Hi,

I've successfully installed OpenWRT BARRIER BREAKER (14.07, r42625) on a Raspberry Pi B+. I'm trying to realize a static IP via OpenVPN routing for my DMZ network which I was able to realize in the past with an old WRT54GL. But the WRT is broken.

So I connected a Debug Cable to the GPIO Pins of the Pi and changed the network config for the device:

root@OpenWrt:/# cat /etc/config/network

config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config interface 'lan'
        option ifname 'eth0'
        option proto 'static'
        option ipaddr '10.25.0.201'
        option netmask '255.255.255.0'

config interface 'wan'
        option ifname 'eth0.254'
        option proto 'static'
        option ipaddr '192.168.254.253'
        option netmask '255.255.255.0'

config interface 'dmz'
        option ifname 'eth0.20'
        option proto 'static'
        option ipaddr '192.168.20.11'
        option netmask '255.255.255.0'
        option auto '1'


On my Switch the Pi is connected to a Port which has one untagged VLAN for the 'lan' interface on the OpenWRT and two VLANs tagged (20 and 254) for the 'dmz' and the 'wan' interface.

In VLAN254 (WAN) there are 2 devices:
192.168.254.1 (Firewall)
192.168.254.254 (Core Router)

Here I can only ping the Core Router. I'm not able to ping 192.168.254.1. Also when I try to add this IP as default gateway, I'm not able to ping any addresses outside the firewall (e.g. 8.8.8.8)


In VLAN20 (DMZ) there are also 2 devices:
192.168.20.1 (Current Gateway for DMZ)
192.168.20.101 (Webserver)

Here I can ping and access everything.


In the untagged VLAN, I can ping nothing. What am I doing wrong? I also tried to untag VLAN254 and removed the other untagged VLAN (because it would not be needed for my project) with the same result. I can only ping 192.168.254.254.


Regards,
Ch3p


EDIT:
Strange. If I ssh to 192.168.254.1 it works fine. But if I add my Laptop to VLAN254 I can successfully ping 192.168.254.1 and outside IPs.

(Last edited by ch3p on 31 Aug 2015, 22:47)