Diagnostic on network failure.

Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions
Author Message
jcdole
DD-WRT Novice


Joined: 13 Jun 2015
Posts: 49
Location: South-West France

PostPosted: Mon Apr 20, 2026 17:14    Post subject: Diagnostic on network failure. Reply with quote
This my network hardware :
Fiber is connected to my isp box ( bouygues telecom )
One eth connection goes directly to a TV Decoder
A second one goes to an old netgear router FVS318G V2
From this router one eth connection goes to a netgear router R6300 V2 with a DD-WRT firmware v3.0-r47495 std (09/28/21) which is updated time to time.
All computers are connected to that router.

This configuration are like this for a very long times.
There is one computer running only windows 10.
There is two others configured in dual-boot windows-linux
Up to begin of 2026 windows was version 10.

All linux is leap 15.5, 15.6, 16.0 from Opensuse.
Linux is not concerned.

My problem arise when I migrate from to windows 11 25H2
The migration by itself does not give errors.

The problem concern the connection to different Microsoft servers.
1) for activation
2) Microsoft Update
3) Microsoft Store

I ask for help.
3 Microsoft technician from their office, reinstall windows but connection to Microsoft servers continue to failed.
The forth technician failed also but ask me to connect the computers directly to the ISP box.
Then miraculously every thing return to normal :
1) for activation
2) for Microsoft Update
3) for Microsoft Store

The ISP box is updated silently by the ISP company
The last update of the dd-wrt firmware is from 09/28/2021
The netgear router FVS318G V2 was not updated recently and use ssl 1.1 only.

It seems that Microsoft make changes in 25H2

Does somebody has an idea on what happens.
I cannot leave a cable just to use it for update times to times.

Than you for helping or comments.

_________________
Netgear R6300v2 DD-WRT v3.0-r64533 std (04/20/26) - Linux Opensuse Leap 15.2/15.6/16.0 - Win 11
Sponsor
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17417
Location: Texas, USA

PostPosted: Mon Apr 20, 2026 23:53    Post subject: Reply with quote
I am wondering if I need to try bypassing DD-WRT on one of my PCs as well. But then again I am considering Leap 16, Tumbleweed, Fedora Workstation and Fedora KDE. My laptop upgraded to 25H2 just fine behind the ISP router. If switching which router I am connected to changes things, then perhaps it's something to look into. I am using DD-WRT v3.0-r64210 std (03/31/26), so this could be something Microsoft did, not necessarily DD-WRT. Of course, as I type this and check if I can use Wi-Fi, I must've had it disabled when I upgraded to Win11 or a recent manual update b0rked it. Then again, the CPU is unsupported, so it may be a contributing factor as well.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
jcdole
DD-WRT Novice


Joined: 13 Jun 2015
Posts: 49
Location: South-West France

PostPosted: Tue Apr 21, 2026 10:17    Post subject: Reply with quote
kernel-panic69 wrote:
Then again, the CPU is unsupported, so it may be a contributing factor as well.

And the conclusion is ???

All my cpu are supported.

_________________
Netgear R6300v2 DD-WRT v3.0-r64533 std (04/20/26) - Linux Opensuse Leap 15.2/15.6/16.0 - Win 11
Fried Chicken
DD-WRT User


Joined: 12 Jun 2019
Posts: 236
Location: Texas

PostPosted: Wed Apr 22, 2026 2:03    Post subject: Reply with quote
I don't see any DD-WRT specific reason this should fail;
not being able to reach microsoft servers sounds like a DNS problem?
What happens if you try to ping them directly, even from the other computers that are working?

Maybe a firewall setting that changed. This is a real mystery.

_________________
Google is Spyware
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17417
Location: Texas, USA

PostPosted: Wed Apr 22, 2026 2:43    Post subject: Reply with quote
The conlclusion is my case was probably an excercise in futility or a bad hacky install. I will have to unplug ethernet from the PC, connect my laptop to see if it breaks those things or not - as well as connect to upstream ISP router and see if updates magically start working or not. If so, it's just a matter of inconvenience. But I have no idea what in DD-WRT would've broken it.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
jcdole
DD-WRT Novice


Joined: 13 Jun 2015
Posts: 49
Location: South-West France

PostPosted: Thu Apr 30, 2026 18:05    Post subject: Reply with quote
I have by-pass the R6300 V2 by connecting one computer directly to router B which is connected to the ISP box. I have use a long Ethernet cable to make the test.

I can connect to MS Store and download a game.

So the problem is in the DD-WRT configuration.
I have upgraded ther firmware to DD-WRT v3.0-r64533 std.

Any help is very welcome.

_________________
Netgear R6300v2 DD-WRT v3.0-r64533 std (04/20/26) - Linux Opensuse Leap 15.2/15.6/16.0 - Win 11
jcdole
DD-WRT Novice


Joined: 13 Jun 2015
Posts: 49
Location: South-West France

PostPosted: Thu Apr 30, 2026 18:15    Post subject: Reply with quote
Fried Chicken wrote:
I don't see any DD-WRT specific reason this should fail;
not being able to reach microsoft servers sounds like a DNS problem?
What happens if you try to ping them directly, even from the other computers that are working?

Maybe a firewall setting that changed. This is a real mystery.


Yes I can connect but cannot udate windows or download from MS Store

user_install@16-0-G815LM-JC:~> openssl s_client -connect 132.196.74.18:443 -tls1_2
CONNECTED(00000003)
Can't use SSL_get_servername
depth=3 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
verify return:1
depth=2 C = US, O = Microsoft Corporation, CN = Microsoft TLS RSA Root G2
verify return:1
depth=1 C = US, O = Microsoft Corporation, CN = Microsoft TLS G2 RSA CA OCSP 16
verify return:1
depth=0 C = US, ST = WA, L = Redmond, O = Microsoft Corporation, CN = redir.update.microsoft.com
verify return:1
---
Certificate chain
0 s:C = US, ST = WA, L = Redmond, O = Microsoft Corporation, CN = redir.update.microsoft.com
i:C = US, O = Microsoft Corporation, CN = Microsoft TLS G2 RSA CA OCSP 16
a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA384
v:NotBefore: Apr 13 20:43:54 2026 GMT; NotAfter: Oct 10 20:43:54 2026 GMT
1 s:C = US, O = Microsoft Corporation, CN = Microsoft TLS G2 RSA CA OCSP 16
i:C = US, O = Microsoft Corporation, CN = Microsoft TLS RSA Root G2
a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA384
v:NotBefore: Aug 1 20:03:02 2025 GMT; NotAfter: Jun 3 20:03:02 2029 GMT
2 s:C = US, O = Microsoft Corporation, CN = Microsoft TLS RSA Root G2
i:C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G2
a:PKEY: rsaEncryption, 4096 (bit); sigalg: RSA-SHA384
v:NotBefore: May 21 00:00:00 2025 GMT; NotAfter: Jun 19 23:59:59 2029 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=C = US, ST = WA, L = Redmond, O = Microsoft Corporation, CN = redir.update.microsoft.com
issuer=C = US, O = Microsoft Corporation, CN = Microsoft TLS G2 RSA CA OCSP 16
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA
Server Temp Key: ECDH, secp384r1, 384 bits
---
SSL handshake has read 6401 bytes and written 346 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 91370000131776B8A95B7F0F8F4364F76A759BD8D6E271420E86AEE5A470F355
Session-ID-ctx:
Master-Key: 0B4235A5B29FD0A04FF213F55A5065C3EE7021EF5768315D36DF3AA283C41CCD1F763606CD0D9C7F5FCB5603A58825B7
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1777572749
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: yes
---

_________________
Netgear R6300v2 DD-WRT v3.0-r64533 std (04/20/26) - Linux Opensuse Leap 15.2/15.6/16.0 - Win 11
kernel-panic69
DD-WRT Guru


Joined: 08 May 2018
Posts: 17417
Location: Texas, USA

PostPosted: Thu Apr 30, 2026 19:00    Post subject: Reply with quote
My issue is "service cannot be reached"... but again, the PC in question is getting an SSD to replace the mechanical drive and migrated to Linux, so if this is something that needs attention, need specific diagnostics as to why it's "broken"; also it may be "broken by design"; and 64600 is the current release.
_________________
"Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT
Pogo - A minimal level of ability is expected and needed...
RSS feed for DD-WRT releases (2025)
RSS feed for DD-WRT releases (2024)
RSS feed for DD-WRT releases (2023)

----------------------
Linux User #377467 counter.li.org / linuxcounter.net
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 7391
Location: UK, London, just across the river..

PostPosted: Sat May 02, 2026 6:35    Post subject: Reply with quote
In my case...
Win 11 Home with top specs i9, nvd 4080 laptop...bloody Windows 'shait'...self downgraded to an old version and doesn't want to move into 25h2 or whatever and stopped receiving updates at all.., Hours lost, dealing with the issue, tons of threads read, discussions and ect. outcome...
Win11 doesn't like VPN, nor Encrypted DNS, nor any of their telemetry websites blocked, neither likes offline account, so yes they clearly want to spy on you badly, they know any move you do, any of your passwords and ect. i did a fk all of those telemetry sites blocked, as well did a military grade setup to restrict this and that, wireshark all their activities...until i tailored it to my needs, nicely working and keeping up with updates (no Vpn or EncryptedDNS when doing those)...and... they screwed it, just to tell me now, you'd need to reset it and start all over.. And nope offline account is not supported anymore...and we do need that telemetry constantly on, otherwise no updates for you...well i had to go back to Win10pro and gradually completely move to Linux, moreover after and update Windows just screwed my Linux partition on my Win10 and it was a big mess too..
So, yes Linux is not that stable, nor 100 % safer, but at least no spying shit...and you have full control, over services, modules, binaries and ect. sadly my Parrot OS broke after moving to k7.xx Echo and it took me a hell of the time to recover it and still not 100% there..and i might just reinstall and start from scratch that Linux, something that doesn't happen on me for a long time...Previously been using Win7 ultimate for a decade+, than moved to Win10 and ever since i touched Win11 i nearly cried twice Razz I Don't blame routers but if certificates are screwed and Openssl too yep you may have troubles...altough im running last builds 64600 atm, my favorite was 62606 and i've OpenWRT on my main ATM until things with DDWRT get back to the moment i want to use it as a main...nope im not happy with OpenWRT at all..it can be a pain in the ass too... Cool Laughing

_________________
Atheros
TP-Link WR1043NDv2 -DD-WRT 66272 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPNCli
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 -OpenWRT Kong 25.12
Netgear XR500 -DD-WRT 66325 GTW/SmDNS-Quic,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT r66345 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x4VLAN,IPset Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 66280 Gateway/SmDNS-Quic,AD-Block,AP Isolation,Firewall,Forced DNS,Vanilla
Dynalink DL-WRX36-DDWRT 66325
Broadcom
Netgear R7000 --DD-WRT 66272 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
jcdole
DD-WRT Novice


Joined: 13 Jun 2015
Posts: 49
Location: South-West France

PostPosted: Sat May 02, 2026 11:38    Post subject: Reply with quote
That does not help me to configure DD-Wrt
_________________
Netgear R6300v2 DD-WRT v3.0-r64533 std (04/20/26) - Linux Opensuse Leap 15.2/15.6/16.0 - Win 11
Alozaros
DD-WRT Guru


Joined: 16 Nov 2015
Posts: 7391
Location: UK, London, just across the river..

PostPosted: Sat May 02, 2026 18:17    Post subject: Reply with quote
jcdole wrote:
That does not help me to configure DD-Wrt


well... do we know any bit of your current configuration yet ??
how do we guess all of it, unless pic of your setup provided, noting could be done...
i mentioned in my long post that Win doesn't like few bits like VPN or Encrypted DNS or some DNS, or some IP's in particular from some specific countries..to be precise..yes 25H2 could be problematic too... Laughing Im still on the old one but still connects to win update and store..sadly not many updates than

_________________
Atheros
TP-Link WR1043NDv2 -DD-WRT 66272 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPNCli
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear R7800 -OpenWRT Kong 25.12
Netgear XR500 -DD-WRT 66325 GTW/SmDNS-Quic,AD-Blk,Forced DNS,AP&Net Isolation,x2VLAN,Vanilla
Netgear R7800 --DD-WRT r66345 Gateway/DNSCryptv2,AD-Block,Forced DNS,AP&Net Isolation,x4VLAN,IPset Firewall,Vanilla,VPN cli
Netgear R9000 --DD-WRT 66280 Gateway/SmDNS-Quic,AD-Block,AP Isolation,Firewall,Forced DNS,Vanilla
Dynalink DL-WRX36-DDWRT 66325
Broadcom
Netgear R7000 --DD-WRT 66272 GTW/DNScrypt-proxy2/AD-Block,IPset Firewall,Forced DNS,x4VLAN,VPN cli
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> General Questions All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum