Guest network?

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> General Questions
Author Message
DD-WRT Novice

Joined: 06 Jul 2020
Posts: 2

PostPosted: Tue Jul 07, 2020 2:50    Post subject: Guest network? Reply with quote
I dont see an option on the interface to make a guest network, I just see 2.4ghz and 5ghz, I just need a network so when people come over they dont use my main wifi

Joined: 08 May 2018
Posts: 7213
Location: Texas, USA

PostPosted: Tue Jul 07, 2020 3:04    Post subject: Reply with quote
Click on the Wiki link next to the Forum link under the "DD-WRT" below the header logo and start reading. Also:

Official Forum Rules, Guidelines, and Helpful InformationFirmware FAQInstallation WikiWhere Do I Download Firmware?
DON'T use Chromium-based browsersRTFM/STFW - TL;DR is NOT an excuse. • Why Should I Care What Color the Bikeshed Is?
Please DO NOT PM me with questions; Ask in the forum.


Linux User #377467 /

Joined: 04 Aug 2018
Posts: 934
Location: Appalachian mountains, USA

PostPosted: Thu Jul 09, 2020 15:32    Post subject: Reply with quote
Yes, what kp69 said!

Also, as you read be aware that much of those wiki discussions is old and somewhat obsolete. You'll see talk about setting up a bridge, for example, but generally you don't need to create a bridge anymore in order to create a guest network. And you don't generally need to create your own firewall rules, as dd-wrt will set that up on its own.

To do it the easy way instead of using a new bridge, just create a Virtual AP (VAP) in the Wireless tab, check "advanced settings," and as you set up the various interface details, check the "unbridged" box and at the bottom enter the same IP/mask info that you would have entered in Setup>Networking for a new bridge. Save then set up a password (WPA2-Personal, CCMP-128 AES) in Wireless Security. Save that then in Networking at the bottom, add a DHCP server for your new subnet, just as you would have done for a bridge. You have to select your new virtual interface and make sure it's On, but the defaults will work for everything else. Save and reboot and you should have a guest network.

For some routers - I think they are ones that use Broadcom wifi hardware - you'll have to search the forums for discussions - there are many - of the simple fix for the guest network not coming up on its own. The fix involves one line of Startup code to restart the wifi interfaces. I've never needed it for my routers, which each have multiple guest networks.

Re firewalling, for a guest network, check AP Isolation and Net Isolation in the wifi VAP settings. AP Isolation will keep your guests from seeing each other's devices on the network (so malware on person X's device won't leap to person Y's device), and Net Isolation will keep users on the guest network (VAP) and main network (br0) from seeing each other. Same idea re malware protection. Those two checkboxes will coax dd-wrt to use the right firewalling, and you won't need more firewalling than that unless you plan multiple guest networks.

Final note: Try the latest build... Recent builds have been good, and a lot has changed in recent months and of course years. And DON'T pick a build using the Router Database. It's not maintained and often gives bad advice (like steering people to the problematic 40559 build).

Five Linksys WRT1900ACSv2's on 42926, 44048
VLANs, multiple VAPs, NAS, client-mode travel router, OpenVPN client/PBR (AirVPN), wireguard/PBR (AzireVPN), two DNSCrypt servers (incl Quad9) routed through OpenVPN.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> General Questions All times are GMT


Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum