Trying to implement VLANs on RT-AC3100 in AP Mode

[Brandon Gabbard]

I'm trying to implement VLANs on my RT-AC3100 in AP Mode. Main LAN is VLAN 1, untagged on ports 0-7, tagged on 8 (but shouldn't matter since I'm not using it as a gateway). IoT Net is VLAN 4, tagged on port 0 and 5 (but not sure thats right).

I found the following script which seems like it should do what I want but it's written for an AC68U not a 3100, so I'm don't think the internal CPU port is 5 on a 3100?

https://gist.github.com/SAPikachu/d00b8eea099f06e6e2a7

I've modified the script by changing VLAN 1111 to VLAN 4 but no luck. I've also tried tagging port 7 instead of 5 with no luck either.

Any help would be appreciated. I have a seperate AP I've been using for VLAN 4 but it sucks and would prefer to run VLAN 4 on a guest SSID on the 3100.

 

[Brandon Gabbard]

My next attempt based off this thread... https://www.snbforums.com/threads/s...s-with-open-authentication.55013/#post-466829

#!/bin/sh

# /jffs/scripts/firewall-start
# A VM in VLAN 4 (tagged) is plugged to port 1, it will act as router of guest network, offer DHCP, and do other filtering as necessary

# Port 5 (internal CPU port) has to be included to make it works
robocfg vlan 4 ports "1t 5t"

# Bring up VLAN interface
vconfig add eth0 4
ifconfig vlan4 up

# Remove wl0.1 from br0
brctl delif br0 wl0.1

# Conigure br1 with vlan4 and wl0.1
brctl addbr br1
brctl addif br1 vlan4
brctl addif br1 wl0.1

# Bring up the bridge
ifconfig br1 up

# Define lan1_ifnames (not sure what this does)
nvram set lan1_ifnames="vlan4 wl0.1"
nvram set lan1_ifname="br1"

# Finish up
nvram commit
killall eapd
eapd

Going to test it this weekend, seems promising but again I'm not sure about port 5's assignment

 

[Brandon Gabbard]

Another thing I'm not sure on is what script I should save this as. I wouldn't think firewall-start is used in AP mode, so I'm thinking nat-start or init-start?