Guest User

Untitled

a guest
Apr 12th, 2018
87
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.76 KB | None | 0 0
  1. Software versions :
  2.  
  3. OpenWrt - LEDE Reboot 17.01.4 r3560-79f57e422d
  4. LuCI - git-18.098.72829-575e327
  5.  
  6. mwan3 - 2.0.2-1
  7. mwan3-luci - 1.4-6
  8.  
  9. Output of "cat /etc/config/mwan3" :
  10.  
  11. config interface 'wan2'
  12. option enabled '1'
  13. list track_ip '8.8.8.8'
  14. list track_ip '208.67.220.220'
  15. option reliability '1'
  16. option count '1'
  17. option timeout '2'
  18. option interval '5'
  19. option down '2'
  20. option up '3'
  21.  
  22. config interface 'wan'
  23. option enabled '1'
  24. list track_ip '8.8.4.4'
  25. list track_ip '8.8.8.8'
  26. list track_ip '208.67.222.222'
  27. list track_ip '208.67.220.220'
  28. option reliability '2'
  29. option count '1'
  30. option timeout '2'
  31. option interval '5'
  32. option down '3'
  33. option up '8'
  34.  
  35. config member 'wan_m1_w3'
  36. option interface 'wan'
  37. option metric '1'
  38. option weight '3'
  39.  
  40. config member 'wan_m2_w3'
  41. option interface 'wan'
  42. option metric '2'
  43. option weight '3'
  44.  
  45. config member 'wan2_m1_w2'
  46. option interface 'wan2'
  47. option weight '2'
  48. option metric '3'
  49.  
  50. config member 'wan2_m2_w2'
  51. option interface 'wan2'
  52. option weight '2'
  53. option metric '4'
  54.  
  55. config policy 'wan_only'
  56. list use_member 'wan_m1_w3'
  57.  
  58. config policy 'wan2_only'
  59. list use_member 'wan2_m1_w2'
  60.  
  61. config policy 'wan_wan2'
  62. list use_member 'wan_m1_w3'
  63. list use_member 'wan2_m2_w2'
  64.  
  65. config policy 'wan2_wan'
  66. list use_member 'wan_m2_w3'
  67. list use_member 'wan2_m1_w2'
  68.  
  69. config rule 'https'
  70. option sticky '1'
  71. option dest_port '443'
  72. option proto 'tcp'
  73. option use_policy 'balanced'
  74.  
  75. config rule 'default_rule'
  76. option dest_ip '0.0.0.0/0'
  77. option use_policy 'balanced'
  78.  
  79. Output of "cat /etc/config/network" :
  80.  
  81. config interface 'loopback'
  82. option ifname 'lo'
  83. option proto 'static'
  84. option ipaddr '127.0.0.1'
  85. option netmask '255.0.0.0'
  86.  
  87. config globals 'globals'
  88. option ula_prefix 'fdec:5a77:b55d::/48'
  89.  
  90. config interface 'lan'
  91. option type 'bridge'
  92. option ifname 'eth0.1'
  93. option proto 'static'
  94. option netmask '255.255.255.0'
  95. option ip6assign '60'
  96. option ipaddr '192.168.3.1'
  97.  
  98. config switch
  99. option name 'switch0'
  100. option reset '1'
  101. option enable_vlan '1'
  102.  
  103. config switch_vlan
  104. option device 'switch0'
  105. option vlan '1'
  106. option ports '4 3 2 1 0t'
  107.  
  108. config switch_vlan
  109. option device 'switch0'
  110. option vlan '2'
  111. option ports '5 0t'
  112.  
  113. config interface 'wan'
  114. option proto 'dhcp'
  115. option ifname 'eth1'
  116.  
  117. config interface 'wan2'
  118. option proto 'dhcp'
  119. option ifname 'usb0'
  120.  
  121. Output of "cat /etc/config/wireless" :
  122.  
  123. config wifi-device 'radio0'
  124. option type 'mac80211'
  125. option hwmode '11g'
  126. option path 'pci0000:40/0000:40:00.0/0000:41:00.0/0000:42:02.0/0000:43:00.0'
  127. option htmode 'HT20'
  128. option channel 'auto'
  129. option country 'US'
  130. option disabled '0'
  131.  
