Temat: Separacja ruchu

Witam,
Mój router to TP-Link Archer C5 v1
system to OpenWrt 18.06-SNAPSHOT r7301-55bbd8293c / LuCI openwrt-18.06 branch (git-18.228.31946-f64b152)

Mam dostęp do sieci z dwóch źródeł po wifi 2,4GHz lub 5GHz (dom i hot-spot). W sieci „dom” mam zablokowanego voipa. Chciałbym aby telefon voip podłączony po lanie korzystał z hot-spota(brak blokady voip) np. 5GHz a inne urządzenia po wifi np. 2,4GHz z siecią „dom”. Zależy mi na tym żeby ruch nie był przełączany na hot-spota w momencie braku neta sieci „dom” (chodzi o bezpieczeństwo). Jak odseparować od siebie w najprostszy sposób obydwa dostępy do sieci? (mwan3, https://eko.one.pl/?p=openwrt-routing czy coś innego?)

2

Odp: Separacja ruchu

Po prostu normalnie ustaw wifi klienta na sieć "dom" oraz drugiego, na wan2 na sieć "hot-spot" i przy pomocy routingu kieruj host na tą sieć którą chcesz.

Obie sieci muszą działać na osobnych radiach.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

3

Odp: Separacja ruchu

Klienci są na osobnych radiach. Może głupie pytanie ale jak przekierować hosta za pomocą routingu? Tylko ten telefon ma się łączyć z "hot-spot" reszta urządzeń automatycznie z "dom".

4

Odp: Separacja ruchu

Sam przecież podałeś link do mojego poradnika. Właśnie w taki sposób.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

5

Odp: Separacja ruchu

Nie działa. Wszystko idzie przez "dom".
Moje pliki. /etc/iproute2/rt_tables:
#
# reserved values
#
128    prelocal
255    local
254    main
253    default
0    unspec
200     modem
#
# local
#
#1    inr.ruhep

/etc/rc.local
ip rule add from 192.168.1.200 table modem
ip rule add from 192.168.1.123 table modem
ip route add default via 10.229.162.1 dev wlan0 table modem
ip route flush cache

# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.

exit 0

# ip route show
default via 192.168.179.1 dev wlan1  src 192.168.179.40
10.229.162.0/23 dev wlan0 scope link  src 10.229.162.246
192.168.1.0/24 dev br-lan scope link  src 192.168.1.111
192.168.179.0/24 dev wlan1 scope link  src 192.168.179.40

# ip rule show
0:      from all lookup local
32764:  from 192.168.1.123 lookup modem
32765:  from 192.168.1.200 lookup modem
32766:  from all lookup main
32767:  from all lookup default

/etc/config/network

config interface 'loopback'
    option ifname 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'
    option ula_prefix 'fdb3:02b0:6bc4::/48'

config interface 'lan'
    option type 'bridge'
    option ifname 'eth1.1'
    option proto 'static'
    option netmask '255.255.255.0'
    option ip6assign '60'
    option ipaddr '192.168.1.111'

config interface 'wan'
    option ifname 'eth0.2'
    option proto 'dhcp'

config interface 'wan6'
    option ifname 'eth0.2'
    option proto 'dhcpv6'

config switch
    option name 'switch0'
    option reset '1'
    option enable_vlan '1'

config switch_vlan
    option device 'switch0'
    option vlan '1'
    option ports '2 3 4 5 0t'

config switch_vlan
    option device 'switch0'
    option vlan '2'
    option ports '1 6t'

config interface 'wwan'
    option proto 'dhcp'

config interface 'wwan2'
    option proto 'dhcp'

/etc/config/firewall

config defaults
    option syn_flood '1'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'

config zone
    option name 'lan'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'
    option network 'lan'

config zone
    option name 'wan'
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option masq '1'
    option mtu_fix '1'
    option network 'wan wan6 wwan wwan2'

config forwarding
    option src 'lan'
    option dest 'wan'

config rule
    option name 'Allow-DHCP-Renew'
    option src 'wan'
    option proto 'udp'
    option dest_port '68'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Ping'
    option src 'wan'
    option proto 'icmp'
    option icmp_type 'echo-request'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-IGMP'
    option src 'wan'
    option proto 'igmp'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-DHCPv6'
    option src 'wan'
    option proto 'udp'
    option src_ip 'fc00::/6'
    option dest_ip 'fc00::/6'
    option dest_port '546'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-MLD'
    option src 'wan'
    option proto 'icmp'
    option src_ip 'fe80::/10'
    list icmp_type '130/0'
    list icmp_type '131/0'
    list icmp_type '132/0'
    list icmp_type '143/0'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Input'
    option src 'wan'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    list icmp_type 'router-solicitation'
    list icmp_type 'neighbour-solicitation'
    list icmp_type 'router-advertisement'
    list icmp_type 'neighbour-advertisement'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Forward'
    option src 'wan'
    option dest '*'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-IPSec-ESP'
    option src 'wan'
    option dest 'lan'
    option proto 'esp'
    option target 'ACCEPT'

config rule
    option name 'Allow-ISAKMP'
    option src 'wan'
    option dest 'lan'
    option dest_port '500'
    option proto 'udp'
    option target 'ACCEPT'

config include
    option path '/etc/firewall.user'

6

Odp: Separacja ruchu

Wykonaj te regułki nie w /etc/rc.local tylko później ręcznie i zobacz.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

7

Odp: Separacja ruchu

Działa po ręcznym wpisaniu.

8

Odp: Separacja ruchu

Czyli skrypt rc.local uruchamia ci się wcześniej niż wifi nawiązuje połączenia. Albo sobie dodaj opóźnienie do skryptu albo uruchamiaj go na hotplugu żeby się zrobił dopiero jak wifi wstanie.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

9

Odp: Separacja ruchu

W pliku rc.local na początku każdej komendy dodałem sleep 3;

sleep 3; ip rule add from 192.168.1.123 table modem
sleep 3; ip route add default via 10.229.162.1 dev wlan0 table modem
sleep 3; ip route flush cache

I po restarcie routera wszystko działa.

10

Odp: Separacja ruchu

Od momentu zrobienia tej konfiguracji router się samoczynnie restartuje(sprawdzam po czasie pracy routera). Jest to możliwe prze te ustawienia? Czy przyczyny szukać gdzieś indziej?

11

Odp: Separacja ruchu

Jak już to podłącz konsolę szeregową i łap w którym momencie się wykłada.

Jako że "ip" używasz cały światek linuksowy - to raczej nie jest problem z nim samym.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

12

Odp: Separacja ruchu

Nie mam konsoli szeregowej i odpowiednich umiejętności. Odłączyłem bramkę sip(Gigaset S685IP) od routera i przestał się resetować. Wczoraj podłączyłem ją przez inny router i na razie nic się nie zresetowało, ale niestety nie ma połączenia z "hot-spot" wczoraj wszystko działało. Przy użyciu komendy  ip route show table "dom" i  ip route show table "hot-spot" nic nie pokazuje. Jeszcze taka jedna uwaga, nie widać tego gigaseta jako klienta i jaki posiada nr IP(Asus z Merlinem i OpenWrt). Komendę ip route add default via .... dev ..... table ..... należy cyklicznie wpisywać żeby wszystko działało?

13

Odp: Separacja ruchu

Nie, tylko raz. O ile oczywiście nie rekonfigurujesz systemu, nie podnosisz interfejsów itd. Bo jakakolwiek zmiana w sieci oczywiście oznacza że musisz się upewnić że regułki nadal tam są.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

14

Odp: Separacja ruchu

Sęk w tym, że nic nie robiłem.

15

Odp: Separacja ruchu

Wgrałem obraz z nr jądra 4.9.170. Router przestał się restartować. Oczywiście co jakiś czas musiałem używać komendy  ip route add default via dla wlan0 i wlan1. Teraz tak się porobiło, że nawet po restarcie routera ifconfig pokazuje interfejsy ale już wpisanie ifstatus wlan0 czy wlan1 pokazuje Interface wlan1 not found. Internet teraz jest przez wlan1. Co się mogło stać?

