Help with IPTables

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware
Author Message
gelcom
DD-WRT Novice


Joined: 09 Apr 2014
Posts: 20

PostPosted: Thu May 22, 2014 16:14    Post subject: Help with IPTables Reply with quote
Hi guys, I have a E3200 with DD-WRT v24-sp2 (03/25/13) mega on it.

I have succesfully set my router to work as above:


WAN connected to internet via PPOe
Port1 set to VLAN 11 with DHCP 192.168.11.1 / 255.255.255.0
Port2 set to VLAN 12 with DHCP 192.168.12.1 / 255.255.255.0
Port3 set to VLAN 13 with DHCP 192.168.13.1 / 255.255.255.0
Port4 set to VLAN 14 with DHCP 192.168.14.1 / 255.255.255.0

I also have a WIFI connection with DHCP 192.168.1.1

The problem is that if I go to any computer on the lan I can access any other computer. My LANs are not segregated.

I need WIFI LAN to be able to access VLAN13 because I have a WIFI printer and I want it to be able to print from any computer on VLAN13.

How to separate the VLANS from each other and have them access my internet connection PPOe on WAN port?

The other thing I notice after setting up these VLANs is that internet access is way slower then the previous setup (with no VLANs) and there are some sites I cannot access from wired VLANs too, I can access them just from Wifi computers. What am I doing wrong?


above my configs:

nvram show | grep port.*vlans
port5vlans=2 11 12 13 14 16
port3vlans=13 18 19 21
port1vlans=11 18 19 21
port4vlans=14 18 19 21
port2vlans=12 18 19 21
port0vlans=2 18 19 21

nvram show | grep vlan.*ports
vlan2ports=4 8
vlan0ports=1 2 3 4 5*
vlan1ports=0 1 2 3 8*

nvram show | grep vlan.*hwname
vlan2hwname=et0
vlan1hwname=et0
vlan0hwname=et0

Firewall
iptables -I INPUT -i vlan+ -j ACCEPT
iptables -I FORWARD -i vlan+ -o br0 -m state --state NEW -j ACCEPT
iptables -I FORWARD -i vlan+ -o vlan+ -m state --state NEW -j ACCEPT
iptables -I FORWARD -i vlan+ -o ppp0 -m state --state NEW -j ACCEPT




kind regards[img][/img]



networking.jpg
 Description:
 Filesize:  279.08 KB
 Viewed:  3870 Time(s)

networking.jpg



vlan.jpg
 Description:
 Filesize:  134.61 KB
 Viewed:  3870 Time(s)

vlan.jpg



setup.jpg
 Description:
 Filesize:  203.26 KB
 Viewed:  3870 Time(s)

setup.jpg


Sponsor
gelcom
DD-WRT Novice


Joined: 09 Apr 2014
Posts: 20

PostPosted: Thu May 22, 2014 21:39    Post subject: Reply with quote
The most strange thing is that when I connect through any VLANs I can't access some sites from the internet like yahoo mail, skype, ... and all other sites goes like a charm.

If I try to connect the same sites via VLAN1 (original WIFI LAN) the connection goes through perfectly.

I'm probably messing something up on my config.

Can somebody give me a hand on this please?

kind regards
gelcom
DD-WRT Novice


Joined: 09 Apr 2014
Posts: 20

PostPosted: Fri May 23, 2014 17:44    Post subject: Reply with quote
Please?
gelcom
DD-WRT Novice


Joined: 09 Apr 2014
Posts: 20

PostPosted: Mon May 26, 2014 11:55    Post subject: Reply with quote
any ideas, pls?
jackykoning
DD-WRT User


Joined: 15 May 2013
Posts: 222
Location: The Nederlands

PostPosted: Mon May 26, 2014 20:44    Post subject: Reply with quote
oke.

I think as far as I can remember you should create 3 more Bridges br1 br2 br3

assign vlan 11 to br0
assign vlan 12 to br1
assign vlan 13 to br2
assign vlan 14 to br3

then assign wireless to br2

if that is done it should work.

Remember to store your NVRAM before you go ahead.

_________________
Hi Smile
2x Netgear R7800
gelcom
DD-WRT Novice


Joined: 09 Apr 2014
Posts: 20

PostPosted: Tue May 27, 2014 0:26    Post subject: Reply with quote
What interface should I link each bridge to?
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum