[elkulo]

Thanks kammerma for the reply and the help. I try your suggestions, but if I tag port 1(2) in switch1 I loose the defualt vlan in it. The other option I have the same results.

I've a vmware esxi with multiples vms in that port, but I need a vlan10 for one isolated vm. I've this configuration working in another ddwrt, but I upgrade to R9000 recently. Any help?

[elkulo]

My bad kammerma, if I tag port2 in vlan1 tagged it's work (i changed in vmware too default vms to vlan1 tagged). But if work like before, I have ping from vlan1 to vlan10 (and vlan10 to vlan1) but i don't have internet (vlan2) traffic from vlan10.

[Per Yngve Berg]

Have you enable NAT from VLAN10 to the WAN?

iptables -t nat -I POSTROUTING -o `get_wanface` -j MASQUERADE

[elkulo]

Thanks per, now I've internet in vlan10 with the nat postrouting rule! thanks!

But I've another problem related, when I create a port forwarding rule to a vm in the vlan10 (from the gui), I can't access it from the outside world . Any help about this? Any special consideration about the port forwarding to a vlan? Thanks again for the great help!

[Per Yngve Berg]

Port forwarding is to a local ip address. No VLAN is involved here.

[elkulo]

Thanks Per, you're right! I did not remember that between the router of the internet provider and the new r9000, I have a dmz port for the r9000 with a static ip. I was trying to do port forwarding in ddwrt that worked fine, but the provider router denied the connection because it was not in the dmz port.

Everything is working well, in my new r9000 !!

Thanks for all the ddwrt forum support, it's a great community

Mod note 01.11.23: Further in-depth discussion regarding VLANs on the R9000 can be found in the VLAN Detached Networks on R9000 thread. Also, some information is covered elsewhere:

Nighthawk X10 (R9000)
Netgear R9000: Please help with ISP configuration FTTH - ONT