VLAN config using 2 tomato routers for restricted guest access

1 post / 0 new
Tue, 11/26/2013 - 10:53am
#1
vmixus
vmixus's picture
VLAN config using 2 tomato routers for restricted guest access

I'd like to configure a 'Guest' network using a 2nd router connected to the 'Primary' router.

Diagram:

modem --> [wan] WRT300n v1 [lan4] --> [wan] WRT54GS v4
                           (Primary Router)                     (Guest Router)

Both routers are running the latest Tomato build from Shibby:
Build5x-115-EN Dated:11/21/2013
tomato-K26-1.28.RT-MIPSR1-115-Mini 

Using the BW Limiter (included in Shibby's tomato -- thanks!) I limited available bandwidth for the guest router via MAC address.

Pro's:

  •  Guest router can serve internet with limited bandwidth (and Shibby can even monitor web traffic as well as graph bandwidth by IP -- very nice!)

Con's:

  • Guest network is not seperated from primary network.  Clients on guest network can still ping clients on primary network.

The solution according to most guides I read was to setup VLAN's...

...but getting VLAN's to work on the WRT300n v1 (Primary router) was a little tricky since it doesn't come enabled by default due to the BCM4704 chipset.

Even though I was able to follow the above mentioned guides to enable and setup the VLAN's.  Once setup, I'm unable to access internet form the guest router via the vlan port, even though I can access internet from the primary router's other ports.  Although I am able to ping the primary router from the VLAN (and not the primary clients -- as intended)

I've documented my attempts to get this working so far in detail over here in case anyone can help point me in the right direction or let me know if this is even possible using my existing hardware.

Thanks!

 

Top