User774
New Around Here
Hello!
Model: Asus RT-AC56U
Firmware: 378.53 (AsusWRT-Merlin)
Some default configs:
I'm trying to build a professional home network =D (to learn)
I'm new to AsusWRT, Merlin, DD-WRT, etc...
I spend some days reading a lot and learning all that I can.
I liked the AsusWRT-Merlin (from lostrealm.ca), because I can use some features like Trend Virtual Patch/AD block, and some new options/features provided by Merlin custom firmware.
But I'm confused if the management via shell is allowed.
Basically, I wish:
But before the hard work, I tried to create a small/simplest test environment to check if this firmware will allow me to do what I need.
Small test:
What I did:
Just to check, I'm doing something wrong?
Model: Asus RT-AC56U
Firmware: 378.53 (AsusWRT-Merlin)
Some default configs:
Code:
lanports=0 1 2 3
wanports=4
landevs=vlan1 wl0 wl1
vlan1hwname=et0
vlan1ports=0 1 2 3 5*
vlan2hwname=et0
vlan2ports=4 5uI'm trying to build a professional home network =D (to learn)
I'm new to AsusWRT, Merlin, DD-WRT, etc...
I spend some days reading a lot and learning all that I can.
I liked the AsusWRT-Merlin (from lostrealm.ca), because I can use some features like Trend Virtual Patch/AD block, and some new options/features provided by Merlin custom firmware.
But I'm confused if the management via shell is allowed.
Basically, I wish:
- Ports 0 and 1 (LAN 1 and 2) as VLAN1 (as the default configuration) - I will not use these ports
- Port 2 (LAN3) as VLAN9
- Create a Wireless for guest, VLAN 8
- Port 3 (LAN4) in trunk (receive tagged packets from VLAN1, 9 and 8), I'll connect a UTM/FW to act as the FW, gateway, DHCP server, etc.. (the WAN will be connected to this UTM/FW)
But before the hard work, I tried to create a small/simplest test environment to check if this firmware will allow me to do what I need.
Small test:
- Create a Guest network and bridge to a VLAN with one switch's port
- This VLAN isn't allowed to access the others VLANs
- The RT-AC56U will be connected with port 3 (LAN4) to a notebook
- After test the wired part, I'll disconnect the ethernet cable and use the wireless of this notebook to test the Guest network
- The UTM/FW isn't present at the test environment (just the RT-AC56U and a notebook).
What I did:
- Upgraded to the latest version of AsusWRT, then reset the configuration to defaults
- Upgrated to the latest version of AsusWRT-Merlin (378.53), then reset the configuration to defaults
- Disabled the "JFFS"
- Using the web interface, created a "Guest Network" (wireless) - wl0.1
- Then via SSH:
Code:# Remove port 3 from VLAN1 robocfg vlan 1 ports "0 1 2 5t" # Create VLAN9, and add port 3 robocfg vlan 9 ports "3 5t" # Remove wl0.1 (the guest network) from br0 brctl delif br0 wl0.1 # up interface vlan9 ifconfig vlan9 up # create br9 brctl addbr br9 # enable stp brctl stp br9 on # add vlan9 to br9 brctl addif br9 vlan9 # add wl0.1 to br9 brctl addif br9 wl0.1 # up interface ifconfig br9 up # Cleanup (removed the wl0.1 from "lan_ifnames") nvram set lan_ifnames="vlan1 eth1 eth2" # Created lan9_ifnames nvram set lan9_ifnames="vlan9 wl0.1" nvram set lan9_ifname="br9" # Mapped vlan9ports nvram set vlan9ports="3 5t" nvram set vlan9hwname=et0 # Commit nvram commit # Configured an IP address to the bridge ifconfig br9 10.0.0.1 netmask 255.255.255.0 up
- At this point, I can see:
- 2 bridges, br0 and br9 (brctl show)
- Port 3 (LAN4) is on VLAN 9 (robocfg show)
- Interfaces vlan9, br9 and wl0.1 are up (ifconfig)
- If I try to connect on the Guest wireless, I get a "Time out" error (some times, "Wrong password", but wl0.1_wpa_psk reports the correct password..)
- I tried to configure manually the IP address 10.0.0.9/24 on my notebook (because the DHCP isn't configured..), but the problem persists.
- The wired part, I configured a IP on my notebook, and ran the PING to the 10.0.0.1, but no response
- I ran "iptables -F' to check if the iptables is blocking something, but doesn't worked
- If I reboot the router, all changes are lost.
Just to check, I'm doing something wrong?
