OpenWrt Forum Archive

Topic: Optimized and feature rich trunk build for select routers

The content of this topic has been archived between 20 Aug 2014 and 5 May 2018. Unfortunately there are posts – most likely complete pages – missing.

cosmo1t wrote:
bill1228 wrote:

Hope other manufacturers don't follow TP-Link's lead and lock down their routers so that 3rd party firmware cannot be installed. Announcement effects routers sold in the US. See this link for the FAQ talking about this. Was afraid this would happen when the FCC was setting out their rules for wireless routers.

http://www.tp-link.us/faq-1058.html

--bill


You can install dd-wrt, then the remove dd-wrt. that will downgrade you to a firmware version that will allow unsigned firmwares to be flashed.

can you? I thought they were locked down so you could only install tp-link signed updates?

If this can be done, can you give me pointers for this? I've got a tp-link box I'd like to use, but haven't gotten around to opening it up to get at the serial console.

@Arokh
I assume you will be doing a new build with the .17 wifi driver since it has been released and others are using. I love your builds, but I don't feel I have the knowledge to do my own builds so count on others such as you.. ;-)

--bill

cosmo1t wrote:
bill1228 wrote:

Hope other manufacturers don't follow TP-Link's lead and lock down their routers so that 3rd party firmware cannot be installed. Announcement effects routers sold in the US. See this link for the FAQ talking about this. Was afraid this would happen when the FCC was setting out their rules for wireless routers.

http://www.tp-link.us/faq-1058.html

--bill


You can install dd-wrt, then the remove dd-wrt. that will downgrade you to a firmware version that will allow unsigned firmwares to be flashed.

Would like to see this documented on a locked down router as the lock down should only allow OEM firmware updates and DD-WRT or Openwrt sure would not be that. Routers today tell you they do not recognize a 3rd party firmware but they let you go ahead and install. All they have to do with this check is to not allow 3rd party.

--bill

arokh wrote:

@pinion

I'm not sure that the push setting should be able to affect OpenVPN authentication. Did you modify the OpenVPN config in any way? Try a clean flash.

Push is done through the client_connect parameter in /etc/config/openvpn, it runs /usr/bin/push.sh which does the rest. The script is run _after_ authentication...

I refreshed and it seems to be working. Maybe it's because I changed the default ip of the router to 192.168.2.1 instead of .1.1? I'm behind an ATT modem so I have to DMZ this router and I've always put it on a different network since the att router takes 192.168.1.1. Regardless it seems to work now without changing anything except the passwords for wifi and router.

I enabled adblocking by doing

/etc/init.d/adblock enable

and then

/etc/init.d/adblock start

but I don't think it's doing anything. It said it downloaded some stuff but running cat /tmp/hosts/hosts.bad gives me nothing. and the log shows

Sat Mar 26 21:19:52 2016 daemon.info dnsmasq[3245]: read /tmp/hosts/hosts.bad - 0 addresses

Do I need to do something other than enable the script and start it?

I set behind a ATT Uverse Residential Gateway with router in the DMZ. Yes the router has to have a different IP address range from the ATT modem. What I do is readdress the ATT RG to 192.168.0.254. Then I do not need to readdress the router when I load a new firmware as I can now use the default of 192.168.1.1.

--bill

Is it somewhow possible to delay an Interface at boot? I need to delay my nas.  It get an ipadress from the cablemodem if this reboot.... And the eth0 csnt get an wan adress. 

No one knows why it request an ip... But it does.... Dhcp is disabled on that device

Hexxer2 wrote:

Is it somewhow possible to delay an Interface at boot? I need to delay my nas.  It get an ipadress from the cablemodem if this reboot.... And the eth0 csnt get an wan adress. 

No one knows why it request an ip... But it does.... Dhcp is disabled on that device

Add: sleep 2m to your network cfg

I hard coded an IP address on my NAS. No problems now.
--bill

Will try this. Is that 2m for the whole network? I need that only for the internal (not WAN) addresses.

