I need to configure my hAP ac2 router for VLAN tagging on WAN port.
Can anyone explain me what is the simplest way to do it?
Do I need to just add VLAN interface and set it to eth1, add address for VLAN?
Do I need to make NAT rules set only to vlan1 or both eth1 and vlan1?
Do I need to change bridge that connects all LAN/WiFI with WAN from eth1 to vlan1?
Same about other firewall rules, do they need adjusting?
For now I have normal connection through second router, set to static address. Just need to be sure I have everything ok before switching to bridge mode on second router.
It depends on how ISP delivers internet. If it’s straight IP (with static IP address or DHCP served), then the way you wrote should work. If ISP delivers internet in some other way, you’ll have to adapt (e.g. if you have to use PPPoE, then PPPoE client should run on the VLAN interface).
If your router is running a recent default configuration, then the only change you have to do is to add the vlan interface to WAN interface list (in /interface list member). And possibly remove ether1 from the said interface list (and don’t add it anywhere else). Everything you mention is by default working with menitoned interface list.
Changing WAN from ether1 to vlan interface doesn’t change a single bit about how LAN should be treated. So don’t change LAN config unless you really know it should be done (basing on questions you posted you don’t know that).
It works. Added VLAN interface and set it to eth1, then added vlan1 as WAN to Interface List, disabled ether1 on that list. Added address in Addresses as vlan1 and disabled ether1 there too.
Hi There I’m not too familiar with this type of configuration but I’m trying to do this on my router, as the provided router from ISP is not very good. I’m not certain I’m understanding all the steps, can you let me know if this is correct and clarify on step 4 below?
ON INTERFACE LIST → INTERFACE TAB → VLAN TAB → Add VLAN and set it to eth1 port
ON INTERFACE LIST → INTERFACE TAB → Add VLAN as vlan1
ON INTERFAACE LIST → INTERFACE TAB → Disable eth1 port
Not clear on “Added address as vlan1 and disabled ether1 there too”,
What address needs to be added here?
Where can the addresses be added?
ether1 is already disabled from step 3, how to disable ether1 again?
I find it very hard to believe the pppoe from your provider comes in on vlan1.
It sounds like you have a regular pppoe connection you want to assign it a vlan?
What do you actually have, not what you think you need etc…
Hi anav, It is possible that I am mistaken, these are the initial instructions received from the provider.
It is possible to connect your own router directly with the ONT (modem) if it supports VLAN tagging on its Internet/WAN port. Unfortunately, this significantly reduces the list of routers that support this configuration.
In order to communicate with our authentication server, the router must be connected to the ONT from its Internet/WAN port.
It must also be configured accordingly, more precisely at the Internet/WAN level:
Thank you for the help, the VLAN was actually set to 40, but it was not named as such and linked to ethernet1 (wan).
There was another config that was incorrect, but resolved now.
Thank you again for your help
(1) FROM /interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1-wan list=WAN
TOO /interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1-wan list=WAN add interface=pppoe-out1 list=WAN
Hello, have the same problem here, tried to disable also the dhcp client but to no result. can someone help? Lus08 what was the other thing in your config that was wrong?