New Firmware?

kedalion · 2017-05-30T04:28:55.000Z

@alzhao: I see you used a new version of wpad in v2.255. It seems to be fine and I can successfully connect to all the WPA2-EAP networks now.

I have to set up credentials through LuCI though. The main GUI does not offer any way to set it up. I also managed to manually add/adjust the network information in ‘/etc/config/ssids’, and they show up in the GUI list. With limited success: some fields such as ‘identity’ and ‘password’ don’t seem to be used or updated correctly. (I added to WPA2-EAP networks, but switching between them does not work. The identity and password that should be updated in ‘/etc/config/wireless’ remains the same. Likely I once set it with LuCI and it is never been changed by the GUI.)

I assume the program that converts the info in ‘/etc/config/ssids’ to ‘/etc/config/wireless’ was never expected to handle the additional fields. Just in case, here is what I had added to the ‘ssids’ file (mostly info how it worked in /etc/config/wireless).

config network 'sta1' option ssid 'eduroam' option mode 'sta' option ifname 'wlan-sta' option eap_type 'ttls' option auth 'PAP' option identity 'XYZ' option password 'mypass' option wds '0' option encryption 'wpa2'

wifird · 2017-05-30T20:23:22.000Z

Eduroam is used in Universities all over, having the ability to connect to these networks would make GLI a great purchase for students.

WPA2 Enterprise would probably be more useful than USB Hotspot etc.

glitch · 2017-06-14T15:37:26.000Z

2.257: seems to work OK, no problems found.

Can I request the warning pop-up > Luci can be disabled (ie. “do not show me this message again” check box).

Glitch

glitch · 2017-06-20T03:55:35.000Z

2.26: lot’s of problems, Wifi, Lan both intermittent. Found it very hard to get back to 2.257 because could not easily access web interface (no Lan or Wifi)!

alzhao · 2017-06-20T14:39:13.000Z

really!! which model are you using?

glitch · 2017-06-20T15:44:50.000Z

AR300M - tried it in both of mine, both the same. Using it as a repeater on 192.168.1.1. Wifi wouldn’t start, LAN had trouble being identified. Reset button did not repsond.

Then had problems with Uboot - had to keep reset button pushed while connecting power until all LED’s flashed and router appeared to reset (firmware 2.20!). Then managed to login, reset and finally re-flash.

alzhao · 2017-06-20T20:26:17.000Z

Actually I spend whole weekend to compile a firmware that doesn’t run. I put it on the testing folder but deleted it after found the problem. I then recompile and put it on the web but the name is still 2.26. So I think you downloaded the one that doesn’t boot.

Now the firmware for AR300M has been published in its own folder. Can you redownload and upgrade? Please don’t keep setttings.

glitch · 2017-06-20T22:20:09.000Z

LOL, please don’t do that again (different firmwares with same number)!

I will try and report back.

jackiechun · 2017-06-20T22:48:26.000Z

v2.26 working smoothly. I also tested the new AES-GCM cipher in OpenVPN 2.4 as well. I used the TAR file in: GL.iNet download center

Thanks alzhao!

nikor · 2017-06-20T23:21:26.000Z

Hi Alzhao,

I found an alert on my AR300M web UI for a new firmware (2.26). I tried to install it twice, but i get always the old one version (2.25)

jackiechun · 2017-06-20T23:29:45.000Z

@nikor: the issue might be because 2.26 in GL.iNet download center is listed as openwrt-ar300m-nand-2.25.tar instead of openwrt-ar300m-nand-2.26.tar

Try downloading GL.iNet download center and manually upload it on the flash firmware page.

nikor · 2017-06-20T23:50:08.000Z

Thanx jackiechun, it works

glitch · 2017-06-21T02:37:28.000Z

OK, downloaded and set the “new” new 2.26 version and mostly fine (as with 2.257).
However:

I had to login via LAN and reset my wifi password (previously defaulted to UI password, I believe).
Thanks for adding the option to disable UPnP (perhaps it should be diasbaled by default).
I would still like to default wifi zone to be anything other than the US (eg. 00) as my main router is on channel 12.
My repeater setting in GL UI shows “fixed by repeater” (channel 6) even though it is actually channel 12. Also, logging into Luci, it confirms this conflict (router on Ch.12 / operating frequency Ch.6).
I would request a “don’t show this message again” checkbox when accessing Luci.

alzhao · 2017-06-22T17:57:49.000Z

I am not sure why this happens. You surely should be able to setup using wifi
1. We will fix this later.
Because it is only one radio, you cannot change ap channel when using repeater.
Now it is just a very simple confirm box. Maybe you can just use your middle mouse key to bypass this message.

nikor · 2017-06-22T18:12:07.000Z

Hi Alzhao,

I’m using AR300M as WISP mode repeater, so I should not see devices outside my subnet in addition to the master router (192.168.1.1.). Why is this happening here as you can see from the attached photo?

Thanx in advance…

P.S.: Obviously WAN access disable, UpnP disabled

alzhao · 2017-06-22T18:21:00.000Z

I thought I fixed this in v2.26

this list all devices it tries to communicate. So there are some devices in the WAN is listed but doesn’t mean these devices is in the LAN.

nikor · 2017-06-22T18:27:51.000Z

This is certainly the case, also because I have activated the MAC address filter, among other things. However, it should be corrected for a cleaner job

Best regards

axebro · 2017-06-27T10:55:30.000Z

sorry alfie … this ones no good. I see lots of leaking w. the VPN going on. I connect to VPN, and go to ipchicken.com or dnsleaktest.com and it shows my isp ip address, not the vpn. In this case I was using my cell phone as a hotspot to connect the AR300M to. I downloaded the .tar file from the link posted and uploaded manually, and removed the checkbox to retain settings. Even tried a full reset, just incase something stuck around.

Also, in custom DNS, i put my VPN server’s internal DNS address (192.168.x.x). However, when I hit apply on that the tunnel resets. And now that it can’t reach the dns, I get host not found error on the vpn. If i slide the switch back to the right, the vpn doesn’t connect.

I think 2.24 was the most table version, for me. 2.25 had a lot of issues, and 2.26 seems more of a beta .

alzhao · 2017-06-27T15:40:19.000Z

@AxeBro,

For the switch button, if you don’t set up the function in the main UI, it should just have no function. If you bind it with openvpn, when moved to the right, it will disable openvpn. You cannot even start openvpn when the switch is on the right side.

For DNS leaks, I think it is a problem of all versions. If you set up DNS server, try not to use the internal DNS server. Because if you set that, before connecting to the VPN server, the DNS cannot be resolved at all. So cannot connected. The ovpn files should contains IP address rather than domain names.

Your VPN service provider should have a public DNS server IP and you need to use that.

axebro · 2017-06-27T22:34:23.000Z

Alfie - i don’t think I had this issue with the 2.24 version. I might go back to that despite the CSRF exploit.