i’m tring to create vlan but whatever changes I make in vla filtering it goes into reverse
there is something i miss?
pls help
fw 4.90 stable
Can you show the configuration?
Can you show the contents of:
/etc/config/network/etc/config/firewall/etc/config/dhcp
Please discard mac addresses, and public addresses and your local ula prefix.
Also can you explain the topology and directions?
root@GL-MT6000:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'xxxxxxxx'
config device
option name 'br-lan'
option type 'bridge'
option macaddr 'mac'
list ports 'lan1'
list ports 'lan2'
list ports 'lan3'
list ports 'lan4'
list ports 'lan5'
config device
option name 'lan1'
option macaddr 'mac'
config device
option name 'lan2'
option macaddr 'mac'
config device
option name 'lan3'
option macaddr 'mac'
config device
option name 'lan4'
option macaddr 'mac'
config device
option name 'lan5'
option macaddr 'mac'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option isolate '0'
option ipaddr 'ip'
config device
option macaddr 'mac'
option name 'eth1'
config interface 'wan'
option force_link '0'
option ipv6 '0'
option classlessroute '0'
option metric '10'
option username 'xxxxxxx'
option password 'xxxxxxx'
option device 'eth1'
option proto 'static'
option ipaddr '192.168.x.x'
option netmask '255.255.255.0'
option gateway '192.168.x.x'
list dns 'xxxx'
list dns 'xxxx'
option peerdns '0'
config interface 'wan6'
option proto 'dhcpv6'
option device '@wan'
option disabled '1'
config interface 'guest'
option force_link '1'
option device 'br-guest'
option proto 'static'
option ipaddr '192.168.x.x'
option netmask '255.255.255.0'
option ip6assign '60'
option multicast_querier '1'
option igmp_snooping '0'
option isolate '0'
option disabled '1'
config device
option name 'br-guest'
option type 'bridge'
option bridge_empty '1'
config interface 'iot'
option force_link '1'
option device 'br-iot'
option proto 'static'
option ipaddr '192.168.x.x'
option netmask '255.255.255.0'
option delegate '0'
option multicast_querier '1'
option igmp_snooping '0'
option isolate '0'
option disabled '1'
config device
option name 'br-iot'
option type 'bridge'
option bridge_empty '1'
config rule 'policy_relay_lo_rt_lan'
option lookup '16800'
option in 'loopback'
option priority '1'
config interface 'tethering6'
option device '@tethering'
option proto 'dhcpv6'
option disabled '1'
config interface 'wwan6'
option device '@wwan'
option proto 'dhcpv6'
option disabled '1'
config interface 'wwan'
option proto 'dhcp'
option classlessroute '0'
option metric '20'
config interface 'secondwan'
option ipv6 '0'
option proto 'dhcp'
option metric '15'
option force_link '0'
option classlessroute '0'
config interface 'secondwan6'
option proto 'dhcpv6'
option device '@secondwan'
option disabled '1'
config interface 'modem_1_2_s1_6'
option proto 'dhcpv6'
option disabled '1'
option device '@modem_1_2_s1'
config interface 'modem_2_1_s1_6'
option proto 'dhcpv6'
option disabled '1'
option device '@modem_2_1_s1'
config interface 'wgclient1'
option proto 'wgclient'
option config 'peer_1500'
option ip4table '1001'
option gl_vpn_instance '1'
option ip6table '1001'
option disabled '0'
config rule 'rt_wgclient1'
option mark '0x1000/0xf000'
option lookup '1001'
option priority '6000'
config route 'wgclient1_blackhole'
option target '0.0.0.0'
option netmask '0.0.0.0'
option interface 'loopback'
option metric '254'
option type 'blackhole'
option table '1001'
config rule6 'rt_wgclient1_6'
option mark '0x1000/0xf000'
option lookup '1001'
option priority '6000'
config route6 'wgclient1_blackhole_6'
option target '::0/0'
option interface 'loopback'
option metric '25400'
option type 'blackhole'
option table '1001'
config rule 'novpn_to_main'
option gl_vpn_rules '1'
option mark '0x8000/0xf000'
option priority '6000'
option lookup 'main'
option disabled '0'
config rule 'vpn_to_main'
option gl_vpn_rules '1'
option mark '0x0/0xf000'
option priority '9000'
option lookup 'main'
option invert '1'
option disabled '0'
config rule 'vpn_leak_block'
option gl_vpn_rules '1'
option mark '0x0/0xf000'
option priority '9910'
option action 'blackhole'
option invert '1'
option disabled '0'
config rule 'vpn_block_ovpnserver_leak'
option gl_vpn_rules '1'
option in 'ovpnserver'
option priority '9920'
option action 'blackhole'
option disabled '0'
config rule 'vpn_block_wgserver_leak'
option gl_vpn_rules '1'
option in 'wgserver'
option priority '9920'
option action 'blackhole'
option disabled '0'
config rule 'vpn_block_lan_leak'
option gl_vpn_rules '1'
option in 'lan'
option priority '9920'
option action 'blackhole'
option disabled '0'
config rule 'vpn_block_guest_leak'
option gl_vpn_rules '1'
option in 'guest'
option priority '9920'
option action 'blackhole'
option disabled '0'
config rule 'main_static_net'
option gl_vpn_rules '1'
option suppress_prefixlength '0'
option priority '800'
option lookup '9910'
option disabled '0'
I don't know the topology, I just started, but there's no way to modify the filter.
I would like to create a VLAN on LAN port 4
From the configuration you posted I don't see anything vlan related.
maybe vlans are not needed, but this mean I need a little bit more information to be sure.
are you planning to use lan port 4 as destination traffic ?, you don't want more vlans over this port so that they can passthrough to a other vlan aware device or switch?
What device do you plan to connect to port 4 ?
the question was
why if I change anything on bridge vlan filtering openwrt does it not accept it and it goes into reverting?
In this case when you enable bridge filtering.
You have always one primary vlan often vlan id 1.
If you click save, but not click save and apply.
Now edit lan interface, change the device into br-lan.1
The reason it reverts is because br-lan changed into br-lan.1 this needs to be updated in the lan interface or the connection fails and luci rollsback.
could you be more precise sorry but I didn’t quite understand thanks anyway for the help
Please check this video:
It should load on the correct timestamp 
, please watch carefully between the steps when editing the lan interface.
You can click save inside the vlan filtering window, this then will close it, on the right top of the screen you see unsaved changes keep it this way.
Now edit lan, you can get here by clicking the interfaces tab button next to devices, and change br-lan to br-lan.1 inside the lan interface.
Only after editing lan, then click save and apply saving all the unsaved changes.
1 Like
thank you very much, I hope to return the favor
1 Like