small update...
@david-collett I must say I did see that video and could not get what I want out of it. But you trigged my attention on this youtuber and found an other video:
that has the situation I have: no switch
So now I am going to take my MK and see what I can do with it.
@david-collett
By curiosity , you said you order one router like mine. Is it to flash openwrt or to use it with routerboard?
that's common with all devices that use DSA - have you read these https://openwrt.org/docs/guide-user/network/dsa/start
No I did not. But eventually I did figured that out!
Not a lot of documentation about how to in DSA on openwrt.
FYI, I don't own this router yet, but I've ordered one, please let me know how you go!
I managed to create the VLAN 300.
It works. However, things gets more complex... I have SFP port I want to use as a WAN. But port 1 is WAN. Once I configure SFP as WAN, it goes well. However, it seems I cant eliminate the WAN from port 1. When I do that, SFP looses connection.
I think that port1 (WAN) have to stay even if not really used as WAN. And cant use it as a LAN port 1.
I am still working on it.
One thing I noticed is that this router uses each port individually. I am not yet sure but probably is easier to separate LAN networks per LAN PORT.
I will play a little more with it.
If you know how to use SFP only as WAN and adding PORT1 to LAN, I would love to know how.
My searches gave no results on that.
Yes, I chose it for the hardware to run OpenWRT from the start. I don't have an opinion on routerOS having never used it.
This thread may also assist:
Yes, I figure as well that port1 is axctually WAN port.
All the try out I have done to delete it resulted in cutting all WAN connection even if I use fiber optic straight in SFP.
I hope more documentation will come up soon.
Makes little use to have port1 WAN not used as WAN when SFP is used as WAN.
I have made no new tests since last I wrote.
Will try again.
If I have to live with 4 LAN port, be it! I can use switches when needed.
About routerboard.. is actually a pretty solid OS. But I find it still too complex to keep using it. It requires more knowledge than I have. And I dont want to expose my network by making accidental mistakes in its maze of options and settings.
Hi,
My HexS turned up and I did some experimenting. It looks like your desired configuration is certainly possible.
What you have to do is (In network/interfaces, devices tab):
I can confirm that this results in being served a lan ip on port 1. What I cant confirm is that the SFP work, but I think it will, it has a different MAC.
I think much of the confusion here is due to the name of that port ("wan"), and it cannot be changed. The names (wan, lan2, lan3 etc) are in fact hard-coded in the driver which you can see in the patch:
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=74438d54198d928d68c695da15b35aebfbecf27b
Hope this helps,
Dave
Hi,
interesting. I did have SFP working. so I assume that with your addition to the config, it shall work.
I will test it soon.
As you have the same router, you noticed it also has a POE in and out.
Do you see how that would work?
I dont see any settings for POE at all. (or i cant find it)
Yet, I could make use of it.
There aren't any PoE settings in the luci gui as far as I know. I have successfully powered my hex from a ubiquity branded 48v PoE injector plugged into the wan ethernet port. To force passive PoE out on lan5 port, you can issue the following commands in an ssh terminal:
uci set system.poe_passthrough.value=1
uci commit
Then reboot the router, and you should see the activity LED for port 5 turn red. I have not tested actually powering anything from port 5 yet though as I don't have any other PoE equipment. I have a ubiquity unify 6-lite access point on its way that I am hoping to power this way.
Dave
Thanks.
I will try to spend some more time soon and try this option.
I have 2 mikrotik ap as well that I want to turn into openwrt. In that case I will create a cabled mesh wifi in the house
will keep posting...
Hi, I am here to report ...
I managed to create the VLANs I needed.
So:
for internet and TV using my ISP, I need VLAN 300 for wan.
I successfully set SFP as a WAN and as you suggested, I moved WAN to LAN. All works fine.
HOWEVER, after having all my lan setup with a second DUMB AP upstairs, my connection speed dropped drastically.
I have a 1GB internet connection using ISP.
With this new setup AND without any VPN yet setup, I a lot of speed!
I though was my dumb AP that killed it, but than I put back a stupid fritz router I had before as a second AP... my speed remain the same... pretty bad.
I thought that using the SFP directly in the mikrotik router I would have an increase of speed. Basically bypassing the media converter I got from ISP (fiber-optic to rj45).
I am quite disappointed now after so many hours of test and tryout.
With the ISP router I could get a lot better speed!
QUESTIONS that remain open:
Is OPENWRT somehow limiting?
@david-collett
did you try the mikrotik router live already?
what is your take on speed and performances?
This is speedtest results:
I'm afraid I can't really help you there, as my internet connection is only 50Mbit!
I received my Proscend PS180-T VDSL2 SFP two days ago, and it was been working flawlessly, so yes, the Hex-S is now in service and working well, but of course limited by my connection to 50Mbit.
I assume your speedtest was from a PC plugged straight into one of the lan ports on the hex?
There may be performance tweaks available, or you may have reached the performance limit of the device. Hopefully some others (here or in mikrotik forums) can help you.
Dave
I will keep hoping and working on it.
Any experience on software offload?
if I make no mistakes, there is an option for it.
Hi everybody , how you are make success sfp as a wan please
I try too thanks
@david-collett @kattivius I have a sfp 180t vdsl2, could you post your wan and lan change ... indeed the original port 1 is wan and it must change to lan, and the new wan will be the sfp, but I can not make this change, I followed the thread but I did not understand sorry... a picture of the configuration will be clearer for me.)
The SFP cage is just another port on the MT7621 internal DSA switch, so you'd change the wan device from "wan" to "sfp". If the ISP requires tagged packets, add the VLAN number the same as you would on the Ethernet port.
Having removed the Ethernet port named "wan" from usage as WAN, you can use it in a different way such as placing it into the LAN bridge as an additional LAN port. That is entirely optional. If you don't reassign it to some network, it will be idle and won't pass any data to a cable plugged into it.
Thank you for your explanations...
By default in Luci I have 3 interface : br-lan p2,p3,P4,p5,p6,p7,p8. WAN P1 and WAN6 P1...
if I replace WAN P1 by WAN SFP and ditto for WAN6... it doesn't change anything... or I didn't understand your explanation 
For my ISP I just need to add a dhcp60 option no need for vlan marking
I never needed to use the (ethernet) wan port for anything else, so I 'm still using the default bridged config:
config device
option name 'br-wan'
option type 'bridge'
list ports 'wan'
list ports 'sfp'
config device
option name 'wan'
option macaddr '08:55:31:78:1b:35'
config device
option name 'sfp'
option macaddr '08:55:31:78:1b:35'
The critical part of getting the vdsl sfp to work was disabling auto-negotiation, which I did by adding the folllowing command to /etc/rc.local:
ethtool -s sfp speed 1000 duplex full autoneg off
This requires ethtool to be installed by opkg, which is a bit of a neusance if you don't have internet.
Yes we are the same problem 
the sfp don't check t
But my isp use vlan 832
I write br-wan.832 ?