How to configure VLAN on WAN(eth1) port

sujeetkumar · April 10, 2024, 6:43am

Hi everyone, I've been having trouble setting up VLAN configuration on WAN(eth1) port on a Access Point running OpenWrt 22.03.0, r19685-512e76967f. My goal is to setup VLAN 24 for my AP on WAN port.

please anyone share the VLAN configuration for WAN interface.

thanks in advance

qunvureze · April 10, 2024, 6:50am

In wan interface settings, replace eth1 with eth1.24.

sujeetkumar · April 11, 2024, 4:15am

Hi, i tried this below VLAN configuration but I was not able to make it working, yet!!
Interface eth1.24 is created but ip on this interface is not found

/etc/config/network:

config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'

config switch_vlan
option device 'switch0'
option vlan '1'
option vid '24'
option ports '1t'

config interface 'wan24'
option device 'eth1.24'
option proto 'dhcp'

/etc/config/dhcp:

config dhcp 'wan24'
option interface 'wan24'
option ignore '1'

No any ip is found on vlan interface eth1.24, so please guys help me with this problem.. below is output of ifconfig command -

eth1.24 Link encap:Ethernet HWaddr 00:11:22:33:44:55
inet6 addr: fe80::5731:71bf:fe00:41b0/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:19767 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:6758666 (6.4 MiB)

psherman · April 11, 2024, 5:50am

This is most certainly not going to work as there appears to be no connection to the CPU.

Let's see the default network config file.... from there, we can make this work.

sujeetkumar · April 11, 2024, 11:00am

Hi psherman ...Below is my default configuration for network file

root@OpenWrt:/# cat /etc/config/network 

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd45:9588:f572::/48'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'eth1'
        option proto 'dhcp'

config interface 'wan6'
        option device 'eth1'
        option proto 'dhcpv6'

Its working fine and connection is successful with this default configuration..

please help me to create VLAN on WAN interface !!

thanks in advance

mk24 · April 11, 2024, 11:48am

What is the make / model and chipset? This looks like one of the Atheros 10/100 chips (AR92xx, AR93xx etc) which have eth1 a dedicated CPU port to the external wan port. On those the wan connection does not involve the switch.

psherman · April 11, 2024, 6:29pm

Assuming that you have shared the complete default configuration of your device, it should be really simple. To setup VLAN 24 on the wan (this requires that the upstream connection is already using tagged VLAN 24), just use simple dotted notation like this:

config interface 'wan'
        option device 'eth1.24'
        option proto 'dhcp'

Then restart and your wan will listen on VLAN 24 (tagged) for the connection.

qunvureze · April 11, 2024, 8:56pm

@sujeetkumar Reading your first post again, I noticed that you mention "AP". If this device is actually a dumb AP, then I'm wondeirng if the question isn't actually about setting up the WAN port so that it untags VLAN 24 and is bridged with the WiFi network. If I'm correct, then:

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'
        list ports 'eth1.24'

Next steps:

Remove interfaces wan and wan6.
Disable DHCP on lan interface.
Don't add any switch configs.

sujeetkumar · April 12, 2024, 6:51am

Hii @mk24 ,

Chipset: ipq40xx
Model : AP-DK01.1-C1
OpenWRT Release: OpenWrt 22.03.0 r19685-512e76967

slh · April 12, 2024, 6:55am

Upgrade to 23.05.3 first, which gives you a functional DSA environment, instead of the rather quirky (and outright broken) swconfig drivers present in older releases.

mk24 · April 12, 2024, 1:06pm

Yes, VLANs really did not work on ipq4019 before version 23.

sujeetkumar · April 22, 2024, 9:48am

Hii, @slh @mk24 @frollic

ipq40xx: remove DK01 and DK04 boards

github.com/openwrt/openwrt

ipq40xx: remove DK01 and DK04 boards

openwrt:main ← robimarko:ipq40xx-remove-dk

opened 10:04PM - 11 Aug 23 UTC

robimarko

+136 -389

DK01 and DK04 board support has been in the form of 2 patches that we have been… carrying for a long time. Both of the patches contain weird changes, dont follow any DT syntax, and I honestly doubt they are even valid. DK01 and DK04 also have not been converted to DSA even after a long time and I doubt that anybody in the community even has these boards as they are QCA reference boards are not even obtainable anymore. Since patches for these 2 boards have been just causing us pain when trying to update the kernel to a new major release or even point releases lets remove the support for these boards, and if there are users they can easily be reinstated. As a prerequisite, Teltonika RUTX DTSI was moved to use the SoC DTSI like all other boards in the target.

we could not build firmware to version v23.05.0 or above OpenWrt 23.05.3 image building error

frollic · April 22, 2024, 9:51am

we know, you were given that link by us ...

sujeetkumar · April 22, 2024, 10:00am

Hi

Below is my default /etc/config/network configuration and when we connect SSID with lan interface in /etc/config/wireless, it works fine and wifi connectivity is also successful.

/etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd56:d0b2:9d02::/48'

config device 'device1'
        option name 'br-lan'
        list ports 'eth0'
        option type 'bridge'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'eth1'
        option proto 'dhcp'

config interface 'wan6'
        option device 'eth1'
        option proto 'dhcpv6'

And when we try to add some lines in the bottom of above /etc/config/network to create VLAN as mentioned below..

We are only able to connect my phone with SSID whose network is connected to the 'vlan2' interface.. But not connecting SSID whose network is connected to the 'lan' interface

config bridge-vlan 'bridge_vlan_1'
        option device 'br-lan'
        list ports 'eth0:t'
        option vlan '2'

config interface 'vlan2'
        option device 'br-lan.2'
        option ifname 'vlan2'
        option ipaddr '10.20.30.40'
        option netmask '255.255.255.0'
        option proto 'static'

/etc/config/wireless

config wifi-iface 'default_radio1'
        option device 'radio1'
        option network 'lan'
        option mode 'ap'
        option ssid 'OpenWrt'
        option encryption 'none'

config wifi-iface 'default_radio2'
        option device 'radio1'
        option network 'vlan2'
        option mode 'ap'
        option ssid 'test-vlan'
        option encryption 'none'

And i want both SSID should be work with lan and vlan2 interfaces, so What should we change in our configuration?

please help..

thanks in advance