VLAN-tag guest WLAN

[ZoRaC]

I've got my RT-AC68U in AP-mode and handles the routing, DHCP, etc on a pfSense-box.

I got a guest-WLAN on wl0.1 and I want to be able to tag all that traffic with a VLAN-tag, to be able to separate it from the my primary WLAN.

Is there a way to accomplish that?

 

[bigben]

tagged vlan 4 on wan port to wl0.1

/jffs/scripts/services-start

#!/bin/sh

robocfg vlan 4 ports "0t 8t"

vconfig add eth0 4
ifconfig vlan4 up

brctl delif br0 wl0.1

brctl addbr br1
brctl addif br1 vlan4
brctl addif br1 wl0.1

ifconfig br1 up

nvram set lan1_ifnames="vlan4 wl0.1"
nvram set lan1_ifname="br1"
nvram save
killall eapd
eapd

 

[ZoRaC]

Thanks, D@vid, but it didn't work.
I tested just running it first, without adding it permanently (to not get "locked out" if it brakes something). But that shouldn't matter, right?

After running it, I'm unable to connect to either the ordinary WLAN and the guest-WLAN. Tried with 2 iPhones and 1 computer.
The computers already connected was not disconnected, though - strange!

Here from my syslog:

Feb 22 19:36:04 kernel: device wl0.1 left promiscuous mode
Feb 22 19:36:04 kernel: br0: port 4(wl0.1) entering forwarding state
Feb 22 19:36:04 kernel: device vlan4 entered promiscuous mode
Feb 22 19:36:04 kernel: device wl0.1 entered promiscuous mode
Feb 22 19:36:04 kernel: br1: port 2(wl0.1) entering learning state
Feb 22 19:36:04 kernel: br1: port 2(wl0.1) entering learning state
Feb 22 19:36:04 kernel: br1: port 1(vlan4) entering learning state
Feb 22 19:36:04 kernel: br1: port 1(vlan4) entering learning state
Feb 22 19:36:19 kernel: br1: port 2(wl0.1) entering forwarding state
Feb 22 19:36:19 kernel: br1: port 1(vlan4) entering forwarding state

What is port 0 and 8? Hence the first command.
Isn't port 5 the WAN-port?

Any ideas?
Also, let me know if you need some more details.

 

[starfall]

This is also working for me now on the AC68U after tweaking the nvram settings and restarting eapd. Check it out here - SSID to VLAN