Need ideas

[Mogsy]

Hello all,

Situation is, a friend is behind CG-Nat address (100.x.x.x) using AX86U and it keeps breaking things (I’m not sure how as my AX86S is solid).

I followed @L&LD @RMerlin guide in resetting router to factory default, clearing nvram etc, with no config and using ISP dns and no luck. Probably it was acsd auto channel issues (always changes in topology) or wrong setting for DHCP (Aug 20 09:43:55 dhcp_client: bound 100.xx.x.x/255.255.255.224 via 100.xx.x.xx for 86400 seconds.) But all of this was under minimal config without jffs enabled.

AX86U 386.7_2 with Automatic IP setting.
His shared private IP is the same and never changed.

Did my research and it should not be a problem (unless you’re a gamer etc or use VPN).

The solutions I found are
1. Get static public IP for £5 a month.
2. Ethernet to WAN bridge.

Or is there something easy that I missed? IPV6?

Your input will be greatly appreciated.

Thank you!

 

[eibgrad]

I have no clue what the problem is based on your description. Having CGNAT (i.e., private IP) on the WAN can prevent remote access, but beyond that, it should have no bearing on the router to function normally.

 

[ColinTaylor]

"it keeps breaking things" is not a useful description of the problem.

 

[Mogsy]

I have no clue what the problem is based on your description. Having CGNAT (i.e., private IP) on the WAN can prevent remote access, but beyond that, it should have no bearing on the router to function normally.

I’m not sure either. He probably forwarded local DNS to upstream. Was wondering why his DHCP was 100.xx.x.x/255.255.255.224 via 100.xx.x.xx

 

[Mogsy]

"it keeps breaking things" is not a useful description of the problem.

Sorry. Lots of Apple and Microsoft IP dropped report, and error for dnsmasq script. This was on minimal config

Aug 20 09:44:01 dnsmasq-script[2201]: json_object_from_file: error opening file /jffs/nmp_vc_json.js: No such file or directory
Aug 20 09:44:02 kernel: DROP IN=eth0 OUT= MAC=7c:10:c9:xx:7f:b8:ac:75:1d:3e:66:xx:xx:00 SRC=17.57.146.42 DST=100.66.x.xx LEN=76 TOS=0x00 PREC=0x00 TTL=49 ID=26725 DF PROTO=TCP SPT=5223 DPT=51589 SEQ=3772537357 ACK=893525374 WINDOW=501 RES=0x00 ACK PSH URGP=0 OPT (0101080A7776D724905E5F23) MARK=0x8000000

Just to confirm. If it is ethernet WAN port, the setting is Automatic IP right?

 

[ColinTaylor]

Was wondering why his DHCP was 100.xx.x.x/255.255.255.224 via 100.xx.x.xx

That's perfectly reasonable for a CGNAT connection.

Aug 20 09:44:01 dnsmasq-script[2201]: json_object_from_file: error opening file /jffs/nmp_vc_json.js: No such file or directory
Aug 20 09:44:02 kernel: DROP IN=eth0 OUT= MAC=7c:10:c9:xx:7f:b8:ac:75:1d:3e:66:xx:xx:00 SRC=17.57.146.42 DST=100.66.x.xx LEN=76 TOS=0x00 PREC=0x00 TTL=49 ID=26725 DF PROTO=TCP SPT=5223 DPT=51589 SEQ=3772537357 ACK=893525374 WINDOW=501 RES=0x00 ACK PSH URGP=0 OPT (0101080A7776D724905E5F23) MARK=0x8000000

The dnsmasq-script message is normal when the wireless interfaces are (re)starting. The DROP message could also be normal depending on the context.

Just to confirm. If it is ethernet WAN port, the setting is Automatic IP right?

Usually. It depends on the particular ISP service.

 

[Mogsy]

That's perfectly reasonable for a CGNAT connection.


The dnsmasq-script message is normal when the wireless interfaces are (re)starting. The DROP message could also be normal depending on the context.


Usually. It depends on the particular ISP service.

Thanks Colin. Is there any way he can utilise some of the add-ons from amtm like Skynet and Diversion? He also connected printer, dyson fan, etc on the main Wifi

 

[ColinTaylor]

Thanks Colin. Is there any way he can utilise some of the add-ons from amtm like Skynet and Diversion? He also connected printer, dyson fan, etc on the main Wifi

I don't see why not, there's nothing unusual about his setup.

P.S. I would turn off logging of dropped packets as it appears to be serving no purpose at the moment other than filling up his log.

 

[Mogsy]

I don't see why not, there's nothing unusual about his setup.

P.S. I would turn off logging of dropped packets as it appears to be serving no purpose at the moment other than filling up his log.

Thank you. But I can’t install Skynet because of the 100.x.x.x WAN IP

 

[ColinTaylor]

Thank you. But I can’t install Skynet because of the 100.x.x.x WAN IP

I've never tried to install Skynet. Is it actually preventing you from installing it or are you just seeing a warning about CGNAT?

Why are you installing Skynet or anything else in the first place? In other words don't install things just because you can, there needs to be a reason. Are you prepared to be his router tech support guy all the time he owns this router?

For that matter, why is he running Merlin's firmware at all if he's not capable of administering it himself, e.g. performing updates, fixing add-on scripts, etc?

 

[Yota]

e.g. performing updates, fixing add-on scripts, etc?

Agreed, for most non-technical users staying with the stock firmware and enabling automatic updates is the best option.