New Kong's build: DD-WRT 30700M - 09/27/2016

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8, 9, 10  Next
Author Message
Bib
DD-WRT Guru


Joined: 07 Jul 2008
Posts: 629
Location: France

PostPosted: Fri Oct 21, 2016 8:31    Post subject: Reply with quote
@rydah805
Not sure if it's related, but for the very first time today with dd-wrt (used since 2008) I experienced something I never saw before: currently playing with various settings on wireless guest I'm often disconnected which is normal because the wl devices are restarted. Only playing, I only use telnet, and what I saw at a moment is that I didn't get the dd-wrt prompt. I got the banner, but not the prompt for user name. Typed Enter and got the prompt. Exit/telnet, banner but no prompt. Ctrl+C, telnet, no prompt. Enter, prompt OK, login OK, exit, and exit again to close the pc terminal, relaunch, telnet, prompt OK.
On the pc I have for years a customed black background & colored prompt (from .bashrc), and I noticed since some release the dd-wrt prompt is coloured.
On pc:
me@lap:~$ echo $PS1
Code:

\[\e]0;\u@\h: \w\a\]${debian_chroot:+($debian_chroot)}\u@\[\033[01;31m\]\h\[\033[00m\]:\[\033[36m\]\w\[\033[00m\]\$
On dd-wrt:
root@DD-WRT:~# echo $PS1
Code:

�\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$

root@DD-WRT:~# echo $PS1
Code:

\[\033[01;31m\]\u@\h\[\033[00m\]:\[\033[01;34m\]\w\[\033[00m\]\$


I also have a setting somewhere that tells terminal no to wipe screen from previous session when I disconnect telnet/ssh (maybe in terminal settings or ssh client)

_________________
): FoReVeR nEwB Sad
Sponsor
Bib
DD-WRT Guru


Joined: 07 Jul 2008
Posts: 629
Location: France

PostPosted: Fri Oct 21, 2016 8:50    Post subject: Reply with quote
mlord wrote:
R6400

After a couple of days uptime, today the "guest" Wifi on 2.4GHz was not accepting connections.
Primary Wifi was still okay, but the "guest" Wifi is essential here as well.

Rebooted, works again.

EDIT: I suspect be this might have been due to dnsmasq crashing and not being restarted.

There are more than a few reports here of dnsmasq causing trouble, and of routers behaving better with it disabled. On my R6400, I have dnsmasq disabled for everything except the "guest" Wifi, which would explain why only the "guest" wifi had issues today.

Next time it happens, I'll check to see if dnsmasq is still running or not before rebooting.


I found something : just add a #dummy line in the firewall script and Save Firewall : then you can connect to guest without rebooting the router. Maybe just Save Firewall with no change would do the job. I believe that for devs, it is a big tradeoff headache to balance when reload/not reload the rules.

_________________
): FoReVeR nEwB Sad
Bib
DD-WRT Guru


Joined: 07 Jul 2008
Posts: 629
Location: France

PostPosted: Fri Oct 21, 2016 20:51    Post subject: Guest vaps 2G & 5G in the same subnet with desipro tuto Reply with quote
Now, my question Wink
I followed the Kong's tuto @ desipro and want to use it to make the guests network bi-band.
As I'd like to have guests in the same say 192.168.2.0/24 net, I get puzzled and stuck at Networking.asp dhcp settings because I wonder if there are 2 dnsmasq-dhcp instances that could allocate twice the same IP? If there is a single instance, will it be clever enough to not fall into the trap ? I see all options in dnsmasq.conf duplicated for wl1.1, as well as the firewall rules.
My setup works for a single vap, but not when I set the 2 vaps at 2.1 (same exact duplicated lines below, even the 2 last ip rules). Only setting the 5G vap @ 3.1 I get it work, but the 2 vaps aren't in te same net.
Code:
# cat /tmp/dnsmasq.conf
interface=br0,wl0.1,wl1.1
resolv-file=/tmp/resolv.dnsmasq
strict-order
domain=lan.lan
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-lease-max=76
dhcp-option=br0,3,192.168.1.1
dhcp-option=wl0.1,3,192.168.2.1
dhcp-option=wl1.1,3,192.168.3.1
dhcp-authoritative
dhcp-range=br0,192.168.1.100,192.168.1.149,255.255.255.0,1440m
dhcp-range=wl0.1,192.168.2.1,192.168.2.254,255.255.255.0,60m
dhcp-range=wl1.1,192.168.3.1,192.168.3.254,255.255.255.0,60m
stop-dns-rebind

root@DD-WRT:~# iptables -nvL INPUT
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  271 72072 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 ACCEPT     udp  --  vlan2  *       0.0.0.0/0            0.0.0.0/0           udp spt:67 dpt:68
    0     0 DROP       udp  --  vlan2  *       0.0.0.0/0            0.0.0.0/0           udp dpt:520
    0     0 DROP       udp  --  br0    *       0.0.0.0/0            0.0.0.0/0           udp dpt:520
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:520
   12  1861 ACCEPT     0    --  br0    *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     icmp --  vlan2  *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       2    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  lo     *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     0    --  br0    *       0.0.0.0/0            0.0.0.0/0           state NEW
    2   656 ACCEPT     udp  --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           udp dpt:67
    0     0 ACCEPT     udp  --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           udp dpt:53
    0     0 ACCEPT     tcp  --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53
    9   725 DROP       0    --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     0    --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           
    4  1312 ACCEPT     udp  --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           udp dpt:67
    0     0 ACCEPT     udp  --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           udp dpt:53
    0     0 ACCEPT     tcp  --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53
  150 17892 DROP       0    --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     0    --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           
  200 28822 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
root@DD-WRT:~# iptables -nvL FORWARD
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
 4685  484K ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
    0     0 DROP       0    --  wl1.1  *       0.0.0.0/0            192.168.1.0/24      state NEW
    0     0 DROP       0    --  wl0.1  *       0.0.0.0/0            192.168.1.0/24      state NEW
  434 27408 ACCEPT     0    --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           
 3427  232K ACCEPT     0    --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           
  343 20644 lan2wan    0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br0    br0     0.0.0.0/0            0.0.0.0/0           
  343 20644 ACCEPT     0    --  br0    vlan2   0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       tcp  --  *      vlan2   0.0.0.0/0            0.0.0.0/0           tcp dpt:1723
    0     0 DROP       udp  --  *      vlan2   0.0.0.0/0            0.0.0.0/0           udp dpt:1701
    0     0 TRIGGER    0    --  vlan2  br0     0.0.0.0/0            0.0.0.0/0           TRIGGER type:in match:0 relate:0
    0     0 trigger_out  0    --  br0    *       0.0.0.0/0            0.0.0.0/0           
    0     0 DROP       0    --  br0    wl0.1   0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 DROP       0    --  br0    wl1.1   0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 ACCEPT     0    --  br0    *       0.0.0.0/0            0.0.0.0/0           state NEW
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           

root@DD-WRT:~# iptables -t nat -nvL
Chain PREROUTING (policy ACCEPT 486 packets, 52786 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    3   171 DNAT       udp  --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 to:208.67.222.222
    0     0 DNAT       tcp  --  wl0.1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 to:208.67.222.222
    3   171 DNAT       udp  --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           udp dpt:53 to:208.67.222.222
    0     0 DNAT       tcp  --  wl1.1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:53 to:208.67.222.222
    0     0 DNAT       icmp --  *      *       0.0.0.0/0            192.168.0.144      to:192.168.1.1
    8   834 TRIGGER    0    --  *      *       0.0.0.0/0            192.168.0.144      TRIGGER type:dnat match:0 relate:0

...

Chain POSTROUTING (policy ACCEPT 31 packets, 3625 bytes)
 pkts bytes target     prot opt in     out     source               destination         
  168 10197 SNAT       0    --  *      vlan2   192.168.1.0/24       0.0.0.0/0           to:192.168.0.144
    0     0 MASQUERADE  0    --  *      *       0.0.0.0/0            0.0.0.0/0           mark match 0x80000000/0x80000000
   16  1039 SNAT       0    --  *      vlan2   192.168.2.0/24       0.0.0.0/0           to:192.168.0.144
   84  5119 SNAT       0    --  *      vlan2   192.168.3.0/24       0.0.0.0/0           to:192.168.0.144
Maybe this is not the more elegant way to do. Coming from old single band r14896 where I did the job by keeping the vap bridged, then manually create its own bridge and tweak dns options and firewall rules, I just discovered the huge wonderful job that was done in this guest vap matter (thanks to the kong's tuto and this new wiki one).
Wouldn't a lighter way for me be to bridge the 2 vaps (single net & dhcp-dns conf, single set of ip rules), like are the 2 AP on the private lan side?
Or maybe it's a bad idea to put vaps for guests ?

Please comments ?

_________________
): FoReVeR nEwB Sad
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6868
Location: Romerike, Norway

PostPosted: Fri Oct 21, 2016 20:58    Post subject: Reply with quote
Create a new bridge br1 and give it the ip address 192.168.2.1
Assign wl0.1 and wl1.1 to br1
Assign a dhcp server for 192.168.2.0 to br1
Bib
DD-WRT Guru


Joined: 07 Jul 2008
Posts: 629
Location: France

PostPosted: Fri Oct 21, 2016 22:31    Post subject: Reply with quote
Per Yngve Berg wrote:
Create a new bridge br1 and give it the ip address 192.168.2.1
Assign wl0.1 and wl1.1 to br1
Assign a dhcp server for 192.168.2.0 to br1

Thanks man
I just did it, but although dnsmasq.conf is now nicer slim, I still get the ip rules set for wl0.x plus br1 Shocked
Did I say in the previous post I was afraid to loose rules when using bridging then having again to loose more hair to recreate good ones Very Happy ?
This build for R7k asks for a MAC for br1
I already have 84:52 for br0 (LAN), 84:53 for WAN and 84:54 & 84:55 for WLAN.
Do I have to use any of these 3 for br1 or do I have to invent 84:5f, 84:50, 84:00 or 84:ff or anything different I want?

[EDIT]
I got it clean by unbridging the vaps, resetting to no things like net isolation and force-dns-redirection, saving, rebridging.

Now I just have a clean bunch of br1 rules Smile

Just have to check they are ok.
PS: I put 84:52 for br1 (same as br0). brctl show displays for both the same id.

Thanks

_________________
): FoReVeR nEwB Sad


Last edited by Bib on Mon Oct 24, 2016 10:21; edited 1 time in total
HalfBit
DD-WRT Guru


Joined: 04 Sep 2009
Posts: 776
Location: AR, USA

PostPosted: Sat Oct 22, 2016 4:46    Post subject: Reply with quote
Bib wrote:
Per Yngve Berg wrote:
Create a new bridge br1 and give it the ip address 192.168.2.1
Assign wl0.1 and wl1.1 to br1
Assign a dhcp server for 192.168.2.0 to br1

Thanks man
I just did it, but although dnsmasq.conf is now nicer slim, I still get the ip rules set for wl0.x plus br1 Shocked
Did I say in the previous post I was afraid to loose rules when using bridging then having again to loose more hair to recreate good ones Very Happy ?
This build for R7k asks for a MAC for br1
I already have 84:52 for br0 (LAN), 84:53 for WAN and 84:55 for WLAN.
Do I have to use any of these 3 for br1 or do I have to invent 84:54, 84:5f, 84:50, 84:00 or 84:ff or what I want?

[EDIT]
I got it clean by unbridging the vaps, resetting to no things like net isolation and force-dns-redirection, saving, rebridging.

Now I just have a clean bunch of br1 rules Smile

Just have to check they are ok.
PS: I put 84:52 for br1 (same as br0). brctl show displays for both the same id.

Thanks

Can you tell me the value of br1_bridged in your nvram (nvram get br1_bridged)?

_________________
R7000 Nighthawk - DD-WRT v3.0-r50308
R7000 Nighthawk - DD-WRT v3.0-r50308
~~~~~~~~~~Dismantled for learning opportunities~~~~~~~~~~
WRT54Gv2
WRT54Gv8.2
~~~~~~~~~~Other Settings~~~~~~~~~
https://nextdns.io/?from=2d3sq39x
https://pi-hole.net/
https://github.com/DNSCrypt/dnscrypt-proxy
Bib
DD-WRT Guru


Joined: 07 Jul 2008
Posts: 629
Location: France

PostPosted: Sat Oct 22, 2016 7:23    Post subject: Reply with quote
Code:
nvram show|grep br1
br1_netmask=255.255.255.0
mdhcpd=br1>On>50>13>60
size: 36670 bytes (28866 left)
br1.3_nat=1                          <- all br1.3 are from previous trials with VLANS
wl1_br1_ipaddr=0.0.0.0
wl0_br1_netmask=255.255.255.0
bridgesif=br1>wl0.1>63 br1>wl1.1>63
wl1_br1_netmask=255.255.255.0
br1.3_isolation=0
br1.3_txq=1000
wl0_br1_nat=0
br1_hwaddr=XX:XX...:84:52
wl0_br1_enable=0
br1.3_dns_redirect=0
br1_mtu=1500
br1_label=
br1.3_dns_ipaddr=0.0.0.0
br1_dns_ipaddr=208.67.222.222
br1_multicast=0
br1_ipaddr=192.168.2.1
wl1_br1_nat=0
br1.3_mtu=1500
br1_mcast=0
br1.3_bridged=1
br1.3_ipaddr=0.0.0.0
wl1_br1_enable=0
wl0_br1_ipaddr=0.0.0.0
br1_isolation=1
br1_nat=1
br1.3_netmask=0.0.0.0
bridges=br0>Off>32768>1500 br1>On>32768>1500
br1_dns_redirect=1
br1.3_multicast=0
br1.3_label=
br1_txq=1000
Maybe I could nvram unset all br1.3 vars ?
As you see br1_bridged isn't there.

_________________
): FoReVeR nEwB Sad
Bib
DD-WRT Guru


Joined: 07 Jul 2008
Posts: 629
Location: France

PostPosted: Sat Oct 22, 2016 16:14    Post subject: Reply with quote
This bridged setup won't do Net Isolation.
I continue on the "Advanced Networking" section of the forum, because this may not be broadcom nor kong's 30700 specific issue.

_________________
): FoReVeR nEwB Sad
thejae
DD-WRT Novice


Joined: 12 May 2009
Posts: 18

PostPosted: Sun Oct 23, 2016 8:23    Post subject: Reply with quote
I disabled QoS and my uptime went from random 10 mins reboot to 16 hours solid. I hope it stays this way.
jjwatmyself
DD-WRT User


Joined: 19 Mar 2016
Posts: 55

PostPosted: Sun Oct 23, 2016 12:58    Post subject: Asus AC68U Crashes after 12 hours 47 minutes Reply with quote
Reporting my findings. I have two Asus AC68U

Asus 1 is HW Rev A2
Running all things needed on my network:
WAN, DHCP, DNS, QoS, VLANs, DDNS, multiple SSID

Code:
root@hamster-net-1:~# nvram get clkfreq
800,666
root@hamster-net-1:~# cat /proc/cpuinfo
model name      : ARMv7 Processor rev 0 (v7l)
processor       : 0
BogoMIPS        : 1594.16
Features        : half fastmult edsp tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

model name      : ARMv7 Processor rev 0 (v7l)
processor       : 1
BogoMIPS        : 1594.16
Features        : half fastmult edsp tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

Hardware        : Northstar Prototype
Revision        : 0000
Serial          : 0000000000000000
root@hamster-net-1:~# cat /dev/mtd0ro | grep bl_version
bl_version=1.0.1.8


Asus 2 is HW Rev C1
Simply for extending my network elsewhere in the house:
VLANs, multiple SSID

Code:
root@hamster-net-2:~# nvram get clkfreq
1000,666
root@hamster-net-2:~# cat /proc/cpuinfo
model name      : ARMv7 Processor rev 0 (v7l)
processor       : 0
BogoMIPS        : 1987.37
Features        : half fastmult edsp tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

model name      : ARMv7 Processor rev 0 (v7l)
processor       : 1
BogoMIPS        : 1993.93
Features        : half fastmult edsp tls
CPU implementer : 0x41
CPU architecture: 7
CPU variant     : 0x3
CPU part        : 0xc09
CPU revision    : 0

Hardware        : Northstar Prototype
Revision        : 0000
Serial          : 0000000000000000
root@hamster-net-2:~# cat /dev/mtd0ro | grep bl_version
bl_version=1.1.1.2


Yesterday, I moved from a current Brainslayer build and installed http://desipro.de/ddwrt/K3-AC-Arm/dd-wrt.v24-K3_AC_ARM_STD.bin

Asus 1 crashed at 2:15 AM EDT after having been up for 12 hours and 47 minutes. Load was stable. The only thing that changed significantly before the crash was memory which started to take a dive for 55 minutes prior to the crash.

Asus 2 remains stable. Not sure if this is due to the hardware differences

I am going to have a read of the thread to see what others have found.



Capture.PNG
 Description:
 Filesize:  40.02 KB
 Viewed:  10387 Time(s)

Capture.PNG


egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12885
Location: Netherlands

PostPosted: Sun Oct 23, 2016 13:24    Post subject: Reply with quote
Did you erase nvram?
This is highly recommended especially when switching between builds

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
jjwatmyself
DD-WRT User


Joined: 19 Mar 2016
Posts: 55

PostPosted: Sun Oct 23, 2016 13:29    Post subject: Reply with quote
egc wrote:
Did you erase nvram?
This is highly recommended especially when switching between builds


I did yes, using the CLI. BUT I then restored a backup, which might be counter-intuitive. Not sure what the backup contains and if this is a supported method.
egc
DD-WRT Guru


Joined: 18 Mar 2014
Posts: 12885
Location: Netherlands

PostPosted: Sun Oct 23, 2016 13:35    Post subject: Reply with quote
jjwatmyself wrote:
egc wrote:
Did you erase nvram?
This is highly recommended especially when switching between builds


I did yes, using the CLI. BUT I then restored a backup, which might be counter-intuitive. Not sure what the backup contains and if this is a supported method.


Restoring a backup is indeed not the recommended method.
The recommended method is to put in everything manually Sad (or use advanced scripting methods)
For the router which crashed, erase nvram and restore manually

_________________
Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087
jjwatmyself
DD-WRT User


Joined: 19 Mar 2016
Posts: 55

PostPosted: Sun Oct 23, 2016 13:44    Post subject: Reply with quote
I have now enabled syslog on both pointing at a Synology NAS. If it happens again (which I am expecting it will) I may have more info to report back with.

Last edited by jjwatmyself on Sun Oct 23, 2016 13:57; edited 1 time in total
jjwatmyself
DD-WRT User


Joined: 19 Mar 2016
Posts: 55

PostPosted: Sun Oct 23, 2016 13:52    Post subject: Reply with quote
jjwatmyself wrote:
have now enabled syslog on both pointing at a Synology NAS. If it happens again (which I am expecting it will) I may have more info to report back with.

Oh boy, that's quite a bit of work. I don't disagree though. Maybe what I'll do is erase the other one, do a side-by-side compare in order to manually move all the config over. The config on the other is a subset of functionality, pretty much VLANs and SSIDs. There is the added benefit that the primary will then be the newer HW rev with higher CPU clock speed.
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8, 9, 10  Next Display posts from previous:    Page 8 of 10
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum