How set up two separate networks using OpenWrt 23.05.0?

[rijn]

Hi, I'm very new and I don't understand a lot about networking further than port forwarding. I apologize for any mistakes. This is my learning experience.

I've looked and found a previous discussion that basically does what I want it to do. From my understanding, it creates two separate LANs, one with 192.168.11.0/24 and one with 192.168.22.0/24. The problem is that the solution uses an older version of OpenWRT and I don't understand how to follow it, especially given the VLAN section which doesn't exist in newer OpenWRT versions.

My requirements are slightly different and I want my topology to look something like this:

The 192.168.1.1/24 network is the default OpenWRT network with the default firewall.

The 10.0.0.1/24 network is a new network that I'd like to create.

It should have access to the internet and I'd like for the networks to not be able to talk to one another.

Thank you for your time.

[andyboeh]

Let's start out with the basics: What device do you have? The image suggests x86? If the latter, what network card(s) do you have?

Basically, you need to remove one port from the br-lan bridge and create a new interface for it with your desired configuration.

[rijn]

Yes, sorry. I got the numbers the wrong way around. I'm using an old computer:

Hostname	OpenWRT
Model	Gigabyte Technology Co., Ltd. B75M-D2V
Architecture	Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Target Platform	x86/64
Firmware Version	OpenWrt 23.05.0 r23497-6637af95aa / LuCI openwrt-23.05 branch git-23.236.53405-fc638c8
Kernel Version	5.15.134

I have this network card. It's a Realtek RTL8125 I believe.

I also have a gigabit port built into my motherboard.

The Realtek RTL8125 has eth0, eth1, eth2, eth3
The built in motherboard port has eth4.

[eduperez]

This is even easier than in the post you linked, since you have five independent ethernet ports, and you do not need to care about internal switches or VLANs. You can just define one to five network interfaces, each one with their parameters, then bridge the ethernet ports to the network interfaces.

[clutch2sft]

I would personally do this with vlans.

Go to network devices and click configure on your bridge device.

Click enable VLAN filtering.

Click add twice and you'll get vlan id 1 and vlan id 2.

For LAN ports 1,2,3 select egress untagged and primary vlan id on vlan id 1

For LAN port 4 select same for vlan id 2.

Change the default lan interface under "interfaces" to use br-lan.1 (vlan 1)

Add another interface for the br-lan.2 with an ip address (or not) in your other subnet. (probably with since you probably what the openwrt to route between the two.

Make sure your pc doing the configration is in port 1,2,3 or the save and apply will timeout and fail.

Ignore the fact that I duplicated the subnet on those images. Fat finger there. Make sure your new interface is 192.168.0.1/24

[mk24]

As @eduperez said, there is no need for VLANs here since the x86 ports are independently connected to the CPU and you are running only one network on each physical port.
What @clutch2sft said would also work. It is unnecessarily complicated at this stage but it does easily migrate to an advanced scenario with tagged VLANs on "trunk" Ethernet cables.

[rijn]

I ended up doing it that way somewhat. I vaguely followed this video tutorial and followed these steps:

1. I created a new Firewall Zone called ServerZone:
   

   

2. I created a Static Address interface:
   

   

3. I enabled DHCP within "DHCP Server" and left it with default settings.

4. I set the Firewall Zone to be ServerZone within the "Firewall Settings".

5. I created a new bridge device called ServerBridge and set eth3 to be the bridge port:
   

   

6. I went back interface and edited the ServerInterface and selected the newly made ServerBridge device:
   

   

I applied the settings and it worked.

Thank you so much for all your help everyone.