Hi, I would like to have 1 of my ports in DMZ because on that port I would like to connect (wired) my digital TV decoder. How to configure without putting in danger the other ports?
I have the same question.
You create a bridge for the wan interface, and assign that port plus the wan port to the corresponding vlan - I’ll paste my relevant config bits below. I’m using this solution in Belgium / Flanders with a Telenet digicorder - so it works:
config interface 'wan' ... option type 'bridge' option ifname 'eth1 eth2' config switch_vlan option device 'switch0' option vlan '1' option vid '1' option ports '0 1 2 3 5' config switch_vlan option device 'switch0' option vlan '2' option vid '2' option ports '4 6'
Thanks. I will try this.
Bear in mind that this config only works with Turris OS 3.X, for Turris OS 4.X and upwards you need a different config (You would just add Interface LanX to WAN in LuCI -> Network -> Interfaces -> WAN -> Physical settings and remove LanX from LAN Interface (again Physical settings))
On what LAN port on the back of your router is the DMZ assigned in your example?
Is it LAN 3?
IIRC I’ve chosen the LAN port closest to the WAN port - for easy identification.
Thanks. Good to know. I haven’t switched to 4.x yet - planning to do so during the upcoming weeks. But at the same time I’m also going to deploy a managed switch before the router - so there will be no more need for this.