VLAN bridging and use them on different ports

[Patrick M. Hausen]

BTW: shouldn't the IPCam port be untagged? Are you really trusting the camera to set the proper tag?

[PilaScat]

no indeed, I will put vlan20 untagged

[PilaScat]

applied a modification for ipcam vlan20 untagged and configured the switch:

Code Select Expand

Port 1: AP1 vlan1 untagged, vlan20-30-40 tagged
Port 2: AP2 vlan1 untagged, vlan20-30-40 tagged
Port 3: Reolink vlan20 untagged
Port 4: Empty, vlan1 untagged (I know it isn't secure but is at home)
Port 5: Router, vlan1-20 untagged
Port 6: Router, vlan20-30-40 tagged
Switch config:

If it is all okay I will start to configure opnsense :D

[PilaScat]

Did some edits to my plan, I'm going to use vlan1 for lan e vlan2 (0.2) for guests, it was to difficult with the other setup and with my current hardware, now I need an advice, two vlans or 1 for guests and no vlan for lan?
is any different? keep in mind that vlan1 untagged is necessary for unifi, so I thought:
vlan1 (opnsense default? untagged?) for lan
vlan2 (tagged for unifi)
correct?