This documentation applies only Turris OS 3.x that is no longer present in newly sold routers. The new documentation is located at https://docs.turris.cz/.
This manual is only valid for Turris 1.0 & 1.1
When setting VLAN on Turris, it is good to first understand the hardware setup and the interconnection of individual components. See the following schema:
The processor of the router Turris Omnia (SoC, Armada 385) has 3 network interfaces. In the system they are
eth2 is connected directly to WAN on the back side of the router, the interfaces
eth1 are connected to the switch-chip, specifically to ports 0 and 6, and their assignment to the connectors
LAN5 can be configured.
The router is by default configured so that the
LAN1 connector is assigned to the
eth0interface. The rest of the connectors (
LAN5) are connected via the interface
eth1. See the following file:
config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0' config globals 'globals' option ula_prefix 'auto' config interface 'lan' option ifname 'eth0 eth1' option type 'bridge' option proto 'static' option ipaddr '192.168.1.1' option netmask '255.255.255.0' option ip6assign '60' config interface 'wan' option ifname 'eth2' option proto 'dhcp' config interface 'wan6' option ifname '@wan' option proto 'dhcpv6' config switch option name 'switch0' option reset '1' option enable_vlan '1' config switch_vlan option device 'switch0' option vlan '1' option ports '0 1 2 3 4 ' config switch_vlan option device 'switch0' option vlan '2' option ports '5 6'
From looking at the last two blocks of
config switch_vlan, it should be clear that two VLANs are set up. In the first block
VLAN1 is defined as the connection of ports
0 1 2 3 4 to the switch-chip.
Port0, as can be seen in the schema above, goes with interface
eth1, ports 1 to 4 go with the corresponding physical connectors
LAN5. So, if an ethernet cable is connected to any connector
LAN5, the given data flow can be seen on the interface
eth1. The same goes for the interface
eth2 connected via bridge - see block
config interface 'lan' .
Analogous to that is the system in the next block
VLAN2 goes with
port6 (and so also the interface
port5, which is physically connected to
It should be visible from the previous section that
eth0 represent VLANs with the names
VLAN2. It is also possible to add more VLANs, see the following example (mentioned are only blocks for
config switch_vlan option device 'switch0' option vlan '1' option ports '0t 1 2' config switch_vlan option device 'switch0' option vlan '2' option ports '5 6' config switch_vlan option device 'switch0' option vlan '3' option ports '0t 3 4 '
VLAN2 stayed the same as in the previous example (it connects the interface
eth0 with the connector
VLAN1 now contains
port1 (and so connector
port2 (corresponds with connectors
LAN4). Notice that
port0 is tagged (
which is necessary, because
eth1) is used as a link between the switch-chip and the processor for
VLAN1 and also for
VLAN3. The last block is to be understood analogously.
For managing the correct functioning of the set-up VLANs, it is necessary to change the block
config interface 'lan' . For example like this:
config interface 'lan' option ifname 'eth0 eth1.1' option type 'bridge' option proto 'static' option ipaddr '192.168.1.1' option netmask '255.255.255.0' option ip6assign '60' config interface 'lan-2' option ifname 'eth1.3' option type 'bridge' option proto 'static' option ipaddr '10.0.0.1' option netmask '255.255.255.0'
Notice that in block
'lan' we changed
eth1.1, which signifies
VLAN1 on interface
eth1. We also created a new network
'lan-2' with static allocation to which we connected
VLAN3 and so also the physical connectors
LAN3 (see previous VLAN setting and the above schema).