VLAN on DD-WRT (Kong builds)

Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.)
Author Message
kophinos
DD-WRT Novice


Joined: 03 Mar 2011
Posts: 9

PostPosted: Thu Apr 07, 2016 22:17    Post subject: VLAN on DD-WRT (Kong builds) Reply with quote
Does anyone have a guide on how to get VLANs working on a Kong build (WRT)? All the guides I have found say they either only apply to certain hardware, builds, or a extremely dated.

Any guidance is greatly appreciated!
Sponsor
Drashnar
DD-WRT Novice


Joined: 08 Apr 2016
Posts: 1

PostPosted: Fri Apr 08, 2016 15:35    Post subject: Reply with quote
I'd like to know about this too. I'm considering taking the plunge and loading DD-WRT for my first time, but I want vlan capability to isolate some network segments.

My only drawback is that I need a step by step to walk me through it, seeing as I don't normally get to touch routing/switch stuff in my day to day.

Any guides or links we can use? Thanks!
vnetwork
DD-WRT Novice


Joined: 26 Apr 2016
Posts: 2

PostPosted: Tue Apr 26, 2016 22:13    Post subject: Reply with quote
For referencing:
Router: WRT1900ACv2
Build: DD-WRT v3.0-r29300M kongmv (03/25/16)
ISP: Google Fiber
Switch: TP-Link TL-SG1016DE
Servers: WS2K12 R2
DHCP: Load-Balanced superscope
Subnets:
10.0.0.0/24 - (current DD-WRT scope)
10.156.13.0/24 - LAN
192.168.85.0/24 - Guests


I've been digging around the past few weeks trying to figure out this same issue. I've tried an swconfig method once (which did not end well somehow) and I was able to setup vlan interfaces recently with nvram, but it still hasn't shown to be a complete solution to what I'm trying to do.

I think the most confusing part is that in swconfig it shows 7 ports and in nvram it shows 6. The only consistency I've seen is that port 5 is the CPU -- which is what it was listed as in the OpenWRT GUI as well.


Maybe together, if no other smarter experts chime in, we can help each other solve these setbacks by pooling our knowledge together.

My ideal end setup is to have all traffic segmented like:

WAN - (vLAN1 I believe it is)
LAN PORTS by # on back of router
Port 1, 2, & 3 LAG 802.3ad - vLAN 2, 3, 4, & 5 (all trunks)
Port 4 - vLAN sysAdmin (all vLANs)

wLAN - vLAN 4


vLAN2 = Internet traffic in/out
vLAN3 = NIC LAN traffic
vLAN4 = wLAN traffic to be monitored/filtered
vLAN5 = Guest WIFI to even stricter monitoring and policy filters

The reason I want to do 802.3ad is because with gigabit ethernet and multiple WiFi users, I'd like to not bottleneck any one port if not all traffic is needed for a specific purpose. I also want to be able to monitor WiFi closer and create stricter policies for my kids and guests to ensure my network stays healthy.

I have no code to provide at this time, as most of it is just trying to even figure out which port is actually labeled port 1 on the back. Any help would certainly be appreciated!
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6866
Location: Romerike, Norway

PostPosted: Sun May 01, 2016 18:16    Post subject: Reply with quote
https://wiki.openwrt.org/doc/techref/swconfig

It's the same as in OpenWRT.
wheaton4prez
DD-WRT User


Joined: 14 Jul 2015
Posts: 91

PostPosted: Sat May 07, 2016 0:04    Post subject: Reply with quote
I'm interested in this as well. I can get into the console solution if needed. But, more of a time investment than I am hoping for.

What are the chances that the GUI can be set up for VLAN on this hardware?

(I asked about this in the Atheros forum as well. Have routers with each.)
DicEM4N
DD-WRT Novice


Joined: 24 Apr 2016
Posts: 2

PostPosted: Tue May 10, 2016 19:24    Post subject: Reply with quote
been strugling with the same for a couple of days now.
I want to assign a port of the switch as a second WAN port.

nvram show | grep vlan.*ports shows me:

vlan0ports=1 2 3 4 5
vlan1ports=0 5

making me assume that port 0 is my current WAN port.
So since I want to have port 4 as the second WAN port I tried to add it to vlan1ports.
it gets added fine but the resulting device on that port is not connected to the WAN.

I did a check using swconfig dev switch0 show.
Code:
Global attributes:
        enable_vlan: 0
Port 0:
        mask: 0x002e: (0) 1 2 3 5
        qmode: 0
        pvid: 0
        link: port:0 link:up speed:100baseT full-duplex
Port 1:
        mask: 0x002d: 0 (1) 2 3 5
        qmode: 0
        pvid: 0
        link: port:1 link:down
Port 2:
        mask: 0x002b: 0 1 (2) 3 5
        qmode: 0
        pvid: 0
        link: port:2 link:up speed:1000baseT full-duplex
Port 3:
        mask: 0x0027: 0 1 2 (3) 5
        qmode: 0
        pvid: 0
        link: port:3 link:up speed:1000baseT full-duplex
Port 4:
        mask: 0x0040: (4) 6
        qmode: 0
        pvid: 0
        link: port:4 link:up speed:1000baseT full-duplex
Port 5:
        mask: 0x000f: 0 1 2 3 (5)
        qmode: 0
        pvid: 0
        link: port:5 link:up speed:1000baseT full-duplex
Port 6:
        mask: 0x0010: 4 (6)
        qmode: 0
        pvid: 0
        link: port:6 link:up speed:1000baseT full-duplex

By unplugging cables I was able to figure out that port 0 in this report corresponds to port 4 label.
So the ports are invers like the openwrt wiki page on the wrt1900ac status.

but how do I get my 4 switch port in the WAN vlan now? because I tried adding "4" to vlan1ports and that did not work. and "0" is already in vlan1ports...

We could really do with someone that can explain how this works in DD-wrt.

thanks
DicE
Gfunk
DD-WRT Novice


Joined: 11 May 2016
Posts: 4

PostPosted: Wed May 11, 2016 20:42    Post subject: Reply with quote
DicEM4N wrote:
been strugling with the same for a couple of days now.
I want to assign a port of the switch as a second WAN port.

nvram show | grep vlan.*ports shows me:

vlan0ports=1 2 3 4 5
vlan1ports=0 5

making me assume that port 0 is my current WAN port.
So since I want to have port 4 as the second WAN port I tried to add it to vlan1ports.
it gets added fine but the resulting device on that port is not connected to the WAN.

I did a check using swconfig dev switch0 show.
Code:
Global attributes:
        enable_vlan: 0
Port 0:
        mask: 0x002e: (0) 1 2 3 5
        qmode: 0
        pvid: 0
        link: port:0 link:up speed:100baseT full-duplex
Port 1:
        mask: 0x002d: 0 (1) 2 3 5
        qmode: 0
        pvid: 0
        link: port:1 link:down
Port 2:
        mask: 0x002b: 0 1 (2) 3 5
        qmode: 0
        pvid: 0
        link: port:2 link:up speed:1000baseT full-duplex
Port 3:
        mask: 0x0027: 0 1 2 (3) 5
        qmode: 0
        pvid: 0
        link: port:3 link:up speed:1000baseT full-duplex
Port 4:
        mask: 0x0040: (4) 6
        qmode: 0
        pvid: 0
        link: port:4 link:up speed:1000baseT full-duplex
Port 5:
        mask: 0x000f: 0 1 2 3 (5)
        qmode: 0
        pvid: 0
        link: port:5 link:up speed:1000baseT full-duplex
Port 6:
        mask: 0x0010: 4 (6)
        qmode: 0
        pvid: 0
        link: port:6 link:up speed:1000baseT full-duplex

By unplugging cables I was able to figure out that port 0 in this report corresponds to port 4 label.
So the ports are invers like the openwrt wiki page on the wrt1900ac status.

but how do I get my 4 switch port in the WAN vlan now? because I tried adding "4" to vlan1ports and that did not work. and "0" is already in vlan1ports...

We could really do with someone that can explain how this works in DD-wrt.

thanks
DicE


Tried the same as well and nothing works. I've tried several different things by changing VLAN ports and even removing some ports from the VLAN but they still work! I have the impression that these VLAN commands do not work at all on this router.

Any help or a workaround would be grateful
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6866
Location: Romerike, Norway

PostPosted: Wed May 11, 2016 20:51    Post subject: Reply with quote
www.dd-wrt.com/phpBB2/viewtopic.php?t=287719
kophinos
DD-WRT Novice


Joined: 03 Mar 2011
Posts: 9

PostPosted: Tue May 17, 2016 18:07    Post subject: Reply with quote
Given the information above, was anyone able to get this to work?
rowdyrauderson
DD-WRT Novice


Joined: 24 May 2016
Posts: 2

PostPosted: Wed May 25, 2016 3:12    Post subject: Reply with quote
This is a problem I have ran into as well, running kong build and wrt1900acv1.

My switch supports 802.1q vlan tagging, but I cannot get the router setup to support a router-on-a-stick operation.

Anyone have any insight on how to go about creating dot1q subinterfaces and assigning them a gateway ip that can be routed??
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Marvell MVEBU based Hardware (WRT1900AC etc.) All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum