Multi psk only on one device

[xize]

Hello!,

So I'm playing a little with the newer wifi-station and wifi-vlan as discussed here and also the referenced links in that thread.

now this setup works, but how would I go about only using the vlan on one wireless device and not share them on all?, to explain better: it now acts as a giant switch but I only wish to untag one ssid device wlan1 which is the 5ghz network.

this is what I have in my configuration:

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/soc/18000000.wifi'
	option channel '4'
	option band '2g'
	option htmode 'HE40'
	option country 'NL'
	option cell_density '0'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'wlan1'
	option mode 'ap'
	option ssid 'Mochabin'
	option encryption 'psk2+ccmp'
	option key '<private>'
	option ifname 'wlan0'
	option ieee80211w '1'
	option wpa_disable_eapol_key_retries '1'
	option ieee80211r '1'
	option mobility_domain '27F4'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'platform/soc/18000000.wifi+1'
	option channel 'auto'
	option band '5g'
	option htmode 'HE160'
	option channels '36,40,44,48,52,56,60,64'
	option country 'NL'
	option cell_density '0'

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'wlan0'
	option mode 'ap'
	option ssid 'Mochabin-5G'
	option encryption 'psk2+ccmp'
#	option encryption 'sae'
        option key '<private>'
	option ifname 'wlan1'
	option ieee80211w '1'
	option wpa_disable_eapol_key_retries '1'
	option ieee80211r '1'
	option mobility_domain '27F3'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
# option dynamic_vlan '1'
# option vlan_bridge 'br-ayaneo'
# option wpa_psk_file '/etc/hostapd.wpa_psk'
# option vlan_file '/etc/hostapd.vlan'

config wifi-iface 'guest2g'
	option device 'radio0'
	option network 'zigbee'
	option mode 'ap'
	option ifname 'wlan0-1'
	option encryption 'psk2+ccmp'
	option key '<private>'
	option ssid 'Mochabin-smart'
	option guest '1'
	option ieee80211w '1'
	option wpa_disable_eapol_key_retries '1'
	option ieee80211r '1'
	option mobility_domain '27FF'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'

config wifi-iface 'guest5g'
	option device 'radio1'
	option network 'guest'
	option mode 'ap'
	option ifname 'wlan1-1'
	option encryption 'psk2'
	option key '<private>'
	option ssid 'Mochabin-5G-Guest'
	option guest '1'
	option disabled '1'
	option wds '1'
	option isolate '0'

config wifi-station
        option key '<private>'
        option vid '90'

config wifi-vlan
        option name 'aya90'
        option network 'ayaneo'
        option vid '90'

I wish I could specify a device for:

config wifi-station
        option key '<private>'
        option vid '90'

would that be possible?

[grauerfuchs]

It certainly is possible. all you need to do is add an 'option iface' clause for the wifi-station and wifi-vlan sections, and it will appropriately limit to the specified wifi-iface section. An example of this can be found at

Individual per-passphrase Wifi VLANs using wpa_psk_file (no RADIUS required)

The wifi-vlan and wifi-station config sections referenced work in addition to the rest of the configuration sections. Consider it an add-on/bolt-on feature. By default, the sections refer to any and all wifi networks present on the device. If you want to limit it to a specific ssid (and in your case you do), you also need to add a line to the sections: option iface 'wifi-ifacename' The iface referenced is the named wifi-iface. For instance, 'wifinet0' is usually the first luci-created wifi in…

[xize]

Thanks , I will look into this.