Vlan isolation failed on ipq40xx (GL-B1300)

VLAN 1:
        vid: 1
        ports: 0 3 4
VLAN 2:
        vid: 2
        ports: 0t 5
VLAN 3:
        vid: 101
        ports: 0t 4t
VLAN 4:
        vid: 102
        ports: 0t 4t

This is my config, port 0 is cpu port, port 3 and 4 are lan ports, port 5 is wan port. Because of the limitation of platform, vlan 1 and vlan 2 can not be modified.

Now the problem is, Router advertisement messages from vlan 3 and vlan 4 are incorrectly forwarded to vlan 1, causing a computer connected to port 3 configuring automatically an unreachable default route.

I can confirm this is a recently introdued bug, it does not exist on snapshot several months ago before I upgraded it. Maybe it is related with https://github.com/openwrt/openwrt/commit/9da2b567605b0964d921b9ca4f0c9886db4f636d I will try to do some test later.

reverting to https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=3635f7efc1deef2a17b69000dcd20ad044e73706 fixes this issue indeed, so I think https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=9da2b567605b0964d921b9ca4f0c9886db4f636d should be responsible.

Likely got bitten by this when upgrading from 19.07.3 to .4 :confused:
I only have "high" VLAN numbers, that is 101, 102 and 103.

please, everyone continue there so we dont have two threads....

2 Likes

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.