(1) Turn on vlan-filtering=yes
(2) WHY DO YOU HAVE A mgm-vlan bridge??? GET RID OF THIS, its not needed.
(3) WHAT THE HECK is the comment here
add name=dhcp_pool2 ranges="ISP provided wan IP"
What does internal LAN or VLAN pool have anything to do with the WAN side ?????????????
Why are there 8 real pools and only 5 VLANS???
If you need 8 separate groups of users, then make 8 vlans!
You have 6 dchp servers and yet you have 5 vlans............... Nothing and I mean nothing adds up on your config.......
(4) Your statement I have a trunk port on ether2 and then you have this for a rule.... Tells me you dont actually understand MT RoS and more importantly that you need to go back to the first article and spend more time studying it!!!
/interface bridge port
add bridge=VLAN_BRIDGE interface=ether2 pvid=99
(5) Why is ether3 associated with a bridge........ Dump this bridge and if you want that as an available port simply assign the address to the port directly as you have done already,
No need to create the bridge for it.........
(6) 8 addresses and only 5 vlans and one ether2 subnet.................. whats with the extra 2 subnets??
(7) Where is your address for wireguard??
(8) Why do you have three wireguard rules with dst ports in the INPUT chain??
(9) Something wrong with your entry here to cause the *7 ??????
add interface /interface list member
add interface=*7 list=listBridge=ether1 list=WAN
(10) Dont see any wireguard peer settings???
(2) WHY DO YOU HAVE A mgm-vlan bridge??? GET RID OF THIS, its not needed.
(3) WHAT THE HECK is the comment here
add name=dhcp_pool2 ranges="ISP provided wan IP"
What does internal LAN or VLAN pool have anything to do with the WAN side ?????????????
Why are there 8 real pools and only 5 VLANS???
If you need 8 separate groups of users, then make 8 vlans!
You have 6 dchp servers and yet you have 5 vlans............... Nothing and I mean nothing adds up on your config.......
(4) Your statement I have a trunk port on ether2 and then you have this for a rule.... Tells me you dont actually understand MT RoS and more importantly that you need to go back to the first article and spend more time studying it!!!
/interface bridge port
add bridge=VLAN_BRIDGE interface=ether2 pvid=99
(5) Why is ether3 associated with a bridge........ Dump this bridge and if you want that as an available port simply assign the address to the port directly as you have done already,
No need to create the bridge for it.........
(6) 8 addresses and only 5 vlans and one ether2 subnet.................. whats with the extra 2 subnets??
(7) Where is your address for wireguard??
(8) Why do you have three wireguard rules with dst ports in the INPUT chain??
(9) Something wrong with your entry here to cause the *7 ??????
add interface /interface list member
add interface=*7 list=listBridge=ether1 list=WAN
(10) Dont see any wireguard peer settings???
Statistics: Posted by anav — Sat Dec 09, 2023 4:20 am