MerVLAN v0.52.91 Simple and Powerful VLAN Management **BETA**

[r80xcore]

@r80xcore I am trying to configure Mervlan, but need some extra help. You mentioned before that you use Opnsense also, so that's why I am asking you.

My setup:
ONT --> Opnsense --> Asus RT-AC5300

Opnsense has two VLAN's at the WAN side, vlan 4 needed for multicast IPTV and vlan 6 needed for internet access. ( this is required from ISP)
At the LAN side I have setup 4 vlan's; main, IoT, guest and IPTV
I am using Kea DHCP and added all interfaces, subnets and ip pools for each internal vlan.

Asus RT-AC5300 is my old/spare router I am using to test mervlan and Opnsense setup. When I get everything working I am replacing with two RT-AX88U Pro routers.
To test, I unplug my main AX88U pro router from ONT and connect my Opnsense router to it.

My question is, how do I setup mervlan in combination with vlans of Opnsense?
My main network uses vlan 10 on Opnsense. When I add vlan 10 to my main ssid using mervlan, I am no longer able to connect to my main wifi network, as if my laptop does not recieve an ip. ( I think).

What am I missing?

Thanks in advance,
RaccoonNL

Hi!
First you should do is to make sure that MerVLAN is mapping correctly. I don't currently have a profile for your model yet. But that is easy to do by using the script I've made to map the unit and also send the map to github for proper support. Click here for that thread.

Secondly, when adding a VLAN it's important that the managed switch is properly trunking the traffic. This means that the port connected to your AP should be set to T(ID) and also U(ID) if you want to pass the remaining traffic. The port towards the OPNsense firewall also needs to be set up properly.

In MerVLAN it's often best to use a Guest SSID when adding a VLAN ID. That is thoroughly tested.

Whai I myself do is that my AP is set to
Main SSID1
Main SSID2
Main SSID3
GUEST SSID1 VLAN 187
GUEST SSID2 VLAN 188
GUEST SSID3 VLAN 189

I then set the port for the AP to T187 T188 T188 U186.
This makes the port pass the VLANs and then tag the remaining traffic with 186. Leaving all traffic properly tagged when entering opnsense from the switch that is tagged with T186 T187 T188 T189.

Important note.
For MerVLAN to function properly right now, you need to trunk via the WAN port. This will be modular is a future release but right now, WAN is used to forward to the next unit.

 

[heysoundude]

@r80xcore - I’ve been following along for a little while, and I’m going to ask if you’ve had a chance to look at the scripts here, with particular attention paid to the Tunnel Director section, where I suspect certain synergies may be found?

 

[ColinTaylor]

with particular attention paid to the Tunnel Director section, where I suspect certain synergies may be found?

I don't see the "synergies". What am I missing?