OpenWrt Travel Router #145

fmunteanu · 2022-11-07T00:40:37Z

fmunteanu
Nov 7, 2022

Synopsis

I need a travel router to use in coffee shops or hotels and after looking at GL.iNet GL-AXT1800, I decided to build first a travel router with a Raspberry Pi 4B and ComFast CF-953AX WiFi adapter.

Objectives

Install OpenWrt and configure it with ComFast CF-953AX adapter
Install the VPN related OpenWrt packages, allowing access to UniFi UDM VPN home network (TODO)

Issues

Upon reboot, ComFast WiFi adapter is disabled, see OpenWrt discussion

OpenWrt Setup

I used the openwrt-22.03.2-bcm27xx-bcm2711-rpi-4-squashfs-factory.img.gz image for Raspberry Pi 4B.

Operating System

Setup hostname and root password:

$ ssh -l root 192.168.1.1
uci set system.@system[0].hostname='poseidon.lan'
uci commit system
service system reload
passwd

Network

Setup network configuration:

uci set network.lan.ipaddr='10.10.100.1'
uci set network.lan.force_link='1'
uci set network.wan='interface'
uci set network.wan.proto='dhcp'
uci add_list network.wan.dns='9.9.9.9'
uci add_list network.wan.dns='1.1.1.1'
uci commit network
reboot

Firewall

Setup firewall configuration:

$ ssh -l root 10.10.100.1
uci set firewall.@zone[1].input='ACCEPT'
uci commit firewall
service firewall restart

Wireless

Setup radio0 internal wireless configuration:

uci del wireless.@wifi-device[0].disabled
uci set wireless.@wifi-device[0].band='5g'
uci set wireless.@wifi-device[0].htmode='VHT80'
uci set wireless.@wifi-device[0].channel='auto'
uci set wireless.@wifi-iface[0].mode='sta'
uci set wireless.@wifi-iface[0].network='wan'
uci set wireless.@wifi-iface[0].ssid='LANborghini'
uci set wireless.@wifi-iface[0].key='public-client-password'
uci set wireless.@wifi-iface[0].encryption='sae-mixed'
uci commit wireless
wifi reload

Check Internet connectivity:

ping -c 3 google.com

Setup ComFast CF-953AX drivers:

opkg update
opkg install kmod-mt7921e kmod-mt7921u
reboot

Plugin the ComFast adapter into a USB3 port and setup radio1 ComFast wireless configuration:

$ ssh -l root 10.10.100.1
uci del wireless.@wifi-device[1].disabled
uci set wireless.@wifi-device[1].band='5g'
uci set wireless.@wifi-device[1].htmode='VHT80'
uci set wireless.@wifi-device[1].channel='auto'
uci set wireless.@wifi-iface[1].mode='ap'
uci set wireless.@wifi-iface[1].network='lan'
uci set wireless.@wifi-iface[1].ssid='Skynet'
uci set wireless.@wifi-iface[1].key='private-ap-password'
uci set wireless.@wifi-iface[1].encryption='sae-mixed'
uci commit wireless
wifi reload

Temporary fix for disabled interface on reboot:

cat > /etc/init.d/comfast << 'EOF'
#!/bin/sh /etc/rc.common

START=40
STOP=100

wifi_reload() {
    uci commit wireless
    wifi reload
}

start() {
    uci del wireless.@wifi-device[1].disabled
    wifi_reload
}

stop() {
    uci set wireless.@wifi-device[1].disabled=1
    wifi_reload >/dev/null 2>&1
}

restart() {
    stop
    start
}

boot() {
    restart
}
EOF
chmod 0755 /etc/init.d/comfast
service comfast enable

Wireless Overview

UniFi VPN

OpenWrt strongSwan documentation
OpenWrt xl2tpd documentation

OpenWrt strongSwan documentation is currently missing a L2TP/IPsec page, use the link above as a reference for xl2tpd setup.

VPN Setup

TODO

Performance

The internal WiFi card limits the performance to max. 100Mbps. With wlan0 set to internal WiFi and wlan1 set to CF-953AX WiFi, I reach almost the max speed limit when I'm next to the router:

At 30 feet distance, with 2 walls between iPhone and Pi router:

fmunteanu · 2022-11-07T00:49:00Z

fmunteanu
Nov 7, 2022
Author

@morrownr Nick, this is so far the setup I have, let me know if you want me to add anything. If you have any idea what is causing the disabled WiFi radio, please let me know. This is a major issue, if the ComFast radio is disabled, I cannot access the router to configure the public WiFi through a wireless connection, which I will always do from my laptop.

