I have a couple of Linksys E8450 (UBI) running OpenWrt 22.03.5 connected to an OPNSense box.
They are configured as L2 bridges for multiple 802.1q VLANs using the WAN ports as trunk and dynamic VLAN assignment on the WiFi interfaces via 802.1x (Freeradius, DHCP and IPv6 RA running on the OPNSense box). I also have BSS-FT and Dawn for band steering installed and seemingly working.
I am however getting a lot of messages in my syslog like the ones below, and don't know what to do.
Tue Jul 4 19:54:03 2023 kern.warn kernel: [ 17.416234] net_ratelimit: 586 callbacks suppressed
Tue Jul 4 19:54:03 2023 kern.warn kernel: [ 17.416242] br-lan: received packet on wan with own address as source address (addr:e8:9f:80:d5:22:35, vlan:50)
My config is as such (device is DSA based). Am I making a mistake somewhere?
/etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdef:14f4:6eab::/48'
config device
option name 'br-lan'
option type 'bridge'
option igmp_snooping '1'
config bridge-vlan
option device 'br-lan'
option vlan '5'
list ports 'wan:t*'
config bridge-vlan
option device 'br-lan'
option vlan '10'
list ports 'lan1:u*'
list ports 'lan2:u*'
list ports 'lan3:u*'
list ports 'wan:t'
config bridge-vlan
option device 'br-lan'
option vlan '20'
list ports 'lan4:u*'
list ports 'wan:t'
config bridge-vlan
option device 'br-lan'
option vlan '30'
list ports 'wan:t'
config bridge-vlan
option device 'br-lan'
option vlan '40'
list ports 'wan:t'
config bridge-vlan
option device 'br-lan'
option vlan '50'
list ports 'wan:t'
config interface 'mgmt'
option proto 'static'
option device 'br-lan.5'
option netmask '255.255.255.0'
option gateway '10.0.0.1'
list dns '10.0.0.1'
option delegate '0'
option ipaddr '10.0.0.22'
config interface 'vlan10'
option device 'br-vlan10'
option proto 'none'
config device
option type 'bridge'
option name 'br-vlan10'
list ports 'br-lan.10'
option igmp_snooping '1'
config interface 'vlan20'
option device 'br-vlan20'
option proto 'none'
config device
option type 'bridge'
option name 'br-vlan20'
list ports 'br-lan.20'
option igmp_snooping '1'
config interface 'vlan30'
option device 'br-vlan30'
option proto 'none'
config device
option type 'bridge'
option name 'br-vlan30'
list ports 'br-lan.30'
option igmp_snooping '1'
config interface 'vlan40'
option device 'br-vlan40'
option proto 'none'
config device
option type 'bridge'
option name 'br-vlan40'
list ports 'br-lan.40'
option igmp_snooping '1'
config interface 'vlan50'
option device 'br-vlan50'
option proto 'none'
config device
option type 'bridge'
option name 'br-vlan50'
list ports 'br-lan.50'
option igmp_snooping '1'
/etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'platform/18000000.wmac'
option band '2g'
option htmode 'HT20'
option cell_density '0'
option country 'JP'
option channel '4'
option log_level '1'
config wifi-iface 'default_radio0'
option device 'radio0'
option mode 'ap'
option ssid 'Aftnet'
option time_advertisement '2'
option time_zone 'JST-9'
option wnm_sleep_mode '1'
option wnm_sleep_mode_no_keys '1'
option bss_transition '1'
option proxy_arp '1'
option multicast_to_unicast '1'
option ieee80211k '1'
option ieee80211r '1'
option mobility_domain '4f57'
list r0kh 'E8:9F:80:66:5A:14,E89F80665A14,91542b12b68e0f1fdb8000551c5fbad7'
list r0kh 'E8:9F:80:66:5A:15,E89F80665A15,91542b12b68e0f1fdb8000551c5fbad7'
list r0kh 'E8:9F:80:D5:22:37,E89F80D52237,91542b12b68e0f1fdb8000551c5fbad7'
list r0kh 'E8:9F:80:D5:22:38,E89F80D52238,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:66:5A:14,E8:9F:80:66:5A:14,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:66:5A:15,E8:9F:80:66:5A:15,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:D5:22:37,E8:9F:80:D5:22:37,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:D5:22:38,E8:9F:80:D5:22:38,91542b12b68e0f1fdb8000551c5fbad7'
option reassociation_deadline '20000'
option ft_over_ds '0'
option ieee80211w '1'
option encryption 'wpa2+ccmp'
option auth_server '10.0.0.1'
option auth_secret 'lol'
option ft_psk_generate_local '0'
option dynamic_vlan '2'
option vlan_tagged_interface 'eth0'
option vlan_bridge 'br-vlan'
option vlan_naming '0'
option network 'mgmt'
option nasid 'E89F80D52237'
option r1_key_holder 'E89F80D52237'
config wifi-device 'radio1'
option type 'mac80211'
option path '1a143000.pcie/pci0000:00/0000:00:00.0/0000:01:00.0'
option band '5g'
option htmode 'HE80'
option cell_density '0'
option country 'JP'
option channel '116'
option log_level '1'
config wifi-iface 'default_radio1'
option device 'radio1'
option mode 'ap'
option ssid 'Aftnet'
option time_advertisement '2'
option time_zone 'JST-9'
option wnm_sleep_mode '1'
option wnm_sleep_mode_no_keys '1'
option bss_transition '1'
option proxy_arp '1'
option multicast_to_unicast '1'
option ieee80211k '1'
option ieee80211r '1'
option mobility_domain '4f57'
option nasid 'E89F80D52238'
option r1_key_holder 'E89F80D52238'
list r0kh 'E8:9F:80:66:5A:14,E89F80665A14,91542b12b68e0f1fdb8000551c5fbad7'
list r0kh 'E8:9F:80:66:5A:15,E89F80665A15,91542b12b68e0f1fdb8000551c5fbad7'
list r0kh 'E8:9F:80:D5:22:37,E89F80D52237,91542b12b68e0f1fdb8000551c5fbad7'
list r0kh 'E8:9F:80:D5:22:38,E89F80D52238,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:66:5A:14,E8:9F:80:66:5A:14,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:66:5A:15,E8:9F:80:66:5A:15,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:D5:22:37,E8:9F:80:D5:22:37,91542b12b68e0f1fdb8000551c5fbad7'
list r1kh 'E8:9F:80:D5:22:38,E8:9F:80:D5:22:38,91542b12b68e0f1fdb8000551c5fbad7'
option reassociation_deadline '20000'
option ft_over_ds '0'
option ieee80211w '1'
option encryption 'wpa2+ccmp'
option auth_server '10.0.0.1'
option auth_secret 'lol'
option ft_psk_generate_local '0'
option dynamic_vlan '2'
option vlan_tagged_interface 'eth0'
option vlan_bridge 'br-vlan'
option vlan_naming '0'
option network 'mgmt'
config wifi-iface 'wifinet2'
option device 'radio0'
option mode 'ap'
option ssid 'Aftnet IoT'
option time_advertisement '2'
option time_zone 'JST-9'
option wnm_sleep_mode '1'
option wnm_sleep_mode_no_keys '1'
option bss_transition '1'
option ieee80211k '1'
option key 'password'
option ieee80211r '1'
option ft_over_ds '0'
option ft_psk_generate_local '1'
option ieee80211w '1'
option network 'vlan40'
option proxy_arp '1'
option multicast_to_unicast '1'
option encryption 'psk2+ccmp'




