My network setup is as follows:
ISP (DHCP) --- Router (WNDR3700) --- Switch (TL-WR1043ND) ---- HTPC
|____ DVR (needs WAN IP)
There is only one Ethernet jack in the living room, but the DVR needs a WAN IP (and the HTPC is part of the LAN). So I configured two VLANs.
Router
config switch_vlan
option device 'rtl8366s'
option vlan '1'
option ports '1 2 3t 5t'
config switch_vlan
option device 'rtl8366s'
option vlan '2'
option ports '0 3t 5t'
Port 3 links the switch to the router. I'd like to use port 0 as the second, separate WAN port. I was told port 3 needs to be tagged in both VLANs.
Switch
config switch_vlan
option device 'rtl8366rb'
option vlan '1'
option ports '0 1t 2 3 5t'
config switch_vlan
option device 'rtl8366rb'
option vlan '2'
option ports '1t 4 5t'
Port 1 links the switch to the router so I tagged it in both VLANs. Port 4 connects the DVR.
I have configured a 'Digiwan' interface for the second WAN port (on the router). I am not sure whether to set it to 'Unmanaged' or keep it on 'DHCP' - I guess it should be unmanaged so it doesn't interfere with the DVR requesting an IP address?
config interface 'digiwan'
option proto 'dhcp'
option ifname 'eth0.2'
Is this correct, or is there some kind of bridging needed (like on the LAN interface)? Do I need to add a separate firewall zone? I have added one:
config zone
option input 'ACCEPT'
option forward 'REJECT'
option output 'ACCEPT'
option name 'digiwan'
option network 'digiwan'
option masq '1'
option mtu_fix '1'
(I guess the input part should read REJECT as well like on the WAN interface settings.)
Thanks!
(Last edited by Borromini on 13 Apr 2014, 16:13)