VLAN setup help

[SpectreDev]

yeah i can ping it from a device in lan, and it does have a web access. the app requires a port number tho

[psherman]

Ok. Well no special actions are required on the openwrt side. Just make sure the port you enter into the app corresponds to the port on which the nvr is listening.

[SpectreDev]

yeah it works nicely with vpn now, the only thing remaining is my home alarm, and the weird issue with wireguard

[SpectreDev]

Only one of my peers does a handshake

[psherman]

Remove the endpoint ports from your peers:

@SpectreDev

config wireguard_wg0
        option description 'redacted' 
        option public_key 'redacted' 
        option private_key 'redacted' 
        option preshared_key 'redacted' 
        list allowed_ips '10.0.0.2/32'
        option route_allowed_ips '1'
        option endpoint_port '51820'
        option persistent_keepalive '25'

config wireguard_wg0
        option description 'redacted' 
        option public_key 'redacted' 
        option private_key 'redacted' 
        option preshared_key 'redacted'
        list allowed_ips '10.0.0.4/32'
        option route_allowed_ips '1'
        option endpoint_port '51820'
        option persistent_keepalive '25'

Also check to ensure that your keys are correct on the peer that is unable to connect.

Reboot after making any changes. Then test again.

[SpectreDev]

Ok thanks, for the home alarm how do I go about doing vlan tagging because every time I do it, I end up losing WiFi connection

[psherman]

Which network is the home alarm connecting to? Is it still connecting through the MX4200?

[SpectreDev]

Yep still mx4200

[SpectreDev]

Hmm now the other peer doesn't work, I'll scan the qr code again ig

Edit: have to keep rescanning qrcode after every reboot

[psherman]

@SpectreDev

Edit: have to keep rescanning qrcode after every reboot

Something is wrong if you have to do this.

What is changing when you rescan the QR code? Please compare the remote peer (such as your phone) and its configuration before and after you rescan the QR code.

[psherman]

@psherman

Which network is the home alarm connecting to?

This wasn't answered (or verified) recently... I want to make sure I'm looking at all the right parts.

[SpectreDev]

Ah ok understood, the eufy home alarm connects to the MX4200 via ethernet on Lan 2 port

[SpectreDev]

Nothing seems to actually change, I'm not sure what happening

[psherman]

I meant what subnet or network name does it connect to?

[SpectreDev]

255.255.255.0 since the mx4200 is acting as a DHCP client for fast transition between BPI and mx4200

[psherman]

@SpectreDev

255.255.255.0

This is a subnet mask, but not the question I asked. What subnet -- such as 192.168.3.0/24 or something else -- do you want the alarm to use?

@SpectreDev

since the mx4200 is acting as a DHCP client for fast transition between BPI and mx4200

This has nothing to do with the subnet selection.

[SpectreDev]

Oh sorry, not great with the network terms, it's on 192.168.1.1/24 currently

[psherman]

@SpectreDev

it's on 192.168.1.1/24 currently

Is that where you want it? Or do you want it on a different network?

[SpectreDev]

I think I'd prefer it on a different subject to keep it isolated from everything else

[psherman]

Ok.... so what subnet? Has that already been created on your main router, or do you need a new one for it?

for reference, I see lan (192.168.1.0/24), guest (192.168.2.0/24), cctv (192.168.3.0/24).