Router: Netgear R7000
Firmware: v3.0-r31135M kongac (01/14/17)
Kernel: Linux 4.4.42 #216 SMP Sat Jan 14 01:08:00 CET 2017 armv7l
Status: Up and running for about 48 hours
Reset: Soft boot before and after ddup
Errors: none seen
Upgraded via ddup --flash-latest from r31100M. No "erase nvram" this time.
I've been trying out Encrypt DNS with Cisco OpenDNS as the resolver. My logs show "Refetching server certificates" notifications every hour - I assume this is normal operation with dnscrypt. (Oddly enough, ddup failed with a "not found" error for www.desipro.de when I had Encrypt DNS enabled with Cisco OpenDNS. Disabling Encrypt DNS allowed ddup to work normally. I'm assuming a temporary glitch on the OpenDNS side.)
The temperatures are good: CPU 53.6 °C / WL0 43.5 °C / WL1 46.5 °C (My R7000 is wall-mounted.)
Current basic R7000 setup (subject to change of course):
- Static WAN IP
- LAN DHCP Enabled
- IPv4 only
- No VLANS
- Wireless: Regulatory Domain = UNITED_STATES, wl0 G-Only (ch. 7), wl1 NA-Mixed (ch. 161 + 159), AES
- SNMP enabled, SSH enabled, Telnet disabled
- Firewall enabled, Log Level high
- Syslog: remote to Logentries
- YAMon 3.1
- USB Flashdrive mounted as JFFS, adblocking via pixelserv
- NO: ttraf, VNC, Zabbix, VPN, Radius
- NO: Port forwarding, UPnP, DMZ, QoS
- NO: Samba, CIFS, miniDLNA, Entware, Optware _________________ Netgear R7000: v3.0-r54248 std (11/29/23)
EdgeRouter-X: EdgeOS v2.0.9-hotfix 7
Router: Asus RT-AC68U
Firmware: DD-WRT v3.0-r31135M kongac (01/14/17)
Kernel: Linux 4.4.42 #216 SMP Sat Jan 14 01:08:00 CET 2017 armv7l
Status: OK
Reset: NO
Errors:
The Problem is when my virtual network is active then I can't use my main wifi. I can't ping my router or reach it through the webui. When I switch to the guest wifi everything is working.
My main router's ip is 192.168.1.1 and the virtual network (wl0.1) ip is 192.168.1.91 and subnet 255.255.255.0
Net isolation was enabled in my vn but it was possible to reach my router on 192.168.1.1.
Joined: 18 Mar 2014 Posts: 12889 Location: Netherlands
Posted: Mon Jan 16, 2017 15:18 Post subject:
Supposing your netmask is 255.255.255.0 for your network then you have set your VAP in the DHCP range of your main network.
Set the VAP at 192.168.2.1 net mask 255.255.255.0
Have you router at 192.168.1.1 /255.255.255.0
I am working on a simple guide, which is attached. This is the draft version let me know what is unclear
Router: 2x R7000
Firmware: 31085 -> 31135
Kernel: Linux 4.4.39 #194 SMP -> Linux 4.4.42 #216 SMP Sat Jan 14 01:08:00 CET 2017 armv7l
Status: Both Working
Reset: Erase NVRAM & Manual Configure
Errors: None so far
#1 R7000 (WAN)
- OpenVPN Client via Script
- Custom Route Tables
- WiFi Disabled
- DNSCrpyt via GUI
- DNSSEC via GUI (THX Kong for the Tip!)
- NTP with Google static IP
- QoS
- DDNS
- 6 BRs/VLANS
- SSH (WAN Access)
- WAN Traffic Disabled
- USB Storage
- YaMON 3.1
#2 R7000 (WiFi)
- OpenVPN Client via Script
- 2.4Ghz Radio with 3 SSIDs (BW 40Mhz)
- 5Ghz Radio with 2 SSIDs (BW 80Mhz)
- WAN connected to switch vlan
- SPI Firewall Disabled
- DNSSEC via GUI
- NTP with Google Static IP
- 5 BRs/VLANS
- SSH (local only)
- WAN Traffic Disabled
- USB Storage
Over 30mins uptime, all working fine so far. Thanks Kong and BrainSlayer for your hard work!
Update: Changed configuration on #2 R7000, going back to using WAN to correct Internet not connecting after dis-connect. _________________ Home Network on Telus 1Gb PureFibre - 10GbE Copper Backbone
2x R7800 - Gateway & WiFi & 3xWireGuard - DDWRT r53562 Std k4.9
Off Site 1
R7000 - Gateway & WiFi & WireGuard - DDWRT r54517 Std
E3000 - Station Bridge - DDWRT r49626 Mega K4.4
Off Site 2
R7000 - Gateway & WiFi - DDWRT r54517 Std
E2000 - Wired ISP IPTV PVR Blocker - DDWRT r35531
Supposing your netmask is 255.255.255.0 for your network then you have set your VAP in the DHCP range of your main network.
Set the VAP at 192.168.2.1 net mask 255.255.255.0
Have you router at 192.168.1.1 /255.255.255.0
I am working on a simple guide, which is attached. This is the draft version let me know what is unclear
Joined: 18 Mar 2014 Posts: 12889 Location: Netherlands
Posted: Mon Jan 16, 2017 17:26 Post subject:
Eventer wrote:
egc wrote:
Supposing your netmask is 255.255.255.0 for your network then you have set your VAP in the DHCP range of your main network.
Set the VAP at 192.168.2.1 net mask 255.255.255.0
Have you router at 192.168.1.1 /255.255.255.0
I am working on a simple guide, which is attached. This is the draft version let me know what is unclear
Last time I did an erase nvram was on 30910 (just a few versions back) so I didn't do that this time. 24 hours after installing this 31135, all 2.4 Ghz WiFi clients dropped, wouldn't come back, and new ones couldn't be added. Nothing in SysLog. Power off/on fixed it. 5 Ghz was not affected.
Something really needs to be done so that we don't have to wipe nvram and manually config with every version in order to get a reliable setup. I'm starting to wonder if something in the firmware upgrade process actually corrupts something in nvram.
With that in mind, I did an erase nvram and restored my backup from 30910 that was a fresh setup right after erasing nvram on 30910 and setting up through the webif. I'll see if I can get away with that since I don't have the 30-45 minutes to plunk through the webif manually right now. We'll see if that works. If not, I'll have to make the time to do it manually.
Mike
Ever since 31000 (or whatever after 30965), all the builds I had tried had given me lots of sporadic WiFi issue. And what's worse is that the latest 2 versions had my router bricked and I had to hit the reset button to reset, reload the firmware and then restore the config backup.
What's even more strange is that with this build, even if I load the firmware and have it restore to default, follow by restoring my backup. The router is still acting up with the Wifi issue. It seems that whatever post 30965 had broke something along the line.
I think it is not advisable to restore a backup. After erasing nvram put your settings in manually.
I am sure that's the best thing to do. However it is also the most painful way as I just cannot remember every single setting to reconfigure from scratch every time I upgrade the firmware.
Posted: Tue Jan 17, 2017 5:02 Post subject: Brick!
30965 > 31135 Failed
Tried to update via ddup and now R7000 is a BRICK!
Tried power cycling, holding down reset, and with power off holding down reset. Nothing. Both wifi LEDs are off, can't get an IP over Ethernet, and when manually setting PC to 192.168.1.2 and pinging 193.168.1.1 nothing.
Looks like this is one to avoid for R7000 users?
I also wasn't doing any of that fancy dnscrypt or any VPN stuff, just basic setup... _________________ Netgear R7000 w/r31780M <KONG> build
Netgear R6700 (Un-opened with stock. My backup/emergency router if the R7000 takes a dump...)
2x Buffalo WHR-HP-GN 28493 (Used for 2.4 Ghz bridge when needed.)
Asus WL-500g Premium (1x v1 & 1x v2) (Still have, but retired for now.)
1x Linksys WRT54G v8 >>DD-WRT v24SP1 (The other routers needed something to point at and make fun of.)
Joined: 16 Nov 2015 Posts: 6440 Location: UK, London, just across the river..
Posted: Tue Jan 17, 2017 6:06 Post subject: Re: Brick!
SirSilentBob wrote:
30965 > 31135 Failed
Tried to update via ddup and now R7000 is a BRICK!
Tried power cycling, holding down reset, and with power off holding down reset. Nothing. Both wifi LEDs are off, can't get an IP over Ethernet, and when manually setting PC to 192.168.1.2 and pinging 193.168.1.1 nothing.
Looks like this is one to avoid for R7000 users?
I also wasn't doing any of that fancy dnscrypt or any VPN stuff, just basic setup...
wow that mean's try erase nvram and update via web GUI...
for me it worked even via ddup...first i restarted my router totally unplugged from other stuff, than ddup and its up and running... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Posted: Tue Jan 17, 2017 6:47 Post subject: Re: Brick!
SirSilentBob wrote:
30965 > 31135 Failed
Tried to update via ddup and now R7000 is a BRICK!
Tried power cycling, holding down reset, and with power off holding down reset. Nothing. Both wifi LEDs are off, can't get an IP over Ethernet, and when manually setting PC to 192.168.1.2 and pinging 193.168.1.1 nothing.
Looks like this is one to avoid for R7000 users?
I also wasn't doing any of that fancy dnscrypt or any VPN stuff, just basic setup...
I have flashed this on several units and had no problem, if there is an issue it must be specific.
Can you tell me exactly what you did, maybe have a nvram backup that you can send me, so I can load it and try reproducing it. _________________ KONG PB's: http://www.desipro.de/ddwrt/
KONG Info: http://tips.desipro.de/
Posted: Tue Jan 17, 2017 7:47 Post subject: Re: Brick!
SirSilentBob wrote:
30965 > 31135 Failed
Tried to update via ddup and now R7000 is a BRICK!
Tried power cycling, holding down reset, and with power off holding down reset. Nothing. Both wifi LEDs are off, can't get an IP over Ethernet, and when manually setting PC to 192.168.1.2 and pinging 193.168.1.1 nothing.
Looks like this is one to avoid for R7000 users?
I also wasn't doing any of that fancy dnscrypt or any VPN stuff, just basic setup...
Exactly the same thing happened here ...
Router: R7000, on Kong for more than a year with successful ddup without reset.
Previous Firmware: 31000, Openvpn server, privoxy transparent, DNSCrypt plus the usual stuff.
All was working before ddup to this version, lost Wireless lights, no GUI, no SSH/telnet, only briefly see at 192.168.1.1 when ping during boot (TTL=100 for about 10-12 lines). Reset not working exactly as described above.
Ordered USB-TTL to try unbrick.
Joined: 21 Jul 2006 Posts: 1898 Location: Fortaleza Ce Brazil
Posted: Tue Jan 17, 2017 7:52 Post subject:
mchaney wrote:
R8500
Last time I did an erase nvram was on 30910 (just a few versions back) so I didn't do that this time. 24 hours after installing this 31135, all 2.4 Ghz WiFi clients dropped, wouldn't come back, and new ones couldn't be added. Nothing in SysLog. Power off/on fixed it. 5 Ghz was not affected.
Something really needs to be done so that we don't have to wipe nvram and manually config with every version in order to get a reliable setup. I'm starting to wonder if something in the firmware upgrade process actually corrupts something in nvram.
With that in mind, I did an erase nvram and restored my backup from 30910 that was a fresh setup right after erasing nvram on 30910 and setting up through the webif. I'll see if I can get away with that since I don't have the 30-45 minutes to plunk through the webif manually right now. We'll see if that works. If not, I'll have to make the time to do it manually.
Mike
Same here .. back to 30965
_________________ DDwrt ...it rocks ....
1 R7800 54420 AP Wireguard webserver JFFS SAMBA FTP usb HD Mesh
1 R7800 54420 Cli Mesh
1 WZR1750 54389 AP Webserver Samba Wireguard
1 TP link Archer C7v5 54420 Cli Mesh
1 DD x86_64 48296 Gateway Samba Ftp Webserver