0 replies

morrownr · 2022-11-07T02:09:01Z

morrownr
Nov 7, 2022
Maintainer

I'm using a 951AX, same chipset as yours, on my main router via a USB3 port. Here is my

/etc/config/wireless entry for the 951AX:


config wifi-device 'radio2'
	option type 'mac80211'
	option path 'platform/soc/110f8800.usb3/11000000.dwc3/xhci-hcd.1.auto/usb4/4-1/4-1:1.3'
	option channel '36'
	option band '5g'
	option htmode 'HE80'
	option country 'US'
	option cell_density '0'

config wifi-iface 'default_radio2'
	option device 'radio2'
	option network 'lan'
	option mode 'ap'
	option ssid 'secret'
	option encryption 'sae'
	option key 'secret'

This is a WiFi 6 setup so adjust accordingly. I don't see anything obvious but maybe someone will see something as the week goes by.

0 replies

fmunteanu · 2022-11-07T02:55:04Z

fmunteanu
Nov 7, 2022
Author

@morrownr I have a WiFi6 setup also. I already see an issue, I have:

option path 'scb/fd500000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0/usb2/2-2/2-2:1.3'

and you have:

option path 'platform/soc/110f8800.usb3/11000000.dwc3/xhci-hcd.1.auto/usb4/4-1/4-1:1.3'

The system does not see the WiFi adapter as part of the platform, which might explain why is not enabled on reboot. Did you installed the kmod-mt7921e drivers or manually installed them with #135 steps? Can you also post the output of uci show wireless? The config file does not have all settings.

0 replies

morrownr · 2022-11-07T04:10:56Z

morrownr
Nov 7, 2022
Maintainer

The system does not see the WiFi adapter as part of the platform.

I missed that.

Review: You are running OpenWRT 22.03.2 on a RasPi4B and a CN-953AX. Correct? It is easy for me to get lost. Look at all the repos.

Did you installed the kmod-mt7921e drivers or manually installed them with #135 steps?

I've done it both ways. Let me check. Here is a size check on: WIFI_RAM_CODE_MT7961_1.bin

695624 - OpenWRT - this means the current install is the firmware from 7921e.
716404 - This is from the latest available at the kernel download site.

I guess I need to fire up scp and upgrade. I blow things out a lot around here to make sure I am testing with clean platforms.

Can you also post the output of uci show wireless?

I am beat for today so I'll to get that for you tomorrow.

Nick

0 replies

fmunteanu · 2022-11-07T04:33:04Z

fmunteanu
Nov 7, 2022
Author

Yes, the drivers from kernel site do nothing different upon reboot:

# ls -l /lib/firmware/mediatek/
-rw-r--r--    1 root     root         92192 Nov  7 03:23 WIFI_MT7961_patch_mcu_1_2_hdr.bin
-rw-r--r--    1 root     root         92192 Sep  6 20:45 WIFI_MT7961_patch_mcu_1_2_hdr.bin.old
-rw-r--r--    1 root     root        716404 Nov  7 03:24 WIFI_RAM_CODE_MT7961_1.bin
-rw-r--r--    1 root     root        695624 Sep  6 20:45 WIFI_RAM_CODE_MT7961_1.bin.old

0 replies

fmunteanu · 2022-11-07T15:14:47Z

fmunteanu
Nov 7, 2022
Author

@morrownr when you have a chance, post the output of:

uci show firewall.@zone[0]
uci show firewall.@zone[1]
uci show network
uci show wireless

Thank you.

0 replies

fmunteanu · 2022-11-07T18:06:57Z

fmunteanu
Nov 7, 2022
Author

I added instructions for a temporary fix related to the ComFast interface being disabled on reboot. This needs to be improved, as if you change the USB port location, a new radio configuration is added.

0 replies

morrownr · 2022-11-07T18:30:02Z

morrownr
Nov 7, 2022
Maintainer

uci show firewall.@zone[0]


firewall.cfg02dc81=zone
firewall.cfg02dc81.name='lan'
firewall.cfg02dc81.network='lan'
firewall.cfg02dc81.input='ACCEPT'
firewall.cfg02dc81.output='ACCEPT'
firewall.cfg02dc81.forward='ACCEPT'

uci show firewall.@zone[1]


firewall.cfg03dc81=zone
firewall.cfg03dc81.name='wan'
firewall.cfg03dc81.network='wan' 'wan6'
firewall.cfg03dc81.input='REJECT'
firewall.cfg03dc81.output='ACCEPT'
firewall.cfg03dc81.forward='REJECT'
firewall.cfg03dc81.masq='1'
firewall.cfg03dc81.mtu_fix='1'

uci show network


network.loopback=interface
network.loopback.device='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.ula_prefix='fd61:e337:7ffd::/48'
network.@device[0]=device
network.@device[0].name='br-lan'
network.@device[0].type='bridge'
network.@device[0].ports='eth1.1'
network.@device[1]=device
network.@device[1].name='eth1.1'
network.@device[1].macaddr='12:59:73:fe:8b:f6'
network.lan=interface
network.lan.device='br-lan'
network.lan.proto='static'
network.lan.ipaddr='192.168.1.1'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.@device[2]=device
network.@device[2].name='eth0.2'
network.@device[2].macaddr='12:59:73:fe:8b:f7'
network.wan=interface
network.wan.device='eth0.2'
network.wan.proto='dhcp'
network.wan6=interface
network.wan6.device='eth0.2'
network.wan6.proto='dhcpv6'
network.@switch[0]=switch
network.@switch[0].name='switch0'
network.@switch[0].reset='1'
network.@switch[0].enable_vlan='1'
network.@switch_vlan[0]=switch_vlan
network.@switch_vlan[0].device='switch0'
network.@switch_vlan[0].vlan='1'
network.@switch_vlan[0].ports='1 2 3 4 6t'
network.@switch_vlan[1]=switch_vlan
network.@switch_vlan[1].device='switch0'
network.@switch_vlan[1].vlan='2'
network.@switch_vlan[1].ports='5 0t'

uci show wireless


wireless.radio0=wifi-device
wireless.radio0.type='mac80211'
wireless.radio0.path='soc/1b500000.pci/pci0000:00/0000:00:00.0/0000:01:00.0'
wireless.radio0.channel='60'
wireless.radio0.band='5g'
wireless.radio0.htmode='VHT80'
wireless.radio0.country='US'
wireless.radio0.cell_density='0'
wireless.default_radio0=wifi-iface
wireless.default_radio0.device='radio0'
wireless.default_radio0.network='lan'
wireless.default_radio0.mode='ap'
wireless.default_radio0.ssid='secret'
wireless.default_radio0.key='secret'
wireless.default_radio0.encryption='sae-mixed'
wireless.radio1=wifi-device
wireless.radio1.type='mac80211'
wireless.radio1.path='soc/1b700000.pci/pci0001:00/0001:00:00.0/0001:01:00.0'
wireless.radio1.band='2g'
wireless.radio1.htmode='HT20'
wireless.radio1.channel='11'
wireless.radio1.country='US'
wireless.radio1.cell_density='0'
wireless.default_radio1=wifi-iface
wireless.default_radio1.device='radio1'
wireless.default_radio1.network='lan'
wireless.default_radio1.mode='ap'
wireless.default_radio1.ssid='secret'
wireless.default_radio1.encryption='psk2+ccmp'
wireless.default_radio1.key='secret'
wireless.radio2=wifi-device
wireless.radio2.type='mac80211'
wireless.radio2.path='platform/soc/110f8800.usb3/11000000.dwc3/xhci-hcd.1.auto/usb4/4-1/4-1:1.3'
wireless.radio2.channel='36'
wireless.radio2.band='5g'
wireless.radio2.htmode='HE80'
wireless.radio2.country='US'
wireless.radio2.cell_density='0'
wireless.default_radio2=wifi-iface
wireless.default_radio2.device='radio2'
wireless.default_radio2.network='lan'
wireless.default_radio2.mode='ap'
wireless.default_radio2.ssid='secret'
wireless.default_radio2.encryption='sae'
wireless.default_radio2.key='secret'

0 replies

fmunteanu · 2022-11-07T18:36:16Z

fmunteanu
Nov 7, 2022
Author

Looks good, I have the same settings, more exactly I was looking how you use the wireless htmode, mode and network. I created a thread for developers, maybe they can bring some light into the issue.

0 replies

morrownr · 2022-11-07T19:31:33Z

morrownr
Nov 7, 2022
Maintainer

Hey @fmunteanu

A couple of things to throw your way:

I have extensive experience using a RasPi4B as an AP. Very little experience using it with OpenWRT. I use OpenWRT on my main router while the Pi is an AP on the same network. In fact I have a guide on the Main Menu. It is item 9. I just perfer the RasPiOS with hostapd for the Pi as it allows me to more easily test wifi adapters (cause that is what I do a lot).

With that said, the USB3 chipset in the Pi4B is not the greatest. I have filed a bug or two and I noticed a few attempts to overcome some hardware bugs with it. I have no idea if the patches were upstreamed to mainline. Just be aware. Have your tried the adapter in a USB2 port? USB2 is far more stable on the Pi4B.

0 replies

fmunteanu · 2022-11-07T19:41:47Z

fmunteanu
Nov 7, 2022
Author

I just perfer the RasPiOS with hostapd for the Pi as it allows me to more easily test wifi adapters

@morrownr I can go this direction also, while this guide can remain in place as reference. I'm going to start a new discussion (See #146), so we don't pollute this one.

0 replies

morrownr · 2022-11-07T21:03:20Z

morrownr
Nov 7, 2022
Maintainer

@fmunteanu

I can go this direction

Well, in reading what I wrote again, I guess I should have been more clear. I was not trying to get you to go the direction of RasPiOS per se but rather warning that:

The RasPi4B like has hardware issues when it comes to the USB3 chipset.
That fixes, or attempted fixes, may very well only be in the RasPiOS.
That I have a lot of experience with bridged setups but not routed setups... but will help if I can.

0 replies

fmunteanu · 2022-11-07T21:08:21Z

fmunteanu
Nov 7, 2022
Author

Have your tried the adapter in a USB2 port?

I just tried now and I get the same results, without my comfast service the radio is disabled. I'll complete this tutorial and see how things roll. I'm waiting also on an answer from OpenWrt devs.

0 replies

black-jmyntrn · 2022-11-19T11:01:51Z

black-jmyntrn
Nov 19, 2022

id use two 935 if i were you, I have one and will add this wifi usb adapter as the internal radios on the raspi4 dont have the wifi reach distance that I need.

but then.. will you not have any cellular modems attached? I have two usb 4G modems and two 5G ethernet/usb modems all load balanced in openwrt. problem now is I use a powered usb hub and hoped to not need one.

0 replies

dieskim · 2023-02-11T13:42:18Z

dieskim
Feb 11, 2023

Hi @fmunteanu and @morrownr - Thanks for all this info. I have been trying to set up something similar on openwrt but have been running into similar issues with the comfast devices. I have been using a CF-926AC but as its a multi-state device its been creating issues, I have gotten it to switch modes when unplugging the device and re-plugging it but it does not seem to want to auto switch on boot. I found this Issue on the Openwrt Github but seems like there is no advice on what to do.

Some questions for you if you dont mind.

Have you gotten the CF-953AX to work well on reboots? Using your script? Still no info from OpenWrt on why this would be happening?
Is the CF-951AX working better? As in it work on reboot?
Any idea why the CF-926AC wont be auto mode switching on reboot?

Thanks any help and info appreciated. I am happy to write a review for any of these devices, Ill most likely buy them all to try.

0 replies

morrownr · 2023-02-11T22:59:45Z

morrownr
Feb 11, 2023
Maintainer

Hi @dieskim

I have been using a CF-926AC but as its a multi-state device its been creating issues, I have gotten it to switch modes when unplugging the device and re-plugging it but it does not seem to want to auto switch on boot. I found this Issue on the Openwrt Github but seems like there is no advice on what to do.

I think going forward we should have plenty of adapters available that are single-state. I hope so. I try to do the best I can to warn Linux users to avoid multi-state adapters but it has been a challenge to do so at time... but I think things will be better going forward. I'd say there is an issue with the usb_modeswitch on openwrt. You do realize that the mino version of usb_modeswitch on openwrt is such that it does not come with the database so as to save room so you have to add your adapter to the appropriate file.

I don't have a 953AX. I have the 951AX. Both us same chipset. Both are single state.
My experience with the 951AX is that it is picky about the port it is in. Get it in the right port on a desktop system and it is fast. Not sure that I can recommend it. Seems the reports from 953AX users are more positive.
It is likely the usb_modeswitch setup. My guess is that not many openwrt users use multi-state adapters so there could be a bug or two in there. You might want to research the issue and make sure it is setup correctly.

Depending on what you are trying to do, we should see some higher quality adapters running the mt7921au chipsets very soon. If you are only trying to setup a bridged AP, I recommend you take a look at my bridged guide as it gives a lot of info for setting up a RasPi4B as an AP and it uses the RasPiOS which is likely far more reliable running a multi-state adapter. Tell me what you are trying to do.

