Moving from DD-WRT to RB3011

[mkx]

• Create 3 bridges, one for each LAN ad assigne ethernet port to each bridge.
  
  
  
• Configure 2 port as trunk for VLANS
  
  
  
• Use Wireguard to access my BR2 from everywhere
  
  
  
• If it is possible, configure the router as VPN Client
  
  
  
• I would like to connect the Cisco switch to the router using SFP or Ethernet Port using VLANs so I have the three LAN available on the switch.

In order of ideas:

• don’t use multiple bridges. In ROS, bridges are VLAN-aware and you deal with L3 over different VLANs in different manner.
  You may want to have a look at this great tutorial on how to do VLANs in ROS. And this explanation of different bridge personalities (bridge is overloaded with multiple functions, things are easier to configure if one is aware of which personality certain config applies to).
• right
• nothing wrong with that
• what kind of VPN? ROS does support certain VPN types, but some are not supported very well
• that’s what trunk ports are for … to pass multiple VLANs tagged (it’s a standard thing) to connected equipment

And in general: RB3011 is a pretty decent router, but a pretty dated as well. And since ROS v7 it doesn’t age well (you need ROS v7 for wireguard). So try to look at some other device, decent successor to RB3011 is RB5009.