Comments on: Linksys, OpenWRT and multiple VLANs

By: Best Gustav Klimt Painting

Best Gustav Klimt Painting — Mon, 28 Nov 2011 16:12:06 +0000

F*ckin’ amazing issues here. I am very happy to peer your article. Thanks a lot and i am looking ahead to touch you. Will you please drop me a e-mail?

By: Alexis » OpenWRT

Alexis » OpenWRT — Sat, 16 May 2009 13:05:21 +0000

[...] http://www.felipe-alfaro.org/blog/2006/07/19/linksys-openwrt-and-multiple-vlans/ [...]

By: maysara

maysara — Mon, 12 Jan 2009 11:27:30 +0000

Gia, yes you can, just play with your vlan settings and make it:

option vlan0 “0 1 2 3 4 5*”

instead of

option vlan0 “0 1 2 3 5*”

By: Gia

Gia — Sun, 13 Jul 2008 18:26:48 +0000

Can I using WAN port (Internet port in rear) like a Lan Port (I want have 5 LAN Port, I no need WAN port)
I’m using WRT54GL.
Thx. sorry for my bad english

By: John

John — Fri, 06 Jun 2008 00:40:20 +0000

Impressive explanation! Thanks.

How has stability been? I’ve heard some people have stability problems with the WRT54G. (I’ve had one for years, running the Linksys firmware, and I have occasional stability problems even in that condition.)

Thanks,
John

By: Felipe Alfaro Solana

Felipe Alfaro Solana — Fri, 02 Feb 2007 20:45:47 +0000

Necesitaría echar una vistazo a:

- La configuración de los interfaces de red (ifconfig -a)
- La tabla de rutas (netstat -anr)
- La configuración del cortafuegos (iptables -L -n -v así como iptables -t nat -L -n -v)

Con esto, quizá podríamos empezar a averiguar dónde está el problema.

By: Dionisio Hinojo

Dionisio Hinojo — Fri, 02 Feb 2007 19:49:25 +0000

Hola Felipe,
Magníficos manuales los que tienes en tu página.
Llevo varias semanas con un Linksys WRT54GS al que he instalado una tarjeta SD con la intención de usarlo como firewall + proxy en mi casa.

He instalado OpenWRT Whiterussian (RC6) y tengo configurado el router con tres redes:

vlan1: Sólo y exclusivamente para enlazar a Internet
br0: red de cable interna
eth1: red wifi

Ya tengo funcionando el proxy Squid pero tengo un problema que no consigo resolver: “soy incapaz de poder ver páginas https desde la red wifi”.

Si puedes ayudarme, te lo agradecería.

Saludos

By: K. Callis

K. Callis — Mon, 08 Jan 2007 06:37:54 +0000

One other question as well… If one replaces the S35firewall with something custom, are there any other files that need to be changed considering that some of the functionality of the standard S35firewall was changed.

Also, considering that one has multiple VLANs, what should be done in the firewall to make sure that the LAN can always long into the router, just stopping any accidental lock-outs…

By: K. Callis

K. Callis — Sun, 07 Jan 2007 12:26:47 +0000

2 questions for you? I have eth1 separated from the other VLANS. Everything works great except for a slight problem. I added so WiFi based SIP phones, and I have SIP phone connected to a wireless bridge. One of my VLANs support phone (asterisk) stuff.

The question is, if I am on the wireless interface, is there any way to get my phones to be assigned an IP address from my VLAN1, as opposed to the standard IP address assigned to wireless clients?

The second question is about iptables… For the version of iptables that is on RC6, is there a way to figure out if I can make use of the –timestart –timestop module?

Thanks

By: Felipe Alfaro Solana

Felipe Alfaro Solana — Sat, 09 Dec 2006 01:39:14 +0000

I guess that your computer is sending an ICMP Echo Request to your wireless clients but the Linksys is blocking the response back.

When you ping from the Linksys, the ICMP Echo Requests traverses the OUTPUT chain (since the packet is generated locally). The ICMP Echo Reply gets into the INPUT chain since it’s targeted to the local box.

However, when pinging from a PC behing the router, packets traverse the FORWARD chain. Thus, it would be useful for us to take a look at your Netfilter/IPTables chains. I guess that Linksys is blocking some ICMP datagrams in the FORWARD chain.