First, thank you Brent for you detailed explanations today. What follows is my configuration which works now with my GL-MT300A ( https://wiki.openwrt.org/toh/gl-inet/gl-mt300a ) The trick part was to figure out how to set the correct vlan on OpenWrt. It seems it (still) works without mac-address spoofing, but nevertheless I set it to the same as the provided Fritz!Box (which I am going to return now) config interface 'loopback' option ifname 'lo' option proto 'static' option ipaddr '127.0.0.1' option netmask '255.0.0.0' config globals 'globals' option ula_prefix 'fdcc:1234:5678::/48' config interface 'lan' option type 'bridge' option proto 'static' option netmask '255.255.255.0' option delegate '0' option _orig_ifname 'eth0.1 wlan0' option _orig_bridge 'true' option ifname 'eth0.1' option ipaddr '192.168.0.1' option ip6assign '64' option ip6hint '1234' config device 'wan_dev' option name 'eth0.35' option macaddr 'xx:xx:xx:xx:xx:xx' config interface 'wan' option ifname 'eth0.35' option _orig_ifname 'eth0.2' option _orig_bridge 'false' option proto 'pppoe' option username 'xxxxxxxx@tango' option password 'yyyyyyyy' option mtu '1492' config switch option name 'switch0' option reset '1' option enable_vlan '1' config switch_vlan option device 'switch0' option vlan '1' option ports '1 2 3 4 6t' option vid '1' config switch_vlan option device 'switch0' option vlan '2' option ports '0t 6t' option vid '35' On 26 September 2017 at 13:02, Brent Frère <Brent.Frere(a)abilit.eu> wrote: