From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from blu0-omc1-s38.blu0.hotmail.com (blu0-omc1-s38.blu0.hotmail.com [65.55.116.49]) by huchra.bufferbloat.net (Postfix) with ESMTP id 3C27021F118 for ; Mon, 15 Apr 2013 13:50:23 -0700 (PDT) Received: from BLU178-W19 ([65.55.116.9]) by blu0-omc1-s38.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 15 Apr 2013 13:50:22 -0700 X-EIP: [bRffP3VaZljJ/zEfKZLBNrJfwEGxpy3H] X-Originating-Email: [jeremy_tourville@hotmail.com] Message-ID: Content-Type: multipart/alternative; boundary="_b971b467-74f4-473c-889e-8b9c27b3f7cd_" From: Jeremy Tourville To: "cerowrt-users@lists.bufferbloat.net" Date: Mon, 15 Apr 2013 15:50:22 -0500 Importance: Normal MIME-Version: 1.0 X-OriginalArrivalTime: 15 Apr 2013 20:50:22.0531 (UTC) FILETIME=[D90BC130:01CE3A1A] Subject: [Cerowrt-users] How to setup VLANs? X-BeenThere: cerowrt-users@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Support for user problems regarding cerowrt List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Apr 2013 20:50:23 -0000 --_b971b467-74f4-473c-889e-8b9c27b3f7cd_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello=2C=20 I am trying to setup my WNDR3800 such that I have two vlans- one for my reg= ular network and another for my VoIP equipment. I am connected to the inte= rnet via DSL connection. I hand configured my config files (network=2C fir= ewall and dhcp) Upon reboot my I cannot login via the wired interface=2C I= have to use wireless. I have used openwrt in the past starting with versi= on 8.09 and most recently 10 (backfire) on my Asus WL520GU router. I do ha= ve a working config with two VLANs on the Asus system. While there are man= y similarities I can see there are enough differences that make things a li= ttle more complex. What am I doing wrong? I'd be glad to write up a docum= ent and post it for the benefit of everyone if I can make this work. Here = are copies of my config files- with passwords changed to something generic = for my dsl service (my real files have the correct info). I also removed s= ome info to hopefully keep this email small enough for the list. I also re= viewed what was written in another forum for some answers - http://www.mail= -archive.com/cerowrt-devel@lists.bufferbloat.net/msg00595.html Many thanks= in advance for your assistance. =20 Network config interface 'se00' option ifname 'se00' option proto 'static' option ipaddr '172.30.42.1' option netmask '255.255.255.224' option ip6assign '64' config interface 'se01' option ifname 'se01' option proto 'static' option ipaddr '172.30.42.33' option netmask '255.255.255.224' option ip6assign '64' config interface 'ge00' option ifname 'ge00' option proto 'pppoe' option username 'myusername' option password 'mypassword' =20 config switch option name 'rtl8366s' option reset '1' option blinkrate '2' option max_length '3' option enable_vlan '1' option enable_vlan4k '1' config switch_vlan option device 'rtl8366s' option vlan '1' option ports '2 3 5t' config switch_vlan option device 'rtl8366s' option vlan '2' option ports '0 1 5t' config switch_port option device 'rtl8366s' option port '1' option led '6' config switch_port option device 'rtl8366s' option port '2' option led '9' config switch_port option device 'rtl8366s' option port '5' option led '2' Firewall config defaults option input 'ACCEPT' option output 'ACCEPT' option forward 'REJECT' option drop_invalid '1' option syn_flood '1' option synflood_rate '200' option synflood_burst '500' option tcp_ecn '1' config zone option input 'ACCEPT' option forward 'REJECT' option output 'ACCEPT' option name 'wan' option masq '1' option mtu_fix '1' option network 'ge00' config zone option input 'ACCEPT' option forward 'ACCEPT' option output 'ACCEPT' option name 'lan' option network 'se00 se01 sw00 sw10' config forwarding option dest 'wan' option src 'lan' config forwarding option dest 'lan' option src 'wan' config zone option input 'ACCEPT' option output 'ACCEPT' option name 'guest' option forward 'ACCEPT' option network 'gw00 gw01 gw10 gw11' config forwarding option dest 'wan' option src 'guest' config forwarding option dest 'guest' option src 'lan' config forwarding option dest 'guest' option src 'wan' config rule option target 'ACCEPT' option name 'domain' option src '*' option dest '*' option dest_port '53' config rule option target 'ACCEPT' option name 'ntp' option proto 'udp' option dest '*' option src '*' option dest_port '123' config rule option target 'ACCEPT' option name 'dhcp4' option family 'ipv4' option proto 'udp' option src '*' option dest '*' option dest_port '68' config rule option target 'ACCEPT' option name 'printers' option proto 'tcp' option src '*' option dest '*' option dest_port '631' config rule option target 'ACCEPT' option name 'Useful Services' option proto 'tcp' option src '*' option dest '*' option dest_port '80 443 873 993' config rule option target 'ACCEPT' option name 'ipv6 dfz' option family 'ipv6' option proto 'all' option src '*' option dest 'guest' config rule option target 'ACCEPT' option name 'icmpv6' option family 'ipv6' option proto 'icmp' option src '*' option dest '*' config rule option src 'wan' option proto 'tcp udp' option dest_port '81 137 138 139 445 9091 8123' option name 'blockconfig' option target 'DROP' config rule option name 'Allow-DHCPv6' option src 'wan' option proto 'udp' option src_ip 'fe80::/10' option src_port '547' option dest_ip 'fe80::/10' option dest_port '546' option family 'ipv6' option target 'ACCEPT' config rule option src 'guest' option proto 'tcp udp' option dest_port '81 137 138 139 445 8123' option name 'blockconfig2' option target 'DROP' DHCPconfig dnsmasq option domainneeded '1' option boguspriv '1' option filterwin2k '0' option localise_queries '1' option rebind_protection '1' option rebind_localhost '1' option local '/home.lan/' option domain 'home.lan' option expandhosts '1' option port '53' option nonegcache '0' option authoritative '1' option readethers '1' option leasefile '/tmp/dhcp.leases' option resolvfile '/tmp/resolv.conf.auto' option cachesize '5000' option dhcpscript '/etc/dnsmasq_net6.sh' list notinterface 'ge00' config dhcp 'se00' option interface 'se00' option start '2' option limit '26' list dhcp_option '42=2C0.0.0.0' list dhcp_option '44=2C0.0.0.0' list dhcp_option '45=2C0.0.0.0' list dhcp_option '46=2C8' option leasetime '24h' option domain 'home.lan' config dhcp 'se01' option interface 'se01' option start '34' option limit '4' option leasetime '24h' option domain 'home.lan' =20 config dhcp 'ge00' option interface 'ge00' option ignore '1' config domain option name 'gw.home.lan' option ip '172.30.42.1' config domain option name 'wpad.home.lan' option ip '172.30.42.1' = --_b971b467-74f4-473c-889e-8b9c27b3f7cd_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello=2C
I am trying to setu= p my WNDR3800 such that I have two vlans- one for my regular network and an= other for my VoIP equipment. =3B I am connected to the internet via DSL= connection. =3B I hand configured my config files (network=2C firewall= and dhcp) =3B Upon reboot my I cannot login via the wired interface=2C= I have to use wireless. =3B I have used openwrt in the past starting w= ith version 8.09 and most recently 10 (backfire) on my Asus WL520GU router.=  =3B I do have a working config with two =3BVLANs on the Asus = =3Bsystem. =3B While there are many similarities I can see there are en= ough differences that make things a little more complex. =3B What am I = doing wrong? =3B I'd be glad to write up a document and post it for the= benefit of everyone if I can make this work. =3B Here are copies of my= config files- with passwords changed to something generic =3Bfor my ds= l service (my real files have the correct info). =3B =3BI also remo= ved some info to hopefully =3Bkeep this email small enough for the list= . =3B I also reviewed what was written in another forum for some answer= s - http://www.m= ail-archive.com/cerowrt-devel@lists.bufferbloat.net/msg00595.html =3B Many thanks in advance for your assistance.
 =3B
Network

