Hello, I'm trying to build a centralized and manageable system for my home network (integrate and/or isolate my Wi-Fi networks) integrated with my office -> this should, for now, involve the least possible costs, so I'm trying to reuse some cheap equipment that I have, such as my Archer c20 v5.0 and WR840N v4.0 routers.
I have a proxmox running OPNSense and this is my main firewall. My goal is, from OPNSense, to send a Trunk to the Archer c20's WAN (with OpenWRT) and make its 4 LAN ports receive only specific IPs from my VLANs (I'm going to acquire 2 more routers for this purpose). The situation would be as follows:
---> the WAN receives the Trunk with "Master" (10.0.1.1/24) on the LAN1 port, "IOT" (192.168.20.1) on the LAN2 port, "Office Clients" (192.168.30.1) on the LAN3 port and "Office" (192.168.40.1) on the LAN4 port.
Is it possible to use the Archer C20, with OpenWRT, to work in this way, as a managed switch isolating ports? Can you point me to a tutorial if one already exists?
Not supported.
Scratching very hard on the minimum hardware requirements for openwrt-24.10, not going to be supported into the future.
The plan itself is possible, but this particular hardware a bit too much below the bar. Keep in mind that quite a few consumer routers (at the bootloader level, before OpenWrt takes over) drop the port isolation, so with many devices there is a risk that packets leak while the device is rebooting (for the time span between bootloader initialization and the kernel resetting/ configuring the switch).
Thanks for the help.
It's a shame that my devices are so weak, but I'm glad to know about this initialization loophole since I don't have a UPS and there are constant fluctuations (in the power grid) during the rainy seasons here in Brazil. I'll consider buying a simpler Gigabit switch (I saw some models that cost ~U$20.00 - this price includes taxes here in Brazil) on Aliexpress and use the routers only as a Wifi AP (with OpenWRT). Or would it be better to invest in the economical model from Unifi, the Flex Mini?
By the way, by using the routers as a Wifi AP, can I prevent the LAN ports (the physical RJ45 connection) from becoming inoperative through the OpenWRT settings so that only the WAN port remains operational to receive the VLAN from the switch?