Move WAN to LAN - RT-AC87U - AsusWRT 380.68

[Seavoices]

Hello all,

Since i've changed my network topografy and put a firewall before my router/AP, I've decided to change configuration on my router and disable WAN port and move it to LAN side and be used as a fifth switch port and be used to connect directly to my firewall.

In this configuration, DHCP, DNS and firewall are disabled.

This is my default configuration with WAN port still active:

admin@Asus:/tmp/home/root# robocfg show
Switch: enabled
Port 0: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 1: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 00:0d:b9:47:19:9d
Port 2: 1000FD enabled stp: none vlan: 1 jumbo: off mac: d8:37:be:fd:f0:b8
Port 3: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 00:11:32:49:5c:47
Port 4: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 5: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 00:18:dd:41:07:06
Port 7: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 1c:b7:2c:c2:1d:00
Port 8: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
VLANs: BCM5301x enabled mac_check mac_hash
1: vlan1: 1 2 3 5 7t

The WAN port is configured in the same VLAN as all the ports (as expected) but WAN (port 0) are not configured in the switch, so I have no comms in this port.

Using some recommendation in several posts, I've executed the following command:

robocfg vlan ports "0 1 2 3 5 7t"

The result are:

admin@Asus:/tmp/home/root# robocfg show
Switch: enabled
Port 0: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 1: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 00:0d:b9:47:19:9d
Port 2: 1000FD enabled stp: none vlan: 1 jumbo: off mac: c4:6e:1f:3a:ce:3a
Port 3: 1000FD enabled stp: none vlan: 1 jumbo: off mac: b8:27:eb:1a:db:de
Port 4: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 5: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 00:18:dd:41:07:06
Port 7: 1000FD enabled stp: none vlan: 1 jumbo: off mac: 1c:b7:2c:c2:1d:00
Port 8: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
VLANs: BCM5301x enabled mac_check mac_hash
1: vlan1: 0 1 2 3 5t 7t

As expected, WAN (port 0) are in the switch but port 5 are automatically tagged on the VLAN and after that, LAN4 (port 4) and WiFi 5Ghz network stops connection to VLAN 1 despite that the command does not tag switch port 5.

How can I configure swith to put all ports, including WiFi to be on VLAN 1?

Thank you

 

[joegreat]

What if you switch the router to Access Point (AP) Mode?

Then you have a 5 port switch and WLAN works also switched (as my 2nd router does)...

chief@AC87U-AP:/tmp/home/root# robocfg show
Switch: enabled
Port 0: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 1: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 2: 1000FD enabled stp: none vlan: 1 jumbo: off mac: ac:81:12:d2:58:8c
Port 3: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 4: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
Port 8: DOWN enabled stp: none vlan: 1 jumbo: off mac: 00:00:00:00:00:00
VLANs: BCM5301x enabled mac_check mac_hash
1: vlan1: 0 1 2 3 5 7t
2: vlan2: 7t
1045: vlan1045: 1t 3t 7
1046: vlan1046: 0t 1t 4 5t 8u
1047: vlan1047: 1 3 5t 7t 8u
1099: vlan1099: 2t 5t 8t
1100: vlan1100: 3t 4t 5t 7t 8u
1101: vlan1101: 0 2t 5t 8u
1102: vlan1102: 0 1t 2t 4 5 8u
1103: vlan1103: 0t 1 2t 3t 4 5 7t

 

[Seavoices]

I know, it will be to stupid but... if done the config that you've suggested and it's working as expected.

For know it is working perfectly but if i would use WAN port on LAN switch in router mode, would be perfect.

Also, I had already put my router on AP Bridge mode and WAN port was not working. After some investigation, i've detected that some IPTV configuration was in place, even in AP Bridge mode that was isolating WAN port.

Thank for your suggestion and feedback