[OpenWrt Wiki] Bridge firewall
openwrt.org › firewall › fw3_configurationsDec 13, 2021 · Introduction This how-to describes the method for setting up bridge firewall on OpenWrt. Follow Splitting VLANs to be able to filter traffic between VLAN ports. Follow Wireless configuration to isolate wireless clients from each other. Goals Filter traffic between bridged interfaces. Command-line instructions Install the required packages.
[OpenWrt Wiki] VLAN
https://openwrt.org/docs/guide-user/network/vlan/switch_configuration05.11.2021 · A device where there is software VLAN support is just a device with many different ethernet controllers, so if you want to place 2 interfaces in the same VLAN, AND you want these two interfaces to also route traffic to-from each other (to act as if they were a VLAN-capable switch as the one I talked about above), you need to bridge them too (i.e. both must be in the …
[OpenWrt Wiki] VLAN
openwrt.org › docs › guide-userNov 05, 2021 · To use a VLAN you need at least 2 devices supporting VLAN features (as any route requires at least 2 points), which is usually advanced routers, any OpenWrt device, and any self-respecting PC or single-board computer (Windows, MacOS, Linux and BSDs support VLANs). OpenWrt supports IEEE 802.1Q and IEEE 802.1ad VLAN standards.
[OpenWrt Wiki] Network basics /etc/config/network
openwrt.org › docs › guide-userDevices and bridge configuration : eth0 : br-lan (bridge config) “Switch”, “Wireless” VLANs and wireless SSIDs : VLAN 2 (eth0.2) VLAN 1 (eth0.1) OpenWrt : OpenWrt “Switch”, “Wireless” Internal jack labels and radio labels: WAN (Interface) LAN 1 : LAN 2 : LAN 3 : LAN 4 : radio0 : radio1 - Common vendor labels on backside of a device
FS#1622 : DSA switch port vlan - OpenWrt
bugs.openwrt.org › indexThe suggested VLAN filtering solution is good if you can configure everything directly with 'bridge'. I don't think UCI currently supports configuring it, and I think there will be many other parts of OpenWrt that assume each network has its own unique bridge device, rather than a unique VLAN on a shared bridge.