OpenWrt Forum Archive

Topic: Setting up an isolated acces point

The content of this topic has been archived on 13 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi big_smile,
I'm currently trying to set up an isolated wifi network that only gets "internet access" to my home network.
My home router is unable to isolate specific devices/ports, so I'm trying to isolate the network on my OpenWrt Router. Is that at all possible? i haven't found anthing so far, would you have an idea?

Here's a topology picture (replace "_" with "." wink ):

i_imgur.com/Wrlhmf7.png

I don't think you can isolate the wifi network from your LAN if you want to access internet through the LAN, but you can block unwanted traffic in the openwrt firewall. BTW you should configure it as a NAT router and not as an access point if you want to use the firewall in openwrt.

Absolutely, you can do this, IF you can set up a second LAN on your Home Router.

If your Home Router was also running OpenWrt/LEDE, then you would just set up a separate interface on one of the wired ports (call it Port 2), and connect that to the "OpenWrt Router AP". You would have the Home Router issue addresses (via DHCP) and you would set up your firewall rules to not allow any traffic between the Port 2 and the rest of your private LAN. The Home Router would be doing NAT for both LANs (public and private).

Of course, if you are running IPv6, you won't be running NAT, but the rest will be the similar.

Mhm, alright. Thats what i've guessed.
Unfortunately the home router is really quite minimal, functionwise.
So i guess i can't really seperate the networks.

Could I route traffic for a wireless interface through a vpn running on my OpenWrt Router?

The discussion might have continued from here.