Running OpenWRT on the Plusnet Hub One (& BT Home Hub 5a)

[#1]

It was:

Interfaces / LAN / DHCP / Advanced / DHCP-Options (6,ip_address)

All working now.

[#2]

Actually I spoke too soon, nothing is being forwarded to the pi.

OpenWrt is too complex for me I think.

[#3]

You asked about DNS, so I showed you where to find DNS. 😉

Great, now have what you want.

P.S.: Too complicated for me too, but we setup once and forget it 😀

[#4]

Well you showed me where to find the WAN DNS, I was looking for the LAN DNS.

[#5]

DNS and DHCP - these are different things.

I can’t know how your network is configured and what results you want to get.

[#6]

You could use DHCP option 6 if you just wish to point all your clients to PiHole DNS server.

Refer to section 2.3 of the OpenVPN client setup guide v1.2 for example screen shots etc. for DNS setup

https://openwrt.ebilan.co.uk/viewtopic.php?f=7&t=279 

[#7]

I tried that but it didn't work. Maybe I have some other settings wrong.

In the meantime I found another way to do it but less elegant.

[#8]

I can't see how to quote posts on here, but re use dhcp option 6...

openwrt dhcp option 6 set to pi-hole ip

pi-hole dns set to 8.8.8.8 8.8.4.4

openwrt wan interface dns set to 8.8.8.8 8.8.4.4

So... I would expect pi-hole lan dns first, then pi-hole wan dns, then openwrt wan dns.

What it actually does is go to openwrt wan interface dns first, bypassing the pi-hole. I know this because the dns lookup does not appear in the pi-hole log.

As a workaround I can:

- set openwrt wan interface dns to pi-hole ip

- or, set dhcp option 6 to pi-hole ip and leave openwrt wan interface dns blank

=> but... this means no failover from pi-hole to openwrt wan dns.

I'd like to at least understand what it's doing. Is it because option 6 advertises, but doesn't force order?

I could try openwrt wan dns = pi-hole ip, 8.8.8.8, 8.8.4.4 and dhcp / advanced / strict order enabled I guess, but lan dns via the wan interface upsets my ocd.

Maybe a question for the openwrt forum... but I'd welcome any input.

p.s. loving openwrt, it's good fun learning.

[#9]

Actually it's working ok now, I think the pi-hole log just takes a while to update... One small change I made was to set the pi-hole dns to the openwrt ip, then you only have to set the wan dns in one place.

Also had a play with openvpn installed on openwrt, connecting to NordVPN. Works ok but the wan speed drops to ~8mbps, I guess the Hub One hasn't got much horsepower for encryption.

I'll never remember how this all works when I next look at the router settings in 12 months...

[#10]

---

As a workaround I can:

- set openwrt wan interface dns to pi-hole ip

---

fwiw, not entirely sure how above is supposed to work if believe your pi-hole is on LAN interface (not supposed to be accessible by WAN of any router)

DHCP option 6 justs sends a list of DNS servers direct to the client, so you could include  pihole LAN IP 192.168.x.x, 8.8.8.8, 1.1.1.1 etc and if you use Wiindows, it does list them in the order you specify. when you use ipconfig /all command.  Whether Windows uses the DNS server in the order they are specified is another matter.

Have you read the introduction of the OpenVPN guide for explanation regarding poor openvpn speeds with HH5A ?

[#11]

Which document is that, do you have a link?

[#12]

Never mind I found it, cpu limited and max achievable 9Mbps.

fyi I used this setup procedure:

https://nordvpn.com/tutorials/openwrt/openvpn/

Ok except separate cert/key files is unnecessary.

I prefer using vpn client on the pc anyhow, so I can see visually it's connected. Just interested to try in on openwrt.

[#13]

from posts earlier:

...... OpenVPN client setup guide v1.2 ......

https://openwrt.ebilan.co.uk/viewtopic.php?f=7&t=279 

[#14]

Hi All

Just got my new HH5A router arrive and wanted to ask a couple of questions of you wise folk before I open the router case and commit.

Does openWRT on this router offer full and relaible VLAN support? e.g can I isolate individual clients on both the wifi and ethernet?

Also reading about this openWRT upgrade/http security hole and not fully understanding every last subelty can somebody please advise if the upgrade path on this thread safely avoids this hole?

[#15]

This is the flaw I'm reffering to in the above post:

https://nakedsecurity.sophos.com/2020/03/31/patch-now-critical-flaw-found-in-openwrt-router-software...