Posted: Fri Feb 24, 2017 14:26 Post subject: create and configure vlans on dd-wrt
hi everyone,
i am totally new to dd-wrt, lately i have installed dd-wrt on my WRT54GL. and i just made an separate network for my lab while playing with a basic networking.
now i want to make a vlans to play around.
i have created 3 vlans on my catalyst 2960 and assign 2 trunk ports for my hyper-V. where i am running a domain, dhcp, open source mail server and a print server (managed print services). this will be our test environment lab for different kind of MPS. and i can configure my switch anytime if someone will advise me to do so.
let me explain what i want to achieve here because i don't know where to start on the router to have connectivity. (i have already tested this scenario on packet tracer but following youtube tutorials like what they are calling router on stick on cisco)
1. 1 vlan for management, (domain, dhcp and mail) and wlan that can connect in this vlan.
2. another 3 more vlans for different kinds of mps that we will use for testing with different wlan connecting to each vlan. (wlan is needed for mobile terminal testing.
3. another vlan for the printers that we will be using to connect to the mps.
4. put an internet connection on all of this vlan using the wan port of the router.
hi jwh7,
thanks for the reply and for this links.
i have gone thru the links, and i have configured the vlans on the router. in a manner that all of the vlan are having internet connection, dhcp is working properly if i connect a cable to router port.
but if try to ping from another vlan 10.10.10.x to another vlan 10.10.20.x and vice versa i cannot get any connectivity.
like when i connect to wlan i can get ip 10.10.1.x with internet connection but i cannot ping any of vlans from wlan.
this is the configuration of the router.
root@ABMLAB-DD-WRT:~# nvram show | grep port.*vlans
port5vlans=2 3 4 5 16
port3vlans=5 18 19
port1vlans=3 18 19
port4vlans=3 4 5 16 18 19
port2vlans=4 18 19
port0vlans=2 18 19
size: 23112 bytes (9656 left)
root@ABMLAB-DD-WRT:~# nvram show | grep vlan.*ports
vlan4ports=0t 1 5
vlan2ports=0t 3 5
vlan0ports=5*
vlan3ports=0t 2 5
vlan1ports=4 5
size: 23112 bytes (9656 left)
root@ABMLAB-DD-WRT:~# nvram show | grep vlan.*hwname
vlan3hwname=et0
vlan2hwname=et0
vlan1hwname=et0
vlan4hwname=et0
size: 23112 bytes (9656 left)
vlan0hwname=et0
root@ABMLAB-DD-WRT:~#
+++++++++++++++++++++++++++++++++++++++
and this is the web gui port setup.
Port Setup
Port Setup
WAN Port Assignment
Network Configuration eth0
Unbridged Default
Network Configuration eth1
Unbridged Default
Network Configuration etherip0
Unbridged Default
Network Configuration vlan0
Unbridged Default
Network Configuration vlan1
Unbridged Default
Network Configuration vlan3
Unbridged Default
MTU
Multicast forwarding
Enable Disable
Masquerade / NAT
Enable Disable
IP Address
10.10.10.254
Subnet Mask
255.255.255.0
DHCPD
Multiple DHCP Server
Interface vlan3: IP 10.10.10.254/255.255.255.0
DHCP 0
Interface vlan4: IP 10.10.20.254/255.255.255.0
DHCP 1
Interface vlan5: IP 10.10.30.254/255.255.255.0
DHCP 2
Start Max Leasetime
+++++++++++++++++++++++++++++++++++++++
i also follow the guides on this link.
http://www.dd-wrt.com/wiki/index.php/Reconfigure_VLANs_for_802.1q_Compatibility
and i got the same result as stated on the link and reboot.
Current Bridging Table
Bridge Name STP enabled Interfaces
br0 no vlan1 eth1
++++++++++++++++++++++++++++++++++++++++++++++
this is the configuration of the switch.
interface GigabitEthernet0/2
!
interface Vlan1
ip address 10.10.1.252 255.255.255.0
no ip route-cache
!
interface Vlan10
ip address 10.10.10.254 255.255.255.0
no ip route-cache
!
interface Vlan20
ip address 10.10.20.254 255.255.255.0
no ip route-cache
!
interface Vlan30
ip address 10.10.30.254 255.255.255.0
no ip route-cache
!
ip default-gateway 10.10.1.254
ip http server
ip http secure-server
++++++++++++++++++++++++++++++++++++++++++++++++
please advise me if i have done something wrong on the configuration? because when i try to connect to the swith with the trunk port i cannot get any IP but when i connect the switch to the port of the vlan and connect to the same vlan on the switch i can get IP as expected.
Joined: 13 Aug 2013 Posts: 6866 Location: Romerike, Norway
Posted: Sat Feb 25, 2017 9:05 Post subject:
The only error I can see is that 10.10.10.254 is used on both wl0.1 and vlan10. The sub-nets must be different. If both interfaces shall be in the same sub-net, they have to be bridged with a brdige BRx and the ip address set on the bridge.
The only error I can see is that 10.10.10.254 is used on both wl0.1 and vlan10. The sub-nets must be different. If both interfaces shall be in the same sub-net, they have to be bridged with a brdige BRx and the ip address set on the bridge.
Hi Per Yngve Berg,
thank you for that atleast i know i have error on what i did.
Ok, so i need to create a bridge from setup>networking and create a bridge with IP 10.10.10.254? Did i get what you mean?
but why when i put a cable on trunk port from the router to the trunk port of the switch i cannot get IP? I only get IP if i connect a cable to the router port of that vlan. For ex. Port 4 of the router is trunked connected to the fa0/1 also trunked and i will connect a pc to fa0/11 which vlan 10 on the switch i cannot get an IP.
ang what i need to do to have a connection between 10.10.10.x and 10.10.20.x?
Can you use other vlan numbers? The Broadcom Chip only suports vlan 0-15.
Thanks Per Yngve Berg, i thougth having the same vlan IP is enough. Now my trunk port is totally working and i can get IP from that subnet.
But to bridge the wlan virtual interface? If someone can please explain how? or give a link to read how the bridge works on dd-wrt will be a great help.
It's simple. Set thd interafeces as Default/Bridged. Then select what interface goes to which bridge.
Per Yngve Berg wrote:
It's simple. Set thd interafeces as Default/Bridged. Then select what interface goes to which bridge.
ok, kindly confirm? because i couldn't make it work.
for example i will create 1 WLAN (W-VLAN2) for VLAN 2.
1. i will unbridged VLAN 2 and put IP.
2. i will create new bridge (br2) and put the same IP?
3. i will select br2 and then select W-VLAN2?
because i tried this thing and the other way around but i couldn't make it work. do i need to reboot the router every time i change the configuration or wait for 30 sec before and after a reboot?
on wired VLAN is already working,
but there is another that i just want to clarify my scenario from the experts.
i will be using 1 physical server WIN2012 running a hyper-v with only one network interface.
now can i run 3 print server with static IP? each print server will be on a different and plug it to a trunk port of the switch
prnt-svr01 (VLAN2)
prnt-svr02 (VLAN3)
prnt-svr03 (VLAN4)
is it possible to get a connection from this 3 print servers using the trunk port of the switch?
In addition to configure a trunkport on the router, the same must be done on the machine. It's named 802.1q in the network card.
Hi Per Yngve Berg,
i am sorry i just continued my pending work now, because of the end of the month deadlines.
now as per you guide i have done almost 90% at least of what i am trying to do.
but when i create a bridge (br5 and br10) for vlan5(users) and vlan10(admin or mngt)
on vlan5 i can successfully connect wlan and it is taking IP from the DHCP but i cannot communicate to any of the other vlans. but i can ping the other vlans gateway.
and for vlan10 i can ping the dns(part of vlan10) from the client connected on another vlan, but i cannot ping from any of the servers from vlan10 to other vlans.
and when i removed/delete the bridge that i created i can ping on all of the vlans (vice versa)
what i don't know if there are other procedure that i have to do?
and in addition, after i deleted the bridge and i can ping from all vlans using the DHCP from the router. when i use DHCP forward and define the IP of DHCP server which part of vlan10, it's distributing IP only for vlan10 other vlans are not getting any IP.
even though i already have the scopes for all of the vlans. in this case shall i put the DHCP server on the trunk port? and not on the port assigned to vlan10?