I just learned of LEDE, and speaking as someone not too technically literate, what benefits does it offer over DDWRT? Why would you suggest using it (again in layman terms if possible)?

One feature I'm really interesting in is if I can get network-wide ad blocking. Can I (again as a layperson) do that easily with LEDE? This is largely for mobile devices.

Finally, would a TP-Link Archer C8 work with LEDE? The router meets the minimum requirements (4 mb of flash and 32 mb of ram) but it isn't explicitly listed on the site (Archer C7 and C9 are...makes me worried if there is something explicitly wrong with the C8).

Edit: Looking through the list of recommended devices, for a lot of TPLink devices, it says that there are problems with the wifi. What does this mean exactly? Does it mean that these issues will never be resolved, or that in the firmware's current state, it doesn't work well?

So I am new to the LEDE project and I want to purchase a small device that I can flash LEDE on. The purpose of this device will be that I can configure it how I want, basically for access through it but with some filters , VPN, or some kind of proxy. I am looking for a recomendation for such device that can be run from a battery bank, and has a Wi-fi chip and 2 ethernet ports. I am currently looking at the GL.INet devices in the table of hardware. I like the AR750 but it seems that is not fully supported yet, also MT300N v2 as well as AR300m. Can someone recommend such budget device?

EDIT: How difficult it is to compile/make the image for a device that is currently not fully supported? I am willing to try to do this as I know that the first devices that get the attention are the ones that are used and interesting to the developers, and if I can do that I can contribute to the project.

Since the day I bought it I've used it after I installed on it a Chinese fork of OpenWrt called PandoraBox that I found here, but I've missed regular updates as that project was no longer continued.

Today I've decided to install LEDE 17.01.4 and I love it, everything's working properly. Some people that installed OpenWrt complained about the poor quality of WiFi, but I'm pleased with it. In my opinion, now it's even better. I've reconfigured my new LEDE installation adapting a backup of my previous PandoraBox installation and I'm so pleased I'm now protected against WPA2 KRACK vulnerabilities (I've upgraded my smartphone too with LineageOS 14.1).

Thanks a lot to LEDE Project developers for making this possible so quickly. :)

I saw some routers have a 2017 date

Hi,

I've been struggling to find a LEDE-compatilbe MiFi router, and I would like to replace the one I have (non LEDE/OpenWRT compatible). Do you have any recommendations?

Hi All, I have a issue on my home network, if you could suggest a solution i would appreciate!

I recently move to a new apartment and put my ISP router on my Home Office on 1 side on the house and the Living room is on the opposite side of the apartment. (I put the ISP Router on the Office to have 1gbit/Ethernet directly on PC).

Because of the distance i thought in bought a Range Extender to improve WIFI Coverage (was't bad but wasn't enough either). Everything was perfect on the setup process, but during the normal usage i start experiencing connection lost on the devices.

First i thought that was the ISP Router being a bit old and i thought by a new one. I bought it and install it (OEM Firmware) The WIFI coverage was improved but wasn't good enough to remove the Range Extender. (Give it a couple of days to try out)

Still had the same issue but more recurrent. I though might be a Overlapping power issue and the device didn't know where to connect.

I give up of OEM Firmware of the new router installed the LEDE and start playing with the settings.

• First i start to max up the TXPower was a good improvement against the OEM but i might be a bit impatient and only give it a couple of hours to try it (the issue get worse)

• Then i thought on lower the TXPower and relocate the Range Extender. (Currently my setup to give it a couple of days to try it, but doesn't seems to have any improvement)

Now, i need to know what to do next:

• Buy a new Range Extender/AP (RJ45 on every room) (I couldn't flash the existing because its v4). i'm thinking the problem is on the Range Extender

• Buy 3 higain antenas to try remove the Range Extender

• Move the Router to Living Room to act as AP (but lose all other functionalities of LEDE/OpenWrt as Router (Qos/Firewall/Etc)

• Just Give up...

TL-WR1043ND V4- Router (http://www.tp-link.pt/download/TL-WR1043ND_V4.html)

TL-ANT2408CL - Antena (http://www.tp-link.pt/download/TL-ANT2408CL.html)

TL-WA850RE V4 - Range Extender (http://www.tp-link.pt/download/TL-WA850RE.html)

Hitron BVW3653 Board - ISP Router (http://setuprouter.com/router/hitron-technologies/bvw-3653/manual-135.pdf)

So for the life of me I am unable to get my network working as I'd like. The goal here is to make my unRAID server accessible from outside my home with noip for (dynamic dns) and Private Internet Access (PIA) as my VPN.

