Hi all,
I have finished setting up a Belkin RT3200 as an access point and also managed to tag multiple SSIDs with their corresponding VLANs. Everything seems to work for now, so I will just describe it here and I would really appreciate it, if you guys could confirm whether the configuration looks correct.
- Flashed the UBI image (29-06-2021) from here
- Configured RT3200 as an access point (followed this guide: AccessPoint)
- Bridged WAN port with the other LAN ports
- Connected Opnsense firewall to the WAN port on RT3200
- My setup and SSIDs are as follows:
- 3 VLANs: VLAN 50 - private LAN, VLAN 60 - IoT, VLAN 70 - guest LAN
- One 2.4 GHz and 5 GHz linked to private LAN, another 2.4 GHz to IoT and a 5 GHz to the guest LAN
/etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
ula_prefix 'fd27:70fa:5c1d::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
list ports 'wan'
option ipv6 '0'
option stp '1'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option ipaddr '172.31.10.2'
option gateway '172.31.10.1'
list dns '172.31.10.1'
For VLAN tagging, I am using scripts stored in /etc/hotplug.d/
/etc/hotplug.d/iface/21-lan
#!/bin/sh
echo "IFACE: INTERFACE: $INTERFACE, DEVICE: $DEVICE, ACTION: $ACTION" >> /tmp/bridgeInit.log
[ $INTERFACE = lan -a $ACTION = ifup ] || exit 0
# enable VLAN filtering
ip link set dev br-lan type bridge vlan_filtering 1
# clear out vlan 1
bridge v del dev lan1 vid 1
bridge v del dev lan2 vid 1
bridge v del dev lan3 vid 1
bridge v del dev lan4 vid 1
bridge v del dev wan vid 1
bridge v del dev br-lan self vid 1
# set vlans wan
bridge v add dev wan vid 50
bridge v add dev wan vid 60
bridge v add dev wan vid 70
# set vlans lan1
bridge v add dev lan1 vid 50 pvid untagged
# set vlans lan2
bridge v add dev lan2 vid 50 pvid untagged
# set vlans lan3
bridge v add dev lan3 vid 50 pvid untagged
# set vlans lan4
bridge v add dev lan4 vid 50 pvid untagged
# set vlans cpu port
bridge v add dev br-lan self vid 50 pvid untagged
bridge v add dev br-lan self vid 60
bridge v add dev br-lan self vid 70
/etc/hotplug.d/net/21-wlan
#!/bin/sh
echo "NET: INTERFACE: $INTERFACE, DEVICE: $DEVICE, ACTION: $ACTION" >> /tmp/bridgeInit.log
if [ $ACTION = add ]; then
# check for wlan0
if [ $INTERFACE = wlan0 ]; then
# clear out vlan 1
bridge v del dev wlan0 vid 1
# wait for a short time
sleep 1
# set vlans wlan0
bridge v add dev wlan0 vid 50 pvid untagged
fi
# check for wlan1
if [ $INTERFACE = wlan1 ]; then
# clear out vlan 1
bridge v del dev wlan1 vid 1
# wait for a short time
sleep 1
# set vlans wlan1
bridge v add dev wlan1 vid 50 pvid untagged
fi
# check for wlan0-1
if [ $INTERFACE = wlan0-1 ]; then
# clear out vlan 1
bridge v del dev wlan0-1 vid 1
# set vlans wlan0-1
bridge v add dev wlan0-1 vid 60 pvid untagged
fi
# check for wlan1-1
if [ $INTERFACE = wlan1-1 ]; then
# clear out vlan 1
bridge v del dev wlan1-1 vid 1
# set vlans wlan1-1
bridge v add dev wlan1-1 vid 70 pvid untagged
fi
fi
exit 0
The scripts have been made executable and have also added them to /etc/sysupgrade.conf, so that they will not be deleted during sysupgrade.
With this configuration, when running bridge v after a reboot, I see the following output.
port vlan-id
lan1 50 PVID Egress Untagged
lan2 50 PVID Egress Untagged
lan3 50 PVID Egress Untagged
lan4 50 PVID Egress Untagged
wan 50
60
70
br-lan 50 PVID Egress Untagged
60
70
wlan0 50 PVID Egress Untagged
wlan1 50 PVID Egress Untagged
wlan0-1 60 PVID Egress Untagged
wlan1-1 70 PVID Egress Untagged
What do you guys think? Did I miss anything?