WiFi only VLANs

Installing and Using OpenWrt Network and Wireless Configuration
1

Greetings,

I have a freshly installed V24.10 on a TP-Link Archer C7 v5 which doesn't support DSA.
I have looked over other topics but haven't found this exact setup. The goal is to create 3 VLANs over WiFi only without involving any of the physical ports.

I understand the part where you create a different SSID for each VLAN and assign it a corresponding interface, then each interface will be assigned to a corresponding device. The only part I'm confused about is the devices section, which is the correct setup to create the devices:
1- Create a VLAN type device VLAN 10, 20 & 30

2- Create a switch VLAN 10, 20 & 30 but have all the ports not participating

3- Create a bridge that contains eth0 with bridge VLAN filtering, then create the VLANs through there like so:

image
image1121×613 21.5 KB

2

Then you actually don't need to introduce VLANs at all, their purpose is to keep multiple networks on single physical connections separated. Simple "guest wifi" tutorials will work for you, you are not bound to call them "guest".

4 Likes
3

Nor connect local wifi permanently to them :wink:

4

Would that provide Layer2 separation between the different WiFi networks? i.e. will the devices from different networks still be on the same broadcast domain?

I have watched some tutorials and checked out this https://openwrt.org/docs/guide-user/network/wifi/guestwifi/configuration_webinterface, everything seems to make sense but from what I understood, this setup provides only Layer3 isolation via firewall rules and separation of subnets

5

No, devices on different bridges are not in the same broadcast domain.

2 Likes
6

They are totally wired together by layer 1 electrical socket.

7

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.