[DarkKnight93]

Hellow (:

Due i flashed my new E3200 with current build 18946 i cannot get vLANS working properly.

On my older E2000 with 15946 or something like that it worked like charm :(

I want to seperate LAN Port 4 to vlan3 - and grant it only access to internet not to lan/other subnets.

Here's my config:

[DarkKnight93]

For DNS+DHCP services i use dnsmasq:

[rocky13]

You must enable Masquerade / NAT, you have it disabled. That will do the trick.

[DarkKnight93]

thanks for your reply (:

In fact enabling NAT for unbridged vlan3 did not result in havin internet access but here are my firewall-rules, that did the trick:

VLAN2=WAN
VLAN3=Detatched Network

#Internet Access
iptables -I FORWARD -i vlan3 -o vlan2 -m state --state NEW -j ACCEPT
#Network Access to br0 block
iptables -I FORWARD -i vlan3 -o br0 -m state --state NEW -j DROP
#Block Router Access
iptables -I INPUT -i vlan3 -m state --state NEW -j DROP
#Allow DHCP Access
iptables -I INPUT -i vlan3 -p udp --dport 67 -j ACCEPT