OpenWRT 21.02 - Setup Guest WiFi

[@jayak3768]

I don't think your limit is correct. Limit of 120 to me looks like a maximum of 120 devices. So starting from 100 => 100 + 120 = 220 as the last device. To set the limit to 20 just put in 20. So start 100 => 100 + 20 = 120 end address

[@VanTechCorner]

Yes you are right. The Limit is the number of leased address, not the last octet.

[@romafrancisco5524]

This is definitely my favorite OpenWrt channel, thanks for your contributions, they are very useful.

[@VanTechCorner]

Thanks for visting and glad to see your comment!

[@ramanpaliakou9405]

Thank you for the details! The part with DNS and DHCP ports' rules was Very useful. I got my router bricked trying to apply network configs from openwrt 19 (while it only supports 21) and didn't know even where to go to solve my problems until I saw this.

[@marcussantos8574]

This is the best OpenWrt related channel on KZbin!

[@hairyfairy181]

Many thanks Van, great tutorial I adapted it for an isolated IoT network.

[@VanTechCorner]

Thanks for the comment. Glad it helped!

[@pdesouza]

Was stuck, thanks so much for pointing out the firewall rule port 67

[@victorchorques4893]

Perfectly explained. Thanks!

[@jamesflynn7054]

Thank you so much, this was a huge help understanding the newer look of the UI

[@VanTechCorner]

Glad that the video is helpful. Please note that, if you want to link the Guest WiFi to 2 Wireless radio (2.4 & 5G), or create a combination of 1 Wireless Guest & 1 Wired Guest network, you should create a bridge, instead of a normal network interface. Good luck and have fun with you OpenWRT journey.

[@zathrasthetenth505]

@@VanTechCorner Thank you for this great video. How would you create a guest network where the WAN connection is on another router on the local network and not on the openWRT router?

[@zathrasthetenth505]

Ah, I have worked it out following the OpenWRT guide for Guest network on a dumb AP, enable masquerading for the lan to wan firewall zone

[@germiniano3403]

@@VanTechCorner Could you explain how to do that? when choosing bridge device there is no wireless options. Thank you very much for your videos!

[@turnkit]

This is great. Perfect detail. When I got done following I could connect the phone and the firewall ports allowed for a successful IP assignment for the phone. Unfortunately I couldn't browse the internet through the Guest SSID. I think the issue is that I am using several of these radios in mesh node and my radios are Meraki MR24 running OpenWRT 21.02 and only have one ethernet port and two radios -- the guestwifi interface shows the IPv4 gateway as the (lan) not (wan) as in your video -- at 1:46. Do you have any suggestions?

[@turnkit]

so at 3:19 where your image shows guestwifi and several WAN and one LAN interface my radio only shows guestwifi and LAN. There is no WAN. Based on "no wan" can you recommend what I can change to get traffic to bridge properly, or is that impossible? I'd like the non-guest network to just bridge from wifi to ethernet. Does that mean then that the guest can't be firewalled from the ethernet port?

[@VanTechCorner]

Hi there, - Did you set the DNS server for your guest WiFi - What exactly means "can't browse the internet", eg: can't ping the gateway (192.168.8.1 as per my video), can't ping WAN IP (8.8.8.8). - In my video, I have configured load balancing of 2 WAN interfaces. This has nothing to do with the Guest WiFi.

[@tonajki]

I have been trying to implement a VLAN for my IOT things through a lot of other guides, but I couldn't make it work. Then I found this video, just followed along and it worked like a charm. I guess it's not a VLAN per se but just using the 2.4Ghz antenna on my Belkin RT3200 for my security camera whose manufacturer is a Chinese company is good enough for me. Thank you Van!

[@francocastilloAR]

11:00 Inter-zone forwarding may be allowed in the main firewall configuration.

[@odhiambo0]

Why is it that we do not need masquerating for the Guestwifi firewall zone? My Internet only works when I enable masquerading.

[@JefFrey-ul7vl]

Why don't you allow TCP for the guest network? Additionally, why do you set the desination port to 67? Explanations of anything that is not default would be greatly appreciated

[@VanTechCorner]

Hello, it is all based on the OpenWRT docs. Here, I already show you the way. To know why, you can take a look at the docs, and the some firewall/network setting of OpenWRT to learn more.

[@alwanfauzan19]

how to setup this with dumb ap, or extend the network with dumb ap? Thanks !

[@irober02]

Excellent demonstration but how do I add a second 2.4 GHz wifi device to the guest network?

[@francocastilloAR]

For that you will need to create a bridge.

[@dreamteams]

Спасибо за субтитры 👍

[@ismailelayachi9337]

Thank you so much. This is what i was looking for

[@AnonyMap1]

Excellent Tutorial!

[@jackrabbittslim]

Great tutorial, thank you!

[@BobClemintime]

Why do you use a static ip for the guest network

[@James-uw4it]

Thanks great video as always, keep it going :)

[@VanTechCorner]

Thanks for the visit!

[@cabonk3273]

Hi ,is it possible to use a dumb access point connected to lan instead of the wifi radio of the router with the same setup?

[@VanTechCorner]

Yes, it is possible kzbin.info/www/bejne/gn3UiJVvf5x9iNk

[@francocastilloAR]

What do you mean that the guest can establish a connection with 192.168.2.1 and therefore create the additional firewall rule?

[@VanTechCorner]

The purpose of this setup is to create a separate network from your main LAN. If your guest network is working fine and devices in Guest can't communicate with your main LAN, you can skip the addition firewall at 10:16.

[@francocastilloAR]

@@VanTechCorner That additional rule is not necessary since you have set "Reject" in "Imput" of the guest area.

[@TheSleepSmith]

Great Channel and EXCELLENT tutorial... However ,... all connections worked fine Until later added WPA3 Encryption Security key after the initial Guest set up... then Phone Wifi will not/connect/ and/or accept the WPA3 security Key? Reviewed/Checked and Changed WPA3 encryption key several times but still no connect Except when I 'Open' the Wireless security channel with No Key....Hmm? Solution or Workaround? I appreciate any Suggestion/Help with this. Thank You

[@TheSleepSmith]

Worked perfectly!!!! Thank You🙏

[@AviDarks]

I really like what you do, and learned a lot. Is it possible to produce a separate record from the existing network? Why do you mean, I have a smart home and I want everything related to a smart home (switches, switzers) will connect to a separate wireless network. But they knew to communicate together. Is it possible?

[@VanTechCorner]

Should be possible. Let's me have a check on this.

[@AviDarks]

@@VanTechCorner Thanks for the response. Waiting for development

[@odhiambo0]

Hi. At the point where he went to the Advanced Wireless settings to enable ISOLATION, don't enable that and the devices will be able to communicate. I think it's that simple, no?

[@hiyoshi177]

thanks for another goood video

[@AntonioHenrike]

nice tutorial, you can please make a tutorial with VLAN?

[@VanTechCorner]

What kind of configuration with VLAN you are talking about? There is a video for VLAN PPPoE & Multiwan WAN on the channel already.

[@AntonioHenrike]

@@VanTechCorner I'm stuck in 19.07.8 because I'm using vlan to communicate to my AP (vlan 4 guest)(vlan 3 iOT) i simply can't figure out how to make this work on 21.02

[@VanTechCorner]

Can you join the FB group and share your current network config there. I will try to see if I can with migrating to 21.02

[@richardchu1593]

Dear Van, I have a usage scenario that I do not know how to set it up on OpenWRT, it will be really great if you can shed some lights on it :)

[@richardchu1593]

Topic: Multiple PPPOE calls to single ISP/modern port to get multiple dynamic IPs. Background:Our ISP allow to give us a maximum of 8 dynamic IPs if we make multiple PPPOE calls to the ISP. I wish to obtain all 8 dynamic Ips and allocate to different interfaces: (1) 1x Dynamic IP -> 2.4G Wifi (2) 1x Dynamic IP -> 5.0G Wifi (3) 1x Dynamic IP -> 2.4G Wifi - Guest (4) 1x Dynamic IP -> 5.0G Wifi - Guest (5) 1x Dynamic IP -> LAN Port 1 (6) 1x Dynamic IP -> LAN Port 2 (7) 1x Dynamic IP -> LAN Port 3 Setup: I have a dumb switch (ASUS GX-U1081) connected to the LAN port of ISP modern. Than I have two router: - ASUS RT-AX86U with factory firmware => connected to the LAN port of the dumb switch. This router will obtain 1 x Dynamic IP and will not be used to obtain multiple IPs. - ASUS RT-AC58U with openwrt 21.02 => connected to the LAN port of the dumb switch. This router will try obtain all the remaining 7 dynamic Ips as described in the background section. How can I configure the ASUS RT-AC58U with OpenWRT to obtain and assign these dynamic Ips? Thank you so much Van! Richard

[@lands1459]

this only partially works for me, for some reason devices cannot connect to the internet unless a vpn is enabled. edit: misheard the dns port, i put the right port in and now i can access websites, but only when i use the site's IP address. DNS still does not work.

[@hotnikq]

Works Fine! OpenWRT need's to be standart

[@waleedtaqi6445]

how do you get 866mbps link speed😢? i have samsung a73 which connects at 433mpbs on 5ghz ...but my ipad connects at 866mbps.

[@ati4996]

normaly guest wifi means, another 5ghz wifi with ssid , but here you configured same main 5ghz wifi, so whats the point ?

[@nekoneko1103]

How about the wifi and lan for quest

[@Anonymouzee]

nice onfo... thx!

[@borovai7725]

nice next video radius server plz

[@DieuCQ]

Hi there, I got problems with openwrt on my netgear r6700v2, I couldn't configure wireguard vpn after pppoe ( wireguard works flawless with dhcp clients). Could you please make a video instucting about this? Thank you.

[@padiel1474]

buen tutoriual, gracias.

[@thefanuel]

Thanks

[@lbn7460]

hi, bạn có thể tạo video về cấu hình dump AP đc ko, cấu hình mình như sau AC86U (router chính) -> C7 (openwrt, sẽ cấu hình thành dump AP chỉ phát wifi 2.4 và 5ghz)

[@VanTechCorner]

Bạn có thể cấu hình Guest LAN cho OpenWRT rồi nối AP vào port Guest LAN. Đây là video hướng dẫn kzbin.info/www/bejne/qJawo5WFoZKUpK8

[@wznzgq1354]

this is great, but I have small problem with this guide. I have two radios 2.4 GHz and 5 GHz. I set them up as access points as described in this turorial with the use of guest network (as described here), but they don't work together at the same time. If i enable 5GHz, the devices connected to 2.4 GHz stop working. If i enable 2.4 GHz, the devices connected to 5 GHz stop working. I am very new to openwrt and been watching lots of videos on this channel. anyone know the possible solution? thanks

[@francocastilloAR]

That's because you can't drive two devices with one interface. In order to have a WiFi network on each band, you will have to create a bridge.

[@germiniano3403]

How can I bridge Wifi 2.4G and 5G ?

[@Wiesmin]

In wireless you should add guest wifi, not edit your wifi.

[@bferi]

Yes, for example if you only have 1 band, and you want to have both guest wifi and regular wifi, then you have no other choice but to have 2 wireless controllers for the same wireless device. Or at least this is my understanding, i'm still new, my first installation. Btw, thanks for these videos they help out a lot combined with written sources!