Posted: Sun Sep 10, 2017 18:49 Post subject: Shortcut Forwarding Engine 3200ACM specific
Hi all,
Been trying to get SFE to work since it's inception. I have a friend who has it working great on his 1900acs, he is the one who programmed my 3200acm so he knows what he is doing unlike me.
Let me start off by saying i reset to factory defaults running the 9/9/17 build.
I entered in all my settings by hand, and did not restore.
I would enter a setting or preference then hit save and apply to have it take effect, with SFE.
At each step i would see if i had internet connection with sfe turned on.
Sfe seems to work up until i add openvpn into the mix. With it off it works great. Any suggestions?
Posted: Fri Oct 27, 2017 2:13 Post subject: Same issue with SFE and the Linksys WRT3200ACM.
Same issues here. I have an account with PIA and when I establish the VPN tunnel I can't browse. Firmware: DD-WRT v3.0-r33607 std (10/25/17). Ping and DNS resolution works. When I disable SFE all is well.
FIRMWARE:OpenWrt SNAPSHOT r8217-2cc821e / LuCI Master (git-18.276.41146-280dd33) MODEM:ARRIS SURFBoard SB8200 ROUTER:Linksys WRT32X USB NAS:Western Digital BLACK 1 TB Hardrive + Startech USB 3.0 External SATA III Enclosure
Joined: 05 Apr 2017 Posts: 981 Location: Louisiana, USA
Posted: Fri Oct 27, 2017 4:53 Post subject:
Adamcarter wrote:
Ahhhh so the reason it never worked on my 3200 is due to policy based routing.
I hope brainslayer adds the fix to his next 3200acm revision.
I believe it was @flakie who first discovered it a while back.
If memory serves I think I was trying to help him to troubleshoot an OpenVPN problem.
I wasn't any help, but later he figured it out.
FIRMWARE:OpenWrt SNAPSHOT r8217-2cc821e / LuCI Master (git-18.276.41146-280dd33) MODEM:ARRIS SURFBoard SB8200 ROUTER:Linksys WRT32X USB NAS:Western Digital BLACK 1 TB Hardrive + Startech USB 3.0 External SATA III Enclosure
FIRMWARE:OpenWrt SNAPSHOT r8217-2cc821e / LuCI Master (git-18.276.41146-280dd33) MODEM:ARRIS SURFBoard SB8200 ROUTER:Linksys WRT32X USB NAS:Western Digital BLACK 1 TB Hardrive + Startech USB 3.0 External SATA III Enclosure
I am on build v3.0-r31899 std. I have attached png's of that tab. I don't have a section for optional settings
Edit. I've updated to a newer firmware and now have SFE diabled so my PBR rules are working. I'm having some difficulty adding a kill switch, but i'll work it out some how.
Posted: Mon Sep 24, 2018 11:22 Post subject: What's the status of PBR and SFE working together?
WRT1200AC v2 on build v3.0-r36698 std (08/22/1... Internet traffic stops when SFE is enabled while there's a PBR entry... It seems there was a patch around 11 months ago, but efforts to get it into a build seem to have fizzled... Basically, I added a PBR rule for my primary LAN, 192.168.1.0/25 (edit: router is on .254, so is excluded from the policy).
I have a VAP to which my ROKU stick connects on a different subnet, 192.168.2.0/24... With this setup, I avoid issues with Amazon, Netflix, etc. blocking VPN since the Roku isn't using the OpenVPN tunnel.
I would love to get this to setup to work when I have SFE enabled, but right now all internet traffic stops.
Last edited by EthanM77 on Wed Sep 26, 2018 11:23; edited 1 time in total
Is SFE even needed on this higher end WRT hardware? I have no performance issues with it off on my WRT1200AC. AFAIK it was put in to boost the performance of lower end hardware like the old classic WRT54G series routers.
SFE disabled for now, so PBR will work... I've read some anecdotal posts that the SFE is particularly useful for 400+ mb/s internet, speeds which weren't common when the WRT54G series was everywhere. So, the issue is that there's an option for SFE, which is enabled by default, and an option for PBR... If they are incompatible, one should be disabled if the other is enabled, just to prevent folks like me from wasting an afternoon trying to get something to work that will not. Maybe it's just not a big deal. But, I'll probably do some speed tests anyway with SFE off and on (PBR off), to see if there is any difference.
... Internet traffic stops when SFE is enabled while there's a PBR entry... It seems there was a patch around 11 months ago, but efforts to get it into a build seem to have fizzled... Basically, I added a PBR rule for my primary LAN, 192.168.1.0/25 (edit: router is on .254, so is excluded from the policy).