16

Odp: Separacja ruchu

Np. masz wifi wyłączone. Patrz w konfigi i logi.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

17

Odp: Separacja ruchu

Internet mam po wifi więc chyba jest włączone. Co szukać w logach?

18

Odp: Separacja ruchu

Ale po wlan0 czy wlan1? Wszystkie związanego z wifi.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

19

Odp: Separacja ruchu

Jak wejdę po Gui to widzę że wlan0 jako klient jest podłączony, wlan1 jako klient i jako master (po wlan1 mam neta).
Tak na przyszłoś to jak zrobić aby np. Log jądra nie zabierał tyle miejsca? Log jądra:

[    0.000000] Linux version 4.9.170 (cezary@eko.one.pl) (gcc version 7.3.0 (OpenWrt GCC 7.3.0 r7316-7347ea7453) ) #0 Wed Apr 24 08:38:53 2019
[    0.000000] MyLoader: sysp=ed1f9b44, boardp=19ae5c84, parts=efb360d1
[    0.000000] bootconsole [early0] enabled
[    0.000000] CPU0 revision is: 00019750 (MIPS 74Kc)
[    0.000000] SoC: Qualcomm Atheros QCA9558 ver 1 rev 0
[    0.000000] Determined physical RAM map:
[    0.000000]  memory: 08000000 @ 00000000 (usable)
[    0.000000] Initrd not found or empty - disabling initrd
[    0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes.
[    0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000000000-0x0000000007ffffff]
[    0.000000] On node 0 totalpages: 32768
[    0.000000] free_area_init_node: node 0, pgdat 8044a404, node_mem_map 81000020
[    0.000000]   Normal zone: 256 pages used for memmap
[    0.000000]   Normal zone: 0 pages reserved
[    0.000000]   Normal zone: 32768 pages, LIFO batch:7
[    0.000000] pcpu-alloc: s0 r0 d32768 u32768 alloc=1*32768
[    0.000000] pcpu-alloc: [0] 0
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 32512
[    0.000000] Kernel command line:  board=ARCHER-C5  console=ttyS0,115200 rootfstype=squashfs noinitrd
[    0.000000] PID hash table entries: 512 (order: -1, 2048 bytes)
[    0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes)
[    0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes)
[    0.000000] Writing ErrCtl register=00000000
[    0.000000] Readback ErrCtl register=00000000
[    0.000000] Memory: 124940K/131072K available (3391K kernel code, 172K rwdata, 448K rodata, 332K init, 211K bss, 6132K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
[    0.000000] NR_IRQS:51
[    0.000000] Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:200.000MHz, Ref:40.000MHz
[    0.000000] clocksource: MIPS: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 5309056796 ns
[    0.000008] sched_clock: 32 bits at 360MHz, resolution 2ns, wraps every 5965232126ns
[    0.008299] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048)
[    0.071187] pid_max: default: 32768 minimum: 301
[    0.076184] Mount-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.083231] Mountpoint-cache hash table entries: 1024 (order: 0, 4096 bytes)
[    0.092889] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.103384] futex hash table entries: 256 (order: -1, 3072 bytes)
[    0.110855] NET: Registered protocol family 16
[    0.116781] MIPS: machine is TP-LINK Archer C5
[    0.124588] ar724x-pci ar724x-pci.0: PCIe link is down
[    0.130086] registering PCI controller with io_map_base unset
[    0.136302] registering PCI controller with io_map_base unset
[    0.631769] PCI host bridge to bus 0000:00
[    0.636168] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff]
[    0.643475] pci_bus 0000:00: root bus resource [io  0x0000]
[    0.649405] pci_bus 0000:00: root bus resource [??? 0x00000000 flags 0x0]
[    0.656621] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff]
[    0.665064] pci_bus 0000:00: busn_res: [bus 00-ff] end is updated to 00
[    0.665165] PCI host bridge to bus 0000:01
[    0.669524] pci_bus 0000:01: root bus resource [mem 0x12000000-0x13ffffff]
[    0.676849] pci_bus 0000:01: root bus resource [io  0x0001]
[    0.682770] pci_bus 0000:01: root bus resource [??? 0x00000000 flags 0x0]
[    0.689993] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff]
[    0.698439] pci 0000:01:00.0: [168c:003c] type 00 class 0x028000
[    0.698477] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x001fffff 64bit]
[    0.698526] pci 0000:01:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref]
[    0.698592] pci 0000:01:00.0: supports D1 D2
[    0.698760] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    0.698782] pci 0000:01:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit]
[    0.706600] pci 0000:01:00.0: BAR 6: assigned [mem 0x12200000-0x1220ffff pref]
[    0.714286] pci 0000:01:00.0: using irq 41 for pin 1
[    0.722204] clocksource: Switched to clocksource MIPS
[    0.728442] NET: Registered protocol family 2
[    0.733873] TCP established hash table entries: 1024 (order: 0, 4096 bytes)
[    0.741299] TCP bind hash table entries: 1024 (order: 0, 4096 bytes)
[    0.748102] TCP: Hash tables configured (established 1024 bind 1024)
[    0.754942] UDP hash table entries: 256 (order: 0, 4096 bytes)
[    0.761162] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes)
[    0.768067] NET: Registered protocol family 1
[    0.772764] PCI: CLS 0 bytes, default 32
[    0.774985] Crashlog allocated RAM at address 0x3f00000
[    0.781402] workingset: timestamp_bits=30 max_order=15 bucket_order=0
[    0.794003] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.800206] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.818195] io scheduler noop registered
[    0.822403] io scheduler deadline registered (default)
[    0.828210] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.837130] console [ttyS0] disabled
[    0.861003] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11, base_baud = 2500000) is a 16550A
[    0.870190] console [ttyS0] enabled
[    0.877605] bootconsole [early0] disabled
[    0.890869] m25p80 spi0.0: found s25fl128s, expected m25p80
[    0.896571] m25p80 spi0.0: s25fl128s (16384 Kbytes)
[    0.902392] 5 tp-link partitions found on MTD device spi0.0
[    0.908045] Creating 5 MTD partitions on "spi0.0":
[    0.912933] 0x000000000000-0x000000020000 : "u-boot"
[    0.919456] 0x000000020000-0x000000170910 : "kernel"
[    0.926117] 0x000000170910-0x000000ff0000 : "rootfs"
[    0.932444] mtd: device 2 (rootfs) set to be root filesystem
[    0.938222] 1 squashfs-split partitions found on MTD device rootfs
[    0.944517] 0x000000680000-0x000000ff0000 : "rootfs_data"
[    0.951662] 0x000000ff0000-0x000001000000 : "art"
[    0.958079] 0x000000020000-0x000000ff0000 : "firmware"
[    0.965737] libphy: Fixed MDIO Bus: probed
[    0.981212] switch0: Atheros AR8327 rev. 4 switch registered on ag71xx-mdio.0
[    1.671038] libphy: ag71xx_mdio: probed
[    2.303712] ag71xx ag71xx.0: connected to PHY at ag71xx-mdio.0:00 [uid=004dd034, driver=Atheros AR8216/AR8236/AR8316]
[    2.315065] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:RGMII
[    2.612201] random: fast init done
[    2.943838] eth1: Atheros AG71xx at 0xba000000, irq 5, mode:SGMII
[    2.951765] NET: Registered protocol family 10
[    2.959594] NET: Registered protocol family 17
[    2.964186] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    2.977429] 8021q: 802.1Q VLAN Support v1.8
[    2.983031] hctosys: unable to open rtc device (rtc0)
[    2.994624] VFS: Mounted root (squashfs filesystem) readonly on device 31:2.
[    3.002984] Freeing unused kernel memory: 332K
[    3.007487] This architecture does not have kernel memory protection.
[    3.668644] init: Console is alive
[    3.672324] init: - watchdog -
[    5.442737] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    5.661138] usbcore: registered new interface driver usbfs
[    5.666824] usbcore: registered new interface driver hub
[    5.672308] usbcore: registered new device driver usb
[    5.701504] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    5.715136] SCSI subsystem initialized
[    5.722760] ehci-platform: EHCI generic platform driver
[    5.728130] ehci-platform ehci-platform.0: EHCI Host Controller
[    5.734195] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1
[    5.744461] ehci-platform ehci-platform.0: TX-TX IDP fix enabled
[    5.750566] ehci-platform ehci-platform.0: irq 48, io mem 0x1b000000
[    5.782274] ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00
[    5.789559] hub 1-0:1.0: USB hub found
[    5.793666] hub 1-0:1.0: 1 port detected
[    5.797948] ehci-platform ehci-platform.1: EHCI Host Controller
[    5.804012] ehci-platform ehci-platform.1: new USB bus registered, assigned bus number 2
[    5.814298] ehci-platform ehci-platform.1: TX-TX IDP fix enabled
[    5.820403] ehci-platform ehci-platform.1: irq 49, io mem 0x1b400000
[    5.852226] ehci-platform ehci-platform.1: USB 2.0 started, EHCI 1.00
[    5.859473] hub 2-0:1.0: USB hub found
[    5.863596] hub 2-0:1.0: 1 port detected
[    5.871066] usbcore: registered new interface driver usb-storage
[    5.878841] usbcore: registered new interface driver uas
[    5.884809] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    5.905400] init: - preinit -
[    7.009790] eth1: link up (1000Mbps/Full duplex)
[    7.162110] random: procd: uninitialized urandom read (4 bytes read)
[   10.326816] mount_root: loading kmods from internal overlay
[   10.368698] kmodloader: loading kernel modules from //etc/modules-boot.d/*
[   10.377083] kmodloader: done loading kernel modules from //etc/modules-boot.d/*
[   11.328675] jffs2: notice: (475) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   11.344863] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[   11.357633] block: extroot: not configured
[   11.474886] jffs2: notice: (472) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   11.491973] mount_root: loading kmods from internal overlay
[   11.532682] kmodloader: loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[   11.544229] kmodloader: done loading kernel modules from /tmp/overlay/upper/etc/modules-boot.d/*
[   12.076333] block: attempting to load /tmp/jffs_cfg/upper/etc/config/fstab
[   12.086445] block: extroot: not configured
[   12.091525] mount_root: switching to jffs2 overlay
[   12.142749] urandom-seed: Seeding with /etc/urandom.seed
[   12.251479] eth1: link down
[   12.264163] procd: - early -
[   12.267162] procd: - watchdog -
[   12.994044] procd: - watchdog -
[   12.997456] procd: - ubus -
[   13.075712] random: jshn: uninitialized urandom read (4 bytes read)
[   13.191732] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.202442] random: ubusd: uninitialized urandom read (4 bytes read)
[   13.210588] procd: - init -
[   14.265844] kmodloader: loading kernel modules from /etc/modules.d/*
[   14.302639] tun: Universal TUN/TAP device driver, 1.6
[   14.307769] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[   14.335409] ip6_tables: (C) 2000-2006 Netfilter Core Team
[   14.368525] fuse init (API version 7.26)
[   14.397044] usbcore: registered new interface driver cdc_acm
[   14.402839] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[   14.433396] usbcore: registered new interface driver cdc_wdm
[   14.443197] Loading modules backported from Linux version wt-2017-11-01-0-gfe248fc2c180
[   14.451314] Backport generated by backports.git v4.14-rc2-1-31-g86cf0e5d
[   14.474287] ip_tables: (C) 2000-2006 Netfilter Core Team
[   14.509519] nf_conntrack version 0.5.0 (2048 buckets, 8192 max)
[   14.712275] usbcore: registered new interface driver usblp
[   14.739601] usbcore: registered new interface driver usbserial
[   14.745655] usbcore: registered new interface driver usbserial_generic
[   14.752381] usbserial: USB Serial support registered for generic
[   14.804975] xt_time: kernel timezone is -0000
[   14.823876] usbcore: registered new interface driver cdc_ether
[   14.832909] usbcore: registered new interface driver cdc_ncm
[   15.013458] usbcore: registered new interface driver huawei_cdc_ncm
[   15.104797] PPP generic driver version 2.4.2
[   15.116420] NET: Registered protocol family 24
[   15.134203] usbcore: registered new interface driver qmi_wwan
[   15.145117] usbcore: registered new interface driver rndis_host
[   15.163983] usbcore: registered new interface driver sierra
[   15.169712] usbserial: USB Serial support registered for Sierra USB modem
[   15.193850] usbcore: registered new interface driver sierra_net
[   15.255597] PCI: Enabling device 0000:01:00.0 (0000 -> 0002)
[   15.261495] ath10k_pci 0000:01:00.0: pci irq legacy oper_irq_mode 1 irq_mode 0 reset_mode 0