  132. config wifi-device 'radio1'
  133. option type 'mac80211'
  134. option hwmode '11a'
  135. option path 'pci0000:40/0000:40:00.0/0000:41:00.0/0000:42:03.0/0000:44:00.0'
  136. option htmode 'HT20'
  137. option channel 'auto'
  138. option country 'US'
  139. option disabled '0'
  140.  
  141. config wifi-iface
  142. option device 'radio0'
  143. option mode 'ap'
  144. option ssid 'WNDRNAS4700'
  145. option network 'lan'
  146. option encryption 'psk-mixed'
  147. PASSWORD HIDDEN
  148. option wps_pushbutton '1'
  149.  
  150. config wifi-iface
  151. option device 'radio1'
  152. option mode 'ap'
  153. option ssid 'WNDRNAS4700-5G'
  154. option network 'lan'
  155. PASSWORD HIDDEN
  156. option encryption 'psk-mixed'
  157.  
  158. Output of "ifconfig" :
  159.  
  160. br-lan Link encap:Ethernet HWaddr 20:EE:XX:YY:BE:18
  161. inet addr:192.168.3.1 Bcast:192.168.3.255 Mask:255.255.255.0
  162. inet6 addr: fdec:5a77:b55d::1/60 Scope:Global
  163. inet6 addr: fxyz::22e5:2aff:fe55:be18/64 Scope:Link
  164. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  165. RX packets:7011 errors:0 dropped:0 overruns:0 frame:0
  166. TX packets:7495 errors:0 dropped:0 overruns:0 carrier:0
  167. collisions:0 txqueuelen:1000
  168. RX bytes:1288936 (1.2 MiB) TX bytes:4134808 (3.9 MiB)
  169.  
  170. eth0 Link encap:Ethernet HWaddr 20:EE:XX:YY:BE:18
  171. inet6 addr: fxyz::22e5:2aff:fe55:be18/64 Scope:Link
  172. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  173. RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  174. TX packets:591 errors:0 dropped:0 overruns:0 carrier:0
  175. collisions:0 txqueuelen:1000
  176. RX bytes:0 (0.0 B) TX bytes:119009 (116.2 KiB)
  177. Interrupt:43
  178.  
  179. eth0.1 Link encap:Ethernet HWaddr 20:EE:XX:YY:BE:18
  180. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  181. RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  182. TX packets:467 errors:0 dropped:0 overruns:0 carrier:0
  183. collisions:0 txqueuelen:1000
  184. RX bytes:0 (0.0 B) TX bytes:103016 (100.6 KiB)
  185.  
  186. eth1 Link encap:Ethernet HWaddr FC:DD:XX:FF:01:06
  187. inet addr:192.168.1.100 Bcast:192.168.1.255 Mask:255.255.255.0
  188. inet6 addr: fxyz::fede:56ff:feff:106/64 Scope:Link
  189. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  190. RX packets:367 errors:0 dropped:0 overruns:0 frame:0
  191. TX packets:884 errors:0 dropped:0 overruns:0 carrier:0
  192. collisions:0 txqueuelen:1000
  193. RX bytes:40135 (39.1 KiB) TX bytes:245092 (239.3 KiB)
  194.  
  195. lo Link encap:Local Loopback
  196. inet addr:127.0.0.1 Mask:255.0.0.0
  197. inet6 addr: ::1/128 Scope:Host
  198. UP LOOPBACK RUNNING MTU:65536 Metric:1
  199. RX packets:23 errors:0 dropped:0 overruns:0 frame:0
  200. TX packets:23 errors:0 dropped:0 overruns:0 carrier:0
  201. collisions:0 txqueuelen:1
  202. RX bytes:2810 (2.7 KiB) TX bytes:2810 (2.7 KiB)
  203.  
  204. usb0 Link encap:Ethernet HWaddr 02:AA:14:AA:62:06
  205. inet addr:192.168.42.197 Bcast:192.168.42.255 Mask:255.255.255.0
  206. inet6 addr: fxyz::14:14ff:fe7a:6206/64 Scope:Link
  207. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  208. RX packets:192 errors:0 dropped:0 overruns:0 frame:0
  209. TX packets:166 errors:0 dropped:0 overruns:0 carrier:0
  210. collisions:0 txqueuelen:1000
  211. RX bytes:58708 (57.3 KiB) TX bytes:48670 (47.5 KiB)
  212.  
