Can't have wlan vlans with dsa, single lan port

Hi everyone. The issue I have is quite specific and the few resources I found online didn't help.

I have a single lan port device (a Fritz repeater) with openwrt 23.05.5 which is working as a dumb ap with wwan (basically using another wifi network as uplink). This repeater is quite powerful, with lots of RAM for what I need and I can't complain.

I have connected a proxmox node to the single lan port and that works well too. Now I'd like to have a separate vlan, tag 10, to which I can connect lxc containers and wireless devices.

What works: lan is the name of the port. I can create an 802.1q device based on lan with vlan tag 10, called lan.10. Then I can create a static address interface based on lan.10 and setup DHCP. In proxmox, if I set nics to use tag 10 for any lxc container, the container successfully get an IP and connectivity is good.

What doesn't work: creating a new wifi ap and using the interface mentioned before doesn't work. tcpdump shows no wifi traffic on the vlan interface. Creating a bridge with lan.10 doesn't work either, the bridge can't be activated even with ip set link up.

What doesn't work is actually much more than this, I have tried so many thing in the past 2 days but with no luck.

Can anyone help me?

With DSA it goes like
br-lan
br-lan.10
br-lan.7

And then select all tagged on the only port.

Thanks. I tried adding 10 to br-lan under vlan filtering but that doesn't work. I need to wait for the changes to be reverted because the connectivity goes down.

When I create a new bridge and add the vlans under filtering and then I create an interface for br-lan2.10 (for instance) I get Error: Network device is not present

I do directly edit conf files and reboot, but somebody may have pure recipe how to do it from LuCI.

Is this lan port on a dsa switch? I'm confused if it's a single port device but it has a switch? Can you please link in table of hardware or git commit for support?

Do you have a serial connection? Else I would suggest creating a wifi network on a separate bridge to manage moving over to vlans?

Usually with the AP's I have they are actual full ethernet devices rather than DSA devices. Your two options are a bridge with vlan filtering. Or make an 802.1q device per vlan and then a bridge per vlan.

For my AP's which aren't DSA:
eth0 is native and has no bridge attached
eth0.y' not bridged used for tagged management eth0.x is bridged withbr-vlanxand thatbr-vlanx` is what I have the wifi hooked up to.

I'll have to find one or two of the forum posts I've done with luci and uci to describe how to do it. I think there's a recently updated wiki article on making a guest network with dsa and/or with a separate bridge though?

Is your intent to use this device to connect to an upstream network wirelessly and then use that connection to provide ethernet connectivity?

1 Like