OpenWrt / LEDE - alternative firmware | [firmware] OpenWrt / LEDE - discussion and problem solving



Rep: (573)
Build OpenWrt / LEDE from source | DD-WRT FIRMWARE | Collect bin (dump) for the programmer | Upgraded UBOOT loaders


OpenWrt / LEDE - alternative firmware


Attached Image


Latest version:OpenWrt 19.07.4
This topic should be placed under the image and logs spoilerPicture

Description / What is discussed in the topic, and what is not
OpenWrt is an embedded Linux kernel-based operating system designed primarily for home routers. Core components include the Linux kernel, util-linux, uClibc or musl, and BusyBox. The source code is open. Distributed under the GNU GPL license.

The LEDE project is developed on the basis of Linux, an embedded meta-distribution based on OpenWRT, focused on a wide range of SOHO wireless routers and non-network devices. “Linux Embedded Development Environment”.
LEDE turned away from the parent project in May 2016, with the goal of continuing to develop better software in an open management model and encouraging new developers to contribute and development efforts.

https://www.openwrt.org
https://github.com/openwrt

https://lede-project.org
https://github.com/lede-project

Emulator OpenWrt / LEDE web interface LuCI (old design theme)


  • This topic is intended to discuss the settings, the installation process on your router and everything related to the OpenWrt / LEDE firmware.
  • In this topicdon't discuss compile from source and rebuild, there is a topic for this Build OpenWrt / LEDE from source
Useful programs
WinSCP graphical client SFTP and SCP
Settings for connecting to a router with LEDE (dropbear must be enabled)
Attached Image

Under Linux, you can either run under winscp wine, or upload files scp command
scp file path [email protected]: the path where to fill in the router
Example:
scp ~ / 1.bin [email protected]: / tmp /

Tftpd32
TFTP for Linux using Ubuntu as an example
Configure tftpd-hpa TFTP server

Install the tftpd-hpa package:
sudo apt-get install tftpd-hpa

After installation, edit the file
sudo nano / etc / default / tftpd-hpa
containing server settings. Let's bring it to the following form:

TFTP_USERNAME = "tftp"
TFTP_DIRECTORY = "/ var / tftp"
TFTP_ADDRESS = "0.0.0.0:69"
TFTP_OPTIONS = "- ipv4 --secure --create --umask 027 --permissive"


In the settings are additional options:
create allows the server to create new files,
ipv4 instructs it to wait for connections only on IPv4 addresses,
umask instructs to reset the write bit for the group and all access bits for other users,
permissive instructs not to carry out any file permissions checks in excess of the operating system.
Create a directory for the tftp server, give the server access to the directory:


sudo mkdir / var / tftp

sudo chown tftp: tftp / var / tftp


You can also change the home directory of the tftp user in the / etc / passwd file to / var / tftp.

Now we just write the ip addresses we need through the gnome network manager and that's it.

It remains to restart the daemon to start working with the new directory:
sudo /etc/init.d/tftpd-hpa restart

Instructions
Useful topics
OpenWrt project news
Download OpenWrt / LEDE


Post has been editedstp101 - 15.09.20, 19:15
Reason for editing: Issue OpenWrt 19.07.4



Rep: (0)
salexa @ 22.09.18, 22:11*
It remains to recheck these 2 files

I checked, all commented out in the first, second

server = / bind /
server = / invalid /
server = / local /
server = / localhost /
server = / onion /
server = / test /


the network computer and several mobile devices, dns never raised



Rep: (107)
* skazo4niym1m, there are still look the routing table on the router ( route -ne on the command line or Status ->Routes in LuCI), and as long as no more thoughts ...



Rep: (1)
Example
Sun Sep 23, 2018 6:04:10 daemon.notice openvpn (antizapret) [1385]: [antizapret-server] Peer Connection Initiated with [AF_INET] 195.123.214.54:1194
Sun Sep 23, 2018 6:04:10 kern.notice kernel: [38.085984] random: crng init done
Sun Sep 23, 2018 6:04:11 daemon.err openvpn (antizapret) [1385]: Options error: Unrecognized option or missing or extra parameter (s) in [PUSH-OPTIONS]: 4: block-outside-dns (2.4. five)
Sun Sep 23, 2018 6:04:11 daemon.notice netifd: Interface 'antizapret' is enabled
Sun Sep 23, 2018 6:04:11 daemon.notice netifd: Network device 'tun0' link is up
Sun Sep 23, 2018 6:04:11 daemon.notice netifd: Interface 'antizapret' has link connectivity
Sun Sep 23, 2018 6:04:11 daemon.notice netifd: Interface 'antizapret' is setting up now
Sun Sep 23, 2018 6:04:11 daemon.notice netifd: Interface 'antizapret' is now up
Sun Sep 23, 2018 6:04:11 daemon.notice openvpn (antizapret) [1385]: TUN / TAP device tun0 opened
Sun Sep 23, 2018 6:04:11 daemon.notice openvpn (antizapret) [1385]: do_ifconfig, tt->did_ifconfig_ipv6_setup = 0
Sun Sep 23, 2018 6:04:11 daemon.notice openvpn (antizapret) [1385]: / sbin / ifconfig tun0 192.168.104.25 netmask 255.255.252.0 mtu 1500 broadcast 192.168.107.255
Sun Sep 23, 2018 6:04:11 daemon.info hostapd: wlan1: STA 3c: bd: 3e: 39: 38: 2a IEEE 802.11: authenticated
Sun Sep 23, 2018 6:04:11 daemon.info hostapd: wlan1: STA 3c: bd: 3e: 39: 38: 2a IEEE 802.11: associated (aid 1)
Sun Sep 23, 2018 6:04:11 daemon.notice hostapd: wlan1: AP-STA-CONNECTED 3c: bd: 3e: 39: 38: 2a
Sun Sep 23, 2018 6:04:11 daemon.info hostapd: wlan1: STA 3c: bd: 3e: 39: 38: 2a WPA: pairwise key handshake completed (RSN)
Sun Sep 23, 2018 6:04:11 user.notice firewall: Reloading firewall due to ifup of antizapret (tun0)
Sun Sep 23, 2018 6:04:13 daemon.warn openvpn (antizapret) [1385]: WARNING: this configuration may cache passwords in memory - use the auth-nocache option to prevent this
Sun Sep 23, 2018 6:04:13 daemon.notice openvpn (antizapret) [1385]: Initialization Sequence Completed


also shines in my true place. Rutor EC does not open, do not ping. third line strains


UPD. It worked. Trackbacks went to 10.224.0.229

Post has been editedmiginRUN - 23.09.18, 09:38



Rep: (107)
miginRUN @ 23.09.18, 11:15*
also shines in my true place
What and how determined? For example, when using the servicednsleaktest.com your IP and must be "true place" (since this site is not blocked by RCN, and is accessed directly), but IP DNS-server (After clicking on the [Standard Test] / [Extended Test]) has to be different ( not your ISP / Yandex-and / Googl-a).

miginRUN @ 23.09.18, 11:15*
third line strains
It is said to be received (from your openvpn antizapret-and server) unknown optionblock-outside-dns. ATguide OpenVPNabout it said:
block-outside-dns
Block DNS servers on other network adapters to prevent DNS leaks. This option prevents any application from accessing TCP or UDP port 53 except one inside the tunnel. It uses Windows Filtering Platform (WFP) and works on Windows Vista or later.
This option is considered unknown on non-Windows platforms and unsupported on Windows XP, resulting in fatal error. You may want to use --setenv opt or --ignore-unknown-option (not suitable for Windows XP) to ignore said error. Note that pushing unknown options from server does not trigger fatal errors.
- ie, option applies only to Windows-based systems (Vista and above), to obtain the unknown options on the server does not cause a fatal error, reports the preparation of such options can be disabled by parameterignore-unknown-option(In our case - add it to the config fileantizapret-tcp.ovpn).

Post has been editedsalexa - 23.09.18, 10:42



Rep: (0)
salexa @ 23.09.18, 08:32*
the routing table on the router

but two records wan and lan rest antizapret a gateway 192.168.104.1

miginRUN @ 23.09.18, 09:15*
UPD. It worked.

confirm, have not changed anything in the settings and pings already go right, and websites open



Rep: (12)
bebe @ 20.09.18, 12:16*
Actually, poser - ...... all backups, even made a moment ago, swears The backup archive does not appear to be a valid gzip file.

It is a browser safari chudil - unpacking while recording on-the-fly backups in tar.gz tar. I open a web browser to another and all returned to normal. Sorry for your attention.



Rep: (107)
Romio_03 @ 22.09.18, 13:45*
introduced in the lock image for dnsmasq this line - 0.0.0.0 code.directadvert.ru, and advertising on the Rutor from this site is still there
In a particular file? What then is responsibleping code.directadvert.ru?
Romio_03 @ 22.09.18, 13:45*
sistemlog scored this:
Sat Sep 22 10:33:21 2018 daemon.info dnsmasq-dhcp [3205]: DHCPREQUEST (br-lan) 192.168.1.108 2c: d0: 5a: dd: f0: 80
...
Updating the IP lease one of the clients in the LAN, anything criminal ... What these messages are repeated at intervals, for all or only for this particular client? On the basis of this check is not set too low if the lease time for all (Network ->Interfaces ->LAN ->DHCP Server ->General Setup ->Lease time) Or a particular client (Network ->DHCP and DNS ->Static Leases ->Lease time). You can also disable logging of these events:Network ->DHCP and DNS ->Advanced Settings ->Suppress logging(Put a checkbox).
Romio_03 @ 22.09.18, 13:45*
prescribed in /etc/dnsmasq.conf: dhcp-option = 252, "\ n"
And where does the option that is responsible for detecting web proxy ...



