1 Odpowiedź przez piecyk57

(23 odpowiedzi, napisanych Oprogramowanie / Software)

ok, usunąłem, restart, dodałem jeszcze raz i dostaję adres z vlan30 po kablu.

eth1@if101: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 0a:d4:e5:1c:94:4a brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 172.16.30.107/24 brd 172.16.30.255 scope global dynamic eth1
       valid_lft 43087sec preferred_lft 43087sec


Router to TP-link Archer a7 v5. Niestety nadal nie dostaję nic po wifi, nie mam pojęcia co robię źle. Czy mógłbyś pomóc?

dzięki, już wiem co zrobiłem źle. Tworząc bridge trzeba go ustawić również na tym interfejsie vlan.

Idź do forum: Oprogramowanie / Software

2 Odpowiedź przez piecyk57

(23 odpowiedzi, napisanych Oprogramowanie / Software)

niestety vlan nie działa, hosty które wcześniej otrzymywały adres ip z tego vlana , po kablu, nie otrzymują adresu.

Idź do forum: Oprogramowanie / Software

3 Odpowiedź przez piecyk57

(23 odpowiedzi, napisanych Oprogramowanie / Software)

Cześć, podpinam się pod temat. Vlany po kablu działają dobrze, ale za chiny co bym nie robił nie mogę dostać adresu IP w sieci wifirt40 z vlan30, reguły firewall pod nazwą 'wifi30'. Co robię źle? Proszę o pomoc

/etc/config/network

config interface 'loopback'
    option device 'lo'
    option proto 'static'
    option ipaddr '127.0.0.1'
    option netmask '255.0.0.0'

config globals 'globals'

config device
    option name 'br-lan'
    option type 'bridge'
    option ipv6 '0'
    list ports 'eth0.1'

config interface 'lan'
    option device 'br-lan'
    option proto 'static'
    option ipaddr '192.168.1.1'
    option netmask '255.255.255.0'
    option ip6assign '60'
    option ipv6 '0'
    option delegate '0'
    list dns '192.168.1.100'

config device
    option name 'eth0.2'
    option macaddr '74:da:88:8f:29:e3'
    option ipv6 '0'

config interface 'wan'
    option device 'eth0.2'
    option proto 'dhcp'
    option ipv6 '0'

config switch
    option name 'switch0'
    option reset '1'
    option enable_vlan '1'

config switch_vlan
    option device 'switch0'
    option vlan '1'
    option vid '1'
    option ports '0t 3 4'

config switch_vlan
    option device 'switch0'
    option vlan '2'
    option vid '2'
    option ports '0t 1'

config device
    option name 'eth0'
    option ipv6 '0'

config switch_vlan
    option device 'switch0'
    option vlan '3'
    option vid '16'
    option ports '0t 3t 4t'

config interface 'VLAN10'
    option proto 'static'
    option netmask '255.255.255.0'
    option device 'eth0.10'
    option ipaddr '172.16.10.1'

config device
    option type '8021q'
    option ifname 'eth0'
    option vid '10'
    option name 'eth0.10'

config device
    option type '8021q'
    option ifname 'eth0'
    option vid '20'
    option name 'eth0.20'

config interface 'VLAN20'
    option proto 'static'
    option device 'eth0.20'
    option netmask '255.255.255.0'
    option ipaddr '172.16.20.1'

config device
    option type '8021q'
    option ifname 'eth0'
    option vid '30'
    option name 'eth0.30'
    option ipv6 '0'

config interface 'VLAN30'
    option proto 'static'
    option device 'eth0.30'
    option netmask '255.255.255.0'
    list dns '192.168.1.100'
    option ipaddr '172.16.30.1'
    option type 'bridge'

config switch_vlan
    option device 'switch0'
    option vlan '4'
    option vid '30'
    option description 'IOT'
    option ports '0t 2 3t 4t 5'

config switch_vlan
    option device 'switch0'
    option vlan '5'
    option ports '0t 3t'
    option vid '20'
    option description 'DOM'

config route
    option interface 'VLAN30'
    option gateway '172.16.30.1'
    option target '172.16.20.103/28'

config device
    option type 'bridge'
    option name 'Wifirt40'
    list ports 'eth0.30'

config interface 'Wifirt40'
    option proto 'none'
    option device 'Wifirt40'

/etc/config/firewall

config defaults
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option synflood_protect '1'
    option flow_offloading '1'
    option flow_offloading_hw '1'
    option drop_invalid '1'

config zone
    option name 'lan'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'
    list network 'lan'

config zone
    option name 'wan'
    option input 'REJECT'
    option output 'ACCEPT'
    option forward 'REJECT'
    option masq '1'
    option mtu_fix '1'
    list network 'wan'

config forwarding
    option src 'lan'
    option dest 'wan'

config rule
    option name 'Allow-DHCP-Renew'
    option src 'wan'
    option proto 'udp'
    option dest_port '68'
    option target 'ACCEPT'
    option family 'ipv4'

config rule
    option name 'Allow-Ping'
    option src 'wan'
    option proto 'icmp'
    option icmp_type 'echo-request'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-IGMP'
    option src 'wan'
    option proto 'igmp'
    option family 'ipv4'
    option target 'ACCEPT'

config rule
    option name 'Allow-DHCPv6'
    option src 'wan'
    option proto 'udp'
    option src_ip 'fc00::/6'
    option dest_ip 'fc00::/6'
    option dest_port '546'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-MLD'
    option src 'wan'
    option proto 'icmp'
    option src_ip 'fe80::/10'
    list icmp_type '130/0'
    list icmp_type '131/0'
    list icmp_type '132/0'
    list icmp_type '143/0'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Input'
    option src 'wan'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    list icmp_type 'router-solicitation'
    list icmp_type 'neighbour-solicitation'
    list icmp_type 'router-advertisement'
    list icmp_type 'neighbour-advertisement'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-ICMPv6-Forward'
    option src 'wan'
    option dest '*'
    option proto 'icmp'
    list icmp_type 'echo-request'
    list icmp_type 'echo-reply'
    list icmp_type 'destination-unreachable'
    list icmp_type 'packet-too-big'
    list icmp_type 'time-exceeded'
    list icmp_type 'bad-header'
    list icmp_type 'unknown-header-type'
    option limit '1000/sec'
    option family 'ipv6'
    option target 'ACCEPT'

config rule
    option name 'Allow-IPSec-ESP'
    option src 'wan'
    option dest 'lan'
    option proto 'esp'
    option target 'ACCEPT'

config rule
    option name 'Allow-ISAKMP'
    option src 'wan'
    option dest 'lan'
    option dest_port '500'
    option proto 'udp'
    option target 'ACCEPT'

config rule
    option name 'Support-UDP-Traceroute'
    option src 'wan'
    option dest_port '33434:33689'
    option proto 'udp'
    option family 'ipv4'
    option target 'REJECT'
    option enabled '0'

config include
    option path '/etc/firewall.user'


config zone
    option name 'VLAN30'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'ACCEPT'
    list network 'VLAN30'

config forwarding
    option src 'VLAN30'
    option dest 'wan'

config zone
    option name 'VLAN20'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'
    list network 'VLAN20'

config forwarding
    option src 'VLAN20'
    option dest 'wan'

config rule
    option name 'Wifirt40-DHCP'
    list proto 'udp'
    option target 'ACCEPT'
    option src 'Wifi30'
    option dest_port '67-68'
    option src_port '67-68'

config zone
    option name 'Wifi30'
    option input 'ACCEPT'
    option output 'ACCEPT'
    option forward 'REJECT'
    list network 'Wifirt40'

config forwarding
    option src 'Wifi30'
    option dest 'wan'

config rule
    option name 'Wifirt40-DNS'
    option src 'Wifi30'
    option src_port '53'
    option dest_port '53'
    option target 'ACCEPT'

/etc/config/wireless

config wifi-device 'radio0'
    option type 'mac80211'
    option path 'pci0000:00/0000:00:00.0'
    option band '5g'
    option htmode 'VHT80'
    option cell_density '0'
    option channel '36'

config wifi-device 'radio1'
    option type 'mac80211'
    option path 'platform/ahb/18100000.wmac'
    option band '2g'
    option htmode 'HT40'
    option cell_density '0'
    option noscan '1'
    option channel '1'

config wifi-iface 'default_radio1'
    option device 'radio1'
    option network 'lan'
    option mode 'ap'
    option ssid 
    option encryption 'psk2'
    option key 

config wifi-iface 'wifinet1'
    option device 'radio0'
    option mode 'ap'
    option ssid 
    option encryption 'psk2'
    option key 
    option network 'lan'

config wifi-iface 'wifinet2'
    option device 'radio0'
    option mode 'ap'
    option ssid 'wifirt40'
    option encryption 'none'
    option network 'Wifirt40'

Idź do forum: Oprogramowanie / Software