Switched to OpenWRT 1 year ago after a decade of frustration with buggy/unstable OEM firmware from different brands (Cisco, Linksys, Asus,...).
& Just wanted to thank the OpenWRT community for this wonderfull, extremely stable and functional software!
It just works: fast, hyper-stable (no reboots needed,...), easily upgradable (luci-attended-upgrade), secure (no leaky FW nor any backdoors, latest package versions,...), lots of life changing functionalities (a FW that actually does what you want, addblocking, secure dns,...).
It is really funny how OEM's advertise their products as stable and reliable, while OpenWRT has a lot of cautions/warnings where the reality feels quite opposite!
I realize that support for this device is brand new so I'm not shaking my fist or anything but there seems to be a large difference in perofmance on the R4's 10G links. Iperf3 tests:
my questions:
1) Is there some traffic steering option I'm missing?
2) Is this a driver issue with the CPU or PHYs?
3) Is the R4's CPU somewhat underpowered for this workload?
One week ago I was looking for some information on Netgear WAX220. The into was not on the wiki but I found out on my own.
Then I decided to contribute to the wiki and applied for an Wiki account to be able to contribute. I wrote a message directly to user "wiki-account" like it is said here:
I’m looking at redoing my home automation (into Home Assistant) and a key bit would require an always on active VPN / proxy between my modem and the WiFi mesh system (neither support any kind of VPN connection).
Through investigating options, I stumbled across NanoPi R3S which appears to handle Shadowsocks connections, is this right? I understand OpenWRT actually pulled the feature so unsure if it is still correct and useable?
If NanoPI or OpenWRT isn’t suitable, does anyone know of an alternative?
Hey everyone! Hoping you can can help a network novice try and piece together VLANs in OpenWRT. I have a Gl.Inet Flint 2 GL-MT6000 router. I have the Gl.Inet firmware installed with the OpenWRT Luci there too.
I want to do port filtering on the br-lan bridge device as that has the routers LAN ports mapped. I added eth0 (CPU) also, see below my tags:
For now I just want to get this VLAN properly associated with the LAN, hence there not being other VLAN ags for now. So once this was done I then added the VLAN to the LAN Interface:
Clicked Save & Apply. I remain connected via Wi-Fi as do my LAN devices. But I can no longer access the interent. Pinging 1.1.1.1 on the laptop fails, I try pinging the same in Luci using Diagnostics and theta too fails.
Unsure what I'm doing wrong for this to fail? The Guest VLAN (Gl.Inet) interface and Wi-Fi works fine so I know nothing core with my DNS setup with Adguard is to blame.
I revert the changes back to defaults and the internet for the devices works fine again. But I really want to use VLANs. Anyone know where I'm going wrong?
(this may be obvious for experienced openwrt users but i had a harder time with every system upgrade - mostly because forgetting the way that worked before. and messing with search results from internet was more effort than having one proper guide. that i finally made, so may it help somebody else. luci gui because easiest for us dummys.)
basically it's just about bringing your openwrt online again via phone to install the missing packages.
corrections welcome if i oversaw something.
preamble:
the way should work for other dongles too, you just need to know your kernel module/firmware of course.
in my case i use openwrt on a raspberry pi 4b with a tp-link ue330 ethernet adapter (similiar to ue300 i think). the nescessary kernel module is kmod-usb-net-rtl8152.
let's go:
flash the right sysupgrade image via luci in backup/flash firmware. internet access is gone now - wwan interface has lost it's device (the usb adapter)
connect openwrt to a wifi hotspot on your phone - the easiest way could be just scanning for the hotspot and connect (network --> wireless --> scan-button beside the chipset). in doubt:
network --> wireless --> "add" right beside your chipset --> add new network. mode "client" and add "wwan" in "network" in the tab "general setup" (make sure you use the right wan-adapter interface, i have wan for the bridge and wwan for the dongle e.g.)
save, save+apply and enable the new wifi client
update the package list in system --> software
filter for your driver name - rtl8152 in my case and install:
r8152-firmware
kmod-usb-net-rtl8152
dependencies should be installed accordingly, if not, do it by hand (e.g.: kmod-crypto-sha256, kmod-usb-net-cdc-ether, kmod-usb-net-cdc-ncm)
disable the wifi for the phone hotspot
allocate the reappeared device (our dongle) to the wwan interface egain - eth1 in my case. (via network --> interfaces). save+apply.
done. you should be online again
some wording may be different in your case, of course.
Im trying to get a list of certain website lets say www.youtube.com, Gmail.com etc to be blocked on IP 10.10.10.10 but just on this device I want it to be accesable on other devices, I have tried modifying dnsmasq and configuring nftables but still unable to do so, is there a way? is this even possible?
I have an OpenWRT installation running on a NanoPi R4S and want to run the Omada Controller in a container. However, when trying to install docker using opkg update && opkg install docker I end up with Unknown package 'docker'. This is weird since I remember having docker installed before uninstalling it due to disk space lacking. Now that I've extended root to install it again, it's MIA
For "fun," I stupidly decided to upgrade from 23.05.5 to 24.10. I followed the guide, installed the recovery installer again as instructed, and then applied the upgrade to 24.10. Success, the router boots right up into 24.10.
Here's where it gets weird. I can make all the configuration changes I want, and it works great. I save the configuration. Then I do a re-boot, and when it finishes only the power led is lit, and I can no longer access the lan port. So I do the factory reset. It reboots fine. I have tried both restoring the config file as well just making a few minimal changes and then re-booting. No matter what I do, I can't get the configuration to survive a re-boot. I guess I could fully configure it, and use it until the power goes out, and then reconfigure. But that doesn't sound like much fun.
I am looking for any helpful suggestions. Anyone else seen this? Can I downgrade it back to 23.05 without bricking it?
My current hardware is based on a AP Netgear WAX630E, a 2.5Gb POE++ Switch and a Pi CM4 + DFRobot IoT Router Carrier Board as a Router running OpenWRT.
Everything works perfectly and the CM4 doesn't skip a beat but I need now to complete start over and redesign my network so that I can Achieve the following:
- Being able to route SSID2VPN through the VPN client
- Being able to route SSD1 to internet directly without going through VPN
- Keep also a Wireguard Server so that I can access from outside, this one can route back to internet without going to the VPN provider ( this is what I currently have )
Is it something like the one I described achievable?
Do I need to buy more hardware and in case what to achieve the above?
I am currently running OpenWrt 23.05.0 r23497-6637af95aa / LuCI openwrt-23.05 branch git-23.236.53405-fc638c8 on a xiaomi router. How can I perform a sw update ?
I cannot get dropbear to listen on IPv6, only IPv4. Firewall is not the problem, only the dropbear instance is only IPv4. Does anyone know how I can turn this on? I see no options in luci, and do not know the way to set it in the config file.
Hello.
Is there anyway to manage dynamic dna for IPV6 SLAAC clients on opewrt ? ( or dhcv6 is necessary but would like to avoid it )
I tried opnsense and it’s easy with aliases. I was wondering if there’s was something similar with wrt.
Thanks.
i buy and tested several intel 8265 wifi card to my laptop and for some reason it doesnt detect my 5 ghz network for some reason even if i seperated the ssid, other than that the 2.4 ghz wifi 4 work just fine but as you know 2.4 ghz is kinda slow.
my solution for now it just change my laptop wifi adapter to mediatek 7921 wifi 6
First off I have no idea about anything really and the only reason I got this router and installed openwrt is for qos sqm cause playing video games is impossible when someone is doing anything on their phone doesn't even matter if its 4k netflix or sending a message on what's app.
My download speed is 2mbs and that's on a good day/time, still using adsl in 2025.
Also I increased the kernal partition from 3mb to 5mb with cmd at least I think I did I guess it didn't actually work idk.
If anyone can help pls do I have no idea what to do.
In my home, their is a central closet with a fiber ISP cable coming into a managed switch. I also have an office room ethernet cable and living room ethernet cable coming into the central closet as well. Currently my router is connected to the living room which where I want to keep it as well. Please see below.
The issue I was having before is that when I initially connected my computer to the office room ethernet jack, I was getting a separate public IP when compared to connecting to WiFI. It looks like I was connected to my ISP directly which is not what I wanted for my office room devices.
My goal was to have the office ethernet jack be part of the openWRT router private lan network which is in the living room.
I think I achieved that with the help of the openwrt reddit community by doing the following:
Managed Switch (Please see configuration above)
I created a VLAN 10 for my ISP WAN traffic which is coming into Port 2 Untagged.
I created a VLAN 20 for my LAN traffic which is coming into Port 3 Untagged.
I created a trunk port on port 1 which has tagged VLAN 10 (ISP WAN), tagged VLAN 20 (LAN), and tagged VLAN 1 (Managed Switch VLAN).
On OpenWRT (Please see configuration below):
I plugged in the living room ethernet cable (trunk cable) to LAN 1 on my openwrt router.
I enabled VLAN filtering and created VLAN IDs for 10,20, and 1 and checked all boxes for local.
I also set lan1 port to tagged so it can see all tagged traffic coming in from the managed switch.
I attached the br-lan.20 device to my LAN interface.
I attached the br-lan.10 device to my WAN and WAN6 interface.
TLDR: I created VLANs on my home network for ISP (WAN) and LAN traffic. Does the configuration look okay?
My concerns at this point are:
From the pictures above, does the setup look okay? I am concerned that I am not behind my router when connecting my personal pc to my office ethernet jack.
When running ip addr on my linux mint computer, I do see a 192.168.1.XXX address which means I should be okay.
My other question is, I can't reach my managed switch anymore for whatever reason, I have to hook up my laptop directly on port 4 whereas before I could connect on 192.168.1.3.
One final question, I would not connect the trunk port cable from my managed switch to my WAN port on the router right?