How do i create VLAN?

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
View previous topic :: View next topic  
Author Message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Thu Jul 10, 2014 0:05    Post subject: How do i create VLAN? Reply with quote
Can anyone point me to documentation to create VLANs on the DD-WRT interface?

I am using the Buffalo AC1750 WZR-1750DHPD version

Thanks


EDIT
#####

Please see attached

I am trying to set LAN port 4 to VLAN4 and have that interface have 192.168.4.0/24 subnet

I am trying to run a vyos(vyos.net) router on this interface so i can have the vyos router be DHCP server(for another network 172.16.0.0/24), that way it doesn't conflict with my main home Buffalo DD-WRT router

Thanks again


Anyone willing to assist here?
[/img]

vlanv1.PNG
 Description:
 Filesize:  30 KB
 Viewed:  30045 Time(s)

vlanv1.PNG
Back to top View user's profile Send private message
Sponsor
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6868
Location: Romerike, Norway
PostPosted: Thu Jul 10, 2014 14:32    Post subject: Reply with quote
It's best to use the command line to set up VLAN

http://www.vspecialist.co.uk/creating-vlans-in-dd-wrt-part-1/
http://www.coertvonk.com/technology/networking/dd-wrt-leading-two-seperate-networks-5829
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Thu Jul 10, 2014 14:50    Post subject: Reply with quote
Per Yngve Berg wrote:
It's best to use the command line to set up VLAN

http://www.vspecialist.co.uk/creating-vlans-in-dd-wrt-part-1/
http://www.coertvonk.com/technology/networking/dd-wrt-leading-two-seperate-networks-5829


Thanks
Also please take a look at my REQUEST(http://www.dd-wrt.com/phpBB2/viewtopic.php?t=263792) post; hoping lots of people agree so we can add this

Thanks
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Fri Jul 11, 2014 1:18    Post subject: Reply with quote
Per Yngve Berg wrote:
It's best to use the command line to set up VLAN

http://www.vspecialist.co.uk/creating-vlans-in-dd-wrt-part-1/
http://www.coertvonk.com/technology/networking/dd-wrt-leading-two-seperate-networks-5829


found a web gui video
http://www.dailymotion.com/video/xip4lu_dd-wrt-creating-a-secure-and-separate-vlan-network_tech

is it advisable to follow the video? for Firmware: DD-WRT v24SP2- (03/24/14) std (SVN revision 23709)
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Sun Jul 13, 2014 21:24    Post subject: Reply with quote
Ok can someone please help here?

I have followed this video http://www.dailymotion.com/video/xip4lu_dd-wrt-creating-a-secure-and-separate-vlan-network_tech and i have created vlan10 on LAN port 1

VLAN10 has 192.168.10.1/24 subnet
and the other ports are set to VLAN1 which has 192.168.1.1/24


Now how do i make all VLAn10 to contact VLAN1 but VLAN1 should not contact VLAN10?

Right now everyone can contact everyone

Also if i connect an opensource router like vyos.net to the VLAN10 network from LAN port 1, if i make this router the DHCP server, all should be fine right since i am on the VLAN?

Just wanted to make sure before i flip the whole network down

Please reply and help out
Thanks
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Mon Jul 14, 2014 3:48    Post subject: Reply with quote
Here is what i have so far

#####
What i want to do
#####

#VLAN1(ports 2,3 and 4) 192.168.1.0/24 Gateway 192.168.1.1(DDWRT router)

#VLAN10 (port 1) 192.168.10.0/24 Gateway 192.168.10.1

VLAN10 network should be able to reach internet and be able to communicate with VLAN1 network

VLAN1 network should be able to reach the internet(default) and NOT be able to communicate with VLAN10 network


#####
Currently
#####

VLAN10 and VLAN1 can both communicate vice versa and are both reaching the internet. Please see attached images

Thanks


[/img]

ddwrtv3.png
 Description:
 Filesize:  33.21 KB
 Viewed:  29827 Time(s)

ddwrtv3.png
ddwrtv2.png
 Description:
 Filesize:  81.41 KB
 Viewed:  29827 Time(s)

ddwrtv2.png
ddwrtv1.png
 Description:
 Filesize:  133.89 KB
 Viewed:  29827 Time(s)

ddwrtv1.png
Back to top View user's profile Send private message
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6868
Location: Romerike, Norway
PostPosted: Mon Jul 14, 2014 15:29    Post subject: Reply with quote
Block access with an iptables rule.

Code:
iptables -I FORWARD -i br0 -o vlan10 -m state --state NEW -j DROP
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Mon Jul 14, 2014 17:22    Post subject: Reply with quote
Per Yngve Berg wrote:
Block access with an iptables rule.

Code:
iptables -I FORWARD -i br0 -o vlan10 -m state --state NEW -j DROP


Is that same as this?

iptables -A FORWARD -i br0 -o ! vlan10 -j DROP

I tried the above which was used in the video and it DID NOT work

So are they different
Back to top View user's profile Send private message
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 6868
Location: Romerike, Norway
PostPosted: Mon Jul 14, 2014 17:25    Post subject: Reply with quote
Your version will also block answers from br0 to requests from vlan10.
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Mon Jul 14, 2014 21:51    Post subject: Reply with quote
Per Yngve Berg wrote:
Block access with an iptables rule.

Code:
iptables -I FORWARD -i br0 -o vlan10 -m state --state NEW -j DROP


Thanks a lot buddy
That did the trick

Why are the two commands so different yet look similar?
Back to top View user's profile Send private message
ddwrtengineer
DD-WRT Novice


Joined: 02 Jul 2014
Posts: 16
PostPosted: Mon Jul 14, 2014 21:53    Post subject: Reply with quote
Per Yngve Berg wrote:
Your version will also block answers from br0 to requests from vlan10.


One last question i have for you

#1 If i setup another router (will be using vyatta/vyos.net) on the VLAN10 on port 1 interface and make the router DHCP, it won't mess with my main buffalo DD-WRT router right?

Thanks man
Back to top View user's profile Send private message
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum