YazFi YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client
- Thread starter Jack Yaz
- Start date
anyone else getting this error? thx
Code:
Aug 27 23:47:49 RT-AX88U-8158 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Aug 27 23:47:59 RT-AX88U-8158 networkmap: Error unlocking 7: 9 Bad file descriptor
Aug 27 23:47:59 RT-AX88U-8158 networkmap: Error unlocking 0: 9 Bad file descriptor
Aug 27 23:48:04 RT-AX88U-8158 YazFi: YazFi v4.1.4 completed successfully
Jack Yaz
Part of the Furniture
YazFi - YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client
Can you try YazFi develop please? I've made some changes to align with the nvram changes in 384.18 That seems to have fixed the duplicating entry in the VPNC.
www.snbforums.com
Lord Lovaduck
Regular Contributor
This may be a silly question... I had one guest network using VPN working just fine before, but now I am having trouble.
I configured the VPN client service entry in the router WebUI.
If I turn it ON all traffic goes through it which is not what I intend to do.
If I leave it OFF and assign it to a Guest network, I am still using the local WAN.
I am using 384.18 and latest Yazfi.
So what am I missing here? I scanned and searched the thread but cannot find the clue, VPN is too short and Client doesn't bring useful hits.
Thanks!
I configured the VPN client service entry in the router WebUI.
If I turn it ON all traffic goes through it which is not what I intend to do.
If I leave it OFF and assign it to a Guest network, I am still using the local WAN.
I am using 384.18 and latest Yazfi.
So what am I missing here? I scanned and searched the thread but cannot find the clue, VPN is too short and Client doesn't bring useful hits.
Thanks!
Jack Yaz
Part of the Furniture
Check that Redirect Internet traffic in the VPN client screen is set to policy rules
Lord Lovaduck
Regular Contributor
Thanks, Force Internet traffic through tunnel was set to NO. I switched it to Policy Rules as you suggested (is it worth going for strict policy rules or is vanilla flavour just fine? Set to vanilla now...).
On the other hand, I found that the whole Yazfi wasn't working. Looking at the address range assigned to the guest network I could see it wasn't the one expected from the Yazfi settings. It was a fresh install, whole router was redone from scratch.
I went on to the CLI and did three things:
Then I started the OVPN client and set to ON the Yazfi VPN option... it also worked fine! Success!
So I think I had an initial problem with Yazfi pretending to be operational from the WebUI (fake news!!!
) while the configuration was not sticking. I think somebody mentioned this before and that clued me in for the debug process.
There were some messages in the log as well... not sure they're relevant, about firewall rules not being detected and been reapplied. Can post if you interested.
Thanks again for your timely and accurate response, Jack
On the other hand, I found that the whole Yazfi wasn't working. Looking at the address range assigned to the guest network I could see it wasn't the one expected from the Yazfi settings. It was a fresh install, whole router was redone from scratch.
I went on to the CLI and did three things:
- First, I looked for what clients where using Yazfi using option 2. This triggered the installation of a few packages, and as expected responded NONE
- Then I did a forced update of the whole thing with UF.
- And finally I saved settings with option 1 which resulted in a message telling me (correctly) that nothing has been assigned to Yazfi yet.
Then I started the OVPN client and set to ON the Yazfi VPN option... it also worked fine! Success!
So I think I had an initial problem with Yazfi pretending to be operational from the WebUI (fake news!!!
) while the configuration was not sticking. I think somebody mentioned this before and that clued me in for the debug process.There were some messages in the log as well... not sure they're relevant, about firewall rules not being detected and been reapplied. Can post if you interested.
Thanks again for your timely and accurate response, Jack
egrep
New Around Here
Newb. HI everyone
Grabbed a Asus RT-AX3000 (same same as RT-AX-58U)
Loaded up latest merlin firmware, 384.19. Followed instructions to get YazFi up, v4.1.4
Have configured OpenVPN with 3x OVN files (NamecheapVPN) for Singapore, USA & Australia. (actually did all 5 but 3 active atm to get working)
Started up the 3x 5Ghz Guest networks. Named SSID per country with WPA2 access, assigned each to the corresponding VPN in YazFi setting... Guest 1,2,3 > VPN x,y,z etc. (see attachments)
But it doesn't work. When I connect each guest network it give the main routers DHCP address, not the alternate ones defined in YazFi.
I can manually do a routing rule per device but that locks it to one VPN, meaning no matter which wifi network I am on it uses that VPN... Or if I stop all VPN except one they all use that one...
HOW do I get the different subnet addresses to be assigned by yazfi on connection to each wifi network?
I have tried every setting, YazFi is definitely not acting as a DHCP server separate from the Asus router.
Thanks in advance
//PS I checked, applied and forced update using SSH too...
Grabbed a Asus RT-AX3000 (same same as RT-AX-58U)
Loaded up latest merlin firmware, 384.19. Followed instructions to get YazFi up, v4.1.4
Have configured OpenVPN with 3x OVN files (NamecheapVPN) for Singapore, USA & Australia. (actually did all 5 but 3 active atm to get working)
Started up the 3x 5Ghz Guest networks. Named SSID per country with WPA2 access, assigned each to the corresponding VPN in YazFi setting... Guest 1,2,3 > VPN x,y,z etc. (see attachments)
But it doesn't work. When I connect each guest network it give the main routers DHCP address, not the alternate ones defined in YazFi.
I can manually do a routing rule per device but that locks it to one VPN, meaning no matter which wifi network I am on it uses that VPN... Or if I stop all VPN except one they all use that one...
HOW do I get the different subnet addresses to be assigned by yazfi on connection to each wifi network?
I have tried every setting, YazFi is definitely not acting as a DHCP server separate from the Asus router.
Thanks in advance
//PS I checked, applied and forced update using SSH too...
L&LD
Part of the Furniture
@egrep, did you reboot the router and the client devices afterward? Did you wait 10 minutes for the settings to be applied properly?
Here are some more basic troubleshooting tips to check.
www.snbforums.com
Here are some more basic troubleshooting tips to check.
Troubleshooting 101 Asus/RMerlin Routers 2020
Top 10 Simple Asus/RMerlin firmware powered Router Troubleshooting steps to try first: NOTE: Although this is for Asus/RMerlin-firmware powered routers, the steps below may be relevant to all routers, to get to a quick fix for common symptoms. Check that the router’s System Time is accurate on...
www.snbforums.com
Jack Yaz
Part of the Furniture
Can you run option d for diagnostics and PM me the passphrase and a link to the diagnostics? (if you don't have an upload service let me know and ill send you a dropbox request)Newb. HI everyone
Grabbed a Asus RT-AX3000 (same same as RT-AX-58U)
Loaded up latest merlin firmware, 384.19. Followed instructions to get YazFi up, v4.1.4
Have configured OpenVPN with 3x OVN files (NamecheapVPN) for Singapore, USA & Australia. (actually did all 5 but 3 active atm to get working)
Started up the 3x 5Ghz Guest networks. Named SSID per country with WPA2 access, assigned each to the corresponding VPN in YazFi setting... Guest 1,2,3 > VPN x,y,z etc. (see attachments)
But it doesn't work. When I connect each guest network it give the main routers DHCP address, not the alternate ones defined in YazFi.
I can manually do a routing rule per device but that locks it to one VPN, meaning no matter which wifi network I am on it uses that VPN... Or if I stop all VPN except one they all use that one...
HOW do I get the different subnet addresses to be assigned by yazfi on connection to each wifi network?
I have tried every setting, YazFi is definitely not acting as a DHCP server separate from the Asus router.
Thanks in advance
//PS I checked, applied and forced update using SSH too...
View attachment 25916View attachment 25917View attachment 25918
egrep
New Around Here
@egrep, did you reboot the router and the client devices afterward? Did you wait 10 minutes for the settings to be applied properly?
Here are some more basic troubleshooting tips to check.
Troubleshooting 101 Asus/RMerlin Routers 2020
Top 10 Simple Asus/RMerlin firmware powered Router Troubleshooting steps to try first: NOTE: Although this is for Asus/RMerlin-firmware powered routers, the steps below may be relevant to all routers, to get to a quick fix for common symptoms. Check that the router’s System Time is accurate on...
Thanks for the reply!
Yes, I've tried all that, several times.
Still positive I've done something wrong
egrep
New Around Here
rjduraocosta
New Around Here
Hello to all,
I am new around here. I have a couple of RT-AC1900 (RT-AC67U), same firmware as RT-AC68U, both with merlin 384.19 version.
I would like to try this script because I find it very useful but have a question. One of the devices is configured as an AP, can this script be used to isolate the Gues Network in the AP too?
Thanks in advanced for your support.
Best regards.
I am new around here. I have a couple of RT-AC1900 (RT-AC67U), same firmware as RT-AC68U, both with merlin 384.19 version.
I would like to try this script because I find it very useful but have a question. One of the devices is configured as an AP, can this script be used to isolate the Gues Network in the AP too?
Thanks in advanced for your support.
Best regards.
Last edited:
maghuro
Very Senior Member
I just found some kind of bug.
When, let's say, wl02 is enabled on yazfi, but then I disable the guest Network itself, on yazfi config file the wl02 keeps the enabled=true var.
However, because of that, all other guest networks don't work properly - the rules aren't applied. (Ip range, DNS, etc).
However when I manually went to config file and set enabled=false on the wl02 which has been disabled on guest Network page also, the others started working.
When, let's say, wl02 is enabled on yazfi, but then I disable the guest Network itself, on yazfi config file the wl02 keeps the enabled=true var.
However, because of that, all other guest networks don't work properly - the rules aren't applied. (Ip range, DNS, etc).
However when I manually went to config file and set enabled=false on the wl02 which has been disabled on guest Network page also, the others started working.
egrep
New Around Here
^^ I found something similar, but its more about Asus "smart connect" for 2g/5g. Means have to have 2G guest networks running as well, not just 5G... Then manually do config and apply and BOOM.
So with a lot of help and patience and guiding from @jackYaz and trying over and over again, I GOT IT ALL WORKING!!! wooohoo. This script rocks
Thanks Jack, legend
So with a lot of help and patience and guiding from @jackYaz and trying over and over again, I GOT IT ALL WORKING!!! wooohoo. This script rocks
Thanks Jack, legend
SomeWhereOverTheRainBow
Part of the Furniture
Hi, I have the same problem, this same message keep showing up :
Code:
Sep 4 09:00:03 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:10:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 09:10:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:20:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 09:20:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:20:07 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 4 09:20:38 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:30:10 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 09:30:10 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:31:50 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 4 09:32:20 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:40:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 09:40:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 09:50:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 09:50:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 10:00:03 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 10:00:03 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 10:10:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 10:10:01 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 10:20:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 10:20:01 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 10:30:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 10:30:01 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 10:40:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 10:40:01 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 10:50:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 10:50:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 11:00:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 11:00:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 11:10:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 11:10:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 11:20:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 11:20:01 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 11:30:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 11:30:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 11:40:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 11:40:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 4 11:50:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 4 11:50:02 RT-AC88U YazFi: YazFi v4.1.4 starting upI tried Google and also search this forum, but couldn't find the answer. Can anyone help me?
Thanks a lot
Jack Yaz
Part of the Furniture
I'm not sure on what the best approach here is. If the interface is disabled, rather than hard exiting, I could update the config file for YazFi to disable the affected interface and continue?
Jack Yaz
Part of the Furniture
are there any messages in between with something re-setting your firewall?
maghuro
Very Senior Member
That's the best way I think to do.
Edit config file both when interface is enabled/disabled by the user.
Hi @Jack Yaz, thank you for your reply
I pasted some here :
Code:
Sep 5 10:26:18 RT-AC88U custom_script: Running /jffs/scripts/firewall-start (args: ppp0)
Sep 5 10:26:18 RT-AC88U custom_script: Running /jffs/scripts/service-event-end (args: restart firewall)
Sep 5 10:26:19 RT-AC88U FlexQoS: /jffs/addons/flexqos/flexqos.sh (pid=387) called with 2 args: -start ppp0
Sep 5 10:26:20 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:26:21 RT-AC88U FlexQoS: Applying iptables static rules
Sep 5 10:26:21 RT-AC88U FlexQoS: Applying iptables custom rules
Sep 5 10:26:22 RT-AC88U FlexQoS: No TC modifications necessary
Sep 5 10:26:50 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:27:11 RT-AC88U rc_service: amas_lib 25164:notify_rc restart_firewall
Sep 5 10:27:11 RT-AC88U custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Sep 5 10:27:37 RT-AC88U nat: apply nat rules (/tmp/nat_rules_ppp0_eth0)
Sep 5 10:27:37 RT-AC88U custom_script: Running /jffs/scripts/nat-start
Sep 5 10:27:38 RT-AC88U custom_script: Running /jffs/scripts/firewall-start (args: ppp0)
Sep 5 10:27:38 RT-AC88U custom_script: Running /jffs/scripts/service-event-end (args: restart firewall)
Sep 5 10:27:39 RT-AC88U FlexQoS: /jffs/addons/flexqos/flexqos.sh (pid=10561) called with 2 args: -start ppp0
Sep 5 10:27:39 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:27:41 RT-AC88U FlexQoS: Applying iptables static rules
Sep 5 10:27:41 RT-AC88U FlexQoS: Applying iptables custom rules
Sep 5 10:27:42 RT-AC88U FlexQoS: No TC modifications necessary
Sep 5 10:28:10 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:29:41 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:29:52 RT-AC88U kernel: br0: received packet on eth1 with own address as source address
Sep 5 10:30:02 RT-AC88U YazFi: Lock file found (age: 21 seconds) - stopping to prevent duplicate runs
Sep 5 10:30:03 RT-AC88U (gen_ytadblock.sh): 17419 Number of yt adblocked domains: 1457
Sep 5 10:30:03 RT-AC88U ddns: Completed custom ddns update
Sep 5 10:30:11 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:30:21 RT-AC88U rc_service: amas_lib 11052:notify_rc restart_firewall
Sep 5 10:30:21 RT-AC88U custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Sep 5 10:30:22 RT-AC88U nat: apply nat rules (/tmp/nat_rules_ppp0_eth0)
Sep 5 10:30:22 RT-AC88U custom_script: Running /jffs/scripts/nat-start
Sep 5 10:30:23 RT-AC88U custom_script: Running /jffs/scripts/firewall-start (args: ppp0)
Sep 5 10:30:23 RT-AC88U custom_script: Running /jffs/scripts/service-event-end (args: restart firewall)
Sep 5 10:30:24 RT-AC88U FlexQoS: /jffs/addons/flexqos/flexqos.sh (pid=19048) called with 2 args: -start ppp0
Sep 5 10:30:26 RT-AC88U FlexQoS: Applying iptables static rules
Sep 5 10:30:26 RT-AC88U FlexQoS: Applying iptables custom rules
Sep 5 10:30:27 RT-AC88U FlexQoS: No TC modifications necessary
Sep 5 10:31:56 RT-AC88U rc_service: amas_lib 11052:notify_rc restart_firewall
Sep 5 10:31:56 RT-AC88U custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Sep 5 10:31:58 RT-AC88U nat: apply nat rules (/tmp/nat_rules_ppp0_eth0)
Sep 5 10:31:58 RT-AC88U custom_script: Running /jffs/scripts/nat-start
Sep 5 10:31:59 RT-AC88U custom_script: Running /jffs/scripts/firewall-start (args: ppp0)
Sep 5 10:31:59 RT-AC88U custom_script: Running /jffs/scripts/service-event-end (args: restart firewall)
Sep 5 10:31:59 RT-AC88U FlexQoS: /jffs/addons/flexqos/flexqos.sh (pid=30942) called with 2 args: -start ppp0
