Architecture advice with multiple vlan setup

Installing and Using OpenWrt
1

i am currently aiming to redo my home network that is all running on dumb aps and one main router to this but im unable to do it cause anytime i touch vlans i break the network. AI chatbots could not help me either

[ISP 1 /60]      [ISP 2 /64]
             │              │
             └──────┬───────┘
                    ▼
            [  MAIN ROUTER  ] ──────────► [ Proxmox Subnet ]
                    │
        ┌───────────┴───────────┐
        │                       │
 [Archer C6 v2]          [Mi 4A Gigabit]
 (Utility Hub)           (In Separate Room)
        │                       │
  ┌─────┼─────┐                 └─ [ Room Network ]
  │     │     │
 (2.4G) (5G)  │
  IOT  Work   │
              │
        ┌─────┴─────┐
        ▼           ▼
    [Home AP]   [Garden/Guest AP]
     (via LAN)      (via LAN)
2

Can you provide your network configuration?

I'm not sure how we can assist with merely a brief description and diagram (with no VLANs noted). Additionally, you want to mention how you wish to divide the network by using VLANs.

Also, you may want to explain how the 2 ISP connections currently operate.

You may wish to mention what steps you undertook.

3

My current network configuration is on main router i have two isps connected to wan and lan1
lan2 connects to archer c6 v2(dumb ap) on wan and another dumb ap connects to it lan3 and another on lan1. The Garden/Guest AP connects to the archer c6 on lan2. Archer c6 v2 has two SSIDs one for IoT and one for Work.
My current Aim is to make 6 networks
home network (VLAN10)
Proxmox (VLAN20)
Separate bedroom network(VLAN30)
Guest/Garden network(VLAN40)
IoT network(VLAN50)
work network(VLAN60)

I dont use the 2nd ISP as of yet but im looking to use it as a failover if i can.

1 Like
4

And...

  • What device?
  • What version of OpenWrt?
  • What steps did you undertake previously?
  • Network configuration?
5

Main router is jidu6701 (OpenWrt 25.12-SNAPSHOT r32295+490-c25265953b / LuCI openwrt-25.12 branch 26.075.80566~6efa8ae)
I tried enabling vlan bridge filtering but i couldnt reach the archer c6 v2 after that
Its a pretty flat network configuration one main router with all dumb aps

6

what advantage are you hoping to gain from using vlans ? Is there any point in your network where you need multiple networks carried over a single or multiple ports ? I guess I can see an advantage of perhaps for admin purposes you can have a port on the main router that is able to directly access every network.

1 Like
7

it will help me isolate devices based on their use case. currently i have one network with whole lot of devices

8

Answering the second part of the user's question is needed to assist you in creating VLANs:

Also, this:

We need to see the current config.

Also, I'm having a very difficult time locating this device under the Table of Hardware.

9

I have over 20 proxmox lxcs each with their own ips and ill add even more so i was thinking of cleaning up. Even IoT devices are a 30 mostly from Tuya.

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        list ipaddr '127.0.0.1/8'

config globals 'globals'
        option dhcp_default_duid '00045ba1f75ad5fe44908f58f60f89aae6f0'
        option ula_prefix 'fd66:f872:2118::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'lan4'

config device
        option name 'lan2'
        option macaddr '98:87:4c:fc:dd:31'

config device
        option name 'lan3'
        option macaddr '98:87:4c:fc:dd:31'

config device
        option name 'lan4'
        option macaddr '98:87:4c:fc:dd:31'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ip6assign '60'
        list ipaddr '10.0.0.1/24'
        option multipath 'off'

config device
        option name 'wan'
        option macaddr 'DC:A6:32:C0:31:A6'
        option mtu6 '1480'

config interface 'wan'
        option proto 'pppoe'
        option username ''
        option password ''
        option ipv6 'auto'
        option norelease '1'
        option multipath 'off'
        option device 'lan1'

config interface 'wan6'
        option proto 'dhcpv6'
        option reqaddress 'try'
        option reqprefix 'auto'
        option norelease '1'
        option multipath 'off'
        option device 'lan1'

config device
        option name 'lan1'

Support for this device has not been merged yet but work is done. It is basically a gl.inet flint 2

1 Like