Hou-dev / supplicant_openwrt

How to enable wpa_supplicant for AT&T using OpenWRT and bypass the modem/router
5 stars 1 forks source link

Question about VLAN tagging... #1

Open mwoodson opened 1 year ago

mwoodson commented 1 year ago

Thanks for the write up. For fun, as a hobby, I'm trying to switch from a EdgeRouter 4 where I have wpa_supplicant working perfect, to an x86_64 pc/router. It's basically the same as your guide, but implemented on the EdgeRouter.

One of the things I've seen everywhere is that the WAN port needs to have VLAN tagging, explicitly VLAN 0. Your guide doesn't mention this.

Is VLAN tagging really necessary?

jaminmc commented 1 year ago

I just redid my OpenWRT. Was using goeap_proxy, and had it authorize my connection.. Has it working like this for years.. But thanks to this, I am now free of my AT&T gateway!

I was using eth0.0 for my wan for the VLAN tagging. and got this to work with that... But I wondered if it was even needed... so I changed it all to just eth0, and it works with that also!

So at least in the Charlotte, NC market, VLAN's are not needed.

I have made a script that automates the whole thing, and makes it almost foolproof. I will make a Pull request when I polish it.

Here is the Pull request: https://github.com/Hou-dev/supplicant_openwrt/pull/2

mwoodson commented 1 year ago

greetings from the other side of NC (Raleigh)!!!

I was running the Ubiquiti Edge Server, and i set it up with VLAN 0. I am in the process of moving to OpenWRT and ran across this, but it didn't account for the VLAN 0 tagging.

After I read your howto, I went ahead and tried it here with OpenWRT and running wpa_supplicant on eth1 (wan port). It picked right up and started working without any VLAN tagging, so I would assume you are right...for now (who knows if AT&T will change anything!)

One other thought. Should we firewall that wpa_supplicant port? I think it's listening to the world, right?

jaminmc commented 1 year ago

One other thought. Should we firewall that wpa_supplicant port? I think it's listening to the world, right?

No need. It functions at the Device level... Normal OpenWRT firewalls are used... Also, checkout my pull request for easy install :) https://github.com/Hou-dev/supplicant_openwrt/pull/2

mwoodson commented 1 year ago

thanks so much!!!

theAeon commented 1 year ago

just got this going up in southeast michigan-funnily enough i also moved over from goeap-proxy.

My router (netgear r7800) was dropping vlan 0 traffic unless i explicitly added an unmanaged vlan 0.0 interface. After doing that and binding wan/wpa_supplicant to the interface proper (eth0) it seems to be working.