One port three interfaces on EAP225 Outdoor

Installing and Using OpenWrt
1

Hi everybody,

I have a EAP225 Outdoor with only one ethernet port and a Openwrt fresh instalI, but I need two different wifi names with different ip address and DHCP servers as a LAN for clients, and my one ethernet port as WAN.

The OpenWrt fresh install only have a LAN interface without WAN so I cant figured how I will do the things.

Can you help me?

Thanks a lot

2

You can pipe as many vlans you want over wifi link using gretap tunnels.

3

Thanks a lot for your answer, but I dont want use vlans, if possible I want use interfaces with the proper netowrk config.

Is it possible an how to do?

4

What is upstream of your EAP225?

5

Does not matter, you need some way to distinguish ports on switch. Just that you sont see vlans with dsa.

6

My EAP225 Outdoor is connected to my ISP router (I cant config or change), I want simple config with 2 different wifi networks each with is DHCP server and IP address, so simple.

I do the same with others routers that have two or more ethernet ports very simple.

7

So if the ISP router is upstream, the next bit of key information is how you have the EAP225 configured. Is it setup as a basic bridged AP, or is it routing?

8

I have a Openwrt new fresh install, I can see is configured as a router, but only see LAN interface, no WAN, I suppose is becouse is a new hardware supported by OpenWRT

9

Thanks... this is useful information.

Next question before we get to the main config...
Do you want this EAP225 to extend the ISP network as a bridged AP, or do you want everything behind it to be a different network (routed and firewalled)? This affects the initial setup and thus also the follow-on for the additional networks.

10

It doesn't have a WAN because the default config is focused on being an access point. There is no technical reason why it can't work as a router.

I would create two new interfaces and firewall zones. Set each interface to a static IP in a different subnet and enabled DHCP. You can then put the Wifi SSID's in the proper interfaces.

11

thanks a lot for your help, I want use my EAP225 as a router no AP or repeater, in others words, the internet come from the ethernet port and the clientes devices conect with wifi ( two different wifi names, each with different address and DHCP server)

12

yes I know, so I ask for change that

I try to do so, thanks a lot

13

Alright... one more key question -- is your plan to have multiple networks behind the EAP225? Such as a trusted lan, guest, and iot networks, for example? And if so, will the guest and iot networks be wifi only, or will they require ethernet, too?

Meanwhile, the start of the config is really simple...

We're going to remove a port from br-lan to assign as a wan. You can use any port, but let's say it's lan1. Remove that from the bridge, then create the following new interface:

config interface 'wan'
	option device 'lan1'
	option proto 'dhcp'

You might need to change the lan IP of the EAP225, too... if the existing ISP network is using the 192.168.1.0/24 subnet, you must change your EAP225. For example, you could make the EAP225's lan address 192.168.51.1.

14

No, I dont want more networks behind, only wifi devices like cellophones and laptops, no IOT.

I try your direcctions, thanks a lot

15

Ok... so if you only want a single network behind the EAP225, then what I've described will get you there. No other changes required.

16

First start up a wifi AP on lan (or two, one on each band if you want) and use it to log into the router by wifi. Then you can add wan (and wan6, if your ISP supports IPv6) networks and move eth0 out of br-lan to be wan/wan6. Plug a cable from your modem to the power adapter and then out of the power adapter to the EAP225. Be careful not to swap the ports which would send power toward the modem and likely result in hardware damage.

This should then offer basic routing to the Internet which is the default configuration for models with more than one Ethernet port. You can then add additional lan-like networks with stricter firewall rules for guests or IoTs. The same instructions apply as for a standard router with multiple ports.