Hello,

I'm running OpenWRT White Russian 0.9 on a linksys WRT54G v2.  This is set up to use PPPoE, and is connected to a DrayTek Vigor 100 ADSL modem which does PPPoE to PPPoA bridging.  The ADSL connection is provided by Zen, and gives me an 8 address subnet.

The Vigor 100 provides a web control panel via its ethernet port on 192.168.1.1.  At the moment I've configured br0 to be 192.168.2.254, and created an 'mdm' interface on vlan1 with ip 192.168.1.2, with IP masquerading to allow the LAN clients to access this control panel (straight routing doesn't work as the Vigor 100 has no way to know that 192.168.2.x is reachable via 192.168.1.2).  Does anyone have any good suggestion what to call my 'mdm' interface?

What I'm wondering is if it's safe to add vlan1 to br0 (or rather, make the relevant port part of vlan0), and make the entire LAN into 192.168.1.x.  My first thought is that is is not safe.  Noone on the internet can send anything onto the LAN other than suitable encapsulated (PPPoE) packets.

However, presumably anyone with access to the ADSL line could put whatever traffic they wanted onto the LAN unless the Vigor provides any filtering of packets, specifically only allowing PPPoE packets in.  I'd rather not rely on it doing so.  I take it a need to make sure that OpenWRT specifically doesn't route from 192.168.1.x to 192.168.2.x, much like a second WAN interface.

Is this the justification for having both wan_ifname and wan_ifdevice considered seperately? 

Secondly, as mentioned above, I've a range of 8 addresses, 5 of which are available for my own hosts.  My first thought for making these available was to partition off a couple of ports on the switch, vlan2, and then create a br1 comprising ppp0 and vlan2.  Unfortunately, I understand that this isn't possible, can anyone point me to a good document on what BCM is exactly?

Are there any alternatives that will keep all 5 IPs available for me?  The only thought I've had is to split my 8 addresses into 2 sets of 4, with ppp0 in one set and vlan2 in the other, then route between them, e.g.

a.b.c.0  - network 1
a.b.c.1  - my public host (default gateway of 11.0.0.2)
a.b.c.2  - vlan2
a.b.c.3  - network 1 broadcast
a.b.c.4  - network 2
a.b.c.5  - unused
a.b.c.6  - ppp0
a.b.c.7  - netowork 2 broadcast

Surely there has to be a better way to do this.  Can anyone advise?

Many thanks,

Chris Key