Flint2 + vlans

Hi, I’m struggling with this on stock firmware.
MT6000 v4.8.3 - LuCI openwrt-21.02 branch

I get it can be buggy, and when you click ‘Save’ it does not register but does add to actions. You just refresh the browser after each Save action.
I get you need to ‘Save and Apply’ only at certain times in order for it to work.
Yes, I can go full OpenWrt but I would rather not just yet.

…but it keeps failing for me. Each time it fails to apply and rolls back, or locks me out of the router.
Are there any more recommended guides in case I have not tried them already?

What I am looking to do:
vlan10 - port5 only - 192.168.10.1 - for a tv box that needs external internet, not on VPN or DNS to work
My main network is 192.168.8.1

Network > Interfaces > Devices
Configure : br_lan

Save & refresh browser
Network > Interfaces : Add New Interface
Name : Static Address ; Device = br_lan.10
IPv4 address = 192.168.10.1
Netmask 255.255.255.0
Untick Use Default Gateway
Firewall zone = lan
Setup DHCP = yes
Save & Apply

When you enable vlan filtering, and add vlan id, when it adds, it starts with vlan 1, skip that, don't mess with it, add another one. In the vlan 1 set all ports to U except 5 which is the one you're wanting to segment. In the added vlan 10 untick local and leave all other ports alone cept 5, set it to U.

1 Like

Thanks!

Sooooo…. everything works well when plugged into lan port with ethernet!

My laptop doesn't have a lan port, and apparently my old dell usb ethernet dongle is broken or not compatible with laptop

I was trying to do it via WiFi, DOH!

1 Like

No problem. You can now create a vap (virtual access point) and assign it to your segmented port should you want to.

2 Likes

Some notes for others that might land here:

Before starting:

  • connect to the router via LAN cable not wifi (you may need to disable wifi to stop auto connect)
  • Always backup along the way
  • Only save & apply at the main chuncks (after interfaces and device work)
  • in stock firmware OpenWrt 21 sometimes you click save and it appears not to have worked, beware it might have. If in doubt dismiss and reload the page. Pending changes are in the top right.
  • Start small and build (I am a noob and probably took on too much too soon)
  • Reboots can be useful after network changes are applied, just to refresh everything with new settings.

Vlan / Subnet filtering
LuCI > Network > Interfaces > Devices
br-lan > Configure
Enable vlan filtering = yes
I used 1 for the primary vlan filter but i’ve seen videos of 99 or whatever, the important bit for me was selecting the LAN ports I wanted included in each vlan.
For me LAN5 would be dedicated to a Virgin Media TV box that doesn’t play nice with others.

SAVE only

Network > Interfaces > Interfaces
br-lan > Edit
Device = br-lan.1 (to match the vlan1 I just created)
Save & Apply

Network > Interfaces > Interfaces > Add New Interface
Name = vlanxx
Protocol = Static address
Device = br-lan.20 (to match the vlan20 I created earlier)
IPv4 address = 192.168.xx.1 (whatever you want)
Pv4 netmask = 255.255.255.0
Use default gateway = I think I should have left ticked, think it means you can access admin on 192.168.8.1 and the new IPv4
Setup DHCP = yes (i think this is needed if you assign this to a wifi, I will only ever have one client attached via lan only)
Firewall - mine vlan20 is part of LAN, at some point I will want to segregate things to more defined groups
Save & Apply
Probably Reboot too

1 Like

Now moving onto getting BBC iPlayer working…
Virgin Media TV360 works now, I can elaborate for others if they find this post.