separate DHCP on guest network

[Znitz]

After trying http://www.snbforums.com/threads/fo...guest-network-for-asus-merlin-rt-ac68u.18969/

I understand that I need to do something with dhcp as well, in the router dnsmasq.conf needs to be changed/updated to serve ip-addresses to my new vlan, but not to my local network, for this there is a windows server..
(today my local network runs on 192.168.0.x)

I think this is the changes i want to do in the dnsmaq.conf

# Enables DHCP on vlan10
interface=vlan10

# Set the default gateway for vlan10 clients
dhcp-option=vlan10,3,192.168.0.254

# Set the DHCP range and default lease time of 3 hours for vlan10 clients
dhcp-range=vlan10,192.168.0.10,192.168.0.50,255.255.255.0,3h
dhcp-authoritative

But how do I make it stick after reboot, can I just insert this in the /jffs/script area as init-start or firewall-start?

 

[Prevok]

After trying http://www.snbforums.com/threads/fo...guest-network-for-asus-merlin-rt-ac68u.18969/

I understand that I need to do something with dhcp as well, in the router dnsmasq.conf needs to be changed/updated to serve ip-addresses to my new vlan, but not to my local network, for this there is a windows server..
(today my local network runs on 192.168.0.x)

I think this is the changes i want to do in the dnsmaq.conf

# Enables DHCP on vlan10
interface=vlan10

# Set the default gateway for vlan10 clients
dhcp-option=vlan10,3,192.168.0.254

# Set the DHCP range and default lease time of 3 hours for vlan10 clients
dhcp-range=vlan10,192.168.0.10,192.168.0.50,255.255.255.0,3h
dhcp-authoritative

But how do I make it stick after reboot, can I just insert this in the /jffs/script area as init-start or firewall-start?

You'll need to save it to custom config file (https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files).

In this case, you may simply be able to append to the current dnsmasq file with '/jffs/configs/dnsmasq.conf.add' or replace it altogether with '/jffs/configs/dnsmasq.conf'.

 

[Znitz]

Excellent, thanks, missed that one.

Now dnsmasq tries to create my dhcp-scope but it does not recognize my vlan10

From the log:

Jun  4 14:31:48 dnsmasq[1492]: started, version 2.73rc1 cachesize 1500
Jun  4 14:31:48 dnsmasq[1492]: warning: interface vlan10 does not currently exist
Jun  4 14:31:48 dnsmasq[1492]: warning: interface ppp1* does not currently exist
Jun  4 14:31:48 dnsmasq[1492]: asynchronous logging enabled, queue limit is 5 messages
Jun  4 14:31:48 dnsmasq-dhcp[1492]: DHCP, IP range 192.168.0.10 -- 192.168.0.50, lease time 3h
Jun  4 14:31:48 dnsmasq[1492]: read /etc/hosts - 5 addresses
Jun  4 14:31:48 dnsmasq[1492]: read /etc/hosts.dnsmasq - 0 addresses
Jun  4 14:31:48 dnsmasq-dhcp[1492]: read /etc/ethers - 0 addresses

But robocfg say that it exists

# robocfg show
Switch: enabled
Port 0: 1000FD enabled stp: none vlan: 2 jumbo: on mac: 54:75:d0:a6:3f:00
Port 1:  100FD enabled stp: none vlan: 3 jumbo: on mac: 00:12:f2:33:fb:60
Port 2: 1000FD enabled stp: none vlan: 1 jumbo: on mac: 50:1a:c5:e5:4d:ed
Port 3: 1000FD enabled stp: none vlan: 10 jumbo: on mac: 10:bd:18:82:63:41
Port 4:   DOWN enabled stp: none vlan: 1 jumbo: on mac: 00:00:00:00:00:00
Port 8:   DOWN enabled stp: none vlan: 1 jumbo: on mac: 00:00:00:00:00:00
VLANs: BCM5301x enabled mac_check mac_hash
   1: vlan1: 2 5t 7t
   2: vlan2: 0 7t
   3: vlan3: 1 7t
  10: vlan10: 3 7t
1045: vlan1045: 1 5t 7t 8t
1046: vlan1046: 2t 3t
1047: vlan1047: 0 1t 4t 5 7t
1099: vlan1099: 1t 2t 3
1100: vlan1100: 0t 1t 4
1101: vlan1101: 0t 3t 7t 8u
1102: vlan1102: 4t
1103: vlan1103: 0 1t 4t


# brctl show
bridge name  bridge id  STP enabled  interfaces
br0  8000.ac9e17961f18  yes  vlan1
  eth1
  vlan10

I think maybe I should use some thing else than vlan10?
Or, I could start using rules to block dhcp on my local network instead?