On my Archer C7 the br-lan does not have multiple lan ports bridged. Instead it only shows a "Switch VLAN" named eth0.1. I still have the Network->Switch menu item but no checkbox to "bridge interfaces" from the old guide. Here is what worked for me: In Network->Switch select "Add VLAN", then make sure it is tagged on the CPU(eth0). This will create another "Switch VLAN" under Network->Interfaces->Devices. Create a new Interface with a static adress and select eth0.3 (or whatever "Switch VLAN" was created). Select IP range, firewall, etc. and don't forget to enable DHCP. From there it seems identical to OpenWRT 19.

Yes to all the tutorials please (RaspberryPi, Proxmox, VirtualBox). Also would love to see detailed explaination of networking concepts using VirtualBox as I don't have access to physical hardware to play with.

please, a video on rpi->managed switch with vlans to access points with guest and main wifi. thanks.

Your way of explaining things is the perfect match for my way of understanding things. Thank you so much for having this channel. I'm learning so much about home networking.

What a wonderful and a excellent explanation! (Working here for years in networking)

Wow!! This is really an amazing video. You do such a great job explaning it. You have great visual aids, the pacing is good too, and you answer almost every question I have all whilst highlighting difference between popular versions of OpenWRT. You condensed down what could have taken hours or days to piece together into a 30 minute video.

Wow. This is an amazing video and the way you deliver it is very helpful to understanding the new concepts and differences. I was about to revert back to v19 because learning all this stuff from the documentation seemed to complex to put into action, with all my kids and house mates pressing me to get the network back up.

Many thanks. Now I get it why I was always losing connecting with the router and revert back when I was trying to create vlans at the device page. This episode is so awesome.

I learn something new every time I watch this video. Just an average user with 4G internet trying to figure out how to set up vlan's on a network with 4G router and an 8 port switch and a few wireless access points! Appreciate you taking the time to try and simplify basic knowledge of how the internet works in your home and how to protect yourself from doing something that may not help your internet security which is important today to know that there is a lot more going on behind the screen than most understand and could be more harmful than you know!

Thank you, that was a great wrap up. Being new to OpenWrt and its terminology this helped so much more than the written DSA guide on the docs 🙂

Thanks so much Marc for the OpenWRT Videos. I have just got started in this world of using old hardware. I have three Netgear WAC 104 access points running ver 22 and followed your video on fast roaming, what a difference in my wifi cheers. The call to action, yes Proxmox container with a lan to cover containers into a vpn would be amazing too see.

Thank you very much for such a simple and understandable explanation about VLAN! Special thanks for your contribution to the distribution of OpenWRT. I subscribed a month ago and now I watch all your videos. And by the way, it was after this video that I was finally able to set up VLAN. I wish the grow of the channel and look forward to new videos. Such work and material is really worth supporting from the community through patreon or something else!

I bought a couple new routers to do your BATMAN setup and I was left wondering where my old and trusted "switch" section went. Didn't had any idea on DSA, so, I'll have to watch and re-watch this video until it sticks. Really, thanks a LOT for doing all of this.

This video is great. ❤ After trying for 2 days and failing, I finally found your video and fully understood what to to. Afterwards it took me 20 minutes to configure after a full reset and it worked smoothly. 🎉

THANK YOU! I've been sitting for hours trying to figure this out, and it finally dropped when watching this

Excellent description of what a VLAN is. Thanks for keeping it simple.

Your videos are awesome! Thank you for making these. Similar content across the web are no where close to your level. I am new to networking and your videos have my home network up and running with multiple vlans with openwrt all of which is new to me.

Thanks Marc, this is a great addition to all your OpenWrt videos. As always a great tutorial.🙏

Thank you! Been frustrated for about a week trying to figure out DSA & VLANs and an upstream managed switch

Perfekt! Danke sehr! This is as complete a VLAN tutorial as one can expect - great work and keep putting out such like-worthy content. BTW; I like your T-Shirt color too!!

I'm shocked - PRO level education for OpenWRT , Great job. Thank You

With DSA, having wan + lan1-4 might seem convenient, but there's a catch. They are virtual and all go through the same phy, so the bandwidth is split. There's also more CPU overhead. If a device has multiple physical ethernet interfaces connected to the switch, only the first phy is used, the rest are disabled. WRT3200 is a good example. It actually has 3 ethernet interfaces. eth2 is disabled at compile time, because it does not have a MAC address in ROM. With swconfig, by default eth0 was connected to LAN ports, while eth1 connected to WAN. With DSA, eth1 is disabled, wan + lan1-4 are virtual and go through eth0. So Marc, in case you were wondering why I maintain a patch called Revert DSA, now you know. Regarding TP-Link Archer C7 and 1043ND, I heard their switch is not compatible with DSA, so they are not likely to get support. They have only one ethernet interface, hence LAN and WAN are accomplished using VLANs eth0.1 and eth0.2.

Was solving a deep understanding problem from us, but we needed to skip back a lot of times. Thank you!

Thank you very much for great explanation and interesting topics! I'm just in the middle of rebuiling my home network and this video helped me very much! Keep up the good work!

Wow, so much dedication for videos about OpenWrt. Loving it, great channel, subscribed!

Awesome. I actually got mine working already by leveraging off your previous video. I took many different paths than yours though to get mine set up. I guess there are different roads to get to the same place, but I have to admit, I did get locked out many times during my experimentation before I nailed it. And it only took me 2 weeks ;) . Next I’ll try following your ‘paths’ here instead. And thanks for explaining the ‘LOCAL’ setting. I really wondered what that was for. And I am now going back to re-number my VLANs, which are currently 1,2 and 3. So many good tips! As for your next video, none of the one’s you mention. My request is ‘The Best OpenWrt Router for 2022’. I got the D-link Dir-2660 from your 2021 router video and this was a real good choice. Especially the recovery option it has. Thumbs up! Thanks man!

as always, high quality content in here. Thank you!

Danke Marc, your explanations are really great. Yes, I am strongly encouraging you to make Raspberry Pi based OpenWrt tutorials, especially with the topic VLAN. Vielen Dank für deine wertvolle Zeit und viele Grüße aus NRW.

Tip: "watch" A unix command that runs the command after it once, by default, every 2 seconds. EG: watch date will print the date every 2 seconds, with a refresh. If you want to do watch something | grep something You need to surround in quotes. watch "something | grep something"

Thanks for making this update. It was a little trickier to wrap my head around than your ususal fare, but I think I got it in the end ;-) When the switch option disappeared on OpenWRT 21.02 I was a little disappointed at first. I could have read up on it, but I thought I'd just wait for the movie. Well, here it is! The new GUI actually seems to be structured a little more clearly than the previous one, unless there's some fundamental misunderstanding on my part. I hope this is an accurate observation: The Network/Interfaces/Interfaces section configures OSI layer 3. The Network/Interfaces/Devices section configures (all) layer 2/ layer 1 interaction.

Amazing video. I was struggling with openwrt config specially vlans, guests and IOT. tks so much

Excellent Content..!!! Finally found someone with real under the hood explanations. Thank You for sharing .. Cheers :)

Great to have OpenWrt on RPi

A single video with a managed switch, openwrt router, and proxmox would be fantastic!

It would be great to have a raspberry Pi OpenWrt video. I've been busting my head for quite a while now to make OpenWrt work on raspberry Pi

Marc, great video as always; you are a natural professor. A suggestion for a future video; I see you have a MGNT interface, so how about a video on how to setup a secure server management network/environment.

Excellent job with these and previous videos on the topic 🥰

Hi. I just wish to complement your contribution to society and to what it means to share skills and knowledge. Furthermore, cudos to your skill and way how you deliver information to people! I hope you continue. I can’t thank you enough!

Super video! Thanks to you I now managed to get my perfect home setup running: - main router (WRT-3200, wifi off due to buggy drivers, vlan filtering) - dumb AP1 (Ubiquiti UniFi 6 LR: 2.4G/5G internal-wlan/guest-wlan, vlan filtering, fast roaming) - dumb AP2/switch (WRT-1900 ACS: 2.4G/5G internal-wlan/guest-wlan, vlan filtering, fast roaming)

Thank you for making this video! I was clicking around the LuCI web interface for quite a bit without finding where to configure VLANs. Also, the official documentation does not seem to be very updated around configuring VLANs in newer versions of OpenWRT. Thanks again!

Thank you so much for this video have been waiting for this to config my IoT network, appreciate your efforts thumb up

Thanks a lot for these amazing videos on OpenWrt.. Please keep them coming :) If possible, please do one on virtualizing OpenWrt in Proxmox. Looking forward to RPi tutorials as well.

The best explanation about vlan on internet

and yes. If you could make one episode about the Pihole and the ADhome would be great. Looking forward to it. thank again.

You answered what I was wanting with my previous comment, Thanks, you do an amazing job. I know this is an older video but OpenWRT on a Raspberry Pi would be awesome.

Thanks so much Marc! This video helped immensely! I echo the many other comments: YES! Would love to see a video on RPi 4 + Smart Managed Switch + VLANs! I've used a couple of your videos now to build this type of setup with a RPi 4, Ethernet USB 3.0 dongle, and Netgear L2+ switch. But would really enjoy being able to "check my work" against yours!

Hi Mark, thank you again for your description of OpenWrt 21.02 news. I made an attempt some weeks ago to configure my dumb access point with such new version but I gave up because I missed this lesson. So at present I'm working with two devices both running OWrt 19.x. Maybe in a near future I'll upgrade at least the access point to 21.02, unless some inconcistencies arise. I've too many constraint on the main supplied by the internet provider.

Great video, as always. Combined this with the Firewall video to set up some medium and low security networks for multiple SSID APs. Thanks!

It requires a deep understanding of how 802.1q works, before you can understand the content of this video. I've been using both OpenWrt 19.07 and 21.04 for a long time for complicated VLAN configuration, but I was asking myself what the asterisk (*) means in the context of, for example "lan2:u*" (in 19.07 it was simply either "2t" or "2"). After the video, now I understand it means the LAN2 port has the VLAN which is being configured as its PVID. I almost never use LuCI. Thanks a lot.

Very good guide, good work Mark

Hello and thank you for this video. I recently found your channel and you helped me understand a lot of things about OpenWRT. I have few TPLink 1043ND v5 that i don't want to throw them out and they are not yet (or never) compatible with DSA. I have managed to assign wireless ssid's to vlans on 21.02.x without DSA like this: 1. Declare/make vlans on the switch menu, Network -> Switch 2. add this vlans to bridges on Network -> Interfaces -> Devices tab including the management vlan (management vlan and other vlans declared on switch that you don't want to assign to wireless networks can be added directly to Interfaces but i noticed that LLDPD package will not work without a interface based on a bridge) 3. create interfaces on Network -> Interfaces -> Interfaces tab using these newly created bridges 4. assign wireless networks to the newly created interfaces.

Thank you for your thorough treatment on the OpenWrt subject(s). Getting my head around OpenWrt is much easier now that I know what and why I'm performing desired tasks.👍 I would very much like to learn more about VLAN on an additional managed switch.

It took me AGES to find the switch menu! But I figured it out!

wonderful 👍, that is very useful, I'm a noob but your videos can teach me some things that even I don't have in mi mind, tanks sir.

this is really helped me,thanks dude

Many thanks, just what I needed

I was a fool to think that I had managed to configure 21.03 with DSA by myself: 21.03 on FB4020 does still have a "switch" menu: I didn't realize that it's not a real DSA thing. Now I got EdgeRouter X and was shocked to find out that I'm clueless! Thank you so much for your great video! Now I can start!

Vote w. both hands for RaspPi & Proxmox... Your toutorials are really great, sir!!!

Thank you very very much! In 10 minutes fixed (dead WAN) router!

Very well explained!

I would love to see a video on a RP turned router with VLAN functionality, in depth and properly as you do, please!!!

Call to action, yes please! Raspberry Pi as WireGuard VPN gateway has been on my mind for some time now. I have 2 of my VLANs go via the VPN provider and have one neutral VLAN (not via VPN but via ISP). Have that working now with luci-app-vpn-policy-routing, which also allows me to specify some remote ip addresses which should never be routed through the VPN, and VPN running on the router. But not sure how to do policy routing when using the Pi as WireGuard VPN gateway... Also very interested to learn how to properly configure Raspberry Pi as 'router on a stick' (with a VLAN aware switch). This channel is the best resource on OpenWRT! Thanks a lot :) Bought my first OpenWRT routers (Belkin RT RT3200) encouraged by your videos. Probably wouldn't have tried it otherwise...

Great Video and as always very clear! Thanks Marc for your efforts and the very useful content! Concerning further topics, it would be great to see a setup with an Orange pi, orange pi zero (1 or 2) as super fast access point. Or Orange pi R1 setup as a powerful router with multiple vlan's, openvpn, ad blocking, etc. Regarding Proxmox, I personally have troubles to clearly setup a dedicated Lan voor my VMs and containers so if you have solutions that would be great!

you're incredible please keep uploading

Thank you very much for videos. Cheers.

This was very helpful

best video i've seen today, thanks 😎

yes... yes... and yes.... :) as said before me - yes to all of them. Starting with OpenWRT with Orange Pi and then the others would be great!!! Thank you.

Once again great video

Very good stuff! You really know how to teach! Subcribed!!

Great Channel, amizing video as always. Thanks ☝️👍 🇵🇹

Thank you for making a video with openwrt and raspberry Pi!

You’re the man Marc!!

Thank you for your great video ! I wish you already had this video made, as I was struggling with OpenWRT 21.02 on Fritzbox 4020 in October. I did make it through, but your video helped me to understand it a bit better. Now, just some info from my side, in case it might be useful.... I have OpenWRT 21.02 on Raspberry pi 4 set up last year around June (a trial version): it was quite easy because I just ignored DSA thing. (had no idea back then) It was fine, because I wasn't counting on being able to use wifi on Raspi 4 itself, and it doesn't have any switch. I didn't make any bridge interface, just created eth0.xy and used them everywhere. I used the only Ethernet port for LAN and WAN, where WAN side was connected with speedport entry2 in pure modem mode through a managed switch TP Link SG108PE. Then, something weird happened: when the modem gets power-cycled for some reason, the WAN interface of raspi didn't connect anymore on its own. I had to restart the raspi, too, in order to reconnect it. Restarting wan-interface alone didn't work. The jack of the power adapter of the modem is a bit loose, so it was a problem. In December, I decided to use USB-Ethernet adapter TP Link UE-300, then this problem went away. Moreover, it got noticeably faster. So, I think, WAN on a dedicated USB adapter is better. I was also powering the Raspi with PoE, but it also caused some subtle but serious problem, so now I have a power adapter. Another thing is, I have SG108PE managed, and a few dumb switches from TP Link. The ability to negotiate the speed on dumb switches seems better than on SG108PE. SG108PE wants to drop the speed, even though higher speed can go without an issue. So I guess cheap managed switches are not good. That's another reason why it might be better to use USB-Adapter. So it's just my experience, still a noob (but get a lot of help and learning:)

Many thanks for these excellent videos. If you are still thinking about future topics for videos, support for the Redmi AX6000 was recently merged. This device looks promising. 802.11ax and potentially better range than the Belkin RT3200 thanks to its external antenna array. SoC is more powerful as well. A video on OW installation and comparison to the RT3200 would be a great one IMO.

Wonderful explain

Thank you for this video Marc! I tried following along but I only wanted to create a VLAN over one port, so where you configured both ports 1 & 2 I did nothing with port 2, etc... and when selected to tag or untag, I left all other ports as "Do not participate", I then lost connection after clicking save & apply. Do I need to segment the bridge to isolate port 1 from the other ports or is there something I missed or that you did not cover in this video which I am missing?

I love openwrt Contents, Keep it up!

Another great video! Very informative. OpenWrt in a virtual machine is a great topic. I'm currently virtualizing OpenWrt in Proxmox and I'm very happy with it but I would like to hear you opinion on the topic. Also I'm trying to add my ArcherC7 in a high availability setup in order to load balance when there is some maintenance on the Proxmox side. Thanks again for the videos!

thank you for the information. easy to digest even for noobs like me!

Great tutorial!!! Thanks.

Thank you, thank you!

Yes, please :) Videos with adguard and Proxmox will be interesting :) Thank you in advance :)

great video thank you very much

Marc, your videos helped me understand the concepts better be able to use them. I however ran into an issue. I am using Linksys EA8500 with OpenWRT 23.05 and none of my LAN ports show under Network/Devices. I get stuck not being able to create a new VLAN 802.1q device because I cannot select my LAN ports to be part of the interface. How do I move forward?

With those videos, I have redrawn all my home networks! Thank you for all the helpful and clear information you provide with your channel! Really thank you! One question about the VLAN (99) used for the management: here and on the other video you suggest leaving the DHCP to provide the IP for the mng interface (LAN) and in this video you suggest setting unmanaged all the others... but in the bad case you lose the upstream with the router the second AP will be totally unreachable... Do you have any concerns/comments to setting the interface with static IP outside the DHCP range provided by the upstream router to have a fallback way to enter the AP?

Thank you Marc for your great videos! I have a managed switch that I plan on connecting my OpenWrt router to. Do I need to still do the switch configuration on the OpenWrt router, or just the switch? Or both? Thank you.

Would be great to have a video with Raspberry Pi running PiHole / DHCP + AdGuard + WireGuard ! You rock !

I have used openwrt on a raspberry pi using a compute module 4 and a df robot router board. Worked well. Vlans are fairly easy.

i would hit like many times if possible. Always godd and precious contents fro yr channel. Thank u for sharing it.

I've ran OpenWRT on a Pi with WAN and LAN on eth0 using VLAN's and a managed switch. So a video explaining to people how this is done would be useful. The full duplex bit would be good to explain as well. People like to jump to well you'll get less then half your download speed if you only use one NIC.

Mark: Love your unique style to make concepts clear. Why not make all ports in one switch bridge wan1,lan1,lan2,lan3,lan4 and then assign to specific vlans. We can keep untagged for wan port so that a non-vlan aware telco modem can still be used there. In essence instead of call them wan1,lan1,lan2,lan3,l and an4 --- they are actually port 0, 1, 2, 3, and 4.

What is the purpose of setting specific vlans as tagged/untagged on lan ports on the br-lan device, given that later in the video, the LAN interface is changed to where it no longer uses the br-lan device? What effect does br-lan have if every interface ultimately is set to use a different device?

CtA: All 3, would be awesome! :D

Great content...

Hey Marc, thanks for the excellent video. I was trying to configure pretty much the same setup as the one described here and i spent the last 4 days trying to find out why the AP (openwrt 21.02) is not passing any traffic through the vlan interfaces, but dhcp packets. Which was fixed once a bridge was configured and vlans added base on your explanation. Another interesting topic would be a way to re-configure a bunch of APs through a centralized configuration (the mother of all LuCis). Are you aware of such solution? Cheers and hope you continue with the amazing educational content.

I have a question. Can the "2ND ACCESS POINT" be a managed switch? Thanks a lot for your video. I was really confused about this topic before watching it

I would absolutely 100% be interested in seeing a video from you about vlans on the raspberry pi and also vlans on proxmox. I know the videos you're talking about. Have watched them more times than I'd like to admit, and spent many hours trying to get it to work on my RPI4, but was still never successful in doing so. I've burned myself out on the idea, to be honest, and have recently shelved the project. Would love to get a fresh take from your perspective.

Wonderful. You must be a teacher.

This was very helpful, thank you! I was able to use this to update my Linksys WRT1900ACS from 19.07 to 21.02, but I still have one minor question. On 19.07, my switch configuration page on LuCI had two "CPU" interfaces, eth0 and eth1, like the screenshot at 4:44. However, in 21.02, I only see "eth0" like the screenshot at 8:30. What is the reason for the difference? Everything works fine following your steps (bridging lan1 through lan4 and wan, and using bridge vnet filtering) so this is more of a curiosity. But I would be interested if you knew the answer!