Netgear WAX214 Access Point Management interface on VLAN Trunk

First, Thank You to the forum for all the great information on how to load OpenWRT onto my access point. It took a little time because the information was spread across several places, but I now have OpenWRT running. (I will post my process for upgrade once I get the configuration working.)

My challenge now is to integrate it back into my network. I have three of these access points that have experienced connectivity drops. (Known issue with the WAX214.) I am hopeful that the new firmware will solve that issue.

Here is my immediate challenge. My network has a VLAN configuration with three VLANs.

An Inside network, VLAN 30 (10.10.10.###),
a DMZ network, VLAN 20 (10.10..0.###), and
an Outside network, VLAN 15 (10.10.5.###).

The trunk line originates from a Netgear PoE switch, and all three VLANs are tagged. When I connect to the Trunk line, there is no connectivity (Ping, SSH, http)

If I connect directly to a port on the DMZ VLAN (VLAN 20), I can access the management interface, ping, and SSH without issue. (10.10.0.52).

Here is my network config file.

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        list ipaddr '127.0.0.1/8'

config globals 'globals'
        option dhcp_default_duid '0004bb529b184a844a7987f4b75043d5673a'
        option ula_prefix 'fd8f:7667:b786::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '10.10.0.52'
        option netmask '255.255.255.0'
        option gateway '10.10.0.1'

config bridge-vlan
        option device 'br-lan'
        option vlan '15'
        list ports 'lan:t'

config bridge-vlan
        option device 'br-lan'
        option vlan '20'
        list ports 'lan:t*'

config bridge-vlan
        option device 'br-lan'
        option vlan '30'
        list ports 'lan:t'

config device
        option name 'lan'

I’m hopeful that I am close. Any assistance is greatly appreciated. Once I have this working, I'll likely need some guidance on setting up the wireless networks and connecting them to the VLANs.

Thanks in advance.

You are close... here's what you need to adjust:

remove the * that is after the t:

delete this (unless there is a MAC address, in which case it's fine to keep it):

change the device for the lan interface to br-lan.20:

Finally, for your other two networks, you need to add unmanaged network interfaces:

config interface 'outside'
        option device 'br-lan.15'
        option proto 'none'

config interface 'inside'
        option device 'br-lan.30'
        option proto 'none'

Reboot and test.

That did the trick. Now up and running. next step is to get the wifi networks working. Thank you for the quick response.

You're welcome.

The unmanaged interfaces are necessary for wifi which is why I advised those. Now you just create your SSIDs and connect them to the appropriate networks.

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks! :slight_smile: