A R7800 (release 25.12, target ipq806x, DSA qca8k), running as an AP that has multiple SSIDs bridged with several VLANs, shows some strange behaviour with the following setup: interface on bridge as device and that bridge with as its ports a bridge-vlan (which sits obviously itself on a DSA bridge with the physical ports as members).
When the interface is managed (proto=dhcp), Wifi stations connected to the AP on the interface will not acquire an IPv4 config, whereas when the interface is unmanaged (proto=none) a connected WiFi station will receive its IP configuration by DHCP.
Extra information:
The reason for the setup with a managed interface is that some service daemons (e.g. samba4) runs on that interface.
The reason for configuring a bridge between interface and bridge-vlan was both an aesthetic (personal taste) and practical one: the bridge can have a mac address set which allows giving out different static leases to the interfaces (on different VLANs) from the DHCP service on the router (dnsmasq-full on OpenWrt filogic 25.12). This setup worked alright when the AP ran 24.10.
The wan port has been left out of the set of member ports on the underlying DSA bridge to eliminate problems possibly resulting from the (default) setup of its DSA conduit.
Work around:
On a setup where the bridges are absent (i.e. interface with a bridge-vlan as device) it all works well, but without these bridges setting a clientid is needed for each interface with proto dhcp (i.s.o. the mac option on the bridge).
Issue to solve:
A quick grep of the source code did not reveal why the bridge-between-interface-and-bridge-vlan breaks downstream DHCP (when the interface is managed), and would like to understand if this is a bug or a lack of knowledge on my side.
The described stack of config items that blocks DHCP on downstream connected Wifi stations (not checked ethernet connected devices on same bridge-vlan):
config device
option type 'bridge'
option name 'sw1'
option rpfilter 'strict'
list ports ...
config bridge-vlan
option device 'sw1'
option vlan '20'
option local '1'
list ports ...
config device
option type 'bridge'
option name 'br20'
option mac 'aa:bb:cc:dd:ee:ff'
list ports 'sw1.20'
....
config interface 'lan20'
option disabled '0'
option device 'br20'
option proto 'dhcp'
...
Whereas with the bridge not in between interface and bridge-vlan (work around):
This is very over-redacted. Please post the complete output of the following:
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):
Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:
ubus call system board
cat /etc/config/network
cat /etc/config/wireless
This topic is not a request for support - a well working setup is available.
The purpose is to understand why a certain config stack inhibits use of downstream connected WiFi stations. The provided configuration excerpts are meant to illustrate the question, not to distract from the question.
