tp-Link Deco M4 as multi-VLAN Access Point -- Get no IP on WLAN

Installing and Using OpenWrt
1

Hello,

I have just flashed one of my Deco M4 with OpenWRT to evaluate installation and configuration before flashing the other devices. I want to separate several networks for familiy users, guests, IoTs etc. Therefor I want to use VLANs and different SSIDs.
For Web-GUI access I have configured an interface for untagged frames with IP requesting from a DHCP server. For the other VLANs I have configured unmanaged bridges. Parallel I have set up the Wireless interfaces.
After that I am able to connect the access point via wireless. In the logfile I can see that the authentication is successful but the WLAN client does not get an IP from the DHCP server. In the log file of the DHCP server I can see that it does not receive a request from the WLAN client. My suspect is that the bridging between the VLAN and the wireless connection does not work.
Is there anybody who has an Idea what I am doing wrong.

Here are my configuration files, limited to the management LAN connection and one VLAN:

/etc/config/network

config interface 'loopback'
	option device 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config globals 'globals'
	option ula_prefix 'fd3d:3d6a:5b34::/48'

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'eth0.1'

config interface 'lan'
	option device 'br-lan'
	option proto 'dhcp'

config device
	option type '8021q'
	option ifname 'eth0'
	option vid '65'
	option name 'eth0.65'

config interface 'Gast'
	option proto 'none'
	option device 'br-Gast'

config switch_vlan
	option device 'switch0'
	option vlan '3'
	option ports '0t 3t'
	option vid '65'

config device
	option type 'bridge'
	option name 'br-Gast'
	list ports 'eth0.65'
	option mtu '1500'
	option macaddr '90:9A:4A:9C:67:6C'
	option txqueuelen '1000'

and /etc/config/wireless

config wifi-device 'radio0'
	option type 'mac80211'
	option path 'pci0000:00/0000:00:00.0'
	option band '5g'
	option htmode 'VHT80'
	option cell_density '0'
	option country 'DE'
	option channel '108'

config wifi-device 'radio1'
	option type 'mac80211'
	option path 'platform/ahb/18100000.wmac'
	option band '2g'
	option cell_density '0'
	option country 'DE'
	option channel '8'
	option htmode 'HT40'

config wifi-iface 'wifinet0'
	option device 'radio1'
	option mode 'ap'
	option ssid 'XXXXXXXXX'
	option encryption 'psk2'
	option key 'XXXXXXXXXX'
	option ieee80211r '1'
	option nasid '7301'
	option mobility_domain '7355'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option wpa_disable_eapol_key_retries '1'
	option network 'Gast'

config wifi-iface 'wifinet1'
	option device 'radio0'
	option mode 'ap'
	option ssid 'XXXXXXXXXXXXXX'
	option encryption 'psk2'
	option ieee80211r '1'
	option nasid '7301'
	option mobility_domain '7355'
	option ft_over_ds '0'
	option ft_psk_generate_local '1'
	option wpa_disable_eapol_key_retries '1'
	option network 'Gast'
	option key 'XXXXXXXXXXXXXX'

And finally an exception from the log file concerning WIFI-connect:

Sat Sep  2 14:59:03 2023 daemon.info hostapd: wlan1: STA 14:7d:da:44:89:e2 IEEE 802.11: authenticated
Sat Sep  2 14:59:03 2023 daemon.info hostapd: wlan1: STA 14:7d:da:44:89:e2 IEEE 802.11: associated (aid 1)
Sat Sep  2 14:59:03 2023 daemon.notice hostapd: wlan1: AP-STA-CONNECTED 14:7d:da:44:89:e2
Sat Sep  2 14:59:03 2023 daemon.info hostapd: wlan1: STA 14:7d:da:44:89:e2 RADIUS: starting accounting session EFD51EA69D08054D
Sat Sep  2 14:59:03 2023 daemon.info hostapd: wlan1: STA 14:7d:da:44:89:e2 WPA: pairwise key handshake completed (RSN)
Sat Sep  2 14:59:03 2023 daemon.notice hostapd: wlan1: EAPOL-4WAY-HS-COMPLETED 14:7d:da:44:89:e2

Thanks for your help in advance!
Holger

2

Remove this. I'm not sure if it causes problems, but in any case it's completely unnecessary.

Temporarily set the protocol to dhcp to see if the interface will get an ip address.

Verify that eth0.65 and wlan<X> are members of the bridge.

brctl show br-Gast

Install tcpdump on the AP and check if any tagged traffic leaves eth0.

opkg update; opkg install tcpdump
tcpdump -nnti eth0 -e vlan 65
3

Thanks for your comments!

Temporarily set the protocol to dhcp to see if the interface will get an ip address.

Indeed, this sets me on the right track. After I saw that I did not get an ip on this VLAN when I set the protocol to dhcp I checked once more the rest of the network. Finally the problem was not related to OpenWRT at all. There is a switch in between the dhcp server and the deco and this switch was not configured properly.
After setting the VLANs on this switch correctly the Deco M4 works fine as multi-VLAN AP!

best regards

1 Like
4

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.