diff --git a/source/scripts/init/service.d/service_dhcp_server/dhcp_server_functions.sh b/source/scripts/init/service.d/service_dhcp_server/dhcp_server_functions.sh index faec0aca..68089bf7 100755 --- a/source/scripts/init/service.d/service_dhcp_server/dhcp_server_functions.sh +++ b/source/scripts/init/service.d/service_dhcp_server/dhcp_server_functions.sh @@ -1511,6 +1511,15 @@ do_extra_pools () { echo "${PREFIX}""dhcp-option=${IFNAME},6,$WAN_DHCP_NS" >> $LOCAL_DHCP_CONF fi done + + #Add the dhcp range for brlan1 and brlan2 for traffic separation in dnsmasq.conf file. + echo "${PREFIX}interface=brlan1" >> $LOCAL_DHCP_CONF + echo "${PREFIX}""dhcp-range=set:2,192.168.25.2,192.168.25.253,255.255.255.0,7d" >> $LOCAL_DHCP_CONF + logger "DHCP_SERVER. [BRLAN1] ${PREFIX}""dhcp-range=set:$i,${m_DHCP_START_ADDR},${m_DHCP_END_ADDR},$m_LAN_SUBNET,${m_DHCP_LEASE_TIME}" + + echo "${PREFIX}interface=brlan2" >> $LOCAL_DHCP_CONF + echo "${PREFIX}""dhcp-range=set:2,192.168.26.2,192.168.26.253,255.255.255.0,7d" >> $LOCAL_DHCP_CONF + logger "DHCP_SERVER. [BRLAN2] ${PREFIX}""dhcp-range=set:$i,${m_DHCP_START_ADDR},${m_DHCP_END_ADDR},$m_LAN_SUBNET,${m_DHCP_LEASE_TIME}" } #----------------------------------------------------------------- diff --git a/source/scripts/init/system/utopia_init.sh b/source/scripts/init/system/utopia_init.sh index fca35332..364be4b4 100755 --- a/source/scripts/init/system/utopia_init.sh +++ b/source/scripts/init/system/utopia_init.sh @@ -616,6 +616,22 @@ fi ifconfig l2sd0.1060 up ip rule add from all iif l2sd0.1060 lookup erouter +#Add new bridges for Mesh Backhaul and IOT SSIDs for Traffic separation +brctl addbr brlan1 +brctl addbr brlan2 + +ifconfig brlan1 192.168.25.1 netmask 255.255.255.0 up +ifconfig brlan2 192.168.26.1 netmask 255.255.255.0 up + +iptables -I FORWARD -i brlan0 -o brlan1 -j DROP +iptables -I FORWARD -i brlan1 -o brlan0 -j DROP +iptables -I FORWARD -i brlan2 -o brlan1 -j DROP +iptables -I FORWARD -i brlan1 -o brlan2 -j DROP +iptables -I FORWARD -i brlan0 -o brlan2 -j DROP +iptables -I FORWARD -i brlan2 -o brlan0 -j DROP + + + # Add QinQ for pod ethernet backhaul traffic brctl addbr br403 ifconfig br403 192.168.245.1 netmask 255.255.255.0 up