My NAS (Synology) is also with an hard coded IP. But only if this device is unplugged my Archer C7 get an IP from the cable modem. Yesterday i need an hour of reading logs (nothing in there) and tests why my Archer c7 did not get an WAN Ip from the modem. Last 10 minutes i pull out the cables step by step.....

PS: What is the trigger to build a new build? Latest ist from 11 Mar

(Last edited by Hexxer2 on 28 Mar 2016, 11:00)

@pinion

Try a clean flash, it works for others.

@Hexxer2

There's hasn't been any relevant changes so no need for an updated build.

r49005 on the WRT1900ACS seems to have an issue were the WAN isn't connecting. This is from installing fresh from factory using the .img file. It also does not recognize loading backup config files.

R48762 on Netgear WNDR 3700V2.  Router sits between wireless access point and VDSL2 modem for DNSSEC and DNSCrypt purposes only.

Strange anomaly noted, client device, a neighbors android cell phone with some type of security software using my guest access reported SSL hijack. This never happened before with same device.  The only change in the network configuration was the insertion of the Netgear WNDR 3700.  I removed the 3700 and no more SSL hijack alerts.  This was the only device causing issue.  All other clients on the network worked fine other than my neighbors android phone.

I am curious if it has to do with how either DNSSEC or DNScrypt works any theories?

Thank you.

You should ask whoever made the "SSL hijack" warning.

Thank you for this build with the best features together.
I can't seem to search within this thread. I have an Archer C7v2. Please tell me what's THE best channels and settings for 2 and 5 ghz. No matter what I do I can't get iperf3 results as good as with DD-WRT

(Last edited by wrt2000 on 30 Mar 2016, 11:57)

wrt2000 wrote:

I can't get iperf3 results as good as with DD-WRT

DD-WRT will be somewhat faster than openwrt, but both lack hardware NAT support so stock firmware is faster WAN to LAN .

Try 2.4ghz channel 6 , add option noscan '1' to wireless config and reload/reboot.
for 5ghz use 149 80mhz .
use country code 00 world for both.
make sure WMM is enabled, and use WPA2 AES

test trasmit power , higher does not always perform better.

Acher c7 v2 with latest build i cant intall a package that i need,coul help me please?here is the log error:

Installing kmod-ipt-nat6 (4.1.20-1) to root...
Downloading http://downloads.openwrt.org/snapshots/ … r71xx.ipk.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-nf-conntrack6 and kmod-nf-conntrack6) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-nf-ipt6 and kmod-nf-ipt6) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-nf-nat and kmod-nf-nat) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-conntrack and kmod-ipt-conntrack) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-nat and kmod-ipt-nat) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ip6tables and kmod-ip6tables) providing same name marked HOLD or PREFER. Using latest.
Collected errors:
* satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-ipt-nat6:
*     kernel (= 4.1.20-1-ad09f1e84cc208297efc55d12f9900e0) *     kernel (= 4.1.20-1-ad09f1e84cc208297efc55d12f9900e0) *
* opkg_install_cmd: Cannot install package kmod-ipt-nat6.

liquidforcex3 wrote:

Try 2.4ghz channel 6 , add option noscan '1' to wireless config and reload/reboot.
for 5ghz use 149 80mhz .
use country code 00 world for both.
make sure WMM is enabled, and use WPA2 AES

The channels I tried were actually ch7 for 2.5 and 149 for 5. I use mine as AP so I don't need NAT.
When I run iperf3 client & server on the C7 itself (192.168.1.2->192.168.1.2), the best I get from OpenWrt and DD-WRT respectively is 482 and 551 Mbits.

Edit: I'm getting 589 Mbits on iperf3-self test with OpenWrt release build. I suppose it might have to free memory - the more the better. I could get the same iperf3 stats with both openwrt and ddwrt on my C7.
Sorry for being off-topic.

(Last edited by wrt2000 on 31 Mar 2016, 10:04)

try extroot & swap

tekknogenius wrote:
sirrush wrote:

...
If anyone is wondering - the WNDR3700V1 can handle the image but you can't try to add too much to it, no extra packages or nano editor etc... You fill up your root really quickly. I'm running my root from a USB plugged in the back so now I have all the room I would ever need for a router OS.

I enabled jumbo frames on the switch settings and I'm getting massive throughput increases on file transfers from my media server. Absolutely tearing the max of 1Gbps... The wifi is really strong and stable, no issues. Streaming 8-10G movies wirelessly to TV's etc...
...

Two questions...
1. How do you run the root from a USB drive? I'd like to have more room to add a few packages
2. How do you enable the jumbo frames?

Thanks

Howdy!

Question 1's answer: I used 2 main links as my resources:

1.) https://samhobbs.co.uk/2013/11/more-spa … wrt-router
2.) https://wiki.openwrt.org/doc/howto/extroot - more for background info

Note: Arokh's wicked build already includes the mounting tools you need like block-mount and kmod etc...

It seems a little confusing at first but it's a very simple and quick process...

Caution: As soon as you freshly flash the most up to date firmware, immediately copy over your root / filesystem to the USB and reboot, run off that, then configure your network! I didn't and I had to re-flash as I completely borked my router and filled it to the brim!

Also: Arok's build has a nice GUI mount option where you can specify the root FS to be booted from a USB without having to do a TON of CLI stuff if you're not comfortable with that. When I first did it a year and a half ago though, there was no options like that. Or I didn't pay attention and just followed the steps in link 1 above!

Question 2's answer:
Jumbo frames setting - Click on 'Networking - Switch' and click the box for "Enable Jumbo Frame Passthrough"... BAM - done.

Caution: It's best practice to ensure every device in your network supports Jumbo frames, as a device that doesn't will DROP the packets/data being transferred too it. Currently, my 8 port Netgear Pro switch and this WNDR3700 support it, as does my Ubuntu Server (due to hardware, Nics) and my gaming machine. My other devices do not so they transfer things at normal speeds which is still 70-90Mbps anyway! With Jumbo Frames though, it's bursting the CAT cable at the seams almost and pushing 90-110Mbps. Theoretical max is 112Mbps I believe on GB.

I was really considering a new router until I put this latest build on here... Forget it. Why waste the $200-$350 depending on which router. I'll move to AC when the rest of my devices support it, and these builds smile

@arokh -- I've modified my script to support ufetch-client on DD (only requires libustream-polarssl or libustream-openssl for https links now): https://forum.openwrt.org/viewtopic.php?pid=307950.

Feel free to strip setup() from my script to cut down its size if you want to include it in your builds.

Got problem, dont come in the openwrt lua login to config my archer c5, cause wlan stopped working?

How can i reset him perfectly? Testet with this reset hardware button, but dont work.

Using your custom firmware.

(Last edited by pro-zocker on 4 Apr 2016, 12:07)

ssh / telent login to the router and perform
sysupgrade -n
you should first upload the sysupgrade-compatible firmware file to /tmp on your router, using SCP (e.g WinSCP).

another option is to go back to tplink factory firmware, u must first edit the original firmware to remove boot section.
instructions to go back to original firmware are at https://wiki.openwrt.org/toh/tp-link/ar … c7-wdr7500

(Last edited by liquidforcex3 on 4 Apr 2016, 15:45)

Hi All, got myself a Asrock G10 router which is almost a twin of the Archer C2600. Has anyone tried or knows if OpenWRT would work?

(Last edited by blobby25 on 5 Apr 2016, 00:06)

Arokh, would you mind doing a new build of the Linksys WRT1x00 series? There has been a new patch which uses the new wifi driver. Thanks if you will, np if you won't.

johan81 wrote:

Arokh, would you mind doing a new build of the Linksys WRT1x00 series? There has been a new patch which uses the new wifi driver. Thanks if you will, np if you won't.

+1 Yes, please. Thank you.

Sorry, posts 3501 to 3500 are missing from our archive.