Rep: (573)
M
The curator of the topic is appointedA.r.c.h.e.r.



Rep: (17)
* usoux,
usb modeswitch
kmod-usb-net-cdc-ether



Rep: (44)
* usoux,
what, in fact, a question? if the modem is not detected, then why should climb connection?

read the wiki (carefully a few times !!), where all the details painted on modems and more.
if you want, what would you have helped to describe in detail the question \ problem putting logs, config files and related information on their actions (under spoiler !!).



Rep: (57)
MAC address lock on time ... A kind of parental control, instead of disabling Wi-Fi are blocking any actions specified MAC addresses ...

I think the picture clear? from 22-00 to 8-00 MAC address 84 FC-AC-4E-D0-52 (LAN) banned any action on any protocol ...
Attached Image



Rep: (0)
Good day!

Prompt with finding relevant and reliable router with support OpenWRT.

https://openwrt.org/to...asepage*%7E%5D=18.06.1- study the list and stumble either not yet been published in the Russian market model, or no longer available.

As a result, ran into one single (!!) more or mene currently available model - ASUS RT-N56U, which is quite old, although it is hoped that the new revision.

Are there alternatives?



Rep: (252)
garlp @ 25.09.18, 11:11*
Prompt with finding relevant and reliable router with support OpenWRT.

Their complete.
But it is better to start a list of your hotelok and budget, then pick up this list.



Rep: (496)
garlp @ 25.09.18, 08:11*
Prompt with finding relevant and reliable router with support OpenWRT.

Ascending power prices from what is the relevance of power. The first processor is perfectly maintained. About the other will not say exactly. It seems as long as the test is something there. What is the TP-LINK or ASUS. Other options on the CIS market is not visible.

MT7621
IPQ4018
IPQ8064

offhand -TP-Link Archer C2600.

Post has been editedLESHIY_ODESSA - 25.09.18, 10:47



Rep: (1)
Good evening. Use Openwrt OpenWrt 18.06.1 c hdd. Faced with the problem that the router does not see hdd box USB 3.0 if you change the cable to USB 2.0 and it works. Probyval another hdd box same story. Who has a similar situation? I want to understand this only cases or a problem with the wood USB 3.0.



Post has been editedaofukrq - 25.09.18, 13:58
Reason for editing: Spoiler



Rep: (17)
Drawde17 @ 24.09.18, 23:24*
MAC address lock time

It works in a cap to add information Useful



Rep: (0)
LESHIY_ODESSA @ 25.09.18, 10:42*
Ascending power prices from what is the relevance of power. The first processor is perfectly maintained. About the other will not say exactly. It seems as long as the test is something there. What is the TP-LINK or ASUS. Other options on the CIS market is not visible.

MT7621
IPQ4018
IPQ8064

Offhand - TP-Link Archer C2600.


Yes, there is a router, not sold (

Thank you for the interesting links!

But there are many models, which again had never even been sold in Russia ...

I remembered that when searching I purposely proignoriloval Zyxel and drew attention to it in the first list, but the linkhttps://openwrt.org/to...t%5BBrand*%7E%5D=zyxelhe noted "snapshot" - do not tell me what it means?

UPD: ASUS RT-N56U, which stopped above is supported only in the first audit - i.e. and it is not an option = \

Post has been editedgarlp - 26.09.18, 09:47



Rep: (384)
Support added to "nocturnal" assemblies, after the release of the latest stable version.

Post has been editedDart raiden - 26.09.18, 09:37



Rep: (0)
solalex1 @ 25.09.18, 09:26*
Their complete.
But it is better to start a list of your hotelok and budget, then pick up this list.


Would be glad to any option at affordable price, ie 10 000 rub.



Rep: (496)
garlp @ 26.09.18, 08:49*
Would be glad to any option at affordable price, ie 10 000 rub.

ASUS RT-AC58U
Xiaomi WiFi Router 3G -39$(2LAN port, but you can add a USB-LAN). The shares were at $ 32-35. But it's better to take just two or three pieces and put in each room. :)


Full version    

Help     rules

Time is now: 22/10/20, 9:45