[devsk]

When I create a VAP, I get a new VIF with wl0.1 as the name and a MAC address which is 1 greater than the MAC of the AP that this VAP is sitting on. This creates trouble when the client tries to connect: it gets password incorrect, auth failed message but that's just a red herring. Essentially, its just dropping all handshake messages.

If I go into Setup -> Networking -> Port Setup -> Network Configuration for wl0.1 and change the MAC to be same as that of AP, the client connects, gets an IP in VAP's subnet, is able to connect to internet and is totally isolated from my LAN. Perfect!!!

But....I reboot the router or change any network settings, the Network Configuration for wl0.1 goes back to AP's MAC + 1. And the whole thing breaks. OK, I thought I will just set it using "nvram set wl0.1_hwaddr=<AP's MAC> ; ifconfig wl0.1 hw ether <AP's MAC>" after the boot completes through the startup commands but the Network Configuration through GUI does some more stuff than just changing the MAC. So, it does not restore the guest network operation.

Any ideas on why it is this way? And what can I do to permanently fix it?

PS: I had posted about this as part of another thread but no response there, likely because its device based forum but the question is general.

[ian5142]

Have you read this wiki page: https://wiki.dd-wrt.com/wiki/index.php/Guest_WiFi_+_abuse_control_for_beginners

I have not yet tried this but I will be setting it up in the coming months.