My unRaid box is an older 6c/12t Xeon with an X58 Mobo, plenty of power for a Media Box (Plex,Sickbeard, Sonar, DelugeVPN - torrent client) but due to the wonky ATT gateway, I cannot open ports to unRaid and cannot set up OpenVPN ect.

My proposed solution is to put the Lede Router behind ATT router (Pace) in DMZ+ mode and then lock down the lede router with its own firewalls. I want the ATT router to still run as a DHCP Server supplying IPs to all connected Hardware on the 192.168.1.0 subnet) and then have the Lede Router at 192.168.2.1 supplying IPs to everything on the 192.168.2.1 subnet. I want every computer/Internet Connect Device to be able to access anything on either subnet.

The goal is to make it so the Pace router has all ports open to the lede router and then have the unRaid Server behind the Lede router, so I can actually forward the ports it needs. I am also contemplating putting a pfSense box in between the Pace Router and the Lede router. Internet > Pace Gateway >>DMZ to pfSense>> Lede Router (firewall off) >> unRaid. with other computers connecting to either Pace or Lede Wired or Wirelessly (with everything visible to each other.

I hope this makes sense... I'm having a hell of a time getting this to work. Please note the Lede Router basically has to DMZ from the Pace Router/Gateway as this particular Pace Gateway does not have a bridge mode to add your own second router. Also please note my Uverse 1000 (Gigabit Fiber Connection) and there is an ATT VOIP line attached to it as well.

Anyhelp is greatly appreciated.

Last thing: ATT why have a router that does not forward ports?!?!?!

I have a Netgear R8000 Nighthawk with 3 wireless antennas. One 2.4ghz and two 5ghz. The router works fine with one 2.4 and one 5ghz running but I cannot get it to work with both 5ghz running. I would think I would be able to set the same channels, ssid's, and all would be fine and just be double broadcasting my 5ghz signal. However LEDE will not allow me to set the same channel for both 5ghz APs therefore not allowing me to successfully set up the 3rd radio.

Can someone please explain to me the correct configuration for cloning the 5ghz AP. I feel like I could sucessfully configure via console but want to make sure I understand the 3rd radio scenario 100%.. Thanks

So I'm trying to create a easy build docker so that I can just start the docker and it will update sources.

https://github.com/Pheoxy/docker-lede/

It will then use a volume to store it so I don't have to pull sources if theirs no updates.

Then just start:

menuconfig

Build and save config for next time.

However the volume isn't mounting first so it screws up somehow.

We're considering using a LEDE-based chip in a mission-critical capacity for one of our industrial machines that lives in the ceiling. Once installed, the chip will be basically inaccessible without spending $$$$$ to offline the machine, bring in the appropriate equipment, and replace the chip.

Is this a stupid idea?

Short story:

Everything is working except Samsung Galaxy S7 and S8 won't switch to AP2 (both are up to date).

Detailed long story:

• 2x TP-LINK Archer C7 v2 (around 25m apart with few walls between)

• Manually compiled latest LEDE (with CONFIG_WPA_MSG_MIN_PRIORITY=1)

• Actual version: LEDE Reboot SNAPSHOT r4594-6bdb662deb / LuCI Master (git-17.194.28316-2224714)

• Both are dump APs (DHCP server is running elsewhere)

• Testing only 2,4GHz

hostapd from AP1:

driver=nl80211
logger_syslog=127
logger_syslog_level=0
logger_stdout=127
logger_stdout_level=0
country_code=US
ieee80211d=1
hw_mode=g
beacon_int=100
channel=11

noscan=1
ieee80211n=1
ht_coex=0
ht_capab=[HT40-][LDPC][SHORT-GI-20][SHORT-GI-40][TX-STBC][RX-STBC1][DSSS_CCK-40]

interface=wlan1
ctrl_interface=/var/run/hostapd
ap_isolate=1
preamble=1
wmm_enabled=1
ignore_broadcast_ssid=0
uapsd_advertisement_enabled=1
auth_algs=1
reassociation_deadline=1000
bridge=br-80211r
wpa=2
wpa_passphrase=12345678
wpa_pairwise=CCMP
wpa_key_mgmt=FT-PSK
ssid=80211r
bssid=02:01:02:03:04:05

okc=1
disable_pmksa_caching=0
disassoc_low_ack=1
rsn_preauth=1

mobility_domain=e612
pmk_r1_push=1
r0_key_lifetime=10000
r1_key_holder=020102030405
nas_identifier=020102030405
r0kh=02:01:02:03:04:05 020102030405 8a7fcc966ed0691ff2809e1f38c16996
r0kh=02:01:02:03:04:06 020102030406 8a7fcc966ed0691ff2809e1f38c16996
r1kh=02:01:02:03:04:05 02:01:02:03:04:05 8a7fcc966ed0691ff2809e1f38c16996
r1kh=02:01:02:03:04:06 02:01:02:03:04:06 8a7fcc966ed0691ff2809e1f38c16996

hostapd from AP2:

driver=nl80211
logger_syslog=127
logger_syslog_level=0
logger_stdout=127
logger_stdout_level=0
country_code=US
ieee80211d=1
hw_mode=g
beacon_int=100
channel=11

noscan=1
ieee80211n=1
ht_coex=0
ht_capab=[HT40-][LDPC][SHORT-GI-20][SHORT-GI-40][TX-STBC][RX-STBC1][DSSS_CCK-40]

interface=wlan1
ctrl_interface=/var/run/hostapd
ap_isolate=1
preamble=1
wmm_enabled=1
ignore_broadcast_ssid=0
uapsd_advertisement_enabled=1
auth_algs=1
reassociation_deadline=1000
bridge=br-80211r
wpa=2
wpa_passphrase=12345678
wpa_pairwise=CCMP
wpa_key_mgmt=FT-PSK
ssid=80211r
bssid=02:01:02:03:04:06

okc=1
disable_pmksa_caching=0
disassoc_low_ack=1
rsn_preauth=1

mobility_domain=e612
pmk_r1_push=1
r0_key_lifetime=10000
r1_key_holder=020102030406
nas_identifier=020102030406
r0kh=02:01:02:03:04:05 020102030405 8a7fcc966ed0691ff2809e1f38c16996
r0kh=02:01:02:03:04:06 020102030406 8a7fcc966ed0691ff2809e1f38c16996
r1kh=02:01:02:03:04:05 02:01:02:03:04:05 8a7fcc966ed0691ff2809e1f38c16996
r1kh=02:01:02:03:04:06 02:01:02:03:04:06 8a7fcc966ed0691ff2809e1f38c16996

I started with enabling wifi on S8 near AP1: S8 at AP1

AP1:

root@AP1:~# iw phy phy1 interface add wlan1 type managed
root@AP1:~# hostapd -P /var/run/hostapd-phy1.pid -dd /mnt/usbdrive1/hostapd-phy1.conf | grep -v hexdump | grep FT
FT: Deriving and pushing PMK-R1 keys to R1KHs for STA 8c:8c:8c:e7:e7:e7
FT: R1KH-ID 02:01:02:03:04:06
FT: RRB send to 02:01:02:03:04:06
FT: R1KH-ID 02:01:02:03:04:05
FT: RRB send to 02:01:02:03:04:05

AP2:

root@AP2:~# iw phy phy1 interface add wlan1 type managed
root@AP2:~# hostapd -P /var/run/hostapd-phy1.pid -dd /mnt/usbdrive1/hostapd-phy1.conf | grep -v hexdump | grep FT
FT: RRB received packet 02:01:02:03:04:05 -> 02:01:02:03:04:06
FT: RRB received frame from remote AP 02:01:02:03:04:05
FT: RRB frame - frame_type=1 packet_type=202 action_length=82 ap_address=02:01:02:03:04:05
FT: Received PMK-R1 push
FT: PMK-R1 push - R1KH-ID=02:01:02:03:04:06 S1KH-ID=8c:8c:8c:e7:e7:e7 pairwise=0x10

