Categories: Open Source Projects and Firmware
Hi,
(apologies for this newyear post)
My linksys WRT54GL router flashed all the latest firmware installs: dd-wrt v24 sp2 sp1, openwrt backfire/10.03.1-rc6, (again) linksys 4.x, tomato v1.28.1816. Configured them all. Did not mangle with the bridge setup (ip route, iptables et al), nor with numeric WiFi params.
Ok. did everything from wired ethernet; then enabled remote (https) access. Now am in a ssh tunnel to VNC/job via WRT. Linux OS on laptop client. Router WAN with DHCP from cable TV modem; gave up dhcp on clients, static assingments now. WRT is setup as "gateway".
Ok, host-woods works from client via WRT dnsmasq, ping the WRT IP works; i.e., local subnet "waves" around, but no outside network connection at all, except from ssh'd WRT itself and wired ethernet (+ WRT ssh tunnels half speed).
Found many forums saying: restart modem, restart WRT, no solution, bad IP, reset conf, reinstall firmware, renew DHCP... when suddenly out of luck my android smartphone goes browsing and youtubing on the same ssid. So WRT is not the issue. Kernel 2.6.29 on android and 3.1.5 on laptop.
WPA2 is setup, the local wireless subnet too, but no outside (no ping, no google, no ssh) connection from linux 3.1.5 laptop with wpa_supplicant invoked with args:
-Dwext -c /etc/wpa_supplicant/wpa_supplicant.conf
This used to work on previous 802.11n router which I switched for the WRT54GL linksys 802.11b/g.
So, android has internet via WRT, laptop not; same WPA2 and SSID. Where is the difference? It would seem instead of routing to an internet address via WRT, the client takes the address be on the same subnet, because it keeps ARPing for global IPs.
Appreciate any help, thank s.
I inserted the output of `nvram show' (tomato) and of `tcdump -vi wlan0` while attempting to browse "mail.google.com" on client. Conf is simple, just for net, all extra opts are disabled. The IPs 192.168.1.111 for WRT and 192.168.1.222 for client are general.
# nvram get il0macaddr
00:...
# nvram get et0macaddr
58:...
# nvram show
aa0=3
action_service=
ag0=0x02
autofw_port0=
block_wan=1
boardflags2=0
boardflags=0x2558
boardnum=42
boardrev=0x10
boardtype=0x0467
boot_ver=v3.7
boot_wait=on
bootnv_ver=4
brau_state=
btn_override=
btn_reset=
ccode=0
cctl=0
cifs1=
cifs2=
clkfreq=200
console_loglevel=1
ct_max=
ct_tcp_timeout=
ct_udp_timeout=
ddnsx0=
ddnsx0_cache=
ddnsx1=
ddnsx1_cache=
ddnsx_refresh=28
ddnsx_save=1
debug_clkfix=1
debug_cprintf=0
debug_cprintf_file=0
debug_ddns=0
debug_nocommit=0
dhcp_domain=wan
dhcp_lease=0
dhcp_num=50
dhcp_start=100
dhcpc_minpkt=0
dhcpd_dmdns=1
dhcpd_endip=
dhcpd_gwmode=
dhcpd_lmax=
dhcpd_slt=0
dhcpd_startip=
dhcpd_static=...
dl_ram_addr=a0001000
dmz_enable=0
dmz_ipaddr=0
dmz_sip=
dns_addget=0
dns_intcpt=0
dnsmasq_custom=
dr_lan_rx=0
dr_lan_tx=0
dr_setting=0
dr_wan_rx=0
dr_wan_tx=0
env_path=
et0macaddr=...
et0mdcport=0
et0phyaddr=30
filter=on
filter_client0=
filter_maclist=
filter_macmode=deny
gpio2=ses_led
gpio3=ses_led2
gpio4=ses_button
http_enable=0
http_id=TIDa46...
http_lanport=80
http_passwd=zish
http_username=
http_wanport=443
https_crt=
https_crt_cn=
https_crt_save=0
https_enable=1
https_lanport=443
il0macaddr=00:...
jffs2_exec=
jffs2_format=0
jffs2_on=0
l2tp_get_ip=
l2tp_server_ip=
lan_dhcp=0
lan_domain=
lan_gateway=0.0.0.0
lan_hwaddr=...
lan_hwnames=
lan_ifname=br0
lan_ifnames=vlan0 eth1 eth2 eth3
lan_ipaddr=...
lan_lease=86400
lan_netmask=255.255.255.0
lan_proto=static
lan_route=
lan_stp=0
lan_wins=
led_override=
log_events=
log_file=0
log_in=0
log_limit=60
log_mark=60
log_out=0
log_remote=0
log_remoteip=
log_remoteport=514
mac_wan=
mac_wl=
macnames=...
