Hello. I setup 2 wireless subnets and 1 wire subnet without using vlan tag. Not sure if it is the right way to do this. everything works except I can't get 192.168.2.0 ping 192.168.5.0 or vice versa. Did I miss setting somewhere or just adding static route/vlan tag will do the trick? Thank you.
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br-lan
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan1
192.168.5.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan0
I only see one problem with that routing table, you should use ip route instead of route which is obsolete.
I assume devices in both wlans use the router as default gateway, then no additional routes are needed. But you need to configure the firewall. Add the wlans to different zones and allow forwarding between the zones, or add them to the same zone and allow forward between different networks on the zone.
192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.1
192.168.2.0/24 dev wlan1 proto kernel scope link src 192.168.2.1
192.168.5.0/24 dev wlan0 proto kernel scope link src 192.168.5.1
I prefer this way "add them to the same zone and allow forward between different networks on the zone" which I think I already did. Maybe missing check box somewhere. like change foward to accept? Thank you