OpenWrt Forum Archive

Topic: different network architecture

The content of this topic has been archived on 7 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

hey guys

i just wanted to ask if there are any known issues/pitfalls when trying to change the default network setup? my goal is to have 3 different subnets:
a bunch of servers directly attached to the internal switch (192.168.0.0/24), one subnet for wired clients (via uplink from one of the switch ports, 192.168.1.0/24) and a third subnet for wlan (192.168.3.0/24) - each of them with different firewall rules etc.

i guess in any case i have to remove the br0 bridge to have eth0 and eth1 seperated from each other...but does the default setup purely depend on that bridge (e.g. removing the bridge bricks my router because of some firewall settings etc.)

concerning the server- and wired-clients-net: do i have to work with vlans or is such a setup impossible anyways?

thanks for your replies in advance, rudi

i just wanted to ask if there are any known issues/pitfalls when trying to change the default network setup? my goal is to have 3 different subnets:

The only caveat I would note is to leave at least one port on the default vlan0 (linksys) so that you have wired access in failsafe.

i guess in any case i have to remove the br0 bridge to have eth0 and eth1 seperated from each other...but does the default setup purely depend on that bridge (e.g. removing the bridge bricks my router because of some firewall settings etc.)

Removing the default bridge (br0) should not brick your router.

concerning the server- and wired-clients-net: do i have to work with vlans or is such a setup impossible anyways?

Setting up a new vlan on one or more of the wired ports would be the clean way to do this but I would think it could be done strictly with routing also without adding a vlan. The choice would depend somewhat on how much access/separation control you want between the servers and clients (eg do you want firewall rules?) Judging from your description I would set up a new vlan for the servers.

- DL

The discussion might have continued from here.