VLAN on WAN working, no communication to LAN/WLAN (Redmi AX5)

see.adler · December 16, 2020, 12:40pm

Hi All,
I'm new to this board and my learning curve regarding VLAN just started, but I have read several articles also in the openwrt docu before posting here, my guess is that I have a "beginners" error, which might be resolved quiet fast by your experience.

The situation: I have a Xiami Redmi AX5 Router with a "hack" from this board to have SSH access, but still the built in version of a "customized openwrt" firmeware running. My Internet-Access is via FTTH and an optical network termination as modem. So I have to dial in via pppoe from the AX5 Router using WAN-Port. The Provider tells me to use as communication VLAN 10, which I edited in /etc/config/network on the "wan-interface". The Provider can see successfull dial-ins with this setup.

The problem: I can neither send nore receive any data from "internal connected" LAN/WLAN devices on the other ports. Report from ping: "target network not reached"

Here is my full network-config (user and password anonymized), i guess it is quiet simple to "tell" the router to communicate between the "VLAN-based" WAN and the "normal" LAN/WLAN, but I could not get i working after 2 nights of trials and reading online and watching youtube videos, now I quite frustrated but to my feeling, there must be a simple solution.

Removing ".10" from eth4 interface does not change the situation
Adding "eth4" in the lan interface did not help either

Thanks for your hints and sorry for the longish description!
Best Bjoern

config interface 'loopback'
	option ifname 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config switch
	option name 'switch0'

config interface 'lan'
	option ifname 'eth1 eth2 eth3'
	option force_link '1'
	option type 'bridge'
	option proto 'static'
	option ipaddr '192.168.31.1'
	option netmask '255.255.255.0'
	option ipv6 '0'
	option multicast_querier '0'
	option igmp_snooping '0'
	option macaddr '28:d1:27:80:2b:29'
	option ieee1905managed '1'

config interface 'eth4'
	option ifname 'eth4.10'
	option keepup '1'

config interface 'wan'
	option proto 'pppoe'
	option special '0'
	option username '...'
	option mru '1480'
	option password '...'
	option ifname 'eth4.10'

Hegabo · December 17, 2020, 9:07am

Welcome!

Ideally, you should seek help from the developer/customizer of the release/fork you have, since we don't know what they could have changed, but any way will try.

Yuo shouldn't manually edit configuration files, as you can easily break things. You should use uci commands or the GUI.

That's not the way it should be configured. Are you sure this is all of your /etc/config/network? I'm reluctant to give you an edit of the presumed correct config for your /etc/config/network, as if things go wrong you could even lose access to the router.

Are you able to reset the configuration to the default, and then we start from there?

see.adler · December 17, 2020, 10:14am

Dear Hegabo,
thanks for your Feedback! I know that I should ideally contact the developer, however with language (Chinese) it is difficult and during "googling" for VLAN I was ending up in posts within this board, so I tried it here

In the GUI of my customized version I can not set up VLANs, so I used the config-files. In case something goes wrong: I can reset the router.

The config I posted here is complete and default, except the PPPOE data in the "wan" interface, which I entered via the GUI.

Could you still give or suggest, how I could adapt the config as described in my first post? If the first suggestions by you do not work, I will reset and do not enter PPPOE data via GUI, but to my feeling the config will not change significantly.

Thank you already!

Hegabo · December 17, 2020, 12:30pm

I think it's better to just start from default config to make sure it's correct.

I am not familiar with your device, but the config is missing some sections that are usually available for VLANs, so maybe they are not supported at all?

see.adler · December 17, 2020, 6:37pm

Ok, I have resetted and during initial setup (needed to do the ssh-hack) I have selected dhcp for illustration that there is not more in the config no matter what I select.

Let's assume the AX5 supports VLAN but we may have to add the relevant parts

Thanks for your support/feeback already!s

config interface 'loopback'
	option ifname 'lo'
	option proto 'static'
	option ipaddr '127.0.0.1'
	option netmask '255.0.0.0'

config switch
	option name 'switch0'

config interface 'lan'
	option ifname 'eth1 eth2 eth3'
	option force_link '1'
	option type 'bridge'
	option proto 'static'
	option ipaddr '192.168.31.1'
	option netmask '255.255.255.0'
	option ipv6 '0'
	option multicast_querier '0'
	option igmp_snooping '0'
	option macaddr '28:d1:27:80:2b:29'
	option ieee1905managed '1'

config interface 'eth4'
	option ifname 'eth4'
	option keepup '1'

config interface 'wan'
	option proto 'dhcp'
	option mtu '1500'
	option ifname 'eth4'

Hegabo · December 18, 2020, 9:31pm

I don't think it's a good idea to try to go this way. You are risking bricking your device (damaging it so that you can't access it). And since it's a heavily modified old copy of OpenWrt and not supported by the project you are very unlikely to find help here.

Anyway, my config looks like the following, but then again, my router's switch supports VLANs!

config interface 'lan'
        option type 'bridge'
        option ifname 'eth0.1'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '60'
        option ipaddr '192.168.0.2'
        option gateway '192.168.0.1'
        option stp '1'

config interface 'wan'
        option ifname 'eth0.2'
        option proto 'dhcp'

config interface 'wan6'
        option ifname 'eth0.2'
        option proto 'dhcpv6'

config switch
        option name 'switch0'
        option reset '1'
        option enable_vlan '1'

config switch_vlan
        option device 'switch0'
        option vlan '1'
        option vid '1'
        option ports '0t 2 3 4 5'

config switch_vlan
        option device 'switch0'
        option vlan '2'
        option ports '1 6t'
        option vid '2'

Any suggestion from me on how to edit that to match what you are trying to achieve could be helping you to damage your device, and I don't really like to do so. The thing is that if you do something wrong, you could block your LAN access. So unless you know how to recover your router using hardware keys or serial connection, you probably shouldn't

I think your best choice is to contact the manufacturer support or do some search online.

see.adler · December 28, 2020, 3:38pm

Hi,
thanks for your config, i have tried to adapt it towards my configuration, however this was mit sucessful.

For the moment i have found another Work-Around.

Thanks for your Help!