WAN and LAN over same port? (AX3600)

Hello,

I have Xiaomi AX3600 and I would like to use the WAN port as a trunk for 2 vlans:

  • vlan 20 for lan
  • vlan 10 for wan

The rest would be similar setup to default:

I want vlan 20 to be bridged together with lan1-3 ports and wifi
I want vlan 10 to be used for wan connection (towards ISP)

Can anyone share some tips how to configure such scenario with Luci or via config file?

I've tried to configure something but I'm unsure if I'm doing it right, here is the /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fdf9:7b50:6dbd::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'wan.20'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option ipaddr '192.168.1.1'
        option netmask '255.255.255.0'
        option ip6assign '60'

config interface 'wan'
        option device 'wan.10'
        option proto 'dhcp'

config interface 'wan6'
        option device 'wan.10'
        option proto 'dhcpv6'
        option reqaddress 'try'
        option reqprefix 'auto'
        option norelease '1'

config device
        option type '8021q'
        option ifname 'wan'
        option vid '10'
        option name 'wan.10'

config device
        option type '8021q'
        option ifname 'wan'
        option vid '20'
        option name 'wan.20'


After this, I tried to define VLAN filtering on br-lan and set VLAN ID 20 to be untagged for lan1-3 and tagged for wan.20 but after applying this cannot connect via lan1 port and then luci reverts settings after 90 seconds.

The bridge VLAN filtering config should look like this:

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'wan'

config bridge-vlan
        option device 'br-lan'
        option vlan '20'
        list ports 'lan1'
        list ports 'lan2'
        list ports 'lan3'
        list ports 'wan:t'

config bridge-vlan
        option device 'br-lan'
        option vlan '10'
        list ports 'wan:t'

config interface 'lan'
        option device 'br-lan.20'
        ...

config interface 'wan'
        option device 'br-lan.10'
	    ...
1 Like

Thank you, this seems to work.