my home VLAN implementation
Router is MX4300. It has three lan ports which are connected to unmanaged switches. Three SSIDs. I want to create 6 segments to isolate the three lan ports and the three SSIDs. For lan port, I created one interface for each port and attach the port directly (without creating bridge/vlan); For SSID, I created an empty bridge device with 3 VLANs:
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
config device
option name 'br-lan'
option type 'bridge'
option ipv6 '0'
option bridge\_empty '1'
config device
option type 'bridge'
option name 'br-wireless'
option bridge\_empty '1'
option ipv6 '0'
config bridge-vlan
option device 'br-wireless'
option vlan '4'
config bridge-vlan
option device 'br-wireless'
option vlan '5'
config bridge-vlan
option device 'br-wireless'
option vlan '6'
config interface 'wired1'
option proto 'static'
option device 'lan1'
option ipaddr '192.168.8.1'
option netmask '255.255.255.0'
Am I doing the right thing? As I assigned ports directly to interface, br-lan has no ports. So I have two empty bridges now: br-lan, and br-wireless. Can I remove one or both of them?
Posted May 5, 2025, 1:58 AM UTC
10