Then I started walking towards AP2 and stopped at AP2: S8 at AP2

AP1:

unchanged from before

AP2:

root@AP2:~# iw phy phy1 interface add wlan1 type managed
root@AP2:~# hostapd -P /var/run/hostapd-phy1.pid -dd /mnt/usbdrive1/hostapd-phy1.conf | grep -v hexdump | grep FT
FT: RRB received packet 02:01:02:03:04:05 -> 02:01:02:03:04:06
FT: RRB received frame from remote AP 02:01:02:03:04:05
FT: RRB frame - frame_type=1 packet_type=202 action_length=82 ap_address=02:01:02:03:04:05
FT: Received PMK-R1 push
FT: PMK-R1 push - R1KH-ID=02:01:02:03:04:06 S1KH-ID=8c:8c:8c:e7:e7:e7 pairwise=0x10
FT: Received authentication frame: STA=8c:8c:8c:e7:e7:e7 BSSID=02:01:02:03:04:06 transaction=1
FT: FT authentication response: dst=8c:8c:8c:e7:e7:e7 auth_transaction=2 status=0
wlan1: STA 8c:8c:8c:e7:e7:e7 IEEE 802.11: authentication OK (FT)
wlan1: STA 8c:8c:8c:e7:e7:e7 MLME: MLME-AUTHENTICATE.indication(8c:8c:8c:e7:e7:e7, FT)
FT: Received authentication frame: STA=8c:8c:8c:e7:e7:e7 BSSID=02:01:02:03:04:06 transaction=1
FT: FT authentication response: dst=8c:8c:8c:e7:e7:e7 auth_transaction=2 status=0
wlan1: STA 8c:8c:8c:e7:e7:e7 IEEE 802.11: authentication OK (FT)
wlan1: STA 8c:8c:8c:e7:e7:e7 MLME: MLME-AUTHENTICATE.indication(8c:8c:8c:e7:e7:e7, FT)

Galaxy S8 authenticated to AP2 but never fully connected (S8 at AP2)?

What am I missing here?

• Only changed S8's MAC to 8c:8c:8c:e7:e7:e7

• Identical situation with Galaxy S7.

• LG G3 flashed with latest LineageOS was used until now, and confirming it doesnt support 802.11r. If someone knows how to fix this, please let me know also.

So im settting up https for access luci web ui using this tutorial on the lede wiki https://lede-project.org/docs/user-guide/getting-rid-of-luci-https-certificate-warnings and when i try to create the .key and .crt with the command on step 6 of the tutorial on the ssh command line i get this error im trying to use a hostname as CN

Error Loading extension section v3_req 1997753528:error:220A4076:lib(34):func(164):reason(118):NA:0:value=cerberus 1997753528:error:22098080:lib(34):func(152):reason(128):NA:0:name=subjectAltName, value=@alt_names

heres the myconfig.conf file

[req] distinguished_name = req_distinguished_name x509_extensions = v3_req prompt = no [req_distinguished_name] C = PT ST = PT L = TL-WR1043ND O = Home OU = Router CN = cerberus [v3_req] keyUsage = keyEncipherment, dataEncipherment extendedKeyUsage = serverAuth subjectAltName = @alt_names [alt_names] DNS.1 = cerberus IP.1 = cerberus

im new to linux and ssl so maybe this is a rookie mistake but any help is appriciated

thank you

Hello. I hope i am not breaking forum rules

I have been googling around for days to have SQM working in my 4/32 access point. I am a complete stranger to LINUX based computers.

I know the only answer is to create a custom firmware. I can't figure out which packages are the bare necessities for my router to operate without any problems but also afford to have SQM in it.

I am using my wr942n v3 to create a wifi network for my family, it's only function is basically extending the internet connection through wifi. my computer is directly connected to the docsis 3.0 cable modem.

given the circumstances, exactly which packages can i drop. so i can squish SQM in, and get rid off buffer bloating without severely limiting the bandwidth for my family

Thank you for any kind of insights in advance.

I found that my router Linksys RE6500 is supported by lede, I downloaded the firmware and tried to install it via web interface, the interface returned an error about the signature of the firmware file and it doesnt let me install it.

Does anyone know how to install lede in this hardware?

Thanks in advance!

Is it worth me upgrading to LEDE from Asus Merlin do you guys think, was really happy with tomato for ages but never updated these days.

Main feature i am looking for is selective client routing for vpn, its feature i really miss from tomato, as you could simply have a domain name go through the vpn.

Also krack and other updates is a consideration.