I tried to figure out how to configure a guest network with 15.05 using the UI. I found a wiki page describing how to configure a guest wlan with web interface. That looked promising but doesn't work, mainly because it is outdated. I had a look at the Luci home to figure out what changed and was greeted with "Trac detected an internal error:". Is there an active Luci page somewhere, this looks pretty dead. I would really like to figure out which page belongs to which configuration.
Or is there an updated manual to configure a guest interface or a description what the Luci firewall screens are about?
Topic: guest network
The content of this topic has been archived on 24 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.
That looked promising but doesn't work, mainly because it is outdated.
What exactly doesn't work? The default theme changed, so LuCI looks different from the screenshots now ... but the content is still the same. As far as I am aware the process itself didn't change.
There is another description for guest wifi available on the openwrt wiki:
https://wiki.openwrt.org/doc/recipes/guest-wlan
Don't blindly follow the steps there, but try to understand what you actually are doing. With that even a dated documention might be helpful. If you need help here, please explain what doesn't work (error messages? unexpected behaviour?). Without knowing what exactly you want to archive and why that isn't working, nobody will be able to help you.
I have seen the second tutorial but it patches the config files directly. Which doesn't make it any easier.
I was able to configure the WIFI and the Interface. I could also configure the Traffic rules but they do not work for me, the DNS is not working and I can not ping to any IP. I'm able to connect and I get an IP but that's it.
Firewall - Zone Settings - Zone "guest" is missing on the screen shots, must be new.
and
Firewall - Traffic Rules contains lots of input fields not shown on the screen shots.
- Open ports on router:
- New forward rule:
- New source NAT:
But what I really need is a documentation of what you do with the UI. What are the concepts of the different Items (Interfaces, Rules,...) how are they linked and what's their purpose.
If I understand you right, you have a "guest" interface but no "guest" firewall zone? You can create a zone in luci under "Network" > "Interfaces" > "Edit" > "Firewall Settings" (as descriped in the wiki you posted).
Does that help at all? If not, maybe posting your /etc/config/network and /etc/config/firewall could be helpful (if you know how to access those).
There was another thread similar to this one in which I've posted the CLI commands to have everything required for guest network configured. If you can SSH to your router it should work for you. Tested on both CC and DD.
You'll need a fresh CC/DD OpenWrt install tho, if you already have guest network half-way done, I'd advise against using the above-mentioned script.
However amount of effort required of others to help you troubleshoot your current state and bring it to a working guest network would outweigh the amount of effort you'd exert flashing the stock firmware and then using a script.
I too had a lot of trouble setting this up. I couldn't get dhcp to serve addresses on the guest net. In hindsight I think this was because I had followed several different guides and ended up using a mixture of editing config files, and making changes in the web interface to set it up. I dont think openwrt liked this approach, At one point i got a weird error in the gui telling me i needed to install a protocol for the guest interface but then when i tried to install it it said it was already installed. So then i deleted the interface, rebooted and followed the instructions from here https://wiki.openwrt.org/doc/recipes/guest-wlan (ie copied and pasted into configs) and it worked like a charm. I can swap to the guest network, get a completely different IP address, and no access is possible to any other machines on the main lan, not even pings will get through. I can then swap back get the regular IP address and connectivity within the lan is restored, pings, ftp, windows shares etc all work.
The discussion might have continued from here.