Ok to jest docelowy setup
root@OpenWrt:~# uci show network
network.loopback=interface
network.loopback.device='lo'
network.loopback.proto='static'
network.loopback.ipaddr='127.0.0.1'
network.loopback.netmask='255.0.0.0'
network.globals=globals
network.globals.packet_steering='1'
network.globals.ula_prefix='fd38:8314:9f0c::/48'
network.@device[0]=device
network.@device[0].name='br-lan'
network.@device[0].type='bridge'
network.@device[0].ports='lan1' 'lan2' 'lan3' 'lan4'
network.lan=interface
network.lan.device='br-lan'
network.lan.proto='static'
network.lan.ipaddr='192.168.1.1'
network.lan.netmask='255.255.255.0'
network.lan.ip6assign='60'
network.wan=interface
network.wan.device='wan'
network.wan.proto='dhcp'
network.wan6=interface
network.wan6.device='wan'
network.wan6.proto='dhcpv6'
network.@device[1]=device
network.@device[1].name='wan'
network.@device[1].macaddr='04:8D:39:54:D6:FE'
network.@device[1].ipv6='0'
network.SFAIROS=interface
network.SFAIROS.proto='static'
network.SFAIROS.ipaddr='192.168.11.1'
network.SFAIROS.netmask='255.255.255.0'
network.SFAIROS.device='BR0.12'
network.HAITI=interface
network.HAITI.proto='static'
network.HAITI.ipaddr='192.168.12.1'
network.HAITI.netmask='255.255.255.0'
network.HAITI.device='BR0.11'
network.@device[2]=device
network.@device[2].type='bridge'
network.@device[2].name='BR0'
network.@device[2].bridge_empty='1'
network.@bridge-vlan[0]=bridge-vlan
network.@bridge-vlan[0].device='BR0'
network.@bridge-vlan[0].vlan='11'
network.@bridge-vlan[1]=bridge-vlan
network.@bridge-vlan[1].device='BR0'
network.@bridge-vlan[1].vlan='12'
network.@device[3]=device
network.@device[3].name='BR0.11'
network.@device[3].type='8021q'
network.@device[3].ifname='BR0'
network.@device[3].vid='11'
network.@device[4]=device
network.@device[4].name='BR0.12'
network.@device[4].type='8021q'
network.@device[4].ifname='BR0'
network.@device[4].vid='12'
root@OpenWrt:~# uci show wireless
wireless.radio0=wifi-device
wireless.radio0.type='mac80211'
wireless.radio0.path='1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0'
wireless.radio0.band='2g'
wireless.radio0.htmode='HE20'
wireless.radio0.channel='11'
wireless.radio0.legacy_rates='1'
wireless.radio0.country='PL'
wireless.radio0.cell_density='1'
wireless.radio1=wifi-device
wireless.radio1.type='mac80211'
wireless.radio1.path='1e140000.pcie/pci0000:00/0000:00:01.0/0000:02:00.0+1'
wireless.radio1.cell_density='0'
wireless.wifinet1=wifi-iface
wireless.wifinet1.device='radio0'
wireless.wifinet1.mode='ap'
wireless.wifinet1.encryption='psk2'
wireless.wifinet1.key='********'
wireless.wifinet1.ieee80211r='1'
wireless.wifinet1.ft_over_ds='0'
wireless.wifinet1.ft_psk_generate_local='1'
wireless.wifinet1.ssid='HAITI'
wireless.wifinet1.network='HAITI'
wireless.wifinet1.hidden='1'
wireless.wifinet2=wifi-iface
wireless.wifinet2.device='radio0'
wireless.wifinet2.mode='ap'
wireless.wifinet2.ssid='SFAIROS 2'
wireless.wifinet2.encryption='psk2'
wireless.wifinet2.key='*******'
wireless.wifinet2.ieee80211r='1'
wireless.wifinet2.ft_over_ds='0'
wireless.wifinet2.ft_psk_generate_local='1'
wireless.wifinet2.network='SFAIROS'
Siec SFAIROS działa natomiast sieć HAITI nie ma internetu być może przez FW i dodatkowa regułe w Traffic Rules dotyczaca portow 53 67 68
Chodzi o to zeby sieć HAITI nie miała dostapy do LAN tylko do WAN
ot tyle.