Alternative OpenWrt/MTKSDK build for the WITI board [WIP]

[rzrwolf]

Confirm everything basic working fine with this build - so far best 5g performance i have got. Thanks a lot.

[freespirit]

probably, but it requires unsoldering chip to flash

You can try with a pomona clip or hook clip probes...

http://www.ebay.it/itm/1set-Blue-POMONA-Eeprom-Clip-5208-DIP-8-Pin-5250-SOIC-8-Pin-5251-SOIC-14-Pin-/172257851975?hash=item281b5e3a47:g:FYkAAOSw-KFXc4Da

[stas2z]

yeah, i have a such clip, but it's not so interesting for me to do it with this clip cuz only few ppl here can reproduce such movement in case of success software reflashing will b much better way

[rizla3066]

I need Oscam. Is there a toolchain available for crosscompile?

[Demetris]

I have updated asmedia 106x firmware with a clip after i unsolder vdd leg i used v3.80 AHCI firmware and works much better than before.

[rizla3066]

Do you have a how to? Perhaps a thread on its own dedicated to Asmedia upgrade? Thanks

[freespirit]

Could you please check if ipsec is still working in this build ? It gives me segmentation fault

[email protected]:~# ipsec auto --add l2tp
Segmentation fault
[email protected]:~# /etc/init.d/ipsec restart
Segmentation fault
Failed to parse config setup portion of ipsec.conf
[email protected]:~#

The configuration file is the as yours with just the ip changed

# /etc/ipsec.conf - IPsec configuration file

version 2.0

include /etc/ipsec.uci.conf

# Include non-UCI connections here
# They will be preserved across restarts/upgrades

conn l2tp
authby=secret
pfs=no
rekey=yes
keyingtries=3
type=transport
left=%defaultroute
leftprotoport=17/1701
right=185.148.145.102
rightprotoport=17/1701
auto=add

[stas2z]

no, i don't have segfault, but i found missing ipsec-tools in the build

and something is wrong with ipsec anyway, cuz it stuck while im trying to create a connection (but ipsec auto --add ... works ok)

[stas2z]

@freespirit
plz tell me latest build version which was ok with ipsec for you

[freespirit]

Ok so it's a problem of my configuration, which package contains ipsec executable ? Openswan ? I can't find it in the trunk ( https://downloads.openwrt.org/snapshots/trunk/ramips/mt7621/packages/packages/ ) I want to remove and reinstall it because I think there might be a problem with the pivot root (installed new firmware version, but did not update all the pivoted folders on disk)

[stas2z]

@freespirit
seems like something wrong with openswan
ive replaced it with strongswan and successfully checked ipsec transport/l2tp with my vps, it works fine

ive made a build with strongswan by default, but configs of openswan partially incompatible with strongswan, so u need to modify it
https://yadi.sk/d/lzrjbkjSn2AH4/3.4/MtWrt-16110823

openswan is available as a separate package here (updated it to latest dev version, but it still stuck for me)

also this build contains some xfrm backports and fix for second wan port init

[freespirit]

openswan is available as a separate package here (updated it to latest dev version, but it still stuck for me)

you forgot to add the link

p.s. just to know has anybody a copy of this document ? Maybe it could be useful to have

MT7621_ProgrammingGuide_Preliminary_Platform

[stas2z]

you forgot to add the link

oh, no
its here, as other packages built but not built-in ) https://yadi.sk/d/lzrjbkjSn2AH4/3.4/MtWrt-16110823/packages
but try strongswan anyway, it's better supported atm and recommended for use

[freespirit]

sorry I did not see the top folder icon, but I was just looking at file list, will try both and let you know, even though I have never managed to get strongswan to work on Linux with commercial vpns

[stas2z]

ipsec/l2tp PSK (strongswan+xl2tpd) with hwcrypto

[email protected]:~# iperf -c 10.10.1.1 -w2m -t40 -i5
------------------------------------------------------------
Client connecting to 10.10.1.1, TCP port 5001
TCP window size: 4.00 MByte (WARNING: requested 2.00 MByte)
------------------------------------------------------------
[  3] local 10.10.1.5 port 51227 connected with 10.10.1.1 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0- 5.0 sec   108 MBytes   181 Mbits/sec
[  3]  5.0-10.0 sec   117 MBytes   197 Mbits/sec
[  3] 10.0-15.0 sec   120 MBytes   201 Mbits/sec
[  3] 15.0-20.0 sec   114 MBytes   191 Mbits/sec
[  3] 20.0-25.0 sec   120 MBytes   201 Mbits/sec
[  3] 25.0-30.0 sec   120 MBytes   202 Mbits/sec
[  3] 30.0-35.0 sec   120 MBytes   201 Mbits/sec
[  3] 35.0-40.0 sec   119 MBytes   200 Mbits/sec
[  3]  0.0-40.0 sec   938 MBytes   197 Mbits/sec

[witi]

@stas2z hi, is monitor mode supported on mt7602e? or is there plans to support it on your firmware?

cheers

[stas2z]

current driver contains monitor mode mentions, but im not sure it's compatible with vanilla monitor mode of mac80211 (as driver is not compatible with mac80211 at all)
and i have no plans to integrate monitor mode to this firmware

[witi]

unfortunately, it's not compatible with vanilla monitor mode of mac80211, ok thank you for the info.

[adrianrobotka]

Thanks maurer for the answer! It works. (using the trunk)

BUT I tried to install mwan3 and after I've installed it I'm unable to use e.g. the mwan3 status command, because it results zero output (it should write out something).

What can I do with it?

An other question:
And do you guys know a transparent proxy that support https? (Is it possible anyway?)

[maurer]

what crypto settings did you use to get to this numbers?
AES ? MD5 ?