current ipv6 policies:
balanced:
 unreachable
wan_only:
 unreachable
wan_wanb:
 unreachable
wan_wwan_24ghz:
 unreachable
wanb_only:
 unreachable
wanb_wan:
 unreachable

Directly connected ipv4 networks:
192.168.12.1
192.168.34.0
192.168.12.0
192.168.34.0/24
127.0.0.0/8
224.0.0.0/3
127.0.0.1
127.255.255.255
127.0.0.0
192.168.34.255
192.168.12.0/24
192.168.34.192
192.168.12.255

Directly connected ipv6 networks:
fe80::/64
fd43:e791:700a::/64

Active ipv4 user rules:
    0     0 S https  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport sports 0:65535 multiport dports 443 
    3   252 - wan_wwan_24ghz  all  --  *      *       0.0.0.0/0            0.0.0.0/0            

Active ipv6 user rules:
    0     0 S https  tcp      *      *       ::/0                 ::/0                 multiport sports 0:65535 multiport dports 443 
    0     0 - wan_wwan_24ghz  all      *      *       ::/0                 ::/0                 

root@OpenWrt:/tmp# ping onet.pl
PING onet.pl (213.180.141.140): 56 data bytes
64 bytes from 213.180.141.140: seq=0 ttl=56 time=22.930 ms
64 bytes from 213.180.141.140: seq=1 ttl=56 time=23.018 ms
^C
--- onet.pl ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 22.930/22.974/23.018 ms
root@OpenWrt:/tmp# traceroute onet.pl
traceroute to onet.pl (213.180.141.140), 30 hops max, 38 byte packets
 1  192.168.34.1 (192.168.34.1)  1.546 ms  1.525 ms  2.942 ms
 2^C

Jak widać idzie drugim łączem. Konfiguracja wygląda tak:

root@OpenWrt:/tmp# cat /etc/config/network 

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fd43:e791:700a::/48'

config interface 'wan'
    option ifname 'eth1'
    option proto 'dhcp'
    option metric 10    

config interface 'wan6'
    option ifname 'eth1'
    option proto 'dhcpv6'

config interface 'lan'
    option type 'bridge'
    option ifname 'eth0.1'
    option proto 'static'
    option ipaddr '192.168.12.1'
    option netmask '255.255.255.0'
    option ip6assign '60'

config switch
    option name 'switch0'
    option reset '1'
    option enable_vlan '1'

config switch_vlan
    option device 'switch0'
    option vlan '1'
    option ports '1 2 3 4 0t'

config interface 'wwan_24ghz'
    option proto 'dhcp'
    option metric 20

root@OpenWrt:/tmp# cat /etc/config/wireless 

config wifi-device 'radio0'
    option type 'mac80211'
    option channel '11'
    option hwmode '11g'
    option path 'pci0000:00/0000:00:00.0'
    option htmode 'HT20'

config wifi-iface 'default_radio0'
    option device 'radio0'
    option network 'wwan_24ghz'
    option mode 'sta'
    option ssid 'XXXX'
    option encryption 'psk2'
    option key XXXX



root@OpenWrt:/tmp# cat /etc/config/firewall 
config defaults
    option syn_flood    1
    option input        ACCEPT
    option output        ACCEPT
    option forward        REJECT
# Uncomment this line to disable ipv6 rules
#    option disable_ipv6    1

config zone
    option name        lan
    list   network        'lan'
    option input        ACCEPT
    option output        ACCEPT
    option forward        ACCEPT

config zone
    option name        wan
    list   network        'wan'
    list   network        'wwan_24ghz'
    list   network        'wan6'
    option input        REJECT
    option output        ACCEPT
    option forward        REJECT
    option masq        1
    option mtu_fix        1

config forwarding
    option src        lan
    option dest        wan

# We need to accept udp packets on port 68,
# see https://dev.openwrt.org/ticket/4108
config rule
    option name        Allow-DHCP-Renew
    option src        wan
    option proto        udp
    option dest_port    68
    option target        ACCEPT
    option family        ipv4

# Allow IPv4 ping
config rule
    option name        Allow-Ping
    option src        wan
    option proto        icmp
    option icmp_type    echo-request
    option family        ipv4
    option target        ACCEPT

config rule
    option name        Allow-IGMP
    option src        wan
    option proto        igmp
    option family        ipv4
    option target        ACCEPT

# Allow DHCPv6 replies
# see https://dev.openwrt.org/ticket/10381
config rule
    option name        Allow-DHCPv6
    option src        wan
    option proto        udp
    option src_ip        fc00::/6
    option dest_ip        fc00::/6
    option dest_port    546
    option family        ipv6
    option target        ACCEPT

config rule
    option name        Allow-MLD
    option src        wan
    option proto        icmp
    option src_ip        fe80::/10
    list icmp_type        '130/0'
    list icmp_type        '131/0'
    list icmp_type        '132/0'
    list icmp_type        '143/0'
    option family        ipv6
    option target        ACCEPT

# Allow essential incoming IPv6 ICMP traffic
config rule
    option name        Allow-ICMPv6-Input
    option src        wan
    option proto    icmp
    list icmp_type        echo-request
    list icmp_type        echo-reply
    list icmp_type        destination-unreachable
    list icmp_type        packet-too-big
    list icmp_type        time-exceeded
    list icmp_type        bad-header
    list icmp_type        unknown-header-type
    list icmp_type        router-solicitation
    list icmp_type        neighbour-solicitation
    list icmp_type        router-advertisement
    list icmp_type        neighbour-advertisement
    option limit        1000/sec
    option family        ipv6
    option target        ACCEPT

# Allow essential forwarded IPv6 ICMP traffic
config rule
    option name        Allow-ICMPv6-Forward
    option src        wan
    option dest        *
    option proto        icmp
    list icmp_type        echo-request
    list icmp_type        echo-reply
    list icmp_type        destination-unreachable
    list icmp_type        packet-too-big
    list icmp_type        time-exceeded
    list icmp_type        bad-header
    list icmp_type        unknown-header-type
    option limit        1000/sec
    option family        ipv6
    option target        ACCEPT

config rule
    option name        Allow-IPSec-ESP
    option src        wan
    option dest        lan
    option proto        esp
    option target        ACCEPT

config rule
    option name        Allow-ISAKMP
    option src        wan
    option dest        lan
    option dest_port    500
    option proto        udp
    option target        ACCEPT

# include a file with users custom iptables rules
config include
    option path /etc/firewall.user


### EXAMPLE CONFIG SECTIONS
# do not allow a specific ip to access wan
#config rule
#    option src        lan
#    option src_ip    192.168.45.2
#    option dest        wan
#    option proto    tcp
#    option target    REJECT

# block a specific mac on wan
#config rule
#    option dest        wan
#    option src_mac    00:11:22:33:44:66
#    option target    REJECT

# block incoming ICMP traffic on a zone
#config rule
#    option src        lan
#    option proto    ICMP
#    option target    DROP

# port redirect port coming in on wan to lan
#config redirect
#    option src            wan
#    option src_dport    80
#    option dest            lan
#    option dest_ip        192.168.16.235
#    option dest_port    80
#    option proto        tcp

# port redirect of remapped ssh port (22001) on wan
#config redirect
#    option src        wan
#    option src_dport    22001
#    option dest        lan
#    option dest_port    22
#    option proto        tcp

### FULL CONFIG SECTIONS
#config rule
#    option src        lan
#    option src_ip    192.168.45.2
#    option src_mac    00:11:22:33:44:55
#    option src_port    80
#    option dest        wan
#    option dest_ip    194.25.2.129
#    option dest_port    120
#    option proto    tcp
#    option target    REJECT

#config redirect
#    option src        lan
#    option src_ip    192.168.45.2
#    option src_mac    00:11:22:33:44:55
#    option src_port        1024
#    option src_dport    80
#    option dest_ip    194.25.2.129
#    option dest_port    120
#    option proto    tcp


root@OpenWrt:/tmp# cat /etc/config/mwan3 

config globals 'globals'
    option mmx_mask '0x3F00'
    option rtmon_interval '5'

config interface 'wan'
    option enabled '1'
    list track_ip '8.8.4.4'
    list track_ip '8.8.8.8'
    list track_ip '208.67.222.222'
    list track_ip '208.67.220.220'
    option family 'ipv4'
    option reliability '2'
    option count '1'
    option timeout '2'
    option failure_latency '1000'
    option recovery_latency '500'
    option failure_loss '20'
    option recovery_loss '5'
    option interval '5'
    option down '3'
    option up '8'

config interface 'wwan_24ghz'
    option enabled '1'
    list track_ip '8.8.4.4'
    list track_ip '8.8.8.8'
    list track_ip '208.67.222.222'
    list track_ip '208.67.220.220'
    option family 'ipv4'
    option reliability '2'
    option count '1'
    option timeout '2'
    option failure_latency '1000'
    option recovery_latency '500'
    option failure_loss '20'
    option recovery_loss '5'
    option interval '5'
    option down '3'
    option up '8'

config interface 'wan6'
    option enabled '0'
    list track_ip '2001:4860:4860::8844'
    list track_ip '2001:4860:4860::8888'
    list track_ip '2620:0:ccd::2'
    list track_ip '2620:0:ccc::2'
    option family 'ipv6'
    option reliability '2'
    option count '1'
    option timeout '2'
    option interval '5'
    option down '3'
    option up '8'

config interface 'wanb'
    option enabled '0'
    list track_ip '8.8.4.4'
    list track_ip '8.8.8.8'
    list track_ip '208.67.222.222'
    list track_ip '208.67.220.220'
    option family 'ipv4'
    option reliability '1'
    option count '1'
    option timeout '2'
    option failure_latency '1000'
    option recovery_latency '500'
    option failure_loss '20'
    option recovery_loss '5'
    option interval '5'
    option down '3'
    option up '8'

config interface 'wanb6'
    option enabled '0'
    list track_ip '2001:4860:4860::8844'
    list track_ip '2001:4860:4860::8888'
    list track_ip '2620:0:ccd::2'
    list track_ip '2620:0:ccc::2'
    option family 'ipv6'
    option reliability '1'
    option count '1'
    option timeout '2'
    option interval '5'
    option down '3'
    option up '8'

config member 'wan_m1_w3'
    option interface 'wan'
    option metric '1'
    option weight '3'

config member 'wan_m2_w3'
    option interface 'wan'
    option metric '2'
    option weight '3'

config member 'wanb_m1_w2'
    option interface 'wanb'
    option metric '1'
    option weight '2'

config member 'wanb_m2_w2'
    option interface 'wanb'
    option metric '2'
    option weight '2'

config member 'wwan_24ghz_m1_w2'
    option interface 'wwan_24ghz'
    option metric '1'
    option weight '2'

config member 'wwan_24ghz_m2_w2'
    option interface 'wwan_24ghz'
    option metric '2'
    option weight '2'

config member 'wan6_m1_w3'
    option interface 'wan6'
    option metric '1'
    option weight '3'

config member 'wan6_m2_w3'
    option interface 'wan6'
    option metric '2'
    option weight '3'

config member 'wanb6_m1_w2'
    option interface 'wanb6'
    option metric '1'
    option weight '2'

config member 'wanb6_m2_w2'
    option interface 'wanb6'
    option metric '2'
    option weight '2'

config policy 'wan_only'
    list use_member 'wan_m1_w3'
    list use_member 'wan6_m1_w3'

config policy 'wanb_only'
    list use_member 'wanb_m1_w2'
    list use_member 'wanb6_m1_w2'

config policy 'balanced'
    list use_member 'wan_m1_w3'
    list use_member 'wanb_m1_w2'
    list use_member 'wan6_m1_w3'
    list use_member 'wanb6_m1_w2'

config policy 'wan_wanb'
    list use_member 'wan_m1_w3'
    list use_member 'wanb_m2_w2'
    list use_member 'wan6_m1_w3'
    list use_member 'wanb6_m2_w2'

config policy 'wan_wwan_24ghz'
    list use_member 'wan_m1_w3'
    list use_member 'wwan_24ghz_m2_w2'

config policy 'wanb_wan'
    list use_member 'wan_m2_w3'
    list use_member 'wanb_m1_w2'
    list use_member 'wan6_m2_w3'
    list use_member 'wanb6_m1_w2'

config rule 'https'
    option sticky '1'
    option dest_port '443'
    option proto 'tcp'
    option use_policy 'balanced'

config rule 'default_rule'
    option dest_ip '0.0.0.0/0'
    option use_policy 'wan_wwan_24ghz'

EDIT: wywal te wszystkie śmieci w postaci wanb/wan6/wanb6 bo to tylko dodatkowe reguły które męczą router a i tak ich nie używsz.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

Cezary's Strona