Hi guys, if you have any problem with WAN connection, please try to change Port 1 (to the ISP router) on the switch from tagged to untagged. This should fix the issue.
I confirm that in my similar switch (netgear 8p gigabit) the 1 port have to be untagged to work correctly. Anyway glad to reuse my small x86 cube with only one port to share fiber connection, and speed was the same like 2 interface pc (easily get the 500 Mb/s - that's my limit) - Big thanks for inspiration!
Dude you saved me. I wanted to install OpenWRT on a computer system and I couldn't provide an ethernet network card for the motherboard, but I use this switch instead, which made my job easier.
Thanks so much for the detailed instructions on this not so common topic. So useful for people running router OSes on single-NIC computers. Performance is way better this way than using even USB3-Ethernet Adapters.
Very good video, simple, to the point and a complete setup. Good to see again to refresh my memory. You got some quality content 10/10, thank you very much.
Thanks, I'm using mirkrotik instead of the managed switch, and the old tplink router is running openwrt as an access point, now i can share my internet to neighbors more safely with just 1 cable carrying 2 subnets and power 😘👌
FINALLY!!! every tutorial like this I've seen so far they use a switch that is old as dirt and irrelevant or the person says you have to buy another network card. I have a 8-port Netgear prosafe Plus switch and I knew that it should be possible to use but I haven't got around to it yet. and now here you are with basically the TP version of the same switch. good job man
Thanks for the comment and sorry for the late response. When running WAN & LAN with a single port router, it is advised to double check the switch & router firewall to protect your LAN devices. Some of the switch with bad firmware had been reported to be be vulnerable, including the TL-SG108E on my video.
05:00 Why did you use tagged/trunk port for the 1st port that goes into ISP? Since it is only 1 VLAN that would be carried, should not it be untagged instead? Or does your ISP router also uses VLANs, VLAN 10 in this case? Thanks for the video!
Hello, My ISP uses PPPoE connection on WAN side without any VLAN. I configured 802.1Q VLANs on SG105E as you described in the video. But unfortuantely I could not established PPPoE connection with eth0.10. I just wonder how can I use single ethernet without passing VLAN information to WAN side? Thank you !
Thank you for your video, can you consider to make tutorial videos about Opnsense in the future ? I'm looking forward to those videos, thank you and keep up the good work.
Hi, I am not using Opnsense and I can't promise that. However, if you look for a guide with pfSense, here is it www.joe0.com/2019/11/16/converting-single-nic-mini-pc-into-pfsense-router-firewall-by-using-virtual-lan-configuration-on-a-managed-switch/
Also here ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-aqvbAQmAbAU.html another device got 111 IP address and at the end a newcomer device got the same IP address.. How come. The router got IP 1 also not exist in the list of devices. Confusion
Hey, great video, it's difficult to find many practical guides on doing this for a router os. Quick question: since you're using multiple vlans on 1 physical interface, does this cause lower performance? Can WAN and LAN both do full gigabit at the same time even though it's all coming from on single gigabit NIC? Or would this mean both connections start being limited to around 500mbps in order for both of them together to be 1 gig of data transfers?
Update for anyone interested: I tested and it does slow down. Running an iperf through lan slows down the max wan connection, meaning if you have 1 gig wan and are transferring local traffic, you will have slowdowns, as the total traffic sum (lan+wan) is 1 gig
Hi, i have a cheap openwrt that have switch/vlan function Another one, i have amlogic tv box running openwrt that has only 1 ethernet port I want setup my cheap openwrt as manageable switch like your tutorial and amlogic tv box as main router Could you explain how to configure both router?
Great video. I have 2 questions" 1- Is it possible to connect this switch to OpenWRT router? I want to manage the devices connected to the switch from OpenWRT to apply port forwarding rules. 2- Do you have any experience nginx on OpenWRT? If so would you recommend it? Cheers
Hello, I am not really understand your first question. At the end of the video, with this setup, port 2 to 8 of the switch will be your LAN ports, in which all device connected to it will be managed by openwrt runs in the x86 PC/Router. For the 2nd question, it is no for me. I only use nginx on Centos as web server.
So this is an unmanaged switch, and you're managing it through it's web interface? Am I lost here or what would be the unmanaged concept then? (Nice tutorial by the way thank you sooo much)
This is not an unmanaged switch, TP-Link calls it an "easy smart switch" - unmanaged switch = Plug and play, no configuration - easy smart/pro switch = Different brands have different name. Basically you can configure some advance stuff on layer 2 & layer 3, such as VLAN, IGMP Snooping, Link Aggregation, etc. For this kind of switch, you don't need to care about their name, just see what is the spec/feature
hello van, i want to use my openwrt router as a vlan can u help me? i already try to set this up, but i can't make it work i got 4 lan port and 1 wan port, port number 1-3 will be lan port, port number 4 is where i put my isp and wan port is my another openwrt device
Can this setup be run with WAN coming in on port 1 and router (as DHCP server) on port 2? Ports 3-8 would remain the same in your config. My ISP provides me with an ethernet access in my building (no router) and I want to set my network up as [WAN > Managed Switch (same one you're using) > OpenWRT Router]. Is this possible? Thanks for the videos!
In trying to use this setup exactly as you describe I found that the switch management interface can be accessed from the WAN vlan. This seems like a major security risk. Shouldn't the switch allow to disable management on a vlan or port?
Hi, your videos are very interesting I have a question, instead of using a TP-LINK switch, can I configure an openwrt router the same way? in that case you could make a video.. it would be interesting
Good video! New subscriber here. Can you please help with my setup? I have an Fiber Connection and it can't do VLAN , so I can't use the VLAN10 as configured in the video, it can't see the eth0.10 tag. I'm thinking to do the opposite, which is tag the br-lan instead, but IM not sure how to do it. Can you please help?
Quick question, so I have a openwrt router with a dedicated wan port and 4 lan ports, and I want to share my connection from my pc through the wan port but also allow other devices connect to the openwrt router to communicate and discover the pc sharing the connection. Is this possible at all?
You can share the connection from the computer to other devices connecting to the router - no problem on that, just need to connect PC's network port to the router WAN port and start the hotspot on the PC. However, I don't think you can sharing the internet connection and have the PC in LAN at the same time. May I know what is protocol of the network interface of the computer?
Thank you for the video ! Im trying to use a raspberry Pi 4b running open wrt and a Edgerouter-X, i struggling to understand how to make it work. i want the rpi to do the sqm, so i created the vlan exactly as you on the video, but i dont understand the part on the edgerouter( very diferent menus )
Hi, soon I will do a video on how to setup OpenWRT on Raspberry Pi 4 with a smart/managed switch. I have yet to use Edgerouter so I can't do much on this part.
It's weird to see the incoming WAN connection from the ONT to go into a switch first. Then from the switch to the router. I have always connected the Internet modem to the router, and from the router to a switch. I presume it works in this "wrong" carriage-before-horse setup because of VLAN assignment of VLAN10 for the WAN connection and VLAN1 for the LAN. Under this VLAN configuration, the WAN traffic is logically directed to the OpenWRT router where it is NATed to everything tagged as VLAN1. In other words, the TP-Link switch directs all the traffic while the OpenWRT router still does the routing. Why is this done in this video using VLANs instead of just doing it the traditional way by connecting the ONT directly to the OpenWRT router's WAN port and the TP-Link switch is connected to the second network port on the router, the port that is covered up with black tape? Is this physical layout done as seen in the video to prove that through tagged VLANs, the physical ports are not important when it comes to routers and switches as long as VLANs are used to allow the compliant logical topology of the network? This is why a Raspberry Pi, with its only network port, can be used as a router. I had always thought a router needs a minimum of 2 physical network ports: one, acting as the WAN port, to accept the incoming Internet traffic from the modem, then through NAT, routes this Internet traffic to the second port that acts as the source for the uplink connection to a downstream physical switch. With a Pi acting as the router with its single network port, there must be some logical network topology inside the Pi so that the Pi's single physical network port acts as both the WAN and LAN port.
