Temat: TL-WDR4300 i N2N v1 brak dostępu do routera

Witam.

Posiadam router jak w temacie i na nim zainstalowane OpenWrt wersja: OpenWrt Chaos Calmer 15.05.1 / LuCI 15.05-149-g0d8bbd2 Release (git-15.363.78009-956be55)
Jako, że nie mam publicznego IP, jestem za NAT-em a chcę mieć dostęp tylko do swojego routera (nie do sieci LAN) to zainstalowałem na nim N2N v1 pakiet z BB. Korzystałem z poradnika od Cezarego http://eko.one.pl/?p=openwrt-n2n.
Niestety mimo wszystko mam brak dostępu do routera zarówno przez http jak i ssh. Po odpaleniu N2N utworzył mi się nowy interfejs edge0 z  takimi ustawieniami jak w

/etc/config/n2n

Z routera mogę zrobić ping na komputer na którym jest odpalony klient N2N ale z PC na router ping już nie idzie. Problem chyba leży w firewallu bo jak wydam polecenie

/etc/init.d/firewall stop

pingi do routera idą oraz mogę się zalogować przez www oraz ssh.

root@OpenWrt:~# uci show n2n
n2n.@edge[0]=edge
n2n.@edge[0].ipaddr='10.11.12.14'
n2n.@edge[0].supernode='5.39.95.124'
n2n.@edge[0].port='9876'
n2n.@edge[0].community='test'
n2n.@edge[0].key='********'
n2n.@edge[0].route='0'
root@OpenWrt:~#
root@OpenWrt:~# uci show network
network.loopback=interface
network.loopback.ifname='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fded:ff39:ab29::/48'
network.lan=interface
network.lan.ifname='eth0.1'
network.lan.force_link='1'
network.lan.type='bridge'
network.lan.proto='static'
network.lan.ipaddr='192.168.1.1'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.wan=interface
network.wan.ifname='eth0.2'
network.wan.proto='dhcp'
network.wan.hostname='OpenWrt'
network.wan.macaddr='00:30:4F:39:9B:F7'
network.wan6=interface
network.wan6.ifname='eth0.2'
network.wan6.proto='dhcpv6'
network.wan6.reqaddress='try'
network.wan6.reqprefix='auto'
network.wan6.macaddr='00:30:4F:39:9B:F7'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='0t 2 3 4 5'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='0t 1'
root@OpenWrt:~#
root@OpenWrt:~# uci show firewall
firewall.@defaults[0]=defaults
firewall.@defaults[0].syn_flood='1'
firewall.@defaults[0].output='ACCEPT'
firewall.@defaults[0].forward='REJECT'
firewall.@defaults[0].input='REJECT'
firewall.@zone[0]=zone
firewall.@zone[0].name='lan'
firewall.@zone[0].network='lan'
firewall.@zone[0].input='ACCEPT'
firewall.@zone[0].output='ACCEPT'
firewall.@zone[0].forward='ACCEPT'
firewall.@zone[1]=zone
firewall.@zone[1].name='wan'
firewall.@zone[1].network='wan' 'wan6'
firewall.@zone[1].input='REJECT'
firewall.@zone[1].output='ACCEPT'
firewall.@zone[1].forward='REJECT'
firewall.@zone[1].masq='1'
firewall.@zone[1].mtu_fix='1'
firewall.@forwarding[0]=forwarding
firewall.@forwarding[0].src='lan'
firewall.@forwarding[0].dest='wan'
firewall.@rule[0]=rule
firewall.@rule[0].name='Allow-DHCP-Renew'
firewall.@rule[0].src='wan'
firewall.@rule[0].proto='udp'
firewall.@rule[0].dest_port='68'
firewall.@rule[0].target='ACCEPT'
firewall.@rule[0].family='ipv4'
firewall.@rule[1]=rule
firewall.@rule[1].name='Allow-Ping'
firewall.@rule[1].src='wan'
firewall.@rule[1].proto='icmp'
firewall.@rule[1].icmp_type='echo-request'
firewall.@rule[1].family='ipv4'
firewall.@rule[1].target='ACCEPT'
firewall.@rule[2]=rule
firewall.@rule[2].name='Allow-IGMP'
firewall.@rule[2].src='wan'
firewall.@rule[2].proto='igmp'
firewall.@rule[2].family='ipv4'
firewall.@rule[2].target='ACCEPT'
firewall.@rule[3]=rule
firewall.@rule[3].name='Allow-DHCPv6'
firewall.@rule[3].src='wan'
firewall.@rule[3].proto='udp'
firewall.@rule[3].src_ip='fe80::/10'
firewall.@rule[3].src_port='547'
firewall.@rule[3].dest_ip='fe80::/10'
firewall.@rule[3].dest_port='546'
firewall.@rule[3].family='ipv6'
firewall.@rule[3].target='ACCEPT'
firewall.@rule[4]=rule
firewall.@rule[4].name='Allow-MLD'
firewall.@rule[4].src='wan'
firewall.@rule[4].proto='icmp'
firewall.@rule[4].src_ip='fe80::/10'
firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0'
firewall.@rule[4].family='ipv6'
firewall.@rule[4].target='ACCEPT'
firewall.@rule[5]=rule
firewall.@rule[5].name='Allow-ICMPv6-Input'
firewall.@rule[5].src='wan'
firewall.@rule[5].proto='icmp'
firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement'
firewall.@rule[5].limit='1000/sec'
firewall.@rule[5].family='ipv6'
firewall.@rule[5].target='ACCEPT'
firewall.@rule[6]=rule
firewall.@rule[6].name='Allow-ICMPv6-Forward'
firewall.@rule[6].src='wan'
firewall.@rule[6].dest='*'
firewall.@rule[6].proto='icmp'
firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type'
firewall.@rule[6].limit='1000/sec'
firewall.@rule[6].family='ipv6'
firewall.@rule[6].target='ACCEPT'
firewall.@include[0]=include
firewall.@include[0].path='/etc/firewall.user'
firewall.@rule[7]=rule
firewall.@rule[7].src='wan'
firewall.@rule[7].dest='lan'
firewall.@rule[7].proto='esp'
firewall.@rule[7].target='ACCEPT'
firewall.@rule[8]=rule
firewall.@rule[8].src='wan'
firewall.@rule[8].dest='lan'
firewall.@rule[8].dest_port='500'
firewall.@rule[8].proto='udp'
firewall.@rule[8].target='ACCEPT'
root@OpenWrt:~#
root@OpenWrt:~# ifconfig
br-lan    Link encap:Ethernet  HWaddr F4:F2:6D:6D:29:91
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::f6f2:6dff:fe6d:2991/64 Scope:Link
          inet6 addr: fded:ff39:ab29::1/60 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:8317499 errors:0 dropped:216 overruns:0 frame:0
          TX packets:14303250 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:411866230 (392.7 MiB)  TX bytes:20055390732 (18.6 GiB)

edge0     Link encap:Ethernet  HWaddr 42:0E:A2:B2:A0:29
          inet addr:10.11.12.14  Bcast:10.11.12.255  Mask:255.255.255.0
          inet6 addr: fe80::400e:a2ff:feb2:a029/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1400  Metric:1
          RX packets:5206 errors:0 dropped:0 overruns:0 frame:0
          TX packets:806 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:500
          RX bytes:1187202 (1.1 MiB)  TX bytes:74944 (73.1 KiB)

eth0      Link encap:Ethernet  HWaddr F4:F2:6D:6D:29:91
          inet6 addr: fe80::f6f2:6dff:fe6d:2991/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:14790583 errors:0 dropped:1 overruns:0 frame:0
          TX packets:8345966 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:2973613464 (2.7 GiB)  TX bytes:562873493 (536.7 MiB)
          Interrupt:4

eth0.1    Link encap:Ethernet  HWaddr F4:F2:6D:6D:29:91
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:21786 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:1719728 (1.6 MiB)

eth0.2    Link encap:Ethernet  HWaddr 00:30:4F:39:9B:F7
          inet addr:172.25.1.206  Bcast:172.25.255.255  Mask:255.255.0.0
          inet6 addr: fe80::230:4fff:fe39:9bf7/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:14790561 errors:0 dropped:1 overruns:0 frame:0
          TX packets:8324172 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:19887251015 (18.5 GiB)  TX bytes:527769045 (503.3 MiB)

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:270 errors:0 dropped:0 overruns:0 frame:0
          TX packets:270 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:24112 (23.5 KiB)  TX bytes:24112 (23.5 KiB)

wlan0     Link encap:Ethernet  HWaddr F4:F2:6D:6D:29:92
          inet6 addr: fe80::f6f2:6dff:fe6d:2992/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:8307904 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14271576 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:542061313 (516.9 MiB)  TX bytes:3127936904 (2.9 GiB)

wlan1     Link encap:Ethernet  HWaddr F4:F2:6D:6D:29:93
          inet6 addr: fe80::f6f2:6dff:fe6d:2993/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:45306 errors:0 dropped:0 overruns:0 frame:0
          TX packets:69839 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:4762492 (4.5 MiB)  TX bytes:42672701 (40.6 MiB)

root@OpenWrt:~#

2

Odp: TL-WDR4300 i N2N v1 brak dostępu do routera

A pingujesz adres n2n (10.11.12.xx) czy ten 192.168.x.x?

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

3 (edytowany przez oksymoron 2016-11-22 19:04:54)

Odp: TL-WDR4300 i N2N v1 brak dostępu do routera

Pingi puszczam na 10.11.12.x. I ten adres tez wklepuje w przeglądarkę oraz Putty.

EDIT.

Na PC mam odpalonego klienta z adresem 10.11.12.13 i z routera (10.11.12.14) ping idzie