 =3Bconfig interface 'se00'
 =3B&nbs= p=3B =3B =3B =3B option ifname 'se00'
 =3B&= nbsp=3B =3B =3B =3B option proto 'static'
 = =3B =3B =3B =3B =3B option ipaddr '172.30.42.1'
<= span> =3B =3B =3B =3B =3B option netmask '255.25= 5.255.224'
 =3B =3B =3B =3B =3B option = ip6assign '64'

config interface 'se01'
 =3B =3B&nb= sp=3B =3B =3B option ifname 'se01'
 =3B =3B=  =3B =3B =3B option proto 'static'
 =3B&nbs= p=3B =3B =3B =3B option ipaddr '172.30.42.33'
&= nbsp=3B =3B =3B =3B =3B option netmask '255.255.255.= 224'
 =3B =3B =3B =3B =3B option ip6ass= ign '64'

config interface 'ge00'
 =3B =3B =3B&= nbsp=3B =3B option ifname 'ge00'
 =3B =3B = =3B =3B =3B option proto 'pppoe'
 =3B =3B&n= bsp=3B =3B =3B option username 'myusername'
 = =3B =3B =3B =3B =3B option password 'mypassword'
=
 =3B
config switch
 =3B =3B =3B =3B&nb= sp=3B option name 'rtl8366s'
 =3B =3B =3B = =3B =3B option reset '1'
 =3B =3B =3B = =3B =3B option blinkrate '2'
 =3B =3B =3B&n= bsp=3B =3B option max_length '3'
 =3B =3B = =3B =3B =3B option enable_vlan '1'
 =3B =3B=  =3B =3B =3B option enable_vlan4k '1'

config swi= tch_vlan
 =3B =3B =3B =3B =3B option de= vice 'rtl8366s'
 =3B =3B =3B =3B =3B op= tion vlan '1'
 =3B =3B =3B =3B =3B opti= on ports '2 3 5t'

config switch_vlan
 =3B =3B = =3B =3B =3B option device 'rtl8366s'
 =3B = =3B =3B =3B =3B option vlan '2'
 =3B = =3B =3B =3B =3B option ports '0 1 5t'

config swi= tch_port
 =3B =3B =3B =3B =3B option de= vice 'rtl8366s'
 =3B =3B =3B =3B =3B op= tion port '1'
 =3B =3B =3B =3B =3B opti= on led '6'

config switch_port
 =3B =3B =3B&nbs= p=3B =3B option device 'rtl8366s'
 =3B =3B = =3B =3B =3B option port '2'
 =3B =3B = =3B =3B =3B option led '9'

config switch_port
 =3B =3B =3B =3B =3B option device 'rtl8366s'=
 =3B =3B =3B =3B =3B option port '5' =3B =3B =3B =3B =3B option led '2'
<= br>Firewall

config defaults
 =3B =3B =3B =3B =3B = option input 'ACCEPT'
 =3B =3B =3B =3B =3B option output 'ACCEPT'
 =3B =3B =3B =3B = =3B option forward 'REJECT'
 =3B =3B =3B = =3B =3B option drop_invalid '1'
 =3B =3B = =3B =3B =3B option syn_flood '1'
 =3B =3B&n= bsp=3B =3B =3B option synflood_rate '200'
 =3B&= nbsp=3B =3B =3B =3B option synflood_burst '500'
 =3B =3B =3B =3B =3B option tcp_ecn '1'

= config zone
 =3B =3B =3B =3B =3B optio= n input 'ACCEPT'
 =3B =3B =3B =3B =3B o= ption forward 'REJECT'
 =3B =3B =3B =3B =3B option output 'ACCEPT'
 =3B =3B =3B =3B = =3B option name 'wan'
 =3B =3B =3B =3B = =3B option masq '1'
 =3B =3B =3B =3B = =3B option mtu_fix '1'
 =3B =3B =3B =3B&nbs= p=3B option network 'ge00'

config zone
 =3B&nbs= p=3B =3B =3B =3B option input 'ACCEPT'
 =3B=  =3B =3B =3B =3B option forward 'ACCEPT'
&n= bsp=3B =3B =3B =3B =3B option output 'ACCEPT'
 =3B =3B =3B =3B =3B option name 'lan'
 =3B =3B =3B =3B =3B option network 'se00 se0= 1 sw00 sw10'

config forwarding
 =3B =3B =3B&nb= sp=3B =3B option dest 'wan'
 =3B =3B =3B&nb= sp=3B =3B option src 'lan'

config forwarding
&n= bsp=3B =3B =3B =3B =3B option dest 'lan'
&n= bsp=3B =3B =3B =3B =3B option src 'wan'

conf= ig zone
 =3B =3B =3B =3B =3B option inp= ut 'ACCEPT'
 =3B =3B =3B =3B =3B option= output 'ACCEPT'
 =3B =3B =3B =3B =3B o= ption name 'guest'
 =3B =3B =3B =3B =3B option forward 'ACCEPT'
 =3B =3B =3B =3B =3B = option network 'gw00 gw01 gw10 gw11'

config forwarding
 =3B =3B =3B =3B =3B option dest 'wan'
 =3B =3B =3B =3B =3B option src 'guest'
<= br> config forwarding
 =3B =3B =3B =3B =3B option dest 'guest'
 =3B =3B =3B =3B =3B <= /span>option src 'lan'

config forwarding
 =3B =3B&= nbsp=3B =3B =3B option dest 'guest'
 =3B = =3B =3B =3B =3B option src 'wan'

config rule
=  =3B =3B =3B =3B =3B option target 'ACCEPT= '
 =3B =3B =3B =3B =3B option name 'dom= ain'
 =3B =3B =3B =3B =3B option src '*= '
 =3B =3B =3B =3B =3B option dest '*'<= br> =3B =3B =3B =3B =3B option dest_port '= 53'

config rule
 =3B =3B =3B =3B =3B <= /span>option target 'ACCEPT'
 =3B =3B =3B =3B = =3B option name 'ntp'
 =3B =3B =3B =3B = =3B option proto 'udp'
 =3B =3B =3B =3B&nbs= p=3B option dest '*'
 =3B =3B =3B =3B = =3B option src '*'
 =3B =3B =3B =3B =3B= option dest_port '123'

config rule
 =3B = =3B =3B =3B =3B option target 'ACCEPT'
 =3B=  =3B =3B =3B =3B option name 'dhcp4'
 = =3B =3B =3B =3B =3B option family 'ipv4'
&n= bsp=3B =3B =3B =3B =3B option proto 'udp'
&= nbsp=3B =3B =3B =3B =3B option src '*'
&nbs= p=3B =3B =3B =3B =3B option dest '*'
 = =3B =3B =3B =3B =3B option dest_port '68'

co= nfig rule
 =3B =3B =3B =3B =3B option t= arget 'ACCEPT'
 =3B =3B =3B =3B =3B opt= ion name 'printers'
 =3B =3B =3B =3B =3B option proto 'tcp'
 =3B =3B =3B =3B =3B option src '*'
 =3B =3B =3B =3B =3B = option dest '*'
 =3B =3B =3B =3B =3B op= tion dest_port '631'

config rule
 =3B =3B =3B&= nbsp=3B =3B option target 'ACCEPT'
 =3B =3B&nbs= p=3B =3B =3B option name 'Useful Services'
 =3B=  =3B =3B =3B =3B option proto 'tcp'
 = =3B =3B =3B =3B =3B option src '*'
 =3B=  =3B =3B =3B =3B option dest '*'
 =3B&n= bsp=3B =3B =3B =3B option dest_port '80 443 873 993'
=
config rule
 =3B =3B =3B =3B =3B o= ption target 'ACCEPT'
 =3B =3B =3B =3B =3B option name 'ipv6 dfz'
 =3B =3B =3B =3B = =3B option family 'ipv6'
 =3B =3B =3B =3B&n= bsp=3B option proto 'all'
 =3B =3B =3B =3B&= nbsp=3B option src '*'
 =3B =3B =3B =3B&nbs= p=3B option dest 'guest'

config rule
 =3B = =3B =3B =3B =3B option target 'ACCEPT'
 =3B=  =3B =3B =3B =3B option name 'icmpv6'
 = =3B =3B =3B =3B =3B option family 'ipv6'
&n= bsp=3B =3B =3B =3B =3B option proto 'icmp'
=  =3B =3B =3B =3B =3B option src '*'
&nb= sp=3B =3B =3B =3B =3B option dest '*'

config= rule
 =3B =3B =3B =3B =3B option src '= wan'
 =3B =3B =3B =3B =3B option proto = 'tcp udp'
 =3B =3B =3B =3B =3B option d= est_port '81 137 138 139 445 9091 8123'
 =3B =3B =3B&n= bsp=3B =3B option name 'blockconfig'
 =3B =3B&n= bsp=3B =3B =3B option target 'DROP'