manual_boot_nv=0
mtu_enable=0
multicast_pass=0
ne_shlimit=0,3,60
ne_syncookies=0
ne_valpha=2
ne_vbeta=6
ne_vegas=0
ne_vgamma=2
nf_ftp=1
nf_h323=1
nf_l7in=1
nf_loopback=1
nf_pptp=1
nf_rtsp=1
nf_ttl=0
ntp_kiss=
ntp_kiss_ignore=
ntp_server=0.europe.pool.ntp.org 1.europe.pool.ntp.org 2.europe.pool.ntp.org
ntp_tdod=0
ntp_updates=4
opo=0x0008
os_date=Sun, 27 Jun 2010 20:10:52 -0700
os_flash_addr=bfc40000
os_name=linux
os_ram_addr=80001000
os_version=1.28.1816
pa0b0=0x168b
pa0b1=0xfabf
pa0b2=0xfeaf
pa0itssit=62
pa0maxpwr=0x4e
pmon_ver=CFE 3.91.37.0
portforward=0<...>
ppp_ac=
ppp_demand=0
ppp_get_ac=
ppp_get_srv=
ppp_idletime=5
ppp_keepalive=0ppp_mru=1500
ppp_mtu=1500
ppp_passwd=
ppp_redialperiod=30
ppp_service=
ppp_static=0
ppp_static_ip=
ppp_username=
pppoe_ac=
pppoe_demand=0
pppoe_idletime=5
pppoe_ifname=
pppoe_keepalive=0
pppoe_lef=
pppoe_lei=
pppoe_passwd=
pppoe_pid0=
pppoe_service=
pppoe_static=0
pppoe_static_ip=
pppoe_username=
pptp_get_ip=
pptp_server_ip=
qos_ack=1
qos_burst0=
qos_burst1=
qos_default=3
qos_enable=0
qos_fin=0
qos_ibw=1000
qos_icmp=0
qos_obw=230
qos_orates=80-100,10-100,5-100,3-100,2-95,1-50,1-40,1-30,1-20,1-10
qos_orules=0<...
qos_reset=0
qos_rst=0
qos_syn=0
remote_management=1
remote_mgt_https=1
restore_defaults=0
rmgt_sip=...,...
router_name=WRT54GL
routes_static=
routes_static_saved=
rrule0=0|...
rruleN=0
rrules_activated=0
rrules_radio=-1
rrulewp=80,8080
rstats_bak=0
rstats_colors=
rstats_data=
rstats_enable=1
rstats_exclude=
rstats_offset=1
rstats_path=
rstats_sshut=1
rstats_stime=48
sch_c1=
sch_c1_cmd=
sch_c2=
sch_c2_cmd=
sch_c3=
sch_c3_cmd=
sch_rboot=
sch_rcon=
scratch=a0180000
script_brau=
script_fire=
script_init=
script_shut=
script_wanup=
sdram_config=0x0062
sdram_init=0x010b
sdram_ncdl=0xff0109
sdram_refresh=0x0000
security_mode2=wpa2_personal
security_mode=psk2
security_mode_last=
sesx_b0=1
sesx_b1=4
sesx_b2=4
sesx_b3=4
sesx_led=0
sesx_script=[ $1 -ge 20 ] && telnetd -p 233 -l /bin/sh
sromrev=2
sshd_authkeys=...
sshd_eas=1
sshd_hostkey=...
sshd_pass=1
sshd_port=22
sshd_remote=1
sshd_rport=22
t_cafree=0
t_features=0x9
t_fix1=
t_hidelr=0
t_model=1
t_model_name=Linksys WRT54G/GS/GL
t_noise=-99
telnetd_eas=0
telnetd_port=23
tm_dst=0
tm_sel=STD-2DST,M3.5.0/2,M10.5.0/2
tm_tz=STD-2
trigforward=0<...>
upnp_enable=0
upnp_port=5000
upnp_secure=1
vlan0hwname=et0
vlan0ports=3 2 1 0 5*
vlan1hwname=et0
vlan1ports=4 5
wait_time=5
wan_dns=
wan_domain=...
wan_gateway=...
wan_gateway_buf=0.0.0.0
wan_get_dns=... ...
wan_get_domain=
wan_hostname=wrt
wan_hwaddr=...
wan_hwname=
wan_iface=vlan1
wan_ifname=vlan1
wan_ifnameX=vlan1
wan_ifnames=vlan1
wan_ipaddr=...
wan_islan=0
wan_lease=604800
wan_mtu=1500
wan_netmask=255.255.252.0
wan_primary=1
wan_proto=dhcp
wan_run_mtu=1500
wan_speed=4
wan_unit=0
wan_wins=
watchdog=5000
wds_enable=0
wds_save=
web_css=bluegreen
web_mx=status,bwm
web_pb=
web_svg=1
web_wl_filter=0
wk_mode=gateway
wl0_active_mac=
wl0_afterburner=off
wl0_akm=psk2
wl0_antdiv=-1
wl0_ap_isolate=0
wl0_auth=0
wl0_auth_mode=none
wl0_bcn=100
wl0_bss_enabled=1
wl0_channel=6
wl0_closed=1
wl0_corerev=9
wl0_country=JP
wl0_country_code=JP
wl0_crypto=tkip
wl0_distance=
wl0_dtim=1
wl0_frag=2346
wl0_frameburst=off
wl0_gmode=1
wl0_gmode_protection=off
wl0_hwaddr=...
wl0_ifname=eth1
wl0_infra=1
wl0_key1=
wl0_key2=
wl0_key3=
wl0_key4=
wl0_key=1
wl0_lazywds=0
wl0_leddc=0x640000
wl0_mac_deny=
wl0_mac_list=
wl0_maclist=... ... ... ...
wl0_macmode=allow
wl0_maxassoc=128
wl0_mode=ap
wl0_mrate=0
wl0_net_mode=mixed
wl0_net_reauth=36000
wl0_passphrase=
wl0_phytype=g
wl0_phytypes=g
wl0_plcphdr=long
wl0_radio=1
wl0_radioids=BCM2050
wl0_radius_ipaddr=
wl0_radius_key=
wl0_radius_port=1812
wl0_rate=0
wl0_rateset=default
wl0_reg_mode=off
wl0_rts=2347
wl0_ssid=...
wl0_txant=3
wl0_txpwr=42
wl0_unit=0
wl0_wds=
wl0_wds_timeout=1
wl0_wep=disabled
wl0_wep_bit=128
wl0_wep_buf=
wl0_wep_gen=
wl0_wep_last=
wl0_wme=off
wl0_wme_ap_be=15 63 3 0 0 off
wl0_wme_ap_bk=15 1023 7 0 0 off
wl0_wme_ap_vi=7 15 1 6016 3008 off
wl0_wme_ap_vo=3 7 1 3264 1504 off
wl0_wme_no_ack=off
wl0_wme_sta_be=15 1023 3 0 0 off
wl0_wme_sta_bk=15 1023 7 0 0 off
wl0_wme_sta_vi=7 15 2 6016 3008 off
wl0_wme_sta_vo=3 7 2 3264 1504 off
wl0_wpa_gtk_rekey=3600
wl0_wpa_psk=...
wl0gpio2=0
wl0gpio3=0
wl0id=0x4320
wl_active_mac=
wl_afterburner=off
wl_akm=psk2
wl_antdiv=-1
wl_ap_isolate=0
wl_auth=0
wl_auth_mode=none
wl_bcn=100
wl_bss_enabled=1
wl_channel=6
wl_closed=1
wl_corerev=
wl_country=JP
wl_country_code=JP
wl_crypto=tkip
wl_distance=
wl_dtim=1
wl_frag=2346
wl_frameburst=off
wl_gmode=1
wl_gmode_protection=off
wl_hwaddr=
wl_ifname=eth1
wl_infra=1
wl_key1=
wl_key2=
wl_key3=
wl_key4=
wl_key=1
wl_lazywds=0
wl_leddc=0x640000
wl_mac_deny=
wl_mac_list=
wl_maclist=... ... ... ...
wl_macmode=allow
wl_maxassoc=128
wl_mode=ap
wl_mrate=0
wl_net_mode=mixed
wl_net_reauth=36000
wl_passphrase=
wl_phytype=g
wl_phytypes=
wl_plcphdr=long
wl_radio=1
wl_radioids=
wl_radius_ipaddr=
wl_radius_key=
wl_radius_port=1812
wl_rate=0
wl_rateset=default
wl_reg_mode=off
wl_rts=2347
wl_ssid=...
wl_txant=3
wl_txpwr=42
wl_unit=0
wl_wds=
wl_wds_timeout=1
wl_wep=disabled
wl_wep_bit=128
wl_wep_buf=
wl_wep_gen=
wl_wep_last=
wl_wme=off
wl_wme_ap_be=15 63 3 0 0 off
wl_wme_ap_bk=15 1023 7 0 0 off
wl_wme_ap_vi=7 15 1 6016 3008 off
wl_wme_ap_vo=3 7 1 3264 1504 off
wl_wme_no_ack=off
wl_wme_sta_be=15 1023 3 0 0 off
wl_wme_sta_bk=15 1023 7 0 0 off
wl_wme_sta_vi=7 15 2 6016 3008 off
wl_wme_sta_vo=3 7 2 3264 1504 off
wl_wpa_gtk_rekey=3600
wl_wpa_psk=...
wlx_hpamp=
---
458 entries, 9897 bytes used, 22871 bytes free.
client ~$ ip route
default dev wlan0 scope link metric 2003
unreachable 127.0.0.0/8 scope host
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.222
client ~$ tcpdump -vi wlan0
tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 65535 bytes
20:39:39.507977 IP (tos 0x0, ttl 64, id 49905, offset 0, flags [DF], proto UDP (17), length 60)
192.168.1.222.41431 > 192.168.1.111.domain: 45870+ A? www.google.com. (32)
20:39:39.525506 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 176)
192.168.1.111.domain > 192.168.1.222.41431: 45870 7/0/0 www.google.com. CNAME www.l.google.com., www.l.google.com. A 173.194.69.147, www.l.google.com. A 173.194.69.105, www.l.google.com. A 173.194.69.104, www.l.google.com. A 173.194.69.106, www.l.google.com. A 173.194.69.99, www.l.google.com. A 173.194.69.103 (148)
20:39:39.525691 IP (tos 0x0, ttl 64, id 49922, offset 0, flags [DF], proto UDP (17), length 60)
192.168.1.222.50461 > 192.168.1.111.domain: 6984+ A? www.google.com. (32)
20:39:39.527593 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 186)
192.168.1.111.domain > 192.168.1.222.50461: 6984 7/0/0 www.google.com. CNAME www.l.google.com., www.l.google.com. A 173.194.69.103, www.l.google.com. A 173.194.69.99, www.l.google.com. A 173.194.69.106, www.l.google.com. A 173.194.69.104, www.l.google.com. A 173.194.69.105, www.l.google.com. A 173.194.69.147 (158)
20:39:39.796796 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 173.194.69.103 tell 192.168.1.222, length 28
20:39:40.798804 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 173.194.69.103 tell 192.168.1.222, length 28
20:39:41.127329 IP (tos 0x0, ttl 64, id 51524, offset 0, flags [DF], proto UDP (17), length 61)
192.168.1.222.52284 > 192.168.1.111.domain: 919+ A? mail.google.com. (33)
20:39:41.142597 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 152)
192.168.1.111.domain > 192.168.1.222.52284: 919 5/0/0 mail.google.com. CNAME googlemail.l.google.com., googlemail.l.google.com. A 209.85.148.18, googlemail.l.google.com. A 209.85.148.19, googlemail.l.google.com. A 209.85.148.83, googlemail.l.google.com. A 209.85.148.17 (124)
20:39:41.142759 IP (tos 0x0, ttl 64, id 51539, offset 0, flags [DF], proto UDP (17), length 61)
192.168.1.222.47320 > 192.168.1.111.domain: 10148+ A? mail.google.com. (33)
20:39:41.144491 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 162)
192.168.1.111.domain > 192.168.1.222.47320: 10148 5/0/0 mail.google.com. CNAME googlemail.l.google.com., googlemail.l.google.com. A 209.85.148.17, googlemail.l.google.com. A 209.85.148.83, googlemail.l.google.com. A 209.85.148.19, googlemail.l.google.com. A 209.85.148.18 (134)
20:39:41.144784 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 209.85.148.17 tell 192.168.1.222, length 28
20:39:41.800795 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 173.194.69.103 tell 192.168.1.222, length 28
20:39:42.146819 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 209.85.148.17 tell 192.168.1.222, length 28
and keeps going it pairs, like this... The ARP cache is:
client ~# arp -n
Address HWtype HWaddress Flags Mask Iface
209.85.148.83 (incomplete) wlan0
209.85.148.19 (incomplete) wlan0
209.85.148.18 (incomplete) wlan0
209.85.148.17 (incomplete) wlan0
173.194.69.106 (incomplete) wlan0
173.194.69.105 (incomplete) wlan0
192.168.1.111 ether 58:xx:xx:xx:xx:xx C wlan0
173.194.69.104 (incomplete) wlan0
173.194.69.103 (incomplete) wlan0
173.194.69.99 (incomplete) wlan0
173.194.69.147 (incomplete) wlan0

RSS


Solved!
Something like this had in some prior scripts used to create a vpn via a ipip tunnel:
echo 1 >> /proc/sys/net/ipv4/conf/all/proxy_arp
...................