VLAN help

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2
Author Message
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Mon Feb 19, 2018 21:06    Post subject: Reply with quote
Closest, labelled port 1.
Sponsor
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Fri Feb 23, 2018 18:40    Post subject: Reply with quote
Per Yngve Berg wrote:
Closest, labelled port 1.


Hi, I've just implemented those commands and now I can't access my DD-WRT.. which is what I was worried about..

I plug in with a cable to any of the ports on the R7000, and I cannot access it (192.168.10.3)

This is now fourth time I have made some VLAN changes, and then not been able to access DD-WRT henceforth.

Can you please help me out here, I really am stuck

192.168.10.1 is the IP of my pfSense LAN
192.168.10.3 is the IP of my DD-WRT AP

Every time I make a change to the VLAN settings even the ones you posted, result in me being locked out of accessing dd-wrt and having to force reset Sad
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Feb 24, 2018 16:38    Post subject: Reply with quote
On some routers, the processor port needs tagging.

nvram set vlan1ports="0 1 2 3 4t 5"
nvram set vlan11ports="4t 5t"
nvram set vlan12ports="4t 5t"
nvram set vlan13ports="4t 5t"
nvram set vlan14ports="4t 5t"
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Sat Feb 24, 2018 16:57    Post subject: Reply with quote
Per Yngve Berg wrote:
On some routers, the processor port needs tagging.

nvram set vlan1ports="0 1 2 3 4t 5"
nvram set vlan11ports="4t 5t"
nvram set vlan12ports="4t 5t"
nvram set vlan13ports="4t 5t"
nvram set vlan14ports="4t 5t"


Hi, I've already run these commands...

Per Yngve Berg wrote:
The ports are labelled backwards, so port labelled 1 is port 4 in the chip. Port 0 is the WAN (not assigned to any VLAN in your screenshot). I have set it to VLAN1.

nvram set vlan11hwname=`nvram get vlan1hwname`
nvram set vlan12hwname=`nvram get vlan1hwname`
nvram set vlan13hwname=`nvram get vlan1hwname`
nvram set vlan14hwname=`nvram get vlan1hwname`

nvram set vlan1ports="0 1 2 3 4t 5"
nvram set vlan11ports="4t 5"
nvram set vlan12ports="4t 5"
nvram set vlan13ports="4t 5"
nvram set vlan14ports="4t 5"
nvram commit
reboot


Edit: After trying to hard reset for the fifth time I seem to now not be able to get into my router. Can't get to 192.168.1.1 (although strangely it does respond to ping when it's initially powering on, with TTL 100). Tried leaving power out but still nbo luck :'(.. Do I need to use tftp to re-flash it do you think?

Appreciate your help
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Feb 24, 2018 22:53    Post subject: Reply with quote
Did you change 5 to 5t?
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Sun Feb 25, 2018 10:11    Post subject: Reply with quote
Doh! that must have been where I went wrong...

I've got to unbrick my router then try this again! So in theory once I do these commands I should be able to plug in my laptop to any of the LAN ports and access to router via the router IP address?
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Mon Mar 05, 2018 15:46    Post subject: Reply with quote
Per Yngve Berg wrote:
Yes, all ports will work except the one PFSense is connected to.


I tried your commands again after unbricking my router. This seems to have somehow reset my router to defaults.
Are you sure the commands are correct? Why would they have wiped all my configs? Is there really no way to do this simple VLAN configuration in the GUI?

For now, I'm going to forget about the LAN port VLAN configuration, causing me too much headache. I'm trying to fix up the multiple SSIDs with different VLANs first and foremost but I can't seem to get that right either! Unable to join when I try and join SSID C Guest or C VPN
Configs here.. if someone is able to help I'd be very grateful
https://imgur.com/a/oJyHX

My ultimate aim is to separate my VLANS as follows:
1) I have pfSense connected to Port1. Pfsense has four VLAN configured, with DHCP Server.
2) I want to have 2 SSIDs, one for VLAN13 and one for VLAN14
3) I want to tag my three remaining LAN Ports as follows:
Port2 = VLAN11
Port3, Port4 = VLAN12

Really appreciate any help getting this going
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Sat Mar 10, 2018 17:46    Post subject: Reply with quote
I've been trying to get this working all week and still having problems. I seem to have just bricked my router again which is a right pain, it seems it can't survive more than 5 resets / firmware backups in a row before it decides to brick...

So I've tried every single possible setting in the GUI, followed countless guides and it's still not playing ball so I've decided to try doing it through the CLI. My aim is for port 0 WAN port to be the trunk port connected to my pfSense box. My other aim, at this point, is to just get VLANs working on wireless SSIDs, not on any of the cards on the R7000.
I have WAN Connection type -> Disabled. Assign WAN to switch -> Selected


The following was my most recent attempt after following your advice and some other guides online, does it look right?

root@DD-WRT:~# nvram show | grep vlan.*hwname
size: 34511 bytes (31025 left)
vlan13hwname=et0
vlan2hwname=et0
vlan12hwname=et0
vlan1hwname=et0
vlan11hwname=et0
root@DD-WRT:~# nvram show | grep port.*vlans
size: 34511 bytes (31025 left)
port3vlans=1
port1vlans=1
port4vlans=1
port2vlans=1
port0vlans=1 2 11 12 13 16
root@DD-WRT:~# nvram show | grep vlan.*ports
size: 34511 bytes (31025 left)
vlan12ports=0t 5
vlan2ports=0 5u
vlan13ports=0t 5
vlan11ports=0t 5
vlan1ports=0t 1 2 3 4 5

This however leaves me locked out after reboot from connecting to 192.168.1.1 via ethernet cable, however I can reach the router through WiFi thankfully.

Also tried it with tagging the processor port but made no difference.
root@DD-WRT:~# nvram show | grep vlan.*ports
vlan12ports=0t 5t
vlan2ports=0 5u
size: 38176 bytes (27360 left)
vlan13ports=0t 5t
vlan11ports=0t 5t
vlan1ports=0t 1 2 3 4 5


I then set my virtual SSIDs and bridges as follows:


Something must still be wrong somewhere but I cannot figure out what. Is there anything noticeably wrong with my nvram configs? I currently don't get any internet when connected on my main SSID, so maybe something wrong with the WAN port configs going to my pfSense.

Thanks for any help! Smile



rsz_screen_shot_2018-03-10_at_172150.png
 Description:
My bridge setup
 Filesize:  143.47 KB
 Viewed:  2336 Time(s)

rsz_screen_shot_2018-03-10_at_172150.png



rsz_1screen_shot_2018-03-10_at_172204.png
 Description:
Wasn't sure though what settings to use for the WiFI configs so I tried a couple of things, either way I wasn't able to connect to the Wifi on these SSIDs
 Filesize:  125.12 KB
 Viewed:  2335 Time(s)

rsz_1screen_shot_2018-03-10_at_172204.png


Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6865
Location: Romerike, Norway

PostPosted: Sat Mar 10, 2018 19:03    Post subject: Reply with quote
VLAN2 shall not be part of br0. On VLAN tab, set VLAN2 assigned to bridge=None
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Sun Mar 11, 2018 13:33    Post subject: Reply with quote
Per Yngve Berg wrote:
VLAN2 shall not be part of br0. On VLAN tab, set VLAN2 assigned to bridge=None


Thanks! Will try that out after I get ddwrt back on. Shall I do it in gui or with Nvram commands. Does everything else in my config look good to go?
windyboi
DD-WRT User


Joined: 01 Dec 2015
Posts: 111

PostPosted: Tue Mar 13, 2018 16:02    Post subject: Reply with quote
Tried those nvram commands from the CLI again and once again after reboot the router did not let me connect to my SSIDs or let me connect via any of the LAN ports. Therefore, I had to reset the router (hold reset button for 30 seconds) and lo and behold it's BRICKED again!!! (TTL 100 on pings.. need to flash with tftpd).

Third time I've bricked this R7000 trying to sort these VLANs out in what really doesn't seem too complicated. I'd literally pay someone to sort it out for me.

Am I resetting it wrong or doing something stupid for it to keep bricking?!
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum