VLANs in OpenWrt 21
Vložit
- čas přidán 14. 05. 2024
- MANY THANKS TO ALL MY PATRONS on / onemarcfifty !!!
The VLAN Konfiguration has changed in OpenWrt 21.02 - Bridge VLAN Filtering and Distributed Switch Architecture (DSA) change the way we configure the network segmentation in a Guest, IOT and LAN Network.
00:00 Intro
00:58 TLDR - Chapter overview
01:15 Recap VLANs
04:24 Recap Version 19
08:13 Version 21 - 802.1Q VLANs
08:51 implicit/explicit configuration
10:53 Version 21 - DSA and bridges
12:12 Bridge VLAN filtering
16:07 egress/ingress/tagged/untagged explained
20:50 adding Wi-Fi to a VLAN
22:04 configuring a 2nd access point
24:30 Best practices and tips
Related videos:
Extend a Guest Wi-Fi to a second accesss point • extend a guest wifi on...
Configure the Firewall on OpenWrt • How to configure OpenW...
Wi-Fi Fast Roaming • CHEAP WI-FI MESH ALTER...
Build a managed switch with OpenWrt • Building a managed swi...
Commands I type or use:
cd /etc/config
cp network network.bak
opkg update
opkg install diffutils
while true; do clear ; diff network network.bak ; sleep 1 ; done
to check if IP4 forwarding is active:
cat /proc/sys/net/ipv4/ip_forward
(0: not active, 1: active)
to disable forwarding (does not survive reboot):
echo "0" (gt) /proc/sys/net/ipv4/ip_forward
(replace (gt) with the "greater" sign)
to survive reboot:
add net.ipv4.ip_forward=0
into the /etc/sysctl.conf file
The Linux Kernel DSA Documentation is here: www.kernel.org/doc/Documentat...
Please support me on patreon: / onemarcfifty
My youtube channel: / onemarcfifty
Marc on Twitter: / onemarcfifty
Marc on Facebook: / onemarcfifty
Marc on Reddit: / onemarcfifty
Chat with me on Discord: / discord
Licence-free music on / Lizenzfreie Musik von www.terrasound.de/lizenzfreie... music on / Lizenzfreie Musik von www.terrasound.de/lizenzfreie... - Věda a technologie
On my Archer C7 the br-lan does not have multiple lan ports bridged. Instead it only shows a "Switch VLAN" named eth0.1. I still have the Network->Switch menu item but no checkbox to "bridge interfaces" from the old guide.
Here is what worked for me:
In Network->Switch select "Add VLAN", then make sure it is tagged on the CPU(eth0). This will create another "Switch VLAN" under Network->Interfaces->Devices. Create a new Interface with a static adress and select eth0.3 (or whatever "Switch VLAN" was created). Select IP range, firewall, etc. and don't forget to enable DHCP. From there it seems identical to OpenWRT 19.
Many thanks for sharing - I’ll pin your comment in case anyone else runs into the same issue
Thanks for your hint! I've got an TP-Link Archer A7 which is very similar to the Archer C7 and I also don't have the possibility to configure multiple LAN ports in bridges (only eth0.1 by default). But in my case it was not enough to just assign the eth0.x switch VLANs to the interfaces. I first needed to create a bridge device for each VLAN with the corresponding eth0.x ports and then assign the bridge devices to the interfaces. Otherwise I had no connection via wifi. But now it works flawlessly - great stuff!
As it turns out DSA is not supported in IPQ806X SoC based devices yet. However, devices tab still shows up, only without the ability to configure anything in Netgear R7500 and R7800. I had read up on DSA and found it the most reasonable way to configure VLANs. However, I'm unable to use it as the feature is not yet available for my devices. I'm continuing to use the old way via switch menu, which I always found a bit confusing, but am getting used to it now by force. I'm only referring to LuCI as I don't go command line unless I absolutely have to.
@@RavingMad Thanks - same issue with my R7500v2. Very confused on how to proceed setting up a VLAN for my IOT!
Do you have a discord server?
Yes to all the tutorials please (RaspberryPi, Proxmox, VirtualBox).
Also would love to see detailed explaination of networking concepts using VirtualBox as I don't have access to physical hardware to play with.
It‘s noted - many thanks for the feedback!
please, a video on rpi->managed switch with vlans to access points with guest and main wifi. thanks.
Many thanks Glenn. I’ve taken note.
What a wonderful and a excellent explanation!
(Working here for years in networking)
Thank you very much ;-)
I bought a couple new routers to do your BATMAN setup and I was left wondering where my old and trusted "switch" section went. Didn't had any idea on DSA, so, I'll have to watch and re-watch this video until it sticks.
Really, thanks a LOT for doing all of this.
Wow!! This is really an amazing video. You do such a great job explaning it. You have great visual aids, the pacing is good too, and you answer almost every question I have all whilst highlighting difference between popular versions of OpenWRT. You condensed down what could have taken hours or days to piece together into a 30 minute video.
Hi Peter, many thanks. Yeah, the challenge is always to put the information together. I mean, the info is there - one just needs to find it ;-) Kind of a needle in the haystack challenge really ;-) I am glad that you liked the video - thanks for the feedback.
@@OneMarcFifty 1 year later and I'm still coming back to this video for tips :D It's like my goto walkthrough :)
Your way of explaining things is the perfect match for my way of understanding things. Thank you so much for having this channel. I'm learning so much about home networking.
Hi, many thanks for the feedback. I am happy that you found the videos useful.
Thank you very much for such a simple and understandable explanation about VLAN! Special thanks for your contribution to the distribution of OpenWRT. I subscribed a month ago and now I watch all your videos. And by the way, it was after this video that I was finally able to set up VLAN. I wish the grow of the channel and look forward to new videos. Such work and material is really worth supporting from the community through patreon or something else!
Many thanks ;-)
This video is great. ❤
After trying for 2 days and failing, I finally found your video and fully understood what to to. Afterwards it took me 20 minutes to configure after a full reset and it worked smoothly. 🎉
Wow. This is an amazing video and the way you deliver it is very helpful to understanding the new concepts and differences. I was about to revert back to v19 because learning all this stuff from the documentation seemed to complex to put into action, with all my kids and house mates pressing me to get the network back up.
Awesome- glad it helped ;-)
Thanks so much Marc for the OpenWRT Videos. I have just got started in this world of using old hardware. I have three Netgear WAC 104 access points running ver 22 and followed your video on fast roaming, what a difference in my wifi cheers. The call to action, yes Proxmox container with a lan to cover containers into a vpn would be amazing too see.
With DSA, having wan + lan1-4 might seem convenient, but there's a catch. They are virtual and all go through the same phy, so the bandwidth is split. There's also more CPU overhead. If a device has multiple physical ethernet interfaces connected to the switch, only the first phy is used, the rest are disabled. WRT3200 is a good example. It actually has 3 ethernet interfaces. eth2 is disabled at compile time, because it does not have a MAC address in ROM. With swconfig, by default eth0 was connected to LAN ports, while eth1 connected to WAN. With DSA, eth1 is disabled, wan + lan1-4 are virtual and go through eth0. So Marc, in case you were wondering why I maintain a patch called Revert DSA, now you know. Regarding TP-Link Archer C7 and 1043ND, I heard their switch is not compatible with DSA, so they are not likely to get support. They have only one ethernet interface, hence LAN and WAN are accomplished using VLANs eth0.1 and eth0.2.
Awesome feedback, many thanks Georgi.
I have two TP-Link WDR4310 as a dumb APs which as well not supported by DSA and as you mentioned a patch called "Revert DSA", can you reveal where that can be found? I am kinda stuck with my multi VLAN configuration on them.
@@tb3201 wrt3200acm: reverted to network switch, instead of DSA
So sad. Aren't there any bypass of creating that bottleneck?
@@tblisty6907 If you follow the history on your router, you might be able to find a state using swconfig before the switch to DSA, and recreate it.
Perfekt! Danke sehr!
This is as complete a VLAN tutorial as one can expect - great work and keep putting out such like-worthy content.
BTW; I like your T-Shirt color too!!
Many thanks ;-)
Thanks Marc, this is a great addition to all your OpenWrt videos. As always a great tutorial.🙏
Thank you very much ! I am hapy that you liked it ;-)
Thank you, that was a great wrap up. Being new to OpenWrt and its terminology this helped so much more than the written DSA guide on the docs 🙂
Hey Simon, many thanks - glad it helped.
I learn something new every time I watch this video. Just an average user with 4G internet trying to figure out how to set up vlan's on a network with 4G router and an 8 port switch and a few wireless access points! Appreciate you taking the time to try and simplify basic knowledge of how the internet works in your home and how to protect yourself from doing something that may not help your internet security which is important today to know that there is a lot more going on behind the screen than most understand and could be more harmful than you know!
Excellent description of what a VLAN is. Thanks for keeping it simple.
Hi, many thanks for the feedback! I am happy that you liked it ;-)
THANK YOU! I've been sitting for hours trying to figure this out, and it finally dropped when watching this
Hi Jacob, that’s excellent news- great it helped
Excellent Content..!!! Finally found someone with real under the hood explanations. Thank You for sharing .. Cheers :)
Many thanks. Now I get it why I was always losing connecting with the router and revert back when I was trying to create vlans at the device page. This episode is so awesome.
the trick is do not apply the vlan setting before creating a new br device and attach it to the correspondly vlan device
Yes - it's a real catch 22 - you need to be careful with VLANs - have locked myself out so often ;-)
Tip: "watch" A unix command that runs the command after it once, by default, every 2 seconds.
EG:
watch date
will print the date every 2 seconds, with a refresh.
If you want to do
watch something | grep something
You need to surround in quotes.
watch "something | grep something"
Many thanks Paul - I love watch but could not find a package on OpenWrt. Hence the script ;-)
Thank you very much for great explanation and interesting topics! I'm just in the middle of rebuiling my home network and this video helped me very much! Keep up the good work!
Thank you very much
Your videos are awesome! Thank you for making these. Similar content across the web are no where close to your level. I am new to networking and your videos have my home network up and running with multiple vlans with openwrt all of which is new to me.
Hi Mitesh, many thanks for that feedback. I am glad you like the videos and that they were of use to you ;-)
as always, high quality content in here. Thank you!
Thank you very much !
Wow, so much dedication for videos about OpenWrt. Loving it, great channel, subscribed!
Many thanks Karol !
Thank you! Been frustrated for about a week trying to figure out DSA & VLANs and an upstream managed switch
Many thanks for the feedback Simon - glad I could help ;-)
Amazing video. I was struggling with openwrt config specially vlans, guests and IOT. tks so much
Hi Filipe, many thanks for your feedback ! I am happy that you could use the video.
It would be great to have a raspberry Pi OpenWrt video. I've been busting my head for quite a while now to make OpenWrt work on raspberry Pi
Many thanks Anurut, I‘ve taken note.
Excellent job with these and previous videos on the topic 🥰
Thanks Brandon
It requires a deep understanding of how 802.1q works, before you can understand the content of this video. I've been using both OpenWrt 19.07 and 21.04 for a long time for complicated VLAN configuration, but I was asking myself what the asterisk (*) means in the context of, for example "lan2:u*" (in 19.07 it was simply either "2t" or "2"). After the video, now I understand it means the LAN2 port has the VLAN which is being configured as its PVID. I almost never use LuCI. Thanks a lot.
Many thanks for your feedback ! Yes - I admit that I had trouble understanding PVID vs. egress untagged for a (long) while - thought it was redundant really until I understood the egress/ingress part - VLAN is a huge learning curve in my opinion ;-)
Was solving a deep understanding problem from us, but we needed to skip back a lot of times. Thank you!
Hi, many thanks for the feedback. Was I going too fast at certain times or did I not explain well that you had to skip back ?
@@OneMarcFifty The speed was very suitable, there is nothing to complain about :) . We had to go through sentence by sentence - despite good prior knowledge. But that is simply the nature of learning things. First we watched the video informatively in its entirety, then we worked through it piece by piece.
What is a bit irritating is the synchronisation of your sentences with the picture shown. Sometimes we weren't sure if the picture still showed what you were saying or if you were referring to something that had already been "clicked". But that becomes clear when you really get into it and is not really that significant.
From there: Just keep it up, it was super helpful for us and I was able to apply the knowledge I learned from you several times in the meantime :)
Danke Marc, your explanations are really great. Yes, I am strongly encouraging you to make Raspberry Pi based OpenWrt tutorials, especially with the topic VLAN. Vielen Dank für deine wertvolle Zeit und viele Grüße aus NRW.
Vielen Dank - das Raspberry Pi video ist auf der Liste. LG Marc ;-)
I'm shocked - PRO level education for OpenWRT , Great job. Thank You
Hey, don't be shocked ;-) Thanks for the feedback ;-)
Thank you so much for this video have been waiting for this to config my IoT network, appreciate your efforts thumb up
Thank you very much - glad you liked it !
Great to have OpenWrt on RPi
Many thanks for the feedback Santhosh!
Thank you for making this video! I was clicking around the LuCI web interface for quite a bit without finding where to configure VLANs. Also, the official documentation does not seem to be very updated around configuring VLANs in newer versions of OpenWRT. Thanks again!
Hi Nils, thank you very much - I am glad you could use it !
Thanks for making this update. It was a little trickier to wrap my head around than your ususal fare, but I think I got it in the end ;-)
When the switch option disappeared on OpenWRT 21.02 I was a little disappointed at first. I could have read up on it, but I thought I'd just wait for the movie. Well, here it is!
The new GUI actually seems to be structured a little more clearly than the previous one, unless there's some fundamental misunderstanding on my part.
I hope this is an accurate observation:
The Network/Interfaces/Interfaces section configures OSI layer 3. The Network/Interfaces/Devices section configures (all) layer 2/ layer 1 interaction.
Hi Herald, first off - many thanks for the feedback and sharing !!!! Yes, I also had to do a bit of reading and getting my head around this - I actually liked the switch portion in OpenWrt19 - but as you rightly say, the way things are now are a bit more structured really.
Awesome. I actually got mine working already by leveraging off your previous video. I took many different paths than yours though to get mine set up. I guess there are different roads to get to the same place, but I have to admit, I did get locked out many times during my experimentation before I nailed it. And it only took me 2 weeks ;) . Next I’ll try following your ‘paths’ here instead. And thanks for explaining the ‘LOCAL’ setting. I really wondered what that was for. And I am now going back to re-number my VLANs, which are currently 1,2 and 3. So many good tips!
As for your next video, none of the one’s you mention. My request is ‘The Best OpenWrt Router for 2022’. I got the D-link Dir-2660 from your 2021 router video and this was a real good choice. Especially the recovery option it has. Thumbs up! Thanks man!
One thing I wish you would show us is how to use the firewall log to see if our cameras are trying to phone home. I've been struggling with this and just can't seem to get anywhere.
Hi, many thanks for this awesome feedback! I am actually already planning the OpenWrt 2022 episode, especially in the lights of Wi-fi 6. Your idea w/r to firewall logging sounds great as well! Many thanks!
Thanks a lot for these amazing videos on OpenWrt.. Please keep them coming :)
If possible, please do one on virtualizing OpenWrt in Proxmox. Looking forward to RPi tutorials as well.
Hi ZiaBuk - it's noted ;-) Many thanks for your feedback!
Hi. I just wish to complement your contribution to society and to what it means to share skills and knowledge. Furthermore, cudos to your skill and way how you deliver information to people! I hope you continue. I can’t thank you enough!
Hi Andrej, many thanks for your nice and friendly feedback !
Very good guide, good work Mark
Many thanks Kenny.
Marc, great video as always; you are a natural professor.
A suggestion for a future video; I see you have a MGNT interface, so how about a video on how to setup a secure server management network/environment.
Hi Andrew, many thanks. I had been thinking about this - just not sure how many people would really want to see this - but I think I'll cover it in the lights of the reverse proxy videos that I am planning (as I put an additional TOTP authentication using NGINX between the networks)
Thank you for your thorough treatment on the OpenWrt subject(s). Getting my head around OpenWrt is much easier now that I know what and why I'm performing desired tasks.👍
I would very much like to learn more about VLAN on an additional managed switch.
Hi - many thanks for the feedback! I've noted your suggestions.
You answered what I was wanting with my previous comment, Thanks, you do an amazing job. I know this is an older video but OpenWRT on a Raspberry Pi would be awesome.
Hi Michael, many thanks for the feedback ;-)
A single video with a managed switch, openwrt router, and proxmox would be fantastic!
Hi Matt, thanks for the idea.
and yes. If you could make one episode about the Pihole and the ADhome would be great. Looking forward to it. thank again.
It's noted - many thanks for your feedback ;-)
Super video! Thanks to you I now managed to get my perfect home setup running:
- main router (WRT-3200, wifi off due to buggy drivers, vlan filtering)
- dumb AP1 (Ubiquiti UniFi 6 LR: 2.4G/5G internal-wlan/guest-wlan, vlan filtering, fast roaming)
- dumb AP2/switch (WRT-1900 ACS: 2.4G/5G internal-wlan/guest-wlan, vlan filtering, fast roaming)
Hi Falk, many thanks for sharing this with us- I am happy that it could help !!!
Great video, as always. Combined this with the Firewall video to set up some medium and low security networks for multiple SSID APs. Thanks!
Thanks for sharing!
The best explanation about vlan on internet
Many thanks Wallace ;-)
Thanks so much Marc! This video helped immensely!
I echo the many other comments: YES! Would love to see a video on RPi 4 + Smart Managed Switch + VLANs!
I've used a couple of your videos now to build this type of setup with a RPi 4, Ethernet USB 3.0 dongle, and Netgear L2+ switch. But would really enjoy being able to "check my work" against yours!
Many thanks for the feedback ;-) I have taken note - it's going to come ;-)
this is really helped me,thanks dude
Glad it helped - thanks for watching!
Hi Mark, thank you again for your description of OpenWrt 21.02 news. I made an attempt some weeks ago to configure my dumb access point with such new version but I gave up because I missed this lesson. So at present I'm working with two devices both running OWrt 19.x. Maybe in a near future I'll upgrade at least the access point to 21.02, unless some inconcistencies arise. I've too many constraint on the main supplied by the internet provider.
Hi Andrea, many thanks for your feedback! Just be aware that the upgrade process can not convert your VAN config from 19 to 21, so you will have to do it by hand ;-)
Many thanks, just what I needed
You're welcome - thanks for watching ;-)
Also, might help to mention wireless networks should be added last otherwise the wireless network will be associated with the old un VLANed devices-very hard to debug.
Great Channel, amizing video as always. Thanks ☝️👍 🇵🇹
Many thanks!
Thank you very much for videos. Cheers.
Hi Juanitu, thank you very much ;-)
Very good stuff! You really know how to teach! Subcribed!!
Thank you very much !
Very well explained!
Thank you!
Call to action, yes please! Raspberry Pi as WireGuard VPN gateway has been on my mind for some time now. I have 2 of my VLANs go via the VPN provider and have one neutral VLAN (not via VPN but via ISP). Have that working now with luci-app-vpn-policy-routing, which also allows me to specify some remote ip addresses which should never be routed through the VPN, and VPN running on the router. But not sure how to do policy routing when using the Pi as WireGuard VPN gateway... Also very interested to learn how to properly configure Raspberry Pi as 'router on a stick' (with a VLAN aware switch).
This channel is the best resource on OpenWRT! Thanks a lot :) Bought my first OpenWRT routers (Belkin RT RT3200) encouraged by your videos. Probably wouldn't have tried it otherwise...
Awesome many thanks for the feedback ;-)
wonderful 👍, that is very useful, I'm a noob but your videos can teach me some things that even I don't have in mi mind, tanks sir.
Many thanks Luis, I am glad that you like them !
Thank you very very much! In 10 minutes fixed (dead WAN) router!
Hi Dmitry ! Many thanks for the feedback - glad it helped ;-)
Great Video and as always very clear! Thanks Marc for your efforts and the very useful content!
Concerning further topics, it would be great to see a setup with an Orange pi, orange pi zero (1 or 2) as super fast access point. Or Orange pi R1 setup as a powerful router with multiple vlan's, openvpn, ad blocking, etc. Regarding Proxmox, I personally have troubles to clearly setup a dedicated Lan voor my VMs and containers so if you have solutions that would be great!
Hi, many thanks for your feedback - I've taken note of our suggestions !
Hello and thank you for this video. I recently found your channel and you helped me understand a lot of things about OpenWRT.
I have few TPLink 1043ND v5 that i don't want to throw them out and they are not yet (or never) compatible with DSA. I have managed to assign wireless ssid's to vlans on 21.02.x without DSA like this:
1. Declare/make vlans on the switch menu, Network -> Switch
2. add this vlans to bridges on Network -> Interfaces -> Devices tab including the management vlan (management vlan and other vlans declared on switch that you don't want to assign to wireless networks can be added directly to Interfaces but i noticed that LLDPD package will not work without a interface based on a bridge)
3. create interfaces on Network -> Interfaces -> Interfaces tab using these newly created bridges
4. assign wireless networks to the newly created interfaces.
Hi Cristi, many thanks for sharing this !
Same here Cristi, the only way i found to configure it is like you say on TP-Link Archer C7 v4 - OpenWrt 21.02.3 r16554
you're incredible please keep uploading
Thanks - will do ;-)
I was a fool to think that I had managed to configure 21.03 with DSA by myself: 21.03 on FB4020 does still have a "switch" menu: I didn't realize that it's not a real DSA thing. Now I got EdgeRouter X and was shocked to find out that I'm clueless! Thank you so much for your great video! Now I can start!
Awesome - glad it helped
best video i've seen today, thanks 😎
Hi Ernesto, cool feedback - thanks a lot ;-)
Thank you for making a video with openwrt and raspberry Pi!
It took me AGES to find the switch menu! But I figured it out!
P.S. under access points you just create a VLAN on the Ethernet port using the "standard" Linux eth0.100 designation.
Hi James, glad you found it ;-)
Once again great video
Many thanks!
This was very helpful
Hi Markus, glad it was of use to you - thanks for feeding back.
I would love to see a video on a RP turned router with VLAN functionality, in depth and properly as you do, please!!!
Many thanks - it’s noted ;-)
Thank you for this video Marc! I tried following along but I only wanted to create a VLAN over one port, so where you configured both ports 1 & 2 I did nothing with port 2, etc... and when selected to tag or untag, I left all other ports as "Do not participate", I then lost connection after clicking save & apply. Do I need to segment the bridge to isolate port 1 from the other ports or is there something I missed or that you did not cover in this video which I am missing?
Vote w. both hands for RaspPi & Proxmox... Your toutorials are really great, sir!!!
Hi, many thanks !
Thank you for your great video ! I wish you already had this video made, as I was struggling with OpenWRT 21.02 on Fritzbox 4020 in October. I did make it through, but your video helped me to understand it a bit better.
Now, just some info from my side, in case it might be useful.... I have OpenWRT 21.02 on Raspberry pi 4 set up last year around June (a trial version): it was quite easy because I just ignored DSA thing. (had no idea back then) It was fine, because I wasn't counting on being able to use wifi on Raspi 4 itself, and it doesn't have any switch. I didn't make any bridge interface, just created eth0.xy and used them everywhere.
I used the only Ethernet port for LAN and WAN, where WAN side was connected with speedport entry2 in pure modem mode through a managed switch TP Link SG108PE. Then, something weird happened: when the modem gets power-cycled for some reason, the WAN interface of raspi didn't connect anymore on its own. I had to restart the raspi, too, in order to reconnect it. Restarting wan-interface alone didn't work. The jack of the power adapter of the modem is a bit loose, so it was a problem. In December, I decided to use USB-Ethernet adapter TP Link UE-300, then this problem went away. Moreover, it got noticeably faster.
So, I think, WAN on a dedicated USB adapter is better.
I was also powering the Raspi with PoE, but it also caused some subtle but serious problem, so now I have a power adapter.
Another thing is, I have SG108PE managed, and a few dumb switches from TP Link. The ability to negotiate the speed on dumb switches seems better than on SG108PE. SG108PE wants to drop the speed, even though higher speed can go without an issue. So I guess cheap managed switches are not good. That's another reason why it might be better to use USB-Adapter.
So it's just my experience, still a noob (but get a lot of help and learning:)
Hi - many many thanks for writing up this thorough feed-back and sharing it with us here !!!!
You’re the man Marc!!
Thank you ;-)
yes... yes... and yes.... :) as said before me - yes to all of them. Starting with OpenWRT with Orange Pi and then the others would be great!!! Thank you.
Hey, many thanks - It's noted ;-)
Many thanks for these excellent videos. If you are still thinking about future topics for videos, support for the Redmi AX6000 was recently merged. This device looks promising. 802.11ax and potentially better range than the Belkin RT3200 thanks to its external antenna array. SoC is more powerful as well. A video on OW installation and comparison to the RT3200 would be a great one IMO.
Hi Brandon - definitely. The AX6000 seems to be a good pick. Juuuust - I have become a bit reluctant to hardware-specific videos as the vendor can change the hardware at any time, still use the same brand and model (but V2 instead of V1) - but with totally different hardware, rendering the video unusable for many...
Yes, please :) Videos with adguard and Proxmox will be interesting :) Thank you in advance :)
Many thanks for your feedback
Wonderful explain
Thank you very much ;-)
Another great video! Very informative. OpenWrt in a virtual machine is a great topic. I'm currently virtualizing OpenWrt in Proxmox and I'm very happy with it but I would like to hear you opinion on the topic. Also I'm trying to add my ArcherC7 in a high availability setup in order to load balance when there is some maintenance on the Proxmox side. Thanks again for the videos!
Hi Anton, great ideas - many thanks for the feedback!
i would hit like many times if possible. Always godd and precious contents fro yr channel. Thank u for sharing it.
Hey, thank you very much - glad you liked it ;-)
With those videos, I have redrawn all my home networks! Thank you for all the helpful and clear information you provide with your channel! Really thank you!
One question about the VLAN (99) used for the management: here and on the other video you suggest leaving the DHCP to provide the IP for the mng interface (LAN) and in this video you suggest setting unmanaged all the others... but in the bad case you lose the upstream with the router the second AP will be totally unreachable... Do you have any concerns/comments to setting the interface with static IP outside the DHCP range provided by the upstream router to have a fallback way to enter the AP?
Hi, you are right. You may lose the device if you lose upstream. You can of course use static addresses. Just assign them outside of the dhcp server‘s range.
Great tutorial!!! Thanks.
Thank you Alex.
I love openwrt Contents, Keep it up!
Will do - thank you very much ;-)
Thank you Marc for your great videos! I have a managed switch that I plan on connecting my OpenWrt router to. Do I need to still do the switch configuration on the OpenWrt router, or just the switch? Or both? Thank you.
The short answer: It depends ;-) - long answer : Typically the connection between a router and a managed switch is done with a so called "Trunk port", i.e. a port that contains the tagged VLANs - so in this case you would need to configure both ends, the managed switch AND the OpenWrt router.
@@OneMarcFifty Thanks so much Marc!
Marc, your videos helped me understand the concepts better be able to use them. I however ran into an issue. I am using Linksys EA8500 with OpenWRT 23.05 and none of my LAN ports show under Network/Devices. I get stuck not being able to create a new VLAN 802.1q device because I cannot select my LAN ports to be part of the interface. How do I move forward?
I had OpenWRT up and running on a Raspberry Pi 4 some months back. I used a usb3 gigabit network adapter to get 2 wired network interfaces, and it was running fine like that for me. It was my first proper attempt to use OpenWRT, so I needed to do lots of trials and failures before it all worked okay for me. I was disappointed with the Pi 4's built in wireless capability though. It wasn't sufficiently fast for me, and there were issues using more than 1 SSID (e.g. 5GHz and 2.4GHz ones) at a time.
So, I already owned a Archer C7, and flashed that and prefer that for my OpenWRT router. The wifi capability is good, and it frees up the Pi 4 for other projects. I do like the "horsepower" of the Pi 4 though. Great for running VPN services or extra features, e.g. traffic analysis.
I'm interested in all of your suggested video topics. One area I have problems with is trying to get 4G LTE usb modems working with OpenWRT. (I like the idea of cellular broadband as the main internet system, as well as cellular broadband acting as a fail-over.)
Hi skug, many thanks for your feedback ! LTE on OpenWrt is on my list for a while - it will come ;-)
CtA: All 3, would be awesome! :D
Cool - it's noted :-) Many thanks for the feedback!
Thank you, thank you!
You're welcome - and thank YOU for watching ;-)
great video thank you very much
Thank you!
thank you for the information. easy to digest even for noobs like me!
Many thanks John!
Klasse... Auch dieses Video ist wieder genial. Einfach sehr gut erklärt.
Toll wäre es wenn du auch die Videos in deutsch machen würdest. Ich denke es gibt viele die das gerne sehen würden.
Hi Micky, leider ist die Reichweite auf Deutsch bei Weitem nicht so gut - ausserdem erlaubt CZcams leider keine zusätzlichen Audiospuren. Sorry. Es wird wohl bei Englisch bleiben. PS: Ich habe eh einen hässlichen schwäbischen Akkzent ;-)
@@OneMarcFifty hahahaha... Na ich als Hesse verstehe dich schon... Ja klar kann ich mir vorstellen das mehr in Englisch abgerufen wird... Dann mach weiter so..
Hallo Marc, excellent, very well visualised explanation. Thank you very much. Would it be possible to have your video how to separate wired and wireless subnets, each with own DHCP pool? I think it would be very illustrative for v21 capabilities. Danke im Voraus, Alexey
Many thanks Alexey. Why would you want to have separate IP address ranges for wifi and wire?
@Alexey Romanov Network, Interfaces, Add new Interface..., Device can be unspecified, Assign a Firewall zone, Configure DHCP. Edit your Wireless, Network=the name of the network you just created.
Hey Marc,
thanks for the excellent video. I was trying to configure pretty much the same setup as the one described here and i spent the last 4 days trying to find out why the AP (openwrt 21.02) is not passing any traffic through the vlan interfaces, but dhcp packets. Which was fixed once a bridge was configured and vlans added base on your explanation.
Another interesting topic would be a way to re-configure a bunch of APs through a centralized configuration (the mother of all LuCis). Are you aware of such solution?
Cheers and hope you continue with the amazing educational content.
Hi, many thanks for the friendly feedback ! there is a project called OpenWisp that kind of does what you describe - even though it is largely focussed on rolling out templates : openwisp.org/ Alternatively you can use tools like Rundeck or ansible to make changes to multiple devices at once.
This was very helpful, thank you! I was able to use this to update my Linksys WRT1900ACS from 19.07 to 21.02, but I still have one minor question. On 19.07, my switch configuration page on LuCI had two "CPU" interfaces, eth0 and eth1, like the screenshot at 4:44. However, in 21.02, I only see "eth0" like the screenshot at 8:30. What is the reason for the difference?
Everything works fine following your steps (bridging lan1 through lan4 and wan, and using bridge vnet filtering) so this is more of a curiosity. But I would be interested if you knew the answer!
The switch configuration tab has gone away in Version 21. The reason is that with the change to Linux Kernel 5.x (in OpenWrt 21) as opposed to Kernel 4.x (in OpenWrt 19.x) the switch portion may now be configured with Distributed Switch Architecture (DSA). If you want to do VLANs then you may still do this on a driver level or use the new Bridge VLAN Filtering feature. Have a look at this video czcams.com/video/qeuZqRqH-ug/video.html - There are many other videos on my channel czcams.com/users/onemarcfifty
What is the purpose of setting specific vlans as tagged/untagged on lan ports on the br-lan device, given that later in the video, the LAN interface is changed to where it no longer uses the br-lan device? What effect does br-lan have if every interface ultimately is set to use a different device?
I've ran OpenWRT on a Pi with WAN and LAN on eth0 using VLAN's and a managed switch. So a video explaining to people how this is done would be useful. The full duplex bit would be good to explain as well. People like to jump to well you'll get less then half your download speed if you only use one NIC.
Fair point Jeff, many thanks! Yes, half/full duplex might be worth a closer look in that video to come ;-)
Would be great to have a video with Raspberry Pi running PiHole / DHCP + AdGuard + WireGuard ! You rock !
Many thanks Zoraya - I’ll definitely have to do something with Pi’s in the near future
I have a question. Can the "2ND ACCESS POINT" be a managed switch? Thanks a lot for your video. I was really confused about this topic before watching it
great, now how do we setup & properly run fully OpenWrt 21 host +pihole & pikvm clients in QEMU/KVM running on arm pi 4 hardware?
im not sure any QEMU/KVM can properly virtualise pikvm vmouse/vkeyboard +vlan usage though.
i like 'Van Tech Corner' practical OpenWrt use cases but always advocate your channel for pure teaching practical clarity ,thanks to you iv learned a Lot.
a
OneMarcFifty/Van Tech Corner collaboration could be fun.
Might do it with Docker. Yes - Van Tech corner and I sometimes kind of „turn around each other“ ;-) sometimes he picks a subject first, sometimes I do. I‘ve had MWAN3 and wireless mesh on my list for so long, but he made videos first ;-) I‘ll give him credit when I do mine.
I would absolutely 100% be interested in seeing a video from you about vlans on the raspberry pi and also vlans on proxmox. I know the videos you're talking about. Have watched them more times than I'd like to admit, and spent many hours trying to get it to work on my RPI4, but was still never successful in doing so. I've burned myself out on the idea, to be honest, and have recently shelved the project. Would love to get a fresh take from your perspective.
Great feedback Matt - many thanks !