Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 1 down vote favorite

I have a Linksys WRT54G2 v1.0 router running DD-WRT build 13064. I currently have each switch port on a separate VLAN, for example:

Port 1: IP - 172.16.32.0/19 - VLAN2
Port 2: IP - 172.16.64.0/19 - VLAN3
Port 3: IP - 172.16.96.0/19 - VLAN4
Port 4: IP - 172.16.128.0/19 - VLAN5

That is working fine and the computers are getting the appropriate addresses. In my firewall I have the following:

iptables -I FORWARD -i vlan+ -o vlan+ -j ACCEPT

When I have two computers connected on different VLANs, they cannot ping each other. Any ideas?

Ouput of iptables -L -v -n

Chain INPUT (policy ACCEPT 304 packets, 27358 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       tcp  --  vlan1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 
    0     0 DROP       tcp  --  vlan1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:80 
    0     0 DROP       tcp  --  vlan1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:443 
    0     0 DROP       tcp  --  vlan1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:69 
    0     0 DROP       tcp  --  vlan1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:23 
    0     0 DROP       tcp  --  vlan1  *       0.0.0.0/0            0.0.0.0/0           tcp dpt:23 
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  vlan+  vlan1   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  vlan1  vlan+   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  vlan+  vlan+   0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  vlan2  *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  vlan3  *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  vlan4  *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  vlan5  *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br0    br0     0.0.0.0/0            0.0.0.0/0           
    0     0 TCPMSS     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp flags:0x06/0x02 TCPMSS clamp to PMTU 
    0     0 lan2wan    0    --  *      *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED 
    0     0 TRIGGER    0    --  vlan1  br0     0.0.0.0/0            0.0.0.0/0           TRIGGER type:in match:0 relate:0 
    0     0 trigger_out  0    --  br0    *       0.0.0.0/0            0.0.0.0/0           
    0     0 ACCEPT     0    --  br0    *       0.0.0.0/0            0.0.0.0/0           state NEW 
Chain OUTPUT (policy ACCEPT 270 packets, 268K bytes)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_1 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_10 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_2 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_3 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_4 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_5 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_6 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_7 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_8 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain advgrp_9 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_1 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_10 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_2 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_3 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_4 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_5 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_6 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_7 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_8 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain grp_9 (0 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain lan2wan (1 references)
 pkts bytes target     prot opt in     out     source               destination         
Chain logaccept (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 ACCEPT     0    --  *      *       0.0.0.0/0            0.0.0.0/0           
Chain logdrop (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       0    --  *      *       0.0.0.0/0            0.0.0.0/0           
Chain logreject (0 references)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp reject-with tcp-reset 
Chain trigger_out (1 references)

pkts bytes target prot opt in out source destination

share|improve this question
Output of iptables -L -n will help to understand your problem further. – proy Mar 9 '12 at 14:45
updated...sorry I'm pretty new to the more advanced configurations of dd-wrt – Joe Mar 9 '12 at 14:55

1 Answer

up vote 0 down vote

Did you go through this tutorial http://www.dd-wrt.com/wiki/index.php/VLAN_Detached_Networks_%28Separate_Networks_With_Internet%29

share|improve this answer
that is the exact tutorial I went through. The only issue I am having is that computers can't see each other across VLANs. – Joe Mar 9 '12 at 17:46

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.