[rraehal]

I have a WRT54G v2.2 Router. I am using the DD-WRT Firmware "DD-WRT v24-sp2 (11/02/09) std - build 13064M VINT Eko"

I have set up the router with the IP 10.208.132.11/24 to mimic an work netwrok. I created vlan 2 with the address 10.208.135.1/25 to mimic a work network.

I can ping either gateway address from computers on either vlan. vlan0 = 10.208.132.x, vlan1 = wan, vlan2 = 10.208.135.x I also have internet access from either (v)lan.

I can not ping between the networks. I want to set up a test AD so I can work on changing some settings before I place them on my production WAN.

Is this possible?

I reset the router to defaults, upgrading to this build, reset again. I then changed the password, IP and Wireless Info. I then set up the vlan. no other changes have been made to the router from defaults.


Startup:

[rraehal]

I have still been unable to get this to work right. I did notice a few typos in my original post.

router = 10.208.132.1/24
vlan 2 = 10.208.135.1/24

I can still only get access to the Internet from vlan2. I can not access the vlan0 or vlan2 for two way traffic.

I currently have the SPI firewall setting to off. I have reset the router again and set things up from scratch a third time.

I am using telnet to create the vlan and set its ip address. My startup script has shorted to just the ifconfig line to set up the vlan2 address.

The firewall script still has the same iptables commands.

[phuzi0n]

Use the GUI to create the VLAN and assign its IP addressso that you won't need any iptables commands to allow them to communicate, only if you want to restrict them. You will need to either disable software firewalls on all the hosts or configure them to allow traffic from the other subnet before they will be able to communicate.

[rraehal]

Thank you for your suggestion.

I reset the router again. I configured the vlan2 using the web interface and then assigned the IP using the web interface. I had to bridge vlan2 to the LAN and then I could communicate across the networks.

I read a Wiki somewhere that said I should use the telnet connection to configure lans which is why I was using that method.

Everything is working now as expected.