OPNsense Forum

Hi

I'm new with VLANs on OPNsense.

I created a bunch of VLANS and I'm trying to trunk them to an openwrt AP device - mainly VLAN IDs 50, 55, 60 and 80

It's OPNsense -> TP-LINK TL-SG105E -> OpenWrt
OPNsense:
I've 12 VLANs on port 1 (igc1).
All DHCP set and all interfaces up and running.

Switch:
Should receive 20, 25, 50, 55, 60 and 80.
I've configured port 5 as a VLAN trunk.
The PVID on port 5 is 25 but it gets 60.
It also had 80 some reboots.

OpenWrt:
All set up.
When I connect to wifi I currently connect to VLAN 60 even the VLAN device/ID on that wifi is 55.

So the whole AP idea some kind of works, I can see the device on OPNsense but it's just the wrong VLAN ID.

I'm a bit confused. I'm still trying to figure it out how I can set the main IP for igc1 (switch) which should be 25 and of course that the wifi/AP connects to the right VLAN IDs.

Hope someone has a bit time to help me here. Thanks!

Quote from: danman on Today at 01:48:57 PMI created a bunch of VLANS and I'm trying to trunk them to an openwrt AP device - mainly VLAN IDs 50, 55, 60 and 80

Can't help you with the TP-Link Switch and OpenWRT Accesspoint part, but in general this is the way to do it :

OPNsense :
- Keep LAN for Management purposes and use it UNTAGGED.
- Pick any of the available NICs for a new Interface and just leave it Enabled but without any IP Address configuration.
- Create a VLAN Interface and assign it to the Interface you just Enabled.
- Any additonal VLAN Interfaces can be added to the same Interface.

To keep things simple I will asume you know how to take care of the DHCP/NAT/Firewall Rules stuff and skip that part.



TP-Link (or any other brand) Switch :
- Port #1
Let's use this port for all your VLANs and connect it to the OPNsense NIC that has all the VLANs assigned.
On the webGUI of the Switch you will configure this port to have all the VLAN numbers you mentioned TAGGED.

- Port #2
Because we want to use the OPNsense Default LAN Network for Management Network purposes we need to have one UNTAGGED Port on the Switch for it.
This port will be the one and let's simply use VLAN 1 for now.
You can change this later on if you wish, but for now I want to keep this as simple as possible for a reason I will mention later on!
Connect the NIC that carries the OPNsense LAN network to this port.

- Port #3
This will be the Port that connects to your OpenWRT Accesspoint and carries ALL VLANs basically.
AFAIK/IIRC the default configuration of any OpenWRT device has VLAN 1 assigned to it's NIC but I am not sure if this was UNTAGGED or TAGGED and I have seen some weird comments about it too.

So I will give you two possible scenarios :

Scenario A :
- Assign ALL VLANs on the Switch Port as TAGGED.

Scenario B :
- Assign VLAN 1 UNTAGGED.
- Assign all your other VLANs as TAGGED.



OpenWRT Accesspoint :
- Connect it to Switch Port #3
- Check the UNTAGGED vs. TAGGED stuff mentioned above and see what works correctly.
- Check if you need to do anything special on the NIC Port about allowing your own additional VLANs.
- Assign each of those VLANs to any SSID your going to create as TAGGED.
There is a chance TAGGED isn't even mentioned and the input field simply says VLAN ID or something like that!



And that should be it : You are done! :)