Quick question, do I miss something if I don't enable VLAN filtering on the LAN-Bridge? OpenWRT is a VM in Proxmox, other hosts connected to OpenWRTs LAN-Bridge (or to be more precise to the VLAN device on the LAN-Bridge: e.g. br-lan.10) and are also VMs in Proxmox. The bridge used in Proxmox is VLAN aware. Other Proxmox VMs get the VLAN tag (e.g. 10) in their config and everything is working fine. The OpenWRT-VM has no physical ports bridged to it.
If you have a single virtual eth port tagged with multiple networks, you don't need a br-lan at all. You can directly attach the port to multiple interfaces with the eth0.X notation, X being a different VLAN number for each one.
It is more conventional to set up multiple untagged virtual ports, one for each network, and configure the hypervisor switch to bridge and/or tag them as needed.
I am not sure if this is the answer to my question.
In Proxmox I make the bridge vlan aware and connect multiple VMs to that one bridge. Then I tag the VMs (but not the router VM). I wouldn't mind doing it like this in OpenWRT too, even if I don't have to.
But do I miss something if I don't enable VLAN filtering or is it basically the same what I do in Proxmox and it is not needed at all in my case.
Back in the days a Linux could not handles vlans. That's why you needed one bridge per vlan.
With a vlan aware bridge, a single bridge device can handle vlan tags.
[quote="mk24, post:2, topic:231654"]
you don't need a br-lan at all
[/quote]I went this route, removed the bridge so I don't have to think about it anymore. Still I wouldn't mind if someone wants to elaborate on it in more detail.