The content of this topic has been archived on 30 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.
Hi !
I have created 2 x SSIDs (1 for staff and another for guests) on the same WiFi interface.
Now its need to block some IPs and IP ranges on guest network, for example SMB, AFP, SSH, etc.
However, in firewall rules I can specify only network name (e.g. LAN).
How to define firewall rules to block ports on guest WiFi only?
Or I should create new network (e.g. guest_lan) and assign that WiFi SSID to it ?
Thanks in advance for any suggestion(s).
If both SSID are on the same "LAN" network, then there is no separation between them, and you cannot do that type of filtering. Have a look at these guides to see how to accomplish that:
https://wiki.openwrt.org/doc/recipes/guest-wlan
https://wiki.openwrt.org/doc/recipes/gu … binterface
The discussion might have continued from here.