r/openwrt•
perdpg

my home VLAN implementation

Router is MX4300. It has three lan ports which are connected to unmanaged switches. Three SSIDs. I want to create 6 segments to isolate the three lan ports and the three SSIDs. For lan port, I created one interface for each port and attach the port directly (without creating bridge/vlan); For SSID, I created an empty bridge device with 3 VLANs:

config interface 'lan'

option device 'br-lan'

option proto 'static'

option ipaddr '192.168.1.1'

option netmask '255.255.255.0'

config device

option name 'br-lan'

option type 'bridge'

option ipv6 '0'

option bridge\_empty '1'

config device

option type 'bridge'

option name 'br-wireless'

option bridge\_empty '1'

option ipv6 '0'

config bridge-vlan

option device 'br-wireless'

option vlan '4'

config bridge-vlan

option device 'br-wireless'

option vlan '5'

config bridge-vlan

option device 'br-wireless'

option vlan '6'

config interface 'wired1'

option proto 'static'

option device 'lan1'

option ipaddr '192.168.8.1'

option netmask '255.255.255.0'

Am I doing the right thing? As I assigned ports directly to interface, br-lan has no ports. So I have two empty bridges now: br-lan, and br-wireless. Can I remove one or both of them?

Posted May 5, 2025, 1:58 AM UTC

10
Loading comments…