Sorry for the late answer, but there were other trouble …
root@UniFi:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdf7:59bf:9148::/48'
option packet_steering '1'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth0'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ip6assign '60'
option gateway '192.168.11.1'
list ipaddr '192.168.11.54/24'
list dns '192.168.11.1'
list dns '1.1.1.1'
config device
option name 'br-user'
option type 'bridge'
list ports 'eth0.10'
config device
option name 'br-guest'
option type 'bridge'
list ports 'eth0.20'
config device
option name 'br-iot'
option type 'bridge'
list ports 'eth0.30'
config interface 'user'
option device 'br-user'
option proto 'none'
config interface 'guest'
option device 'br-guest'
option proto 'none'
config interface 'iot'
option device 'br-iot'
option proto 'none'
root@UniFi:~# cat /etc/config/wireless
config wifi-device 'radio0'
option type 'mac80211'
option path 'pci0000:00/0000:00:00.0'
option band '5g'
option channel 'auto'
option htmode 'VHT80'
option cell_density '0'
option country 'DE'
config wifi-iface 'default_radio0'
option device 'radio0'
option mode 'ap'
option ssid 'Home-User'
option encryption 'sae-mixed'
option key 'xxxxxxxxxxxxxx'
option ieee80211r '1'
option nasid '4201'
option mobility_domain '19CE'
option ft_over_ds '0'
option wpa_disable_eapol_key_retries '1'
option ocv '0'
option network 'user'
config wifi-device 'radio1'
option type 'mac80211'
option path 'platform/ahb/18100000.wmac'
option band '2g'
option channel 'auto'
option htmode 'HT40'
option cell_density '0'
option country 'DE'
config wifi-iface 'default_radio1'
option device 'radio1'
option mode 'ap'
option ssid 'Home-User'
option encryption 'sae-mixed'
option ieee80211r '1'
option nasid '4201'
option mobility_domain '19CE'
option ft_over_ds '0'
option wpa_disable_eapol_key_retries '1'
option key 'xxxxxxxxxxxxxx'
option ocv '0'
option network 'user'
Actually, I have only one VLAN active to simplify things. I have access to OpenWRT’s UI from my LAN (192.168.11.0/24). AP’s SSID and Key seems to work, but the connected device doesn’t get an IP. On OpenWrt’s SSH console, logread doesn’t show anything.
I’m not sure, how to pinpoint the error for my dumb AP. OPNSense has the VLAN Interface for User (ID=10, Net=192,168.110.0/24). From OpenWrt’s SSH console I’m able to ping the Gateway at OPNsense:
root@UniFi:~# ping 192.168.100.1 -c2
PING 192.168.100.1 (192.168.100.1): 56 data bytes
64 bytes from 192.168.100.1: seq=0 ttl=63 time=15.189 ms
64 bytes from 192.168.100.1: seq=1 ttl=63 time=10.220 ms
--- 192.168.100.1 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 10.220/12.704/15.189 ms
also DNS is working:
root@UniFi:~# ping www.google.com -c2
PING www.google.com (142.251.141.68): 56 data bytes
64 bytes from 142.251.141.68: seq=0 ttl=117 time=30.541 ms
64 bytes from 142.251.141.68: seq=1 ttl=117 time=30.762 ms
--- www.google.com ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 30.541/30.651/30.762 ms
and I’m also able to ping the OpenWrt’s UI from OPNsense:
root@OPNsense:~ # ping -c2 192.168.11.54
PING 192.168.11.54 (192.168.11.54): 56 data bytes
64 bytes from 192.168.11.54: icmp_seq=0 ttl=64 time=0.473 ms
64 bytes from 192.168.11.54: icmp_seq=1 ttl=64 time=0.384 ms
--- 192.168.11.54 ping statistics ---
2 packets transmitted, 2 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.384/0.428/0.473/0.044 ms
DHCP is active on the User interface and is configured equivalently to the LAN - I have a DHCP lease there.
On the managed switch Cisco SG 200-08, which is connected between OPNsense and OpenWrt, I have left all ports set to trunk.
