[OpenWrt-Users] Problems splitting the wired and wireless interfaces (WRT54GL Kamakazi 7.09)

[John Birchfield]

Hello All,

I am trying to split the wireless and wired parts of my Linksys WRT54GL
running Kamikaze 7.09 - I can get the router to connect the clients, 
serve dhcp,
and do dnslookups - However; I can't route thru the router to the
internet. or to the wired client from the wireless client or from the
wired client to anywhere other than the router itself.

I basically used the wireless and network config scripts posted in the
HOWTO Forum by existentialhero

[HOWTO] Separating wireless and wired and firewalling with Shorewall

I am testing with the router's uplink attached to another router 
(Buffalo running
Openwrt WhiteRussian - When the Kamikaze router is set up in "normal"
bridged mode, clients have normal connectivity with the internet.

I can attach to the Kamikaze router with ssh no problem. from the ssh
session I can:
 ping the WhiteRussian router (192.168.10.2)
 ping the wireless client (192.168.12.104)

but I can't ping the wired client (192.168.11.53) from the router itself
or from a wireless client.

I'm sure it's a routing issue but I don't really have a handle on how to
fix it.

Any hints would be greatly appreciated


My routing table looks like:


root at Kamikaze:/etc# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use 
Iface
192.168.12.0    0.0.0.0         255.255.255.0   U     0      0        0 wl0
192.168.11.0    0.0.0.0         255.255.255.0   U     0      0        0 
eth0.0
192.168.10.0    0.0.0.0         255.255.255.0   U     0      0        0 
eth0.1
0.0.0.0         192.168.12.2    0.0.0.0         UG    0      0        0 wl0
0.0.0.0         192.168.10.2    0.0.0.0         UG    0      0        0 
eth0.1
0.0.0.0         192.168.11.2    0.0.0.0         UG    0      0        0 
eth0.0

root at Kamikaze:/etc# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use 
Iface
192.168.12.0    *               255.255.255.0   U     0      0        0 wl0
192.168.11.0    *               255.255.255.0   U     0      0        0 
eth0.0
192.168.10.0    *               255.255.255.0   U     0      0        0 
eth0.1
default         192.168.12.2    0.0.0.0         UG    0      0        0 wl0
default         OpenWrt.jb.home 0.0.0.0         UG    0      0        0 
eth0.1
default         Kamikaze        0.0.0.0         UG    0      0        0 
eth0.0



My /etc/network/config file looks like:

#### VLAN configuration
config switch eth0
    option vlan0    "0 1 2 3 5*"
    option vlan1    "4 5"


#### Loopback configuration
config interface loopback
    option ifname   "lo"
    option proto    static
    option ipaddr   127.0.0.1
    option netmask  255.0.0.0


#### LAN configuration
#config interface lan
#   option type     bridge
#   option ifname   "eth0.0"
#   option proto    static
#   option ipaddr   192.168.11.2
#   option netmask  255.255.255.0
#   option gateway  192.168.11.2
#   option dns      192.168.11.2

#### Wired LAN Section
config interface wired
    option ifname       "eth0.0"
    option proto        "static"
    option ipaddr       192.168.11.2
    option netmask  255.255.255.0
    option gateway  192.168.11.2
    option dns      192.168.11.2

#### Wireless LAN configuration
config interface wireless
    option ifname       "wl0"
    option proto        "static"
    option ipaddr       192.168.12.2
    option netmask  255.255.255.0
    option gateway  192.168.12.2
    option dns      192.168.12.2


#### WAN configuration
config interface    wan
    option ifname   "eth0.1"
    option proto        dhcp

My /etc/config/wireless looks like

config wifi-device  wl0
    option type     broadcom
    option channel 6
    # option disabled 1
    option agmode 11g

config wifi-iface
    option device   wl0
    option network  wireless
    option mode     ap
    option ssid     secure715G-3
    option encryption psk,psk2
    option key 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
    # option isolate '1'