Dual WAN Connected to Secondary WAN but Offline [Solved] [Faulty Dongle]

[amplatfus]

Hi,

In the meantime I have got more details. I attached the files from below moments:
1) after mounting the USB Dongle into USB 3 Port (Secondary WAN)
2) after unplugging the WAN port (Main WAN)
3) after plugging back the WAN port

Below please find the detailed log.
Most grateful for any ideas on where I went wrong.
Any pointers or tips would help. Thanks.

12:26 kernel: usb 1-1: new high speed USB device using ehci_hcd and address 5
12:26 kernel: usb 1-1: unable to read config index 2 descriptor/start: -32
12:26 kernel: usb 1-1: chopping to 2 config(s)
12:26 kernel: scsi3 : usb-storage 1-1:1.0
12:26 root: Waiting 10 seconds for VPN...
12:27 kernel: usb 1-1: USB disconnect, address 5
12:28 kernel: usb 1-1: new high speed USB device using ehci_hcd and address 6
12:28 kernel: cdc_ether 1-1:1.0: eth3: register 'cdc_ether' at usb-0000:00:0b.1-1, ZTE CDC Ethernet Device, 00:a0:c6:00:00:00
12:28 kernel: scsi4 : usb-storage 1-1:1.2
12:28 hotplug: add net eth3.
12:28 hotplug: set net eth3.
12:29 kernel: scsi 4:0:0:0: CD-ROM            Vodafone USB SCSI CD-ROM  2.31 PQ: 0 ANSI: 2
12:29 kernel: scsi 4:0:0:0: Attached scsi generic sg0 type 5
12:32 rc_service: skip the event: start_vpnclient1.
12:32 root: Waiting 10 seconds for VPN...
15:50 kernel: tun: Universal TUN/TAP device driver, 1.6
15:50 kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
15:50 kernel: ADDRCONF(NETDEV_UP): tun21: link is not ready
15:50 kernel: device tun21 entered promiscuous mode
15:51 ovpn-server1[8253]: OpenVPN 2.4.7 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on May 18 2019
15:51 ovpn-server1[8253]: library versions: OpenSSL 1.1.1b  26 Feb 2019, LZO 2.08
15:51 ovpn-server1[8257]: WARNING: using --duplicate-cn and --client-config-dir together is probably not what you want
15:51 ovpn-server1[8257]: PLUGIN_INIT: POST /usr/lib/openvpn-plugin-auth-pam.so '[/usr/lib/openvpn-plugin-auth-pam.so] [openvpn]' intercepted=PLUGIN_AUTH_USER_PASS_VERIFY
15:51 ovpn-server1[8257]: Diffie-Hellman initialized with 2048 bit key
15:51 ovpn-server1[8257]: WARNING: Your certificate is not yet valid!
15:51 ovpn-server1[8257]: TUN/TAP device tun21 opened
15:51 ovpn-server1[8257]: TUN/TAP TX queue length set to 1000
15:51 ovpn-server1[8257]: /usr/sbin/ip link set dev tun21 up mtu 1500
15:51 kernel: ADDRCONF(NETDEV_CHANGE): tun21: link becomes ready
15:52 ovpn-server1[8257]: /usr/sbin/ip addr add dev tun21 10.8.0.1/24 broadcast 10.8.0.255
15:52 ovpn-server1[8257]: Could not determine IPv4/IPv6 protocol. Using AF_INET6
15:52 ovpn-server1[8257]: Socket Buffers: R=[122880->122880] S=[122880->122880]
15:52 ovpn-server1[8257]: setsockopt(IPV6_V6ONLY=0)
15:52 ovpn-server1[8257]: UDPv6 link local (bound): [AF_INET6][undef]:1979
15:52 ovpn-server1[8257]: UDPv6 link remote: [AF_UNSPEC]
15:52 ovpn-server1[8257]: MULTI: multi_init called, r=256 v=256
15:52 ovpn-server1[8257]: IFCONFIG POOL: base=10.8.0.2 size=252, ipv6=0
15:52 ovpn-server1[8257]: Initialization Sequence Completed
15:53 root: Waiting 10 seconds for VPN...
16:06 WAN(0)_Connection: Ethernet link down.
16:06 DualWAN: skip single wan wan_led_control - WANRED off
16:07 root: Waiting 10 seconds for VPN...
16:31 rc_service: wanduck 385:notify_rc restart_wan_if 0
16:31 pppd[654]: Hangup (SIGHUP)
16:31 pppd[654]: Terminating on signal 15
16:31 pppd[654]: Connect time 11.2 minutes.
16:31 pppd[654]: Sent 234865 bytes, received 278355 bytes.
16:31 lldpd[563]: removal request for address of 10.0.0.1%14, but no knowledge of it
16:32 dnsmasq[446]: read_ _etc_hosts - 5 addresses
16:32 dnsmasq[446]: read_ _etc_hosts.dnsmasq - 2 addresses
16:32 pppd[654]: Terminating on signal 15
16:33 root: Waiting 10 seconds for VPN...
16:33 lldpd[563]: removal request for address of 169.254.169.238%7, but no knowledge of it
16:33 kernel: device eth0 left promiscuous mode
16:33 kernel: br0: port 1(vlan1) entering forwarding state
16:33 kernel: device eth0 entered promiscuous mode
16:33 kernel: br0: topology change detected, propagating
16:33 kernel: br0: port 1(vlan1) entering forwarding state
16:33 kernel: br0: port 1(vlan1) entering forwarding state
16:35 wan: [wan0_hwaddr] == [34:97:F6:22:99:00]
16:35 pppd[8581]: Plugin rp-pppoe.so loaded.
16:35 pppd[8581]: RP-PPPoE plugin version 3.11 compiled against pppd 2.4.7
16:36 pppd[8583]: pppd 2.4.7 started by root, uid 0
16:37 root: Waiting 10 seconds for VPN...
16:37 rc_service: wanduck 385:notify_rc restart_wan_if 1
16:37 kernel: cdc_ether 1-1:1.0: eth3: kevent 12 may have been dropped
16:39 dnsmasq[446]: read _etc_hosts - 5 addresses
16:39 dnsmasq[446]: read _etc_hosts.dnsmasq - 2 addresses
16:40 custom_script: Running /jffs/scripts/wan-start (args: 1)
16:40 rc_service: udhcpc 8656:notify_rc start_firewall
16:40 dnsmasq[446]: read _etc_hosts - 5 addresses
16:40 dnsmasq[446]: read _etc_hosts.dnsmasq - 2 addresses
16:41 wan: finish adding multi routes
16:41 rc_service: udhcpc 8656:notify_rc stop_vpnserver1
16:41 rc_service: waitting "start_firewall" via udhcpc ...
16:41 nat: apply nat rules (/tmp/nat_rules_eth3_eth3)
16:41 custom_script: Running /jffs/scripts/nat-start
16:41 root: firewall Applying nat-start rules
16:42 custom_script: Running /jffs/scripts/firewall-start (args: eth3)
16:42 (IPSET_Block._sh): 8761 v3.05 © 2016-2017 Martineau, Dynamic IPSET Blacklist banning request.....
16:43 rc_service: udhcpc 8656:notify_rc stop_ntpd
16:43 rc_service: waitting "stop_vpnserver1" via udhcpc ...
16:43 root: Waiting 10 seconds for VPN...
16:43 ovpn-server1[8257]: event_wait : Interrupted system call (code=4)
16:43 ovpn-server1[8257]: Closing TUN/TAP interface
16:43 ovpn-server1[8257]: /usr/sbin/ip addr del dev tun21 10.8.0.1/24
16:43 lldpd[563]: removal request for address of 10.8.0.1%17, but no knowledge of it
16:44 ovpn-server1[8257]: PLUGIN_CLOSE: /usr/lib/openvpn-plugin-auth-pam.so
16:44 ovpn-server1[8257]: SIGTERM[hard,] received, process exiting
16:44 (IPSET_Block._sh): 8761 IPSETs: 'Blacklist/Whitelist' created EMPTY..... [init ]
16:45 rc_service: udhcpc 8656:notify_rc start_ntpd
16:45 rc_service: waitting "stop_ntpd" via udhcpc ...
16:45 ntpd: Stopped ntpd
16:46 (IPSET_Block._sh): 8761 Dynamic IPSET Blacklist banning enabled.
16:46 ntpd: Started ntpd
16:46 rc_service: udhcpc 8656:notify_rc stop_upnp
16:46 rc_service: udhcpc 8656:notify_rc start_upnp
16:46 rc_service: waitting "stop_upnp" via udhcpc ...
16:48 miniupnpd[8977]: HTTP listening on port 56063
16:48 miniupnpd[8977]: Listening for NAT-PMP/PCP traffic on port 5351
16:48 root: Waiting 10 seconds for VPN...
16:49 WAN(1)_Connection: WAN was restored.
16:49 dnsmasq[446]: read _etc_hosts - 5 addresses
16:49 dnsmasq[446]: read _etc_hosts.dnsmasq - 2 addresses
16:49 (IPSET_Block._sh): 8761 Summary Blacklist: 0 Successful blocks! ( 0 IPs currently banned - 0 added )
16:50 (HackerrPorts._sh): 9023 v2.03 Hackerr Port attacks Report.....
16:50 (HackerrPorts._sh): 9023 Hackerr report created '/tmp/HackerrReport.txt' - Statistics: Total Unique Ports attacked: 1 (out of 32 attempts) tracked using SYSLOG , May 5 12:14 - May 5 16:50
16:51 kernel: IDPfw: Exit IDPfw
16:51 kernel: mod epilog takes 0 jiffies
16:51 kernel: IDPfw: Exit IDPfw
16:52 kernel: Exit chrdev /dev/idpfw with major 191
16:52 kernel: Exit chrdev /dev/detector with major 190
16:52 kernel: Init chrdev /dev/detector with major 190
16:52 kernel: tdts: tcp_conn_max = 8000
16:52 kernel: tdts: tcp_conn_timeout = 300 sec
16:53 root: Waiting 10 seconds for VPN...
16:58 rc_service: zcip 9286:notify_rc start_firewall
16:58 dnsmasq[446]: read _etc_hosts - 5 addresses
16:58 dnsmasq[446]: read _etc_hosts.dnsmasq - 2 addresses
16:58 zcip_client: configured 169.254.169.238
16:59 miniupnpd[8977]: shutting down MiniUPnPd
17:00 root: Waiting 10 seconds for VPN...
17:00 nat: apply nat rules (/tmp/nat_rules_eth3_eth3)
17:00 custom_script: Running /jffs/scripts/nat-start
17:00 root: firewall Applying nat-start rules
17:01 custom_script: Running /jffs/scripts/firewall-start (args: eth3)
17:01 miniupnpd[9343]: HTTP listening on port 59229
17:01 miniupnpd[9343]: Listening for NAT-PMP/PCP traffic on port 5351
17:03 (IPSET_Block._sh): 9410 v3.05 © 2016-2017 Martineau, Dynamic IPSET Blacklist banning request.....
17:03 root: Waiting 10 seconds for VPN...
17:04 (IPSET_Block._sh): 9410 IPSETs: 'Blacklist/Whitelist' created EMPTY..... [init ]
17:04 (IPSET_Block._sh): 9410 Dynamic IPSET Blacklist banning enabled.
17:05 (IPSET_Block._sh): 9410 Summary Blacklist: 0 Successful blocks! ( 0 IPs currently banned - 0 added )
17:05 (HackerrPorts._sh): 9575 v2.03 Hackerr Port attacks Report.....
17:05 (HackerrPorts._sh): 9575 Hackerr report created '/tmp/HackerrReport.txt' - Statistics: Total Unique Ports attacked: 1 (out of 32 attempts) tracked using SYSLOG , May 5 12:14 - May 5 17:05
17:06 kernel: SHN Release Version: 2.0.1 d32a874
17:06 kernel: UDB Core Version: 0.2.18 r3508378
17:06 kernel: Init chrdev /dev/idpfw with major 191
17:06 kernel: IDPfw: IDPfw is ready
17:06 kernel: sizeof forward pkt param = 192
17:06 BWDPI: fun bitmap = 7f
17:09 rc_service: udhcpc 8656:notify_rc start_firewall
17:10 miniupnpd[9343]: shutting down MiniUPnPd
17:10 root: Waiting 10 seconds for VPN...
17:11 pppd[8583]: Timeout waiting for PADO packets
17:11 nat: apply nat rules (/tmp/nat_rules_eth3_eth3)
17:11 custom_script: Running /jffs/scripts/nat-start
17:11 root: firewall Applying nat-start rules
17:11 custom_script: Running /jffs/scripts/firewall-start (args: eth3)
17:11 miniupnpd[9964]: HTTP listening on port 38913
17:11 miniupnpd[9964]: Listening for NAT-PMP/PCP traffic on port 5351

 

[amplatfus]

Hi,

I tried another thing. I did a factory reset and update to latest ASUS Firmware. 3.0.0.4.384_45717. The only thing I set up was Failover Dual WAN. Same result. I am connected on USB, I have WAN IP for USB and DNS, I have ping in both, but no internet.

I contacted local Asus support team.
If I will succeed, I will update here.

I suspect incompatibility between USB Dongle and AC88U. But somehow is working because as you can see in screenshot uploaded here, I have connection and ping.

Thank you!

 

[L&LD]

Hi,

I tried another thing. I did a factory reset and update to latest ASUS Firmware. 3.0.0.4.384_45717.
Thank you!

What order did you do this?

 

[amplatfus]

I did a factory reset when I was on RMerlin v384.11_2. I flashed FW Asus 3.0.0.4.384_45717. I did again a factory reset with initialize all the settings, and clear all the data log for AiProtection, Traffic Analyzer, and Web History checked.

Then reboot and complete the wizard.
Thank you.

 

[L&LD]

I did a factory reset when I was on RMerlin v384.11_2. I flashed FW Asus 3.0.0.4.384_45717. I did again a factory reset with initialize all the settings, and clear all the data log for AiProtection, Traffic Analyzer, and Web History checked.

Then reboot and complete the wizard.
Thank you.

Seems like you have done all you can. The only thing I might try further is reflashing the firmware that is already installed after the factory reset and the 'Initialize all settings...' box is checked. Followed by a WPS NVRAM erase procedure.

If anything, I would be testing this on the RMerlin firmware (maybe even the Alpha 2 that is available, if you have time to kill testing various versions) rather than the stock Asus firmware.

 

[amplatfus]

Seems like you have done all you can. The only thing I might try further is reflashing the firmware that is already installed after the factory reset and the 'Initialize all settings...' box is checked. Followed by a WPS NVRAM erase procedure.

If anything, I would be testing this on the RMerlin firmware (maybe even the Alpha 2 that is available, if you have time to kill testing various versions) rather than the stock Asus firmware.

Thank you for posts.
But what do you think about this?
Please, can be done something similar in my case?
https://superuser.com/questions/1122670/how-to-connect-lan-to-wan-with-routing

Thank you!

 

[L&LD]

Thank you for posts.
But what do you think about this?
Please, can be done something similar in my case?
https://superuser.com/questions/1122670/how-to-connect-lan-to-wan-with-routing

Thank you!

Someone else will have to reply here, no ideas from me if this is possible with your situation.

 

[amplatfus]

Hi,

Just a short update: The IP and DNS are from USB Dongle. The stick is not connecting to the network. SIM is not recognized. I tried with other SIM, same issue. So is not related to Router.

I will update later if I fix the Dongle.
Edit1: The dongle is faulty!
Edit2: Internet works with other Dongle, but without failback to the WAN when connection is back on 380.70.
Edit3: All works fine after 1st restart.

All the best!