I have a Linksys WRT1900ACS and I want to connect it to two different networks: one for the device itself and another one (less privileged) for the devices plugged in to its ethernet ports.
The way I think it suppose to work is:
- I have two bridges, one for "wan" (br-lan) and one for "lan1, lan2, lan3, lan4" (br-media)
- "wan" is plugged into one network and router would get its IP address from it (acting as DHCP client).
- "lan1" is plugged into another network and DHCP requests from devices on lan2, lan3 and lan4 would be forwarded to the device on the other side by the bridge.
However, I can not make this to work: br-media bridge shows all physical interfaces as "down". I know the cables is plugged it properly. If I plug cable attached to lan1 into a computer instead, it'll get an IP address and everything will work. But the same cable plugged into Linksys does not change the state of the interface from "down".
(Interesting thing I found is that if I reboot the router, the bridge will briefly work and everything connected to lan2, lan3 and lan4 will get IP addresses from the other side of lan1. Sounds like a security concern, since no VLAN tagging is done)
Anyway, I'm wondering if I need to do something else I haven't yet to make it work, or, given that there's only one actual physical networking device (eth0), it is just not supposed to work at all.
Relevant configuration bits (shortened):
config device option name 'br-lan' option type 'bridge' list ports 'wan' config interface 'LAN' option proto 'dhcp' option device 'br-lan.1' config bridge-vlan option device 'br-lan' option vlan '1' list ports 'wan:u*' config interface 'media' option proto 'none' option device 'br-media.30' config device option type 'bridge' option name 'br-media' list ports 'lan1' list ports 'lan2' list ports 'lan3' list ports 'lan4' option bridge_empty '1' config bridge-vlan option device 'br-media' option vlan '30' list ports 'lan1:u*' list ports 'lan2:u*' list ports 'lan3:u*' list ports 'lan4:u*'