[   15.572654] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/pre-cal-pci-0000:01:00.0.bin failed with error -2
[   15.583541] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.500056] firmware ath10k!pre-cal-pci-0000:01:00.0.bin: firmware_loading_store: map pages failed
[   16.612472] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/firmware-6.bin failed with error -2
[   16.623354] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.725551] firmware ath10k!QCA988X!hw2.0!firmware-6.bin: firmware_loading_store: map pages failed
[   16.738942] ath10k_pci 0000:01:00.0: qca988x hw2.0 target 0x4100016c chip_id 0x043202ff sub 0000:0000
[   16.748334] ath10k_pci 0000:01:00.0: kconfig debug 0 debugfs 1 tracing 0 dfs 1 testmode 1
[   16.761382] ath10k_pci 0000:01:00.0: firmware ver 10.2.4-1.0-00037 api 5 features no-p2p,raw-mode,mfp,allows-mesh-bcast crc32 a4a52adb
[   16.857038] ath10k_pci 0000:01:00.0: Direct firmware load for ath10k/QCA988X/hw2.0/board-2.bin failed with error -2
[   16.867667] ath10k_pci 0000:01:00.0: Falling back to user helper
[   16.940330] firmware ath10k!QCA988X!hw2.0!board-2.bin: firmware_loading_store: map pages failed
[   16.949566] ath10k_pci 0000:01:00.0: board_file api 1 bmi_id N/A crc32 bebc7c08
[   18.041197] ath10k_pci 0000:01:00.0: htt-ver 2.1 wmi-op 5 htt-op 2 cal file max-sta 128 raw 0 hwcrypto 1
[   18.183428] ath: EEPROM regdomain: 0x0
[   18.183434] ath: EEPROM indicates default country code should be used
[   18.183437] ath: doing EEPROM country->regdmn map search
[   18.183448] ath: country maps to regdmn code: 0x3a
[   18.183453] ath: Country alpha2 being used: US
[   18.183456] ath: Regpair used: 0x3a
[   18.285980] usbcore: registered new interface driver cdc_mbim
[   18.293972] usbcore: registered new interface driver option
[   18.299705] usbserial: USB Serial support registered for GSM modem (1-port)
[   18.311322] usbcore: registered new interface driver qcserial
[   18.317290] usbserial: USB Serial support registered for Qualcomm USB modem
[   18.341756] ath: EEPROM regdomain: 0x0
[   18.341763] ath: EEPROM indicates default country code should be used
[   18.341766] ath: doing EEPROM country->regdmn map search
[   18.341779] ath: country maps to regdmn code: 0x3a
[   18.341783] ath: Country alpha2 being used: US
[   18.341786] ath: Regpair used: 0x3a
[   18.357781] ieee80211 phy1: Selected rate control algorithm 'minstrel_ht'
[   18.360921] ieee80211 phy1: Atheros AR9550 Rev:0 mem=0xb8100000, irq=47
[   18.412601] kmodloader: done loading kernel modules from /etc/modules.d/*
[   30.056572] eth1: link up (1000Mbps/Full duplex)
[   30.061337] IPv6: ADDRCONF(NETDEV_UP): eth1: link is not ready
[   30.085319] br-lan: port 1(eth1.1) entered blocking state
[   30.090801] br-lan: port 1(eth1.1) entered disabled state
[   30.096656] device eth1.1 entered promiscuous mode
[   30.101517] device eth1 entered promiscuous mode
[   30.150530] br-lan: port 1(eth1.1) entered blocking state
[   30.156055] br-lan: port 1(eth1.1) entered forwarding state
[   30.161823] IPv6: ADDRCONF(NETDEV_UP): br-lan: link is not ready
[   30.206292] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   30.233666] IPv6: ADDRCONF(NETDEV_UP): eth0.2: link is not ready
[   31.117531] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready
[   31.124315] IPv6: ADDRCONF(NETDEV_CHANGE): br-lan: link becomes ready
[   31.253686] eth0: link up (1000Mbps/Full duplex)
[   31.272432] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[   31.325709] IPv6: ADDRCONF(NETDEV_CHANGE): eth0.2: link becomes ready
[   33.595830] ath: EEPROM regdomain: 0x8268
[   33.595837] ath: EEPROM indicates we should expect a country code
[   33.595842] ath: doing EEPROM country->regdmn map search
[   33.595848] ath: country maps to regdmn code: 0x37
[   33.595853] ath: Country alpha2 being used: PL
[   33.595856] ath: Regpair used: 0x37
[   33.595862] ath: regdomain 0x8268 dynamically updated by user
[   33.595938] ath: EEPROM regdomain: 0x8268
[   33.595942] ath: EEPROM indicates we should expect a country code
[   33.595946] ath: doing EEPROM country->regdmn map search
[   33.595951] ath: country maps to regdmn code: 0x37
[   33.595955] ath: Country alpha2 being used: PL
[   33.595958] ath: Regpair used: 0x37
[   33.595962] ath: regdomain 0x8268 dynamically updated by user
[   36.837192] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   37.597030] IPv6: ADDRCONF(NETDEV_UP): wlan1-1: link is not ready
[   37.695184] br-lan: port 2(wlan1-1) entered blocking state
[   37.700760] br-lan: port 2(wlan1-1) entered disabled state
[   37.706695] device wlan1-1 entered promiscuous mode
[   37.711708] br-lan: port 2(wlan1-1) entered blocking state
[   37.717303] br-lan: port 2(wlan1-1) entered forwarding state
[   37.887345] br-lan: port 2(wlan1-1) entered disabled state
[   38.862636] wlan0: authenticate with 70:18:a7:10:a6:6b
[   38.875023] wlan0: send auth to 70:18:a7:10:a6:6b (try 1/3)
[   38.881473] wlan0: send auth to 70:18:a7:10:a6:6b (try 2/3)
[   38.887859] wlan0: send auth to 70:18:a7:10:a6:6b (try 3/3)
[   38.894223] wlan0: authentication with 70:18:a7:10:a6:6b timed out
[   39.969305] wlan0: authenticate with 70:18:a7:10:a6:6b
[   39.979372] wlan0: send auth to 70:18:a7:10:a6:6b (try 1/3)
[   39.985910] wlan0: send auth to 70:18:a7:10:a6:6b (try 2/3)
[   39.995583] wlan0: authenticated
[   40.003559] wlan0: associate with 70:18:a7:10:a6:6b (try 1/3)
[   40.021196] wlan0: RX AssocResp from 70:18:a7:10:a6:6b (capab=0x101 status=0 aid=4)
[   40.043328] wlan0: associated
[   40.049434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   40.147890] wlan0: Limiting TX power to 20 (20 - 0) dBm as advertised by 70:18:a7:10:a6:6b
[   46.263575] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   47.816734] wlan1: authenticate with 7e:ff:4d:56:b4:0b
[   47.847515] wlan1: send auth to 7e:ff:4d:56:b4:0b (try 1/3)
[   47.857920] wlan1: authenticated
[   47.862360] wlan1: associate with 7e:ff:4d:56:b4:0b (try 1/3)
[   47.878601] wlan1: RX AssocResp from 7e:ff:4d:56:b4:0b (capab=0x1431 status=0 aid=4)
[   47.886675] wlan1: associated
[   47.910805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.928301] wlan1: Limiting TX power to 20 (20 - 0) dBm as advertised by 7e:ff:4d:56:b4:0b
[   48.563760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1-1: link becomes ready
[   48.570527] br-lan: port 2(wlan1-1) entered blocking state
[   48.576158] br-lan: port 2(wlan1-1) entered forwarding state
[   65.440053] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   70.001098] random: crng init done
[   70.004562] random: 6 urandom warning(s) missed due to ratelimiting
[  118.530223] wlan0: deauthenticated from 70:18:a7:10:a6:6b (Reason: 6=CLASS2_FRAME_FROM_NONAUTH_STA)
[  118.574649] wlan0: authenticate with 70:18:a7:10:a6:6b
[  118.584758] wlan0: send auth to 70:18:a7:10:a6:6b (try 1/3)
[  118.591632] wlan0: authenticated
[  118.612623] wlan0: associate with 70:18:a7:10:a6:6b (try 1/3)
[  118.631220] wlan0: RX AssocResp from 70:18:a7:10:a6:6b (capab=0x101 status=0 aid=1)
[  118.647335] wlan0: associated
[  118.650543] wlan0: Limiting TX power to 20 (20 - 0) dBm as advertised by 70:18:a7:10:a6:6b
[  235.352577] wlan0: deauthenticating from 70:18:a7:10:a6:6b by local choice (Reason: 3=DEAUTH_LEAVING)
[  240.974969] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[  249.749704] wlan0: authenticate with 70:18:a7:10:a6:6b
[  249.761880] wlan0: send auth to 70:18:a7:10:a6:6b (try 1/3)
[  249.768590] wlan0: send auth to 70:18:a7:10:a6:6b (try 2/3)
[  249.774946] wlan0: send auth to 70:18:a7:10:a6:6b (try 3/3)
[  249.781258] wlan0: authentication with 70:18:a7:10:a6:6b timed out
[  251.242053] wlan0: authenticate with 70:18:a7:10:a6:6b
[  251.252182] wlan0: send auth to 70:18:a7:10:a6:6b (try 1/3)
[  251.258835] wlan0: send auth to 70:18:a7:10:a6:6b (try 2/3)
[  251.266154] wlan0: authenticated
[  251.272268] wlan0: associate with 70:18:a7:10:a6:6b (try 1/3)
[  251.290665] wlan0: RX AssocResp from 70:18:a7:10:a6:6b (capab=0x101 status=0 aid=1)
[  251.300134] wlan0: associated
[  251.304537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  251.358914] wlan0: Limiting TX power to 20 (20 - 0) dBm as advertised by 70:18:a7:10:a6:6b

20

Odp: Separacja ruchu

Log jądra jest w pamięci tam i nie zabiera miejsca we flash. Podobnie jak zwykłe logi.

Już chyba wiem w czym masz problem - ifconfig pokazuje interfejsy, ale ifstatus podajesz lan/wan a nie nazwy interfejsów.

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

21

Odp: Separacja ruchu

ip route add default via 10.229.162.1 dev wlan0 table datWlan
ip: RTNETLINK answers: Network unreachable

22

Odp: Separacja ruchu

Cezary napisał/a:

Log jądra jest w pamięci tam i nie zabiera miejsca we flash. Podobnie jak zwykłe logi.

Chodzi mi tutaj na forum. Tak żeby post nie był rozlazły.

23

Odp: Separacja ruchu

Używaj tagów bbcode ([ code ] / [ /code ] - bez spacji)

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

24

Odp: Separacja ruchu

kwachu6 napisał/a:

ip route add default via 10.229.162.1 dev wlan0 table datWlan
ip: RTNETLINK answers: Network unreachable


route -n pokaż

Masz niepotrzebny router, uszkodzony czy nie - chętnie przygarnę go.

25

Odp: Separacja ruchu

Z Gui dałem wyłącz i  włącz(klient wlan0 i wlan1) następnie restart i wszystko wróciło do normy. Jak się powtórzy sytuacja to wyślę route -n .