  213. wlan0 Link encap:Ethernet HWaddr 20:EE:XX:YY:BE:18
  214. inet6 addr: fxyz::22e5:2aff:fe55:be18/64 Scope:Link
  215. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  216. RX packets:7008 errors:0 dropped:0 overruns:0 frame:0
  217. TX packets:7860 errors:0 dropped:0 overruns:0 carrier:0
  218. collisions:0 txqueuelen:1000
  219. RX bytes:1387030 (1.3 MiB) TX bytes:4439811 (4.2 MiB)
  220.  
  221. wlan1 Link encap:Ethernet HWaddr 20:EE:XX:YY:BE:1A
  222. inet6 addr: fxyz::22e5:2aff:fe55:be1a/64 Scope:Link
  223. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  224. RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  225. TX packets:410 errors:0 dropped:0 overruns:0 carrier:0
  226. collisions:0 txqueuelen:1000
  227. RX bytes:0 (0.0 B) TX bytes:103224 (100.8 KiB)
  228.  
  229. Output of "route -n" :
  230.  
  231. Kernel IP routing table
  232. Destination Gateway Genmask Flags Metric Ref Use Iface
  233. 0.0.0.0 192.168.42.129 0.0.0.0 UG 0 0 0 usb0
  234. 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
  235. 192.168.1.1 0.0.0.0 255.255.255.255 UH 0 0 0 eth1
  236. 192.168.3.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan
  237. 192.168.42.0 0.0.0.0 255.255.255.0 U 0 0 0 usb0
  238. 192.168.42.129 0.0.0.0 255.255.255.255 UH 0 0 0 usb0
  239.  
  240. Output of "ip rule show" :
  241.  
  242. 0: from all lookup local
  243. 1001: from all iif usb0 lookup main
  244. 1002: from all iif eth1 lookup main
  245. 2001: from all fwmark 0x100/0xff00 lookup 1
  246. 2002: from all fwmark 0x200/0xff00 lookup 2
  247. 2253: from all fwmark 0xfd00/0xff00 blackhole
  248. 2254: from all fwmark 0xfe00/0xff00 unreachable
  249. 32766: from all lookup main
  250. 32767: from all lookup default
  251.  
  252. Output of "ip route list table 1-250" :
  253.  
  254. 1
  255. default via 192.168.42.129 dev usb0
  256. 2
  257. default via 192.168.1.1 dev eth1
  258.  
  259. Firewall default output policy (must be ACCEPT) :
  260.  
  261. ACCEPT
  262.  
  263. Output of "iptables -L -t mangle -v -n" :
  264.  
  265. Chain PREROUTING (policy ACCEPT 657 packets, 123K bytes)
  266. pkts bytes target prot opt in out source destination
  267. 928 181K mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0
  268.  
  269. Chain INPUT (policy ACCEPT 471 packets, 48434 bytes)
  270. pkts bytes target prot opt in out source destination
  271.  
  272. Chain FORWARD (policy ACCEPT 182 packets, 73699 bytes)
  273. pkts bytes target prot opt in out source destination
  274. 0 0 TCPMSS tcp -- * eth1 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 /* !fw3: rndis (mtu_fix) */ TCPMSS clamp to PMTU
  275. 4 208 TCPMSS tcp -- * usb0 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 /* !fw3: rndis (mtu_fix) */ TCPMSS clamp to PMTU
  276.  
  277. Chain OUTPUT (policy ACCEPT 641 packets, 276K bytes)
  278. pkts bytes target prot opt in out source destination
  279. 921 393K mwan3_hook all -- * * 0.0.0.0/0 0.0.0.0/0
  280.  
  281. Chain POSTROUTING (policy ACCEPT 823 packets, 349K bytes)
  282. pkts bytes target prot opt in out source destination
  283.  
  284. Chain mwan3_connected (2 references)
  285. pkts bytes target prot opt in out source destination
  286. 204 55622 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected dst MARK or 0xff00
  287.  
  288. Chain mwan3_hook (2 references)
  289. pkts bytes target prot opt in out source destination
  290. 1849 575K CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK restore mask 0xff00
  291. 253 51339 mwan3_ifaces_in all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  292. 246 50988 mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  293. 195 43985 mwan3_ifaces_out all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  294. 78 34189 mwan3_rules all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  295. 1849 575K CONNMARK all -- * * 0.0.0.0/0 0.0.0.0/0 CONNMARK save mask 0xff00
  296. 428 121K mwan3_connected all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xff00/0xff00
  297.  
  298. Chain mwan3_iface_in_wan (1 references)
  299. pkts bytes target prot opt in out source destination
  300. 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0xff00 /* default */ MARK or 0xff00
  301. 0 0 MARK all -- eth1 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* wan */ MARK xset 0x200/0xff00
  302.  
  303. Chain mwan3_iface_in_wan2 (1 references)
  304. pkts bytes target prot opt in out source destination
  305. 0 0 MARK all -- usb0 * 0.0.0.0/0 0.0.0.0/0 match-set mwan3_connected src mark match 0x0/0xff00 /* default */ MARK or 0xff00
  306. 7 351 MARK all -- usb0 * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* wan2 */ MARK xset 0x100/0xff00
  307.  
  308. Chain mwan3_iface_out_wan (1 references)
  309. pkts bytes target prot opt in out source destination
  310. 61 5124 MARK all -- * * 192.168.1.100 0.0.0.0/0 mark match 0x0/0xff00 /* wan */ MARK xset 0x200/0xff00
  311.  
  312. Chain mwan3_iface_out_wan2 (1 references)
  313. pkts bytes target prot opt in out source destination
  314. 56 4672 MARK all -- * * 192.168.42.197 0.0.0.0/0 mark match 0x0/0xff00 /* wan2 */ MARK xset 0x100/0xff00
  315.  
  316. Chain mwan3_ifaces_in (1 references)
  317. pkts bytes target prot opt in out source destination
  318. 253 51339 mwan3_iface_in_wan all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  319. 129 12021 mwan3_iface_in_wan2 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  320.  
  321. Chain mwan3_ifaces_out (1 references)
  322. pkts bytes target prot opt in out source destination
  323. 195 43985 mwan3_iface_out_wan all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  324. 62 6299 mwan3_iface_out_wan2 all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  325.  
  326. Chain mwan3_policy_balanced (2 references)
  327. pkts bytes target prot opt in out source destination
  328.  
  329. Chain mwan3_policy_wan2_only (0 references)
  330. pkts bytes target prot opt in out source destination
  331. 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* wan2 2 2 */ MARK xset 0x100/0xff00
  332.  
  333. Chain mwan3_policy_wan2_wan (0 references)
  334. pkts bytes target prot opt in out source destination
  335. 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* wan2 2 2 */ MARK xset 0x100/0xff00
  336.  
  337. Chain mwan3_policy_wan_only (0 references)
  338. pkts bytes target prot opt in out source destination
  339. 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* unreachable */ MARK xset 0xfe00/0xff00
  340.  
  341. Chain mwan3_policy_wan_wan2 (0 references)
  342. pkts bytes target prot opt in out source destination
  343. 0 0 MARK all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* wan2 2 2 */ MARK xset 0x100/0xff00
  344.  
  345. Chain mwan3_rule_https (1 references)
  346. pkts bytes target prot opt in out source destination
  347. 3 156 mwan3_policy_balanced all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00
  348. 3 156 SET all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xfc00/0xfc00 del-set mwan3_sticky_https src,src
  349. 3 156 SET all -- * * 0.0.0.0/0 0.0.0.0/0 mark match ! 0xfc00/0xfc00 add-set mwan3_sticky_https src,src
  350.  
  351. Chain mwan3_rules (1 references)
  352. pkts bytes target prot opt in out source destination
  353. 3 156 mwan3_rule_https tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport sports 0:65535 multiport dports 443 mark match 0x0/0xff00 /* https */
  354. 6 1627 mwan3_policy_balanced all -- * * 0.0.0.0/0 0.0.0.0/0 mark match 0x0/0xff00 /* default_rule */
Add Comment
Please, Sign In to add comment