No Internet access when VLAN functionality enabled

[9871741]

This fixed my problem:

[solved] VLANs on ipq40xx alternative config (for Fritzbox 4040)

Jeff, I think our definitions of "straightforward" are quite different and you're way ahead of me. Intent is: two internal firewall zones "lan" and "guest" "lan" firewall zone includes 3 ports of the switch and the "home" SSID on both wifi bands "guest" zone includes 1 port and the "guest" SSID traffic is allowed from guest to wan, from lan to guest but not from guest to lan This way I can segregate a fussy wired client in the guest segment when needed. I gave your settings a…

I edited my network config to this:

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd33:a93b:4b37::/48'

config interface 'lan'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option stp '1'
        option device 'br-lan'
        option ipaddr '192.168.1.1'

config interface 'wan'
        option device 'eth1'
        option proto 'dhcp'

config interface 'wan6'
        option device 'eth1'
        option proto 'dhcpv6'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '101'
        option vid '101'
        option ports '0t 1'
        option description 'LAN'

config switch_vlan
        option device 'switch0'
        option vlan '102'
        option vid '102'
        option ports '0t 2 3t'
        option description 'IOT'

config interface 'guest'
        option proto 'static'
        option ipaddr '192.168.3.1'
        option netmask '255.255.255.0'
        option stp '1'
        option device 'br-guest'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0.101'

config device
        option name 'br-guest'
        option type 'bridge'
        list ports 'eth0.103'

config switch_vlan
        option device 'switch0'
        option vlan '103'
        option ports '0t 4'
        option vid '103'
        option description 'GUEST'

config device
        option type 'bridge'
        option name 'br-iot'
        list ports 'eth0.102'

config interface 'IOT'
        option proto 'static'
        option ipaddr '192.168.2.1'
        option netmask '255.255.255.0'
        option device 'br-iot'

do you see any possibilities for improvement?