OPENWRT · 802.11S · PROTOCOL GUIDE

MESH NETWORK
SETUP

DISTRIBUTED NODE CONFIGURATION v2.0
INTERNET
→
MESH-1 · 192.168.1.1
←
PC
↓
MESH-2 · 192.168.1.2
PHASE 01
INITIAL NODE CONFIGURATION
NODE · 01
Configure mesh-1 · 192.168.1.1
connect

Connect PC LAN port → Router LAN1 port.

set hostname

Navigate to System → System → Hostname and enter mesh-1, then Save & Apply.

Hostname config
set ip address

Navigate to Network → Interfaces → LAN → Edit and set IPv4 address to 192.168.1.1, then Save & Apply.

IP config
NODE · 02
Configure mesh-2 · 192.168.1.2
connect

Disconnect Router 1. Connect PC LAN → Router 2 LAN1 port.

set hostname

Navigate to System → System → Hostname and enter mesh-2, then Save & Apply.

Hostname mesh-2
configure static ip via ssh
sh
ssh root@192.168.1.1
sh
uci set network.lan.ipaddr='192.168.1.2'
uci set network.lan.netmask='255.255.255.0'
uci set network.lan.gateway='192.168.1.1'
uci set network.lan.dns='192.168.1.1'
uci commit network
/etc/init.d/network restart
⚠
The SSH session may freeze or show unexpected output. Wait 5 seconds, then forcibly exit with Ctrl+C or close the terminal.
PHASE 02
PHYSICAL CONNECTION SETUP
SYS · 01
Rewire the Nodes

Disconnect all cables. Reconnect in this configuration:

topology
PC LAN       → mesh-1 LAN1
mesh-1 LAN2  → mesh-2 LAN1

This gives simultaneous access to both nodes without cable swapping:

access
mesh-1  →  http://192.168.1.1
mesh-2  →  http://192.168.1.2
PHASE 03
INTERNET CONNECTION
NET · 01
Configure PPPoE on mesh-1

Configure PPPoE on mesh-1 only per your ISP requirements.

Navigate to Network → Interfaces → Add new interface and follow your ISP's PPPoE configuration.

PPPoE setup
PHASE 04
SYSTEM UPDATES & WPAD
UPD · 01
Update Both Nodes

Run this on each node. Open separate terminals for mesh-1 and mesh-2.

▸ MESH-1 · 192.168.1.1

Step 1 — update & reboot

Step 2 — install wpad-openssl & reboot

▸ MESH-2 · 192.168.1.2

Step 1 — update & reboot

Step 2 — install wpad-openssl & reboot

step 1 — update & remove old wpad
sh · run on each node
opkg update && opkg list-upgradable | cut -f 1 -d ' ' | xargs -r opkg upgrade && opkg remove wpad* && reboot
step 2 — install wpad-openssl (after reboot)
sh · run on each node
opkg install wpad-openssl && reboot
🔧 troubleshoot — ssl verification error
⚡
If you hit SSL verification errors, your system clock is probably wrong. Fix it first.
sh
ntpd -q -p 0.openwrt.pool.ntp.org -p 1.openwrt.pool.ntp.org
/etc/init.d/sysntpd enable
/etc/init.d/sysntpd restart
opkg update --no-check-certificate
opkg install ca-bundle ca-certificates --no-check-certificate

After installing certificates, retry the normal update process.

PHASE 05
WIRELESS MESH CONFIGURATION
RF · 01
Configure 5GHz Mesh Interface

Navigate to Network → Wireless on both routers. Configure the 5GHz radio for 802.11s mesh.

⚠
Both nodes must have identical 5GHz wireless settings — and I mean EVERYTHING. Mismatched config is the #1 reason mesh fails to establish. Double-check every field.
Wireless mesh config 1 Wireless mesh config 2 Wireless mesh config 3
PHASE 06
NETWORK OPTIMIZATION
OPT · 01
Disable IPv6 ULA & Configure RPS · Both Nodes

Navigate to Network → Interfaces → Global network options

Set IPv6 ULA-Prefix → leave blank. Set Steering flows (RPS) → 128. Save & Apply.

RPS config
OPT · 02
Disable DHCP Server · mesh-2 Only

Navigate to Network → Interfaces → LAN → Edit → DHCP Server → General Setup and check Ignore interface. Save & Apply.

DHCP disable
OPT · 03
Disable Unnecessary Services · mesh-2 Only

Navigate to System → Startup and disable: dnsmasq, odhcpd, and optionally firewall.

Startup services
or via ssh
sh · mesh-2
ssh root@192.168.1.2

/etc/init.d/dnsmasq disable && /etc/init.d/dnsmasq stop
/etc/init.d/firewall disable && /etc/init.d/firewall stop
/etc/init.d/odhcpd disable  && /etc/init.d/odhcpd stop
PHASE 07
FIX CLIENT IP DISPLAY ON MESH-2
FIX · 01
ARP Table Population
💡
mesh-2 won't show client IPs in Network → Wireless because it's a dumb AP with no DHCP. The ARP table never populates. Solution: periodically probe the subnet with fping.
install fping · mesh-2 only
sh
ssh root@192.168.1.2
opkg update && opkg install fping
create host discovery script
ℹ
Adjust 192.168.1.0/24 if your subnet is different.
sh
cat > /usr/bin/learn-hosts.sh <<'EOF'
#!/bin/sh
# Populate ARP table so LuCI shows IPv4s
fping -a -q -g 192.168.1.0/24 -r 0 -t 200 2>/dev/null
EOF
chmod +x /usr/bin/learn-hosts.sh
test the script
sh
/usr/bin/learn-hosts.sh
ip neigh | grep 192.168.1.
✓
You should see a list of active hosts. If you do, the script works.
schedule every 5 minutes via cron
sh
echo "*/5 * * * * /usr/bin/learn-hosts.sh >/dev/null 2>&1" >> /etc/crontabs/root
/etc/init.d/cron restart

After a few minutes, LuCI on mesh-2 will display IPv4 addresses for connected clients.

🌐

MESH NETWORK ONLINE

Both nodes are configured, optimized, and broadcasting. Your distributed mesh is operational. Go touch grass — you've earned it.

◈ Discord — potatosips ◈ Facebook — potatosips