# Flip WAN/LAN of Brume 2

**URL:** <https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537>\
**Category:** Router\
**Created:** [January 20, 2024, 12:08am UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537 "2024-01-20T00:08:29Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 12:08am UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/1 "2024-01-20T00:08:29Z")

</div>

Is it possible to flip / program the WAN/LAN of the Brume 2 so they switch places? WAN becomes LAN and LAN becomes WAN?

Honestly I have zero idea, why GLInet chose to give WAN 2.5Gbit and LAN 1Gbit instead the other way around. It makes zero sense. You cant make any use of the 2.5GBit WAN, but the other way you totally could, if you use Multi-WAN (WAN 1Gbit + USB3 tethering) and then route it over a 2.5Gbit LAN.

There just seems to be the option to change WAN to LAN so you have two LAN. I am sure it would be possible to program the above though if GLinet would implement/allow it.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 4:37am UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/2 "2024-01-20T04:37:02Z")

</div>

I'm basing this on a Slate AX running firmware 4.4.6-release1. The Burme 2 may be slightly different.

So the 2.5GbE is `eth0` == WAN while `eth1` == 1GbE == LAN by default. Modify `/etc/config/network` accordingly around line 41 to 'invert' that:

```auto
config interface 'wan'
        option device 'eth0'
        option proto 'dhcp'
        option force_link '0'
        option ipv6 '0'
        option metric '10'
        option peerdns '0'

```

You'll probably need to nix `eth1` from the bridge but attach `eth0` to it, ~line 11:

```auto
config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth1'
        list ports 'eth2'
        option ipv6 '0'

```

`/etc/init.d/network reload` should kick it into effect.

Here's a practical primer if you've never ssh'd into or edited on a Linux box:

> [@HOW-TO: Script: List My OPKGs (to a file for backup)](https://forum.gl-inet.com/t/how-to-script-list-my-opkgs-to-a-file-for-backup/30963):
>
> Keywords: backup, opkg, plugins, list, howto, script, shell, luci, restore, ipk, tarball, conf Description List user’s (your) installed packages, writing them to a text file that can be used to reinstall the binaries of what a user manually installed. The resulting .list file will be use to opkg install to pull from the feeds. That is done with two commands in one execution. The GL GUI doesn’t feature a backup function. Creating & restoring a backup achieve (.tar.gz, aka tarball) of all your…

---

<div class="post-metadata">

**Author:** ![DaWeav](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/daweav/32/14805_2.png) [@DaWeav](https://forum.gl-inet.com/u/DaWeav)\
**Post date:** [January 20, 2024, 5:17am UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/3 "2024-01-20T05:17:07Z")

</div>

Just in case SSH isn’t your thing, I was able to do it using the Advanced Settings GUI on my Brume 2.

I opened the Advanced Settings GUI, and selected Network/Interfaces.

On the Interfaces Tab, I selected ‘edit’ on the WAN Interface, and changed the Device from eth0 to eth1 and saved (NOT Save and Apply at the bottom).

I then selected the Devices Tab. On the Devices Tab, I selected ‘configure’ on the br-lan device. Then I selected the Bridge Ports dropdown where I unchecked eth1 and checkmarked eth0 and saved.

Then I selected Save & Apply, and physically swapped the Ethernet cables around.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 5:43am UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/4 "2024-01-20T05:43:29Z")

</div>

For others: GL GUI → System → Advanced Settings → LuCI’s default password is the same as used to log onto the GL GUI.

---

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 2:55pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/5 "2024-01-20T14:55:05Z")

</div>

Thank you very much. Is that really all? Will this then automatically change the GLInet web interface too? That all settings flip? and everything else is working as if you just flipped wan and lan? just switch the lan cables and everything works as before? Nothing else to do or something not working anymore with doing this? All still working afterwards, VPN, Wireguard, firewall rules, status information in web interface and so on? If it is that easy, why is there no toggle button in the GLinet web interface to flip WAN/LAN. They need to give that option.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 3:00pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/6 "2024-01-20T15:00:23Z")

</div>

IDK; I’ve never needed to do it. Worst case scenario is the GL GUI no longer properly reflects what’s going on ‘under the hood.’ It’s easy enough to revert back yet again/undo if needed.

I don’t see much of a reason for GL to care about a GUI option; it’s still ultimately bound by the 1GbE as its the ‘weakest link in the chain’/bottleneck in the Burme 2.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 20, 2024, 3:04pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/7 "2024-01-20T15:04:44Z")

</div>

Pretty sure the GUI won’t reflect the change.

---

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 3:22pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/8 "2024-01-20T15:22:29Z")

</div>

Well, then it is totally useless. Of course I want the GLInet web interface still work with everything. VPN both OpenVPN wireguard client and server, policies, firewall, routing, DHCP, Multi-WAN, EVERYTHING.

What meaning does the above change have if nothing is working then with it?

---

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 3:24pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/9 "2024-01-20T15:24:53Z")

</div>

> [@bring.fringe18](#):
>
> I don’t see much of a reason for GL to care about a GUI option; it’s still ultimately bound by the 1GbE as its the ‘weakest link in the chain’/bottleneck in the Burme 2.

No, it is not. As I explained. Using Multi-WAN 1gbit + USB 3.0 tether with 4G/5G would be \>= 2Gbit for example being used. So it totally makes sense WAN is 1gbit and LAN 2.5Gbit, not the other way around.

---

<div class="post-metadata">

**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\
**Post date:** [January 20, 2024, 3:27pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/10 "2024-01-20T15:27:22Z")

</div>

my guess is try it. 🙂

from what i’ve observed in the scripts in `/usr/bin/` is that most is affected br-lan and br-wan(for flint2) or br-guest if these keeps remained the same I don’t think it would cause huge issues.

it will though if lan had `br-lan.1` even though with the iptables wildcard for `br-+` but I think this is because of nfttables, so if its only swapping `eth0` and `eth1` inside the bridges, I think it should be fine still.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 3:27pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/11 "2024-01-20T15:27:47Z")

</div>

~~It’ll work but it’s still ultimately pointless. WAN/2.5 GbE → LAN/1 GbE is the same as WAN/1 GbE → LAN/2.5 GbE in this case. There’s only two ports.~~

> [@mkdr](#):
>
> No, it is not. As I explained. Using WAN 1gbit + USB 3.0 tether with 5G would be \>= 2Gbit for example being used.

You did mention tethering.

---

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 3:28pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/12 "2024-01-20T15:28:30Z")

</div>

> [@bring.fringe18](#):
>
> You did mention tethering.

What… Read my initial post maybe again. Do you know what multi-wan is and load balance?

---

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 3:29pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/13 "2024-01-20T15:29:47Z")

</div>

> [@xize11](#):
>
> my guess is try it.

Would be bad, if GLInet used hard coded eth0 and eth1 though in their scripts and not using the network configuration with interface names.

Glinet easily could implement a switch in their web interface to flip WAN/LAN which would have an important use case.

---

<div class="post-metadata">

**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\
**Post date:** [January 20, 2024, 3:32pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/14 "2024-01-20T15:32:12Z")

</div>

yup you are right that is a possibility, I also edited it a little (also with location where most of the scripts are), I think the most important is to keep the bridge devices as how they are for the interfaces wan and lan, only swap the DSA devices in the bridges.

---

<div class="post-metadata">

**Author:** ![admon](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/admon/32/32880_2.png) [@admon](https://forum.gl-inet.com/u/admon)\
**Post date:** [January 20, 2024, 3:37pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/15 "2024-01-20T15:37:48Z")

</div>

> [@mkdr](#):
>
> Using WAN 1gbit + USB 3.0 tether with 5G would be \>= 2Gbit for example being used.

Nah, It would be 1 Gbps for 1st uplink and whatever-5G-can-do Gbps for the 2nd uplink.  
It does not add up.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 3:40pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/16 "2024-01-20T15:40:00Z")

</div>

Nah, I’m done with this punk. Let this mouthy sh!thead find out on his own if he thinks the SOC will do full duplex.

---

<div class="post-metadata">

**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\
**Post date:** [January 20, 2024, 3:55pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/17 "2024-01-20T15:55:44Z")

</div>

I got good news 😃

I have followed the following steps:

1. luci → network → interfaces → devices → br-lan edit → bridged devices (remove eth1 put eth0) and click save.
2. click tab interfaces in luci → network → interfaces, and edit wan and changing the device to from eth0 to eth1
3. force and apply (unchecked)

then I changed the cables and it works, the web ui boots up, the clients also show up.

the vpn and such I have not tested yet.

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 3:59pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/18 "2024-01-20T15:59:41Z")

</div>

Of course they’d show up; the if names are virtual assignments. Remapping ports doesn’t affect them. What GL does with them elsewhere is a different question.

---

<div class="post-metadata">

**Author:** ![mkdr](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/m/c5a1d2/32.png) [@mkdr](https://forum.gl-inet.com/u/mkdr)\
**Post date:** [January 20, 2024, 4:02pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/19 "2024-01-20T16:02:42Z")

</div>

> [@admon](#):
>
> Nah, It would be 1 Gbps for 1st uplink and whatever-5G-can-do Gbps for the 2nd uplink.  
> It does not add up.

Not sure what youre talking about, of course they add up:

 ![image](https://forum-static.gl-inet.com/original/2X/6/69648bc96c0920646a41ae6e7ec5335f0018b3f7.png)

---

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [January 20, 2024, 4:04pm UTC](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537/20 "2024-01-20T16:04:12Z")

</div>

\< _chuckle_ \> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

[Next page](https://forum.gl-inet.com/t/flip-wan-lan-of-brume-2/37537.md?page=2)