config rule
<= span> =3B =3B =3B =3B =3B option name 'Allow-DHC= Pv6'
 =3B =3B =3B =3B =3B option src 'w= an'
 =3B =3B =3B =3B =3B option proto '= udp'
 =3B =3B =3B =3B =3B option src_ip= 'fe80::/10'
 =3B =3B =3B =3B =3B optio= n src_port '547'
 =3B =3B =3B =3B =3B o= ption dest_ip 'fe80::/10'
 =3B =3B =3B =3B =3B= option dest_port '546'
 =3B =3B =3B =3B&nb= sp=3B option family 'ipv6'
 =3B =3B =3B =3B=  =3B option target 'ACCEPT'

config rule
 = =3B =3B =3B =3B =3B option src 'guest'
&nbs= p=3B =3B =3B =3B =3B option proto 'tcp udp'
 =3B =3B =3B =3B =3B option dest_port '81 137 1= 38 139 445 8123'
 =3B =3B =3B =3B =3B o= ption name 'blockconfig2'
 =3B =3B =3B =3B =3B= option target 'DROP'

DHCP

=

= config dnsmasq
 = =3B =3B =3B =3B =3B option domainneeded '1'
 =3B =3B =3B =3B =3B option boguspriv '1'
 =3B =3B =3B =3B =3B option filterwin2k '0'<= br> =3B =3B =3B =3B =3B option localise_qu= eries '1'
 =3B =3B =3B =3B =3B option r= ebind_protection '1'
 =3B =3B =3B =3B =3B option rebind_localhost '1'
 =3B =3B =3B =3B&nb= sp=3B option local '/home.lan/'
 =3B =3B =3B&nb= sp=3B =3B option domain 'home.lan'
 =3B =3B&nbs= p=3B =3B =3B option expandhosts '1'
 =3B = =3B =3B =3B =3B option port '53'
 =3B = =3B =3B =3B =3B option nonegcache '0'
 =3B&= nbsp=3B =3B =3B =3B option authoritative '1'
&n= bsp=3B =3B =3B =3B =3B option readethers '1'
 =3B =3B =3B =3B =3B option leasefile '/tmp/dh= cp.leases'
 =3B =3B =3B =3B =3B option = resolvfile '/tmp/resolv.conf.auto'
 =3B =3B =3B = =3B =3B option cachesize '5000'
 =3B =3B = =3B =3B =3B option dhcpscript '/etc/dnsmasq_net6.sh'
 =3B =3B =3B =3B =3B list notinterface 'ge00'<= br>
config dhcp 'se00'
 =3B =3B =3B =3B = =3B option interface 'se00'
 =3B =3B =3B = =3B =3B option start '2'
 =3B =3B =3B = =3B =3B option limit '26'
 =3B =3B =3B = =3B =3B list dhcp_option '42=2C0.0.0.0'
 =3B = =3B =3B =3B =3B list dhcp_option '44=2C0.0.0.0'
 =3B =3B =3B =3B =3B list dhcp_option '45=2C0.0= .0.0'
 =3B =3B =3B =3B =3B list dhcp_op= tion '46=2C8'
 =3B =3B =3B =3B =3B opti= on leasetime '24h'
 =3B =3B =3B =3B =3B option domain 'home.lan'

config dhcp 'se01'
 =3B = =3B =3B =3B =3B =3B =3B option interface 'se01'<= br> =3B =3B =3B =3B =3B =3B =3B op= tion start '34'
 =3B =3B =3B =3B =3B =3B&n= bsp=3B option limit '4'
 =3B =3B =3B =3B&nb= sp=3B =3B =3B option leasetime '24h'
 =3B = =3B =3B =3B =3B =3B =3B option domain 'home.lan'=  =3B =3B =3B =3B =3B =3B =3B =3B = =3B =3B =3B =3B =3B =3B =3B =3B =3B =3B=  =3B =3B =3B =3B =3B =3B

config dhcp= 'ge00'
 =3B =3B =3B =3B =3B option int= erface 'ge00'
 =3B =3B =3B =3B =3B opti= on ignore '1'

 =3Bconfig domain
 =3B =3B = =3B =3B =3B option name 'gw.home.lan'
 =3B = =3B =3B =3B =3B option ip '172.30.42.1'

config d= omain
 =3B =3B =3B =3B =3B option name = 'wpad.home.lan'
 =3B =3B =3B =3B =3B op= tion ip '172.30.42.1'
= --_b971b467-74f4-473c-889e-8b9c27b3f7cd_--