VLAN wan to wan

Installing and Using OpenWrt Network and Wireless Configuration
1

Two questions;

  1. Is it possible to remove all incoming VLAN tags from the ISP? Basically remove the VLAN tags on the WAN device?

  2. Is it possible to let a VLAN tag go through the WAN? I have this a setup below. I want to strip the VLAN from incoming ISP traffic on the first WAN. I also want the traffic from #1 to reach into #2 if tagged correctly

ISP --> wan / open wrt #1 --> wan / open wrt #2

2

With the according switch configuration, yes.

3

As @slh said, yes this can be done by means of the switch configuration. But at that point, the first router becomes nothing more than a managed switch.

Is there a reason you want to strip the vlan tag in the first router and pass it to the second as untagged? There is no real reason to do this from a technical perspective since the second router can handle the vlan tag just the same. You could simply remove the first router and use the second normally with the tag.

4

I don't want any VLAN tags entering my network from the outside world / ISP. It sounds like a security issue but I am a newbie so can't say for sure.

To clarify I want something started in router1 going into router2. I want to remove / stripe all VLAN info from the ISP going into router1. Nothing based on ISP VLAN tags should go to router2

  1. Remove all ISP VLAN info
  2. Allow route 1 --> router 2 wan --> router 2 network
5

It's not. You're not achieving anything of any practical use in your proposed setup.

6

Okay. How can I stripe out the ISP VLAN tags on the router's wan interface

7

The vlan tags will be removed when the traffic arrives at the router. Assuming the traffic then leaves on an interface that has vlan tags it'll have those tags added, otherwise it'll be untagged.

8

Are you aware that vlan is a layer-2 technology while on the Internet we usually do layer-3?
And as the others already tried to explain to you: the moment a frame with a tag hits a router the tag gets removed anyway.

There are also valid scenarios where you want to bridge ISP traffic like to connect multiple routers on a single line... Or to pass it into a virtualisation cluster or the like...

9

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.