Next, go to menu Network->Interfaces, select the tab with your guest network's name and assign it to the VLAN interface created in the previous step. For VLAN 2, the interface name is eth0.2. Then click Save & Apply to activate both settings:
If the guest network is assigned a local SSID, the option "creates a bridge ..." may be ticked already. Then just add the port to the bridge assigned to this network (the radio boxes for interfaces will turn into selection boxes for multiple selections automatically).
Last edited by R1D2; 04-12-2017 at 08:53.
Configured it, but when I check the port's ip address, none show the ip address of the guest interface. I ran arp -a for the ip test. Almost there, i think, i hope.
See the attached screenshots::
Your router has two interfaces: eth0 for WAN/WAN6 and eth1 for LAN. So it is one of the devices with two separate network interfaces I mentioned above. SW-Ports 0 to 3 (corresponding to port labels 4 to 1) are on eth1. To divide this interface into two networks LAN and GUEST, use eth1.1 for LAN (VLAN ID 1) and eth1.2 for GUEST (VLAN ID 2). Then you can assign a port (e.g. SW-Port 3/port labeled 1 on the box) to the GUEST network. In the LuCI screenshots above you divided eth0 into two VLANs.
Well, I thought all was good until I hooked it up to the modem and all.Devices connect and obtain an IP Address , however, no internet access. Back to the drawing board.
Am able to get to the internet, however, once i try to associated the port 4 to the guest network things go south. see screenshots of the configuration before assigning the port 4 to vlan2.
You'll notice also that the site is not secure. Is because I havent set up firewall?
Last edited by cayvman; 04-13-2017 at 09:28.
Why did you exchange eth0 <-> eth1? On routers with two NICs, one is wired to the port labelled "Internet" and the other one is wired to the 4-port switch. You can't exchange them at will. eth0 therefore must be the WAN interface (the only one interface, no VLANs make sense here!), while eth1 is the switch you can assign ports to VLANs.
i have no idea why. I was trying to follow the logic that WAN was eth1 and LAN eth0.
Quite frankly, I am lost with this stuff. I thought i had a clue but not anymore.
So, i should have one of the WANs going to eth0 and the other to eth1? Which WAN to eth0? WAN or WAN6?
And then my VLANs would be what eth1.1 and eth1.2?
This switch uses following switch layout:
Quite right, but both WANs (WAN and WAN6 if you use IPv6) are using eth0 (the "Internet line" so to say).So, i should have one of the WANs going to eth0 and the other to eth1? Which WAN to eth0? WAN or WAN6?
Yes. The eth1 (without dot anything) is the physical interface designated to the 4-port switch. Ignore for a moment that the wiki page assigns this VLAN 1 in the wiki linked above (the "default" or "native" VLAN, actually for data packets without any VLAN ID). The "real" VLAN 1 is eth1.1 on top of eth1, but both interfaces co-exist.And then my VLANs would be what eth1.1 and eth1.2?
The easiest way to get what you want is to do a factory reset of the OpenWRT firmware. Then note the network names, Ethernet interface names and WiFi interface names just to get an idea how this router is structured.
Next, create a GUEST network. If you also want a guest WiFi on the WRT1200 (beside the one propagated to the CPE), create another WiFi interface and assign it to the GUEST network. If you don't want a guest WiFi on the WRT1200, skip this step..
Then create a VLAN 2 (eth1.2) and select this in the GUEST network settings to assign the network to this VLAN. Now add a port to VLAN 2 to have it carry data from the port into the GUEST network.
Do not change the existing eth0, eth1, eth1.1 settings, just expand it by creating a eth1.2. Use only the latter in individual settings except that you have to "move" the port for the CPE from LAN (eth1.1) to GUEST (eth1.2). Then it should work out of the box already.
It looks confusing because a) Linksys changed switch layout on their WRT series quite often and b) without doubt there is a learning curve in OpenWRT if you are new to it, but the more experience you get, the clearer things will become and at a certain point you will acknowledge to have a highly configurable firmware with lots of functions not even present in manufacturer's own firmware.
Last edited by R1D2; 04-14-2017 at 00:32.
Also, don't know why when I go to the ip address I've been getting the message that the site is not secure/safe. Is it because I haven't set up any firewall directions?