[h3 nat]

here is my conf file of isc-dhcp-server:

subnet 192.168.8.0 netmask 255.255.255.0 {
        range 192.168.8.10 192.168.8.254;
        option routers 192.168.8.2;
        option subnet-mask 255.255.255.0;
        option broadcast-address 192.168.8.254;
        option ntp-servers 192.168.8.1;
        option netbios-name-servers 192.168.8.1;
        option netbios-node-type 8;
}

so added the line:

option domain-name-servers 8.8.8.8, 8.8.4.4;

and change the router ip to 192.186.8.1. 

and now it is working. 

 

I tried dnsmasq before, but -probably i couldn't configure it properly- it didn't work as dhcp server, so than i decided to change to isc-dhcp-server. Maybe, if i will have time for it, i will try to check the dnsmasq again. Thanks for the help

[h3 nat]

and it is true, i set everything to static in my devices and it is working now. the netstat -rn result is:

 

Kernel IP routing table

Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface

0.0.0.0         192.168.0.1     0.0.0.0         UG        0 0          0 eth0

0.0.0.0         192.168.0.1     0.0.0.0         UG        0 0          0 eth0

192.168.0.0     0.0.0.0         255.255.255.0   U         0 0          0 eth0

192.168.8.0     0.0.0.0         255.255.255.0   U         0 0          0 wlan1

 

so i guess here the gateway missing is the problem and i think i don't have any default nameserver set on my orangepi+. thanks

[h3 nat]

upps sorry i didn't missread your post. well, i only tested this network with android devices. if i ping google dns, than it says that the destination host is unreachable. so for the first time i tried this network with windows and android devices too:

 

Windows:

Tracing route to google-public-dns-a.google.com [8.8.8.8] over maximum 30 hops:
1  *   *  *  Request timed out.
 2  7 ms  8 ms  7 ms  hu-bud02a-ra4-ae54-0.aorta.net [84.116.240.205]
 3  9 ms  7 ms  7 ms 84.116.137.82
 4  7 ms  13 ms  7 ms 72.14.209.116
 5  7 ms  7 ms  7 ms 72.14.238.119
 6  6 ms  7 ms  7 ms  google-public-dns-a.google.com [8.8.8.8]

Android:

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 38 bytes packets
 1  192.168.8.11 (192.168.8.11)  2990.518 ms !H  726.875 ms  !H  2998.021 ms  !H

after this result i tried with an odroid debian 8:

traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  192.168.8.13 (192.168.8.13)  2997.242 ms !H  2997.044 ms !H  2996.976 ms !H

so now i really have no idea why it doesn't work with linux os :/

[h3 nat]

well i don't really know what you mean, but my only rule in iptables

iptables -t nat -A POSTROUTING -s 192.168.8.0/24 -o eth0 -j MASQUERADE

[h3 nat]

yes, i did:

root@orangepiplus:~# cat /proc/sys/net/ipv4/ip_forward 
1

i uncommented the line

net.ipv4.ip_forward=1

in sysctl.conf, so it shouldn't be the problem. should i do something more?

[h3 nat]

i have these interfaces:

 

eth0      Link encap:Ethernet  HWaddr da:b6:f9:06:ce:bb  
          inet addr:192.168.0.21  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: 2a02:ab88:82:5880:dab6:f9ff:fe06:cebb/128 Scope:Global
          inet6 addr: 2a02:ab88:82:5880:d8b6:f9ff:fe06:cebb/128 Scope:Global
          inet6 addr: fe80::d8b6:f9ff:fe06:cebb/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2856 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1742 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:400193 (390.8 KiB)  TX bytes:247854 (242.0 KiB)
          Interrupt:114 


lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:9 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:1180 (1.1 KiB)  TX bytes:1180 (1.1 KiB)


wlan0     Link encap:Ethernet  HWaddr 28:f3:66:4a:91:1e  
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:1010 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0   TX bytes:0 (0.0 


wlan1     Link encap:Ethernet  HWaddr 28:f3:66:4a:91:1c  
          inet addr:192.168.8.1  Bcast:192.168.8.255  Mask:255.255.255.0
          inet6 addr: fe80::2af3:66ff:fe4a:911c/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:79897 errors:0 dropped:5 overruns:0 frame:0
          TX packets:739 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:85119 (83.1 KiB)  TX bytes:78621 (76.7 KiB)

i have a hostapd, and an isc-dhcp-server on wlan1. my iptables policies:

 

 

Chain PREROUTING (policy ACCEPT 4 packets, 280 bytes)
 pkts bytes target     prot opt in     out     source               destination         


Chain INPUT (policy ACCEPT 4 packets, 280 bytes)
 pkts bytes target     prot opt in     out     source               destination         


Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         


Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 MASQUERADE  all  --  *      eht0    0.0.0.0/0            0.0.0.0/0           
    0     0 MASQUERADE  all  --  *      eth0    192.168.8.0/24       0.0.0.0/0  

 

  

[h3 nat]

Hi,

 

I'm using the very latest armbian build fpr orangepi+, and i'm trying to nat the network from a wireless interface to another wireless interface. My own LAN works, dns server works too, so i can connect to the orangepi+ but i can't make nat working. Is there some known issue about it, or a custom tutorial for nat with this build?

 

thanks for help

[build remove module newbie]

hi,

 

i have a problem that i set a custom kernel configuration where no usb wifi module is selected to build with the kernel, and whatever i do the kernel module is still builded. i checked the generated config file and the module was properly marked not to build. probably i don't do right some basic thing, but i'm out of ideas. any suggestion?

 

thanks