Multiple usb-ethernet raspberry pi 4 [Solved]

Installing and Using OpenWrt
1

Hello new here i have a weird problem getting dhcp server working on a second or thirt subnet

i have a raspberry pi 4 working with 3 usb ethernet adapters, when i bridge them and put them in subnet of lan there is no problem everything works beautiful

when i try to put them in different subnets
vlan1
lan
192.168.1.1

vlan2
gaming
192.168.2.1

or connect them directly to the adapter eth1 and eth2,eth3
only the port/s connected to the lan subnet get a ip adress

i have setup the lanbridge and did the vlan filtering

2

Let's take a look at the complete config:

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button:
grafik
Remember to redact passwords, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
3

wireless.txt

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'platform/soc/fe300000.mmcnr/mmc_host/mmc1/mmc1:0001/mmc1:0001:1'
	option channel '36'
	option band '5g'
	option htmode 'VHT80'
	option disabled '1'

config wifi-iface 'default_radio0'
	option device 'radio0'
	option network 'lan'
	option mode 'ap'
	option ssid 'OpenWrt'
	option encryption 'none'
4

firewall.txt

config defaults
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option synflood_protect '1'
	option flow_offloading '1'

config zone
	option name 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	list network 'lan'

config zone
	option name 'wan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'REJECT'
	option masq '1'
	option mtu_fix '1'
	list network 'wan'
	list network 'wan6'

config forwarding
	option src 'lan'
	option dest 'wan'

config rule
	option name 'Allow-DHCP-Renew'
	option src 'wan'
	option proto 'udp'
	option dest_port '68'
	option target 'ACCEPT'
	option family 'ipv4'

config rule
	option name 'Allow-Ping'
	option src 'wan'
	option proto 'icmp'
	option icmp_type 'echo-request'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-IGMP'
	option src 'wan'
	option proto 'igmp'
	option family 'ipv4'
	option target 'ACCEPT'

config rule
	option name 'Allow-DHCPv6'
	option src 'wan'
	option proto 'udp'
	option dest_port '546'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-MLD'
	option src 'wan'
	option proto 'icmp'
	option src_ip 'fe80::/10'
	list icmp_type '130/0'
	list icmp_type '131/0'
	list icmp_type '132/0'
	list icmp_type '143/0'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-ICMPv6-Input'
	option src 'wan'
	option proto 'icmp'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'
	list icmp_type 'bad-header'
	list icmp_type 'destination-unreachable'
	list icmp_type 'echo-reply'
	list icmp_type 'echo-request'
	list icmp_type 'neighbour-advertisement'
	list icmp_type 'neighbour-solicitation'
	list icmp_type 'packet-too-big'
	list icmp_type 'router-advertisement'
	list icmp_type 'router-solicitation'
	list icmp_type 'time-exceeded'
	list icmp_type 'unknown-header-type'

config rule
	option name 'Allow-ICMPv6-Forward'
	option src 'wan'
	option dest '*'
	option proto 'icmp'
	list icmp_type 'echo-request'
	list icmp_type 'echo-reply'
	list icmp_type 'destination-unreachable'
	list icmp_type 'packet-too-big'
	list icmp_type 'time-exceeded'
	list icmp_type 'bad-header'
	list icmp_type 'unknown-header-type'
	option limit '1000/sec'
	option family 'ipv6'
	option target 'ACCEPT'

config rule
	option name 'Allow-IPSec-ESP'
	option src 'wan'
	option dest '*'
	option proto 'esp'
	option target 'ACCEPT'

config rule
	option name 'Allow-ISAKMP'
	option src 'wan'
	option dest '*'
	option dest_port '500'
	option proto 'udp'
	option target 'ACCEPT'

config zone
	option name 'THELAN'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'

config zone
	option name 'GAMING'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'
	list network 'GAMING'

config forwarding
	option src 'THELAN'
	option dest 'wan'

config forwarding
	option src 'GAMING'
	option dest 'wan'
5

netwerk.txt

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd58:b617:63ea::/48'
	option packet_steering '1'

config interface 'lan'
	option device 'br-lan.8'
	option proto 'static'
	option ipaddr '192.168.9.1'
	option netmask '255.255.255.0'
	option ip6assign '64'

config interface 'wan'
	option proto 'dhcp'
	option device 'eth0'

config device
	option name 'eth2'
	option ipv6 '0'

config device
	option name 'eth1'
	option ipv6 '0'

config device
	option name 'eth3'
	option ipv6 '0'

config device
	option type 'bridge'
	option name 'br-lan'
	list ports 'eth1'
	list ports 'eth2'
	list ports 'eth3'
	option bridge_empty '1'
	option mtu '1500'
	option txqueuelen '1000'
	option ipv6 '0'
	option macaddr 'E4:5F:01:4E:FC:72'

config interface 'GAMING'
	option proto 'static'
	option device 'br-lan.7'
	option ipaddr '192.168.8.1'
	option netmask '255.255.255.0'

config device
	option type '8021q'
	option ifname 'br-lan'
	option vid '7'
	option name 'br-lan.7'

config device
	option type '8021q'
	option ifname 'br-lan'
	option vid '8'
	option name 'br-lan.8'

config bridge-vlan
	option device 'br-lan'
	option vlan '7'
	list ports 'eth1'
	list ports 'eth2'
	list ports 'eth3:t'

config bridge-vlan
	option device 'br-lan'
	option vlan '8'
	list ports 'eth1:t'
	list ports 'eth2:t'
	list ports 'eth3'
6

dhcp.txt

config dnsmasq
	option domainneeded '1'
	option localise_queries '1'
	option rebind_protection '1'
	option rebind_localhost '1'
	option local '/lan/'
	option domain 'lan'
	option expandhosts '1'
	option cachesize '1000'
	option readethers '1'
	option leasefile '/tmp/dhcp.leases'
	option resolvfile '/tmp/resolv.conf.d/resolv.conf.auto'
	option localservice '1'
	option ednspacket_max '1232'
	option authoritative '1'

config dhcp 'lan'
	option interface 'lan'
	option start '100'
	option limit '150'
	option leasetime '12h'

config dhcp 'wan'
	option interface 'wan'
	option ignore '1'

config odhcpd 'odhcpd'
	option maindhcp '0'
	option leasefile '/tmp/hosts/odhcpd'
	option leasetrigger '/usr/sbin/odhcpd-update'
	option loglevel '4'

config dhcp 'GAMING'
	option interface 'GAMING'
	option start '100'
	option limit '150'
	option leasetime '12h'
7

I see two issues:

  1. You have set the gaming firewall to reject input, but you have not added rules to allow DHCP and DNS.

  2. You've got a whole bunch of VLANs... do you have a managed switch or other VLAN aware equipment?

8

i feel so stupid i did this a hundred times , TANK YOU SO MUTS

it was the firewall settings :grimacing:
this took me a whole day

and yes i have multiple switches and thus vlans
running fiber and trying to host servers and so

this was a experiment to see how it behaves compared to my already older linksys wrt3200ac in performance

again sorry and thank you

9

Glad that helped.

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks! :slight_smile:

10

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.