Netgear R9000 Configuration For Two VLANs

Post new topic   Reply to topic    DD-WRT Forum Index -> Qualcomm Atheros based Hardware
Author Message
mache
DD-WRT User


Joined: 11 Apr 2010
Posts: 334
Location: San Francisco Bay Area

PostPosted: Sat Apr 26, 2025 0:12    Post subject: Netgear R9000 Configuration For Two VLANs Reply with quote
I thought I would publish my config for two VLANs on the R9000 currently running on DD-WRT v3.0-r60137 std (03/08/25). It has been working well for over a month it may be helpful to others. I used Taming the ‘Dual-Switch’ BEAST of Netgear R98000 for VLANing by DWCruiser - https://forum.dd-wrt.com/phpBB2/download.php?id=56101 as a reference. The download is in this thread - https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=322349&postdays=0&postorder=asc&start=60

This configuration is setup so that VLAN3 (the newly added VLAN) is available on WiFi as a guest network and is also tagged along with VLAN1 (original VLAN) on the physical port at the back of the case labeled as Port 1 to facilitate wired Ethernet connection to an additional Wireless Access Point (WAP).

Administration, Commands, Startup

Code:
swconfig dev switch0 set enable_vlan 1
swconfig dev switch0 vlan 1 set ports "0t 1 2t 4t 6t"
swconfig dev switch0 vlan 2 set ports "3 5t"
swconfig dev switch0 vlan 3 set ports "0t 2t 4t 6t"
swconfig dev switch0 set apply
swconfig dev switch1 set enable_vlan 1
swconfig dev switch1 vlan 1 set ports "0t 1 2 3 4 5t"
swconfig dev switch1 vlan 3 set ports "0t 5t"
swconfig dev switch1 set apply
vconfig add eth1 3
ifconfig vlan3 up
brctl addif br1 vlan3

Administration, Command, Firewall

Code:
iptables -t nat -I POSTROUTING -o 'get wanface' -j MASQUERADE
iptables -I FORWARD -i br1 -o br+ -m state --state NEW -j REJECT

Setup, Wireless

Virtual Interfaces wlan0.1 SSID [VLAN3 SSID] HWAddr [a:b:c:d:e:f]

<VLAN3 WiFi Parameters>

Save, Apply Settings

Setup, Networking

Create a Bridge

Code:
br0, Off, Off, 32768, 15, 20, 1500, <root MAC>
br1, Off, Off, 32768, 15, 20, 1500, <root MAC>

Save, Apply Settings

Assign to Bridge

Code:
br1, vlan3, 128, 100
br1, wlan0.1, 128, 100

Save, Apply Settings

Interface Setup

Network Configuration br1

Code:
TX Queue Length, 1000
MTU, 1500
Multicast Forwarding: Disable
Masquerade / NAT: Enable
WAN NAT Redirection:  Disable
ARPd Caching: Disable
Net Isolation: Disable
Forced DNS Redirection: Disable
IP Address: w.x.y.1 / 24
L2Mesh Bridge: br0

Save, Apply Settings

Multiple DHCP Servers

w.x.y.1 / 24, br1, On, A, B, 1440

Save, Apply Settings
Sponsor
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Qualcomm Atheros based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum