WIKIABOUT

FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

Most popular tags

rut955 rut240 rut950 rutx11 rms vpn to openvpn wifi not sms trb140 firmware connection - ipsec on rutx12 rutx09 modbus
We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.

Lan - Guest - IoT Segmentation with WLAN and VLAN

0 votes
636 views 2 comments
by anonymous

Firmware: RUTX_R_00.07.02.1
Firmware build date: 2022-06-03 11:26:05

Hello,
I am new to network technique but I hope I got it right till now.
I want to create a Lan-Guest-IoT segmentation. Let's only talk about Lan-Iot. Lan has 192.168.1.0/24 and IoT has 192.168.2.0/24. 
I realized that my router has to have (at least) two interfaces, one for LAN and one for IoT. I assigned the net ips and subnet masks. Both interfaces are running.
Now, I have two wireless adapters. One is called X the other X IoT. I could assign the network to each Wireless adapter, so I suppose that X is assigned to 192.168.1.0/24 and X IoT is assigned to 192.168.2.0/24.

My first question is following. Is it correct to create a VLAN with (at least) two untagged ports, put the 192.168.1.0/24 to the first vlan port and the 192.168.2.0/24 to the second vlan port? Is this a physical segmentation? Would it be possible to have the both nets 192.168.1.0/24 and 192.168.2.0/24 on the same physical net? (I have heard that his is called overlay network).

My second question is regarding a "bridge". A bridge is a layer link device connecting two devices on OSI level 2 together. Before I started to create my segmentation, I can rememeber that there was an interface called br-lan available. As far as I understood, it combined the lan and the wlan to one "ethernet-wlan" lan. Is this correct? How can I now create a

  • "ethernet-wlan" lan
  • "iot ethernet- iot wlan" lan

In my physical settings of my two interfaces. I have currently dfined

  • eth0
  • eth0.2

If I change it to 

  • eth0.1
  • eth0.2

I cannot connet to the router anymore and have to reset t factory settings. Shouldn't there be something like

  • br-lan.1
  • br-lan.2

Thanks a lot for help.

Regards,

Equilibrium

1 Answer

0 votes
by anonymous

Hi,

If I am right, you are trying to make two separate networks:

One to use as default LAN: 192.168.1.0/24

another as a Guest LAN: 192.168.2.0/24

Can you send me the topology diagram with details, what is your end goal?

Yes, you can have both VLANs on the same physical port with a tagged-based VLAN. On the Port-based page, you can have 2 VLANs assigned by selecting the tagged option in the drop-down menu for LAN port 1.

For the second question, I would like to know if you want to create two WLAN interfaces with separate networks? 

Please share the detailed topology.

Regards,

Ramandeep

by anonymous

Hello,

thanks for answer. Here is my topology. Its not a guest lan  (this will come next) its more an IoT zone for my IoT devices.

My problem is that my Hue Bridge on the second port that is on VLAN V2 does not find the DHCP server. Most probably my VLAN settings are wrong. I'll show only the settings for 192.168.2.0/24.

VLAN is...

Interface is...

Interface physical settings is...

It could be that I have to write br-lan.2 here, but I am not sure. I even don't understand br-lan interface. Is this a bridge between the wired LAN port and the WiFi interface? If yes, is there a br-lan.1 and a br-lan.2 if I have two vlans?

I suppose that the Philips Hue Bridge gets the IP from the DHCP server defined on 192.168.2.0/24 and that this DHCP server is reachable for the Philips Hue Bridge even if no ports 67,68 are opened. However, I opened them for 192.168.2.0/24 and the device (router) because I have seen this on a YoutTube tutorial. So, ports are opened.

I can ping 192.168.2.1 but not the Philips Hue Bridge (no IP address) assigned.

Thanks for help.

Regards,

Equilibrium

by anonymous

Hi,

It would be better if you just simply reset the device and reconfigure everything.
https://wiki.teltonika-networks.com/view/RUT240_Device_Recovery_Options#Factory_reset
Based on your topology, you need to simply configure 2 interfaces (the Default LAN interface 192.168.1.0/24 network is already there, just create one more for VLAN 2) on the Network->Interfaces page. Create two untagged VLANs for LAN port 1 and port 2. Assign the VLAN interfaces to the interfaces created on the Network->Interfaces page. Hue bridge should be able to get the IP. 

If the issue still persists, try to connect to other devices such as PC on LAN port 2 and see if it gets an IP or not.
You can share troubleshoot file in PM.