mache DD-WRT User
Joined: 11 Apr 2010 Posts: 334 Location: San Francisco Bay Area
|
Posted: Sat Apr 26, 2025 0:12 Post subject: Netgear R9000 Configuration For Two VLANs |
|
I thought I would publish my config for two VLANs on the R9000 currently running on DD-WRT v3.0-r60137 std (03/08/25). It has been working well for over a month it may be helpful to others. I used Taming the ‘Dual-Switch’ BEAST of Netgear R98000 for VLANing by DWCruiser - https://forum.dd-wrt.com/phpBB2/download.php?id=56101 as a reference. The download is in this thread - https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=322349&postdays=0&postorder=asc&start=60
This configuration is setup so that VLAN3 (the newly added VLAN) is available on WiFi as a guest network and is also tagged along with VLAN1 (original VLAN) on the physical port at the back of the case labeled as Port 1 to facilitate wired Ethernet connection to an additional Wireless Access Point (WAP).
Administration, Commands, Startup
Code: | swconfig dev switch0 set enable_vlan 1
swconfig dev switch0 vlan 1 set ports "0t 1 2t 4t 6t"
swconfig dev switch0 vlan 2 set ports "3 5t"
swconfig dev switch0 vlan 3 set ports "0t 2t 4t 6t"
swconfig dev switch0 set apply
swconfig dev switch1 set enable_vlan 1
swconfig dev switch1 vlan 1 set ports "0t 1 2 3 4 5t"
swconfig dev switch1 vlan 3 set ports "0t 5t"
swconfig dev switch1 set apply
vconfig add eth1 3
ifconfig vlan3 up
brctl addif br1 vlan3 |
Administration, Command, Firewall
Code: | iptables -t nat -I POSTROUTING -o 'get wanface' -j MASQUERADE
iptables -I FORWARD -i br1 -o br+ -m state --state NEW -j REJECT |
Setup, Wireless
Virtual Interfaces wlan0.1 SSID [VLAN3 SSID] HWAddr [a:b:c:d:e:f]
<VLAN3 WiFi Parameters>
Save, Apply Settings
Setup, Networking
Create a Bridge
Code: | br0, Off, Off, 32768, 15, 20, 1500, <root MAC>
br1, Off, Off, 32768, 15, 20, 1500, <root MAC> |
Save, Apply Settings
Assign to Bridge
Code: | br1, vlan3, 128, 100
br1, wlan0.1, 128, 100 |
Save, Apply Settings
Interface Setup
Network Configuration br1
Code: | TX Queue Length, 1000
MTU, 1500
Multicast Forwarding: Disable
Masquerade / NAT: Enable
WAN NAT Redirection: Disable
ARPd Caching: Disable
Net Isolation: Disable
Forced DNS Redirection: Disable
IP Address: w.x.y.1 / 24
L2Mesh Bridge: br0 |
Save, Apply Settings
Multiple DHCP Servers
w.x.y.1 / 24, br1, On, A, B, 1440
Save, Apply Settings |
|