It is not weird at all, this was defined as "Router on a Stick" or "one-armed router" where the router only has a single physical network connection and this video is to demonstrate how you can do this with OpenWRT. Single NIC devices are very popular, such as the Raspberry Pi, Intel NUC, SFF/Tiny PC/Laptop and with this configuration we can make use of them. Actually, port 1 of the switch (to the ISP router) should be untagged VLAN10. But the TL-SG108E has a software/hardware problem and the port has to be in tagged status in order to work. I think TP-Link messed up the configuration of this switch but they never correct that in the firmware update. You can see the other video of this setup with Raspberry Pi - ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-zOMr6Wd7e9o.html
eth0 is the physical interface and .10 is the VLAN ID. If you don't want to configure VLAN and use a single network port with the Raspberry Pi, you can simply use a USB to Ethernet Adapter and use it as WAN port. Here is the link to the tutorial ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-TsOpO6O4xDE.html
Is it possible for just any router with stock firmware (I'm using TPLINK Archer A6 v3 I believe) to assign DHCP addresses over your multiple VLANs without any tagging and using trunk ports? For example, Router trunk-> (switch)VLAN10 trunk-> (switch)VLAN20 But both trunks are tagged for VLAN 10 and 20. Will the router be able to see all devices on both VLANs and assign proper DHCP to them or will this require special functions on the router? Or would this require two separate routers for each VLAN switch? If two routers, can each VLAN still talk to each other?
By theory devices from different VLANs won't be able to communicate with each other. Unless you do a specific kind of configuration and remove the VLAN dataframe before it goes out from a switch port. However, this is not something a dump switch can do. You will need either a switch with port-based VLAN or 802.11q supports then.
Hi, I would suggest to check with your seller as they should understand how to configure IPTV in Malaysia / with this router clearer than me (from what I remember there is a specific VLAN to be configured).
Hi, it is just the same thing, you just need to change the WAN interface on OpenWRT to pppoe and set the VLAN accordingly (both OpenWRT and managed switch).
You can give a try if you have a plan, so far I am not able to set up OpenWRT as VLAN switch. If you want to config the router as a normal switch, here is the tutorial ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-OGIJpqfHwkw.html&ab_channel=VanTechCorner
Hello ! Your videos are great ! My first RP4 is going to arrive in a few days which I'm going to make into a router with OpenWRT (and Unifi controller if I can: something called docker, I have no idea;;) and I wanted to do some homework before that. Now I have a stupid question... I had thought that the word "unmanaged switch" is a synonym of "dumb switch", without ability to configure anything. Like one of what I have: TP-Link TL-SG1005D. But now, I looked for your switch "TL-SG108E", and it says "8-Port-Gigabit-Unmanaged Pro Switch". So I am very confused as to which switch I should look for. I had thought that, if I want to do something like you do in this video, I need a "managed switch". But now should I be looking for an "unmanaged switch" ? I would like to power the RP4 over the Ethernet port if the price difference is not much. (Otherwise I will just power it over cellphone charger) I would appreciate if you could please give me some info for understanding the differences in switches.
Hi, these terms used by the manufactures will make you confused. Basically, in order to configure this, you will need a switch which can support 802.1q VLAN. TP-Link called this "Easy Smart Switch" while D-Link call it "Smart Managed Switch" and Netgear called it "Smart Switch". You can take a looks for all the 3 models listed here, they all support VLAN: TL-SG108E, DGS-1100-08 and GS308T.
@@VanTechCorner Thank you very much for your clarification ! I see, so these terms are not real "technical terms", but just the way each manufacturer call them:)
can i do this same setup with 3 ISP and raspberry pi ? im not looking to increase speed but to create my own failover, i've the code but looking for right hardware
Hi, it is not worth to buy the Raspberry Pi as a router if you want to setup 2 or 3 WAN interfaces. You better buy a normal router, or have a look at those SBC with 3 - 4 network ports, for example the NanoPi R5S or the FastRhino R68s.
3 года назад
can we have multiple WAN connections through switch? like using vland 11 and 12 for 2 other WAN connections?
Hi, it depends on the Internet Service providers. Some is running PPPoE, some is running DHCP on different VLAN. You can check this in the router provided by them, or contact them and verify this.
Sorry he didn’t respond to you, he is very popular on RU-vid. Yes you can do the configuration you’re asking about: Two Ethernet connections (either from two ISPs or two connections like a phone hotspot and your home internet connection). Just google it. GL.
You will need to configure SSH/LuCI and enable the ports in Firewall. This video will explain ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-GBNOvdtTNSo.html
Of course it will, if the router PC is not powerful enough to handle VLAN tagging. However, this is unlikely to happen since the most of the x86 PC will have atleast 2 cores with 1.5GHz and above. Considering the power and space, I suggest the NanoPi R5S or R6S (3 network ports, can setup as 2 wan 1 lan and vice versa), the R4S only has 2 network ports and dual wan is not supported.
@@VanTechCorner nice, i jus successfully recover my wechip v9 (s905x3 soc + 4gb ram + 32gb emmc) from brick and install my openwrt build ( with ophub magic script :)) and because its have one 1gbe lan so i need vlan, btw i recently watching your videos abaout make openwrt router as switch. So its possible use openwrt router as switch and enable vlan instead buying vlan supported switch right?
@@VanTechCorner My switch is dlink dgs-1100-08. On vlan page, I set vid 1 to ports 01,02,03,04,05,06,07 untagged, 08 not member; vid 10 with ports 02,08 as tagged, 01,03,04,05,06,07 not member. PI is on port 2, modem on port 8. After creating wan interface on PI and set as dhcp client, it is not getting an IP address.
Wait, so your LAN devices are getting IP from the Pi OpenWRT, right? If you connect the Pi to your modem with the current configuration, will it receive WAN IP?
just watching the video, the 802.1q VLAN config is wrong, this should be set as untagged, but for some reason the switch was still able to pass the untagged traffic to tagged member port. well I guess it was deliberately set on PVID, which to be honest, PVID configuration should not exist specially on ports that was specifically members as a tag only ports any members of tag only ports should automagically set it to a blackhole PVID.
When it comes to configuration, I believe there is no right or wrong config, but how you make the thing work. As I mentioned in the video and the video description, the port should be untagged for other switches, but with this TL-SG108E that port should be tagged in order to work. Manufactures made the devices working in certain principles that we are unable to explain with the networking concept (especially those proswitch/smartswitch comes with some L2 features).
@@VanTechCorner i have read in openwrt forum that mwan3 natively doesnt run well with this setup.tho im curious to see how is the performance and can you do a video with it buddy
For some of the router, for example TL-SG108E, port 1 should be tagged in order to work. By theory, port 1 should be untagged. You can always try, there is no harm on the switch.
Thank you for the comment. I have a plan to do videos in Vietnamese as well but I don't have much time to do everything on my own. Maybe in the near future.
Watch out! The switch you're useing has a vulnerability allowing connections between vlans (ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-5ohLAFHnOHg.html). If your isp has everything set up correctly it should be okay, but be aware.
No, it has not, the device is fine and good value for the money. The guy in your linked video uses default native vlan 1 with tagged ports, what did you expect to happen, vlan hopping of course. This has nothing to do with the tp link, at all and is common with almost any other device for many years now. Common sense says never to use vlan id 0, 1 and 2, most of them preconfigured, like management, etc. You should never have untagged mixed with tagged port anyway, it's very bad practice... and in strict setups, this won't work anyway, unless you have a very specific usecase for it, like some proprietary use of cisco protocols. For most users and safety, just don't and problem is easily solved. EDIT: I ordered this device and just tested it. I stand partially self corrected. This "managed" switch is a security problem, as it's not a true managed switch... Access to the management interface cannot be restricted to a certain vlan... in fact, it can be reached by ANY vlan. What makes it worse is that when you set the switch in dhcp mode, it will gain an ip from the first to respond dhcp server on ANY vlan... This is a unmanaged switch, i.e. L2 that has vlan L2 features integrated vs a traditional unmanaged switch that only switch without any extra L2 features. It cannot properly route (L3). I should have known this by looking at the datasheet prior. That being said, you still can segregate ports from each other using vlan, as long as you not using the default/native vlan 1 (which, unfortunately, the video you linked and this video demonstrated making vlan hopping possible across all untagged ports for vlan1...), which is best practice anyway, i.e. no untagged/access ports used in combination with tagged/trunked and if you still insist using mixed, then only one host should be on that untagged port vlan. In a sense, this exploit is worse than the traditional unidirectional double tagging. Maybe best to threat it as an unmanaged switch from a security perspective (i.e. seeing it as one subnet, even when it appears it is not with vlans).
