Configuring VLAN on OpenWrt Managed Switch and AP

[Borromini]

I've got the EAP615-Wall as well and just set up a guest network. Find my annotated /etc/config/network below. I have shared a script that does some basic VLAN setup that should get you going (should have popped up in your forum search...):

Basic DSA VLAN setup script

It took me a bit of reading up to set up VLANs on DSA, so I thought i'd share a little script I whipped up to make things easier. The scope is intentionally limited: it just handles the VLAN side of things. That being said, in my experience it's the most complex part of setting up e.g. a guest network. What this script does: Set up a default VLAN if undefined, and migrate your LAN interface to the new device (br-lan.1 or switch.1). The latter is crucial, since not doing so would render your d…

Network configuration

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option packet_steering '1'

# Default bridge device which includes normally all ports.
config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan0'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'

# Your LAN needs to point to the VLAN 1 bridge explicitly: br-lan.1, once you start setting
# VLANs explicitly.
config interface 'lan'
	option proto 'static'
	option ip6assign '60'
	option ipaddr '10.0.0.12/24'
	option dns '10.0.0.1'
	option gateway '10.0.0.1'
	option device 'br-lan.1'

config interface 'lan6'
	option proto 'dhcpv6'
	option reqprefix 'no'
	option device '@lan'
	option ifname '@lan'

# Guest network interface using the fancy 'guest' name instead of br-lan.20.
config interface 'guest'
	option proto 'static'
	option ipaddr '10.0.20.12/24'
	option device 'guest'

# VLAN bridge with VLAN 1, untagged. Lan0 is shared between VLANs,
# hence the PVID is set since VID 1 is the default VLAN.
config bridge-vlan 'lan_vlan'
	option device 'br-lan'
	option vlan '1'
	list ports 'lan0:u*'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'

# VLAN bridge with VLAN 10, tagged. Lan0 is shared between VLANs, so it
# needs to be tagged.
config bridge-vlan 'lan_vlan'
	option device 'br-lan'
	option vlan '10'
	list ports 'lan0:t'

@a1ftp I'm afraid I should add this is how it's supposed to be, especially the second bridge VLAN, since you'll be bridging the wireless to it AFAIK, but that's not what's working for me for the guest network, in fact was is working is ugly. I have an OpenWrt switch between the EAP615 and my OpenWrt router, and only setting lan0:u* at the config device level makes the guest network function .