Sep 5 10:32:00 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:32:01 RT-AC88U FlexQoS: Applying iptables static rules
Sep 5 10:32:02 RT-AC88U FlexQoS: Applying iptables custom rules
Sep 5 10:32:02 RT-AC88U FlexQoS: No TC modifications necessary
Sep 5 10:32:30 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:33:28 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:33:58 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:34:44 RT-AC88U rc_service: amas_lib 3804:notify_rc restart_firewall
Sep 5 10:34:44 RT-AC88U custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Sep 5 10:34:46 RT-AC88U nat: apply nat rules (/tmp/nat_rules_ppp0_eth0)
Sep 5 10:34:46 RT-AC88U custom_script: Running /jffs/scripts/nat-start
Sep 5 10:34:47 RT-AC88U custom_script: Running /jffs/scripts/firewall-start (args: ppp0)
Sep 5 10:34:47 RT-AC88U custom_script: Running /jffs/scripts/service-event-end (args: restart firewall)
Sep 5 10:34:48 RT-AC88U FlexQoS: /jffs/addons/flexqos/flexqos.sh (pid=4003) called with 2 args: -start ppp0
Sep 5 10:34:50 RT-AC88U FlexQoS: Applying iptables static rules
Sep 5 10:34:50 RT-AC88U FlexQoS: Applying iptables custom rules
Sep 5 10:34:51 RT-AC88U FlexQoS: No TC modifications necessary
Sep 5 10:35:01 RT-AC88U (gen_ytadblock.sh): 5040 Number of yt adblocked domains: 1457
Sep 5 10:36:55 RT-AC88U rc_service: amas_lib 11052:notify_rc restart_firewall
Sep 5 10:36:55 RT-AC88U custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Sep 5 10:36:57 RT-AC88U nat: apply nat rules (/tmp/nat_rules_ppp0_eth0)
Sep 5 10:36:57 RT-AC88U custom_script: Running /jffs/scripts/nat-start
Sep 5 10:36:57 RT-AC88U custom_script: Running /jffs/scripts/firewall-start (args: ppp0)
Sep 5 10:36:57 RT-AC88U custom_script: Running /jffs/scripts/service-event-end (args: restart firewall)
Sep 5 10:36:58 RT-AC88U FlexQoS: /jffs/addons/flexqos/flexqos.sh (pid=16461) called with 2 args: -start ppp0
Sep 5 10:36:59 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:37:00 RT-AC88U FlexQoS: Applying iptables static rules
Sep 5 10:37:00 RT-AC88U FlexQoS: Applying iptables custom rules
Sep 5 10:37:01 RT-AC88U FlexQoS: No TC modifications necessary
Sep 5 10:37:29 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:37:57 RT-AC88U YazFi: Firewall restarted - sleeping 30s before running YazFi
Sep 5 10:38:27 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:40:01 RT-AC88U (gen_ytadblock.sh): 22307 Number of yt adblocked domains: 1457
Sep 5 10:40:02 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 5 10:40:02 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:40:03 RT-AC88U ddns: Completed custom ddns update
Sep 5 10:45:00 RT-AC88U (gen_ytadblock.sh): 25894 Number of yt adblocked domains: 1457
Sep 5 10:50:00 RT-AC88U (gen_ytadblock.sh): 28111 Number of yt adblocked domains: 1457
Sep 5 10:50:01 RT-AC88U YazFi: firewall rules not detected during persistence check, re-applying rules
Sep 5 10:50:01 RT-AC88U YazFi: YazFi v4.1.4 starting up
Sep 5 10:50:03 RT-AC88U ddns: Completed custom ddns updateSimilar threads
Similar threads
Similar threads
-
-
-
YazFi GUI Tab not showing up under Guest Networks Page
- Started by Astronautspiff
- Replies: 3
-
-
-
YazFi YazFi 4.4.4 GUI Page Becomes Unscrollable on Merlin 386.14
- Started by SevenFactors
- Replies: 3
-
YazFi Issues with YazFi - Gnuton - RT-AX58U_V2 3004.388.7_1-gnuton1- Started by novusB
- Replies: 1
-
-
YazFi YazFi and Port forwarding to get to server?
- Started by robmash
- Replies: 2
-
YazFi YazFi Guest Network unable to access Pi-Hole DNS server
- Started by buzzy
- Replies: 23