VLAN Configuration
Configure VLANs across your OpenWRT devices with OpenSOHO.
Important (read first!)
- VLAN configuration is tricky to get right, so OpenSOHO applies its configuration in a way that limits possible connection loss.
- VLAN tagging is only applied when a device’s
applylist containsVLAN. Removingvlandoes not undo the configuration. - LAN remains untagged on all ports (configuring this per-port is a planned feature). The rationale is to keep the network functional when VLAN tagging is enabled.
- CIDR settings on
lanare ignored — forcing those would break the network. CIDR settings are applied on the selected gateway only. Interfaces on APs and switches should be configured withoption proto 'none'. - VLANs named
lanandwanare extra protected from accidental modification. If you rename yourlanorwan, this protection is not active. - OpenSOHO takes the Ethernet interfaces reported by the OpenWRT device (via OpenWISP monitoring) and will:
- Add an untagged config (
u*) towards thelanfor each Ethernet port. - Add a tagged config (
t) for each Ethernet port towards all other VLANs.
- Add an untagged config (
Getting Started
- Under
Vlans, ensure aVlannamedlanexists. Give it a number, e.g.100— this is yourlanVLAN ID. Avoid VLAN IDs 1 and 2.
- Under
Devices, addvlanas anapplyvalue for each device that requires VLAN support. Do this gradually — there is no easy way back via OpenSOHO. Work from the least important APs towards the main router. - When all required devices have
vlanapplied, your network is ready for additional VLANs.
Configuring Extra VLANs
- Add an extra entry under
Vlans. At minimum, give it anameand anumber, e.g.guestand200. OpenSOHO ensures this VLAN is available, tagged on all interfaces, on all devices withvlanapplied. - Configure a gateway (usually the same as the
langateway). - Add a CIDR to define the subnet, e.g.
192.168.1.1/24. The/24subnet size is well tested. OpenSOHO adds this IP address on the gateway only. - Wifi interfaces can be added via the
Wificonfig. - OpenSOHO does not configure DHCP or the firewall yet (planned). Use LuCI on the gateway for that.
- See the OpenWRT wiki guest wifi guide.
- To avoid MTU problems, enable
MSS clampingon the firewall zones on the gateway device.