Page 1 of 1

AP Isolation

Posted: Tue Aug 27, 2019 8:50 pm
by vaticanuk
All clients connected to my VoCore2 (Ultimate running 18.06.04 using the instructions from here: http://vonger.cn/?p=14669) cannot see each other.

I've spent a number of evenings reading around the OpenWRT forums (I couldn't find anything here), where people suggested enabling hairpinning on the wireless interface, disabling multicast_to_unicast, etc (for example see here: https://forum.openwrt.org/t/clients-in- ... er/2501/78), but nothing seems to make any difference.

This evening I did a hard reset but clients still can't see each other and I'm running out of ideas....

If I connect to the Vocore (SSH or serial), I can ping each wireless client from there, but they just can't communicate with each other :/

Any idea on what's going on?

My (latest) wireless config (last two options are additions to try and solve the issue):

Code: Select all
config wifi-device 'ra0'
        option type 'ralink'
        option variant 'mt7628'
        option country 'GB'
        option hwmode '11g'
        option htmode 'HT40'
        option channel 'auto'
        option disabled '0'

config wifi-iface 'ap'
        option device 'ra0'
        option mode 'ap'
        option network 'lan'
        option ifname 'ra0'
        option encryption 'psk2'
        option ssid 'some_ssid'
        option key 'some_password'
        option isolate 0
        option multicast_to_unicast 0

Re: AP Isolation

Posted: Wed Aug 28, 2019 5:48 am
by Vonger
it should be firewall block each other.
You can modify /etc/config/firewall, set all to "ACCEPT", check if it works.

Re: AP Isolation

Posted: Wed Aug 28, 2019 7:14 pm
by vaticanuk
Everything in LAN is ACCEPT already:

Code: Select all
config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        list network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT'


as per my previous post, the wifi is in the lan network :roll:

Re: AP Isolation

Posted: Thu Nov 14, 2019 2:38 pm
by TabRex
I have encountered the same problem.
The clients can only see the router but not others.

Re: AP Isolation

Posted: Fri Nov 15, 2019 6:04 am
by Vonger
TabRex wrote:I have encountered the same problem.
The clients can only see the router but not others.


Such issue can solve this way:

1. disable iptable(firewall) for one time by command "service firewall stop"
2. try to use vocore ping other client. if ping has problem, it should connection issue.
3. try other client ping vocore, if other can ping vocore, means other client firewall issue.

Re: AP Isolation

Posted: Tue Nov 26, 2019 2:01 pm
by TabRex
Vonger wrote:
TabRex wrote:I have encountered the same problem.
The clients can only see the router but not others.


Such issue can solve this way:

1. disable iptable(firewall) for one time by command "service firewall stop"
2. try to use vocore ping other client. if ping has problem, it should connection issue.
3. try other client ping vocore, if other can ping vocore, means other client firewall issue.


I have tried to disable the firewall, but the problem still exists.
But vocore can ping clients, and others can ping vocore too.
However, when I use a normal hotspot, the clients can ping each other.

Are there any necessary configurations at the router?

Re: AP Isolation

Posted: Thu Nov 28, 2019 2:19 am
by Vonger
if vocore and client can ping each other, the network connection is normal.
The problem should be route. client can not ping other clients means between them route has issue.
Please check vocore route setting, but most possible is the client setting issue.