Nick

0 replies

dieskim · 2023-02-20T06:53:19Z

dieskim
Feb 20, 2023

Update, I now have all 3 of these adapters. Have been trying them out on a RPi 4. Here are some things I figured out:
Both the 953AX and 951AX were giving me issues as well - 953AX seems to work on the usb 2.0 ports but you have to restart the adapter after every reboot - 953AX seems to work even less consistently.

I ended up doing the hardware hack on the CF-926AC and that seems to work best as it just works like normal now.

0 replies

morrownr · 2023-02-20T20:45:06Z

morrownr
Feb 20, 2023
Maintainer

@dieskim

I ended up doing the hardware hack on the CF-926AC and that seems to work best as it just works like normal now.

I am a little behind on your adventure. What hardware hack are we talking about? If I recall correctly, the CF-926AC is a multi-state 7612u based adapter?

Both the 953AX and 951AX were giving me issues as well - 953AX seems to work on the usb 2.0 ports...

That could be an indication of power issues as the USB2 port will limit output to 500 mA as per spec. Using mt7921au chipset based adapters is a challenge on Pi's right now. When the RasPiOS is upgraded to kernel 6.1, that should make things easier. Hopefully the firmware is also upgraded when the new 6.1 kernel based RasPiOS is released. If so, that should ensure driver and firmware support is stable but that still leaves USB subsystem issues. The USB subsystem in Pi's, especially the Pi4B, leads to a lot of issues as it is very limited in how much power it can supply... so people then run out and get a powered hub to discover that many powered hubs do not play well with Pi's. This is kind of a one step at a time with a lot of research and questions to be asked before you finally learn what is stable for you.

The single biggest issue you have to deal with is the USB subsystem in Pi's.

@morrownr

0 replies

dieskim · 2023-02-21T06:56:20Z

dieskim
Feb 21, 2023

@morrownr
The hardware hack involves removing 3 resistors from the wifi dongle to disable USB Storage / CD-RPM mode as described here - openwrt/mt76#393 (comment)

I guess I forgot to mention but its most likely important to note, this is all on OpenWRT on the RPi 4. I did try RasPiOS and initially and that seemed better but OpenWRT is what I am trying to get working now. With that being said I am not sure when OpenWRT will include new kernels updates and fix some of these issues.

Anyway thanks for the help so far.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OpenWrt Travel Router #145

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 19 comments

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

OpenWrt Travel Router #145

fmunteanu Nov 7, 2022

Synopsis

Objectives

Issues

OpenWrt Setup

Operating System

Network

Firewall

Wireless

Wireless Overview

UniFi VPN

VPN Setup

Performance

Replies: 19 comments

fmunteanu Nov 7, 2022 Author

morrownr Nov 7, 2022 Maintainer

fmunteanu Nov 7, 2022 Author

morrownr Nov 7, 2022 Maintainer

fmunteanu Nov 7, 2022 Author

fmunteanu Nov 7, 2022 Author

fmunteanu Nov 7, 2022 Author

morrownr Nov 7, 2022 Maintainer

fmunteanu Nov 7, 2022 Author

morrownr Nov 7, 2022 Maintainer

fmunteanu Nov 7, 2022 Author

morrownr Nov 7, 2022 Maintainer

fmunteanu Nov 7, 2022 Author

black-jmyntrn Nov 19, 2022

dieskim Feb 11, 2023

morrownr Feb 11, 2023 Maintainer

dieskim Feb 20, 2023

morrownr Feb 20, 2023 Maintainer

dieskim Feb 21, 2023

fmunteanu
Nov 7, 2022

fmunteanu
Nov 7, 2022
Author

morrownr
Nov 7, 2022
Maintainer

fmunteanu
Nov 7, 2022
Author

morrownr
Nov 7, 2022
Maintainer

fmunteanu
Nov 7, 2022
Author

fmunteanu
Nov 7, 2022
Author

fmunteanu
Nov 7, 2022
Author

morrownr
Nov 7, 2022
Maintainer

fmunteanu
Nov 7, 2022
Author

morrownr
Nov 7, 2022
Maintainer

fmunteanu
Nov 7, 2022
Author

morrownr
Nov 7, 2022
Maintainer

fmunteanu
Nov 7, 2022
Author

black-jmyntrn
Nov 19, 2022

dieskim
Feb 11, 2023

morrownr
Feb 11, 2023
Maintainer

dieskim
Feb 20, 2023

morrownr
Feb 20, 2023
Maintainer

dieskim
Feb 21, 2023