Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 16:11 Post subject: Another wifi network for the public how? [SOLVED]
I have an office where a lot of people come and I want to offer them open Wi-Fi without giving them access to my local network ... I don't know how to do it, I have been playing with the ddwrt but how I can explain it very well I put it in a drawing
I hope you understand
Can be done? What to do or is there a wiki for that? _________________ Fiber Modem/Router: ZTE-ZXHN F670L ►►►►►► Internet 1
2G,3G,4G Modem: Amplimax FIT Elsys EPRL18 ►► Internet 2 (failover)
Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 16:25 Post subject:
ho1Aetoo wrote:
unbridged network
and network isolation if the clients are still to be separated from each other
aaa thanks...
...any reference or wiki of how to achieve that? _________________ Fiber Modem/Router: ZTE-ZXHN F670L ►►►►►► Internet 1
2G,3G,4G Modem: Amplimax FIT Elsys EPRL18 ►► Internet 2 (failover)
You need to set the network type to unbridged and then define a subnet and add an additional DHCP server for the subnet and interface in the network tab.
Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 16:48 Post subject:
ho1Aetoo wrote:
Check your WLAN settings
there is a switch for bridged and unbridged as well as for network isolation
Aaa ok but, I think that in my drawing I did not explain myself well, I will try to explain myself better I'm sorry ...
I have my wlan network that is called "ECDQEMSD" that has shared folders in it and I want all devices to see each other as freely can posible but of course, only for those that are connected to this network by WPA2 authentication etc ok.
now... I want another network like ... parallel? ... additional?...
well that is for clients or guests, with another issd like 'patients' or 'clients', that do not share anything, Neither see shared folders and devices on the other network, Even better if it can have another IP address, and has low upload & download speed and, without any authentication So that everyone who is there connects
I've seen what can be done but I don't know how or where to look _________________ Fiber Modem/Router: ZTE-ZXHN F670L ►►►►►► Internet 1
2G,3G,4G Modem: Amplimax FIT Elsys EPRL18 ►► Internet 2 (failover)
Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 17:02 Post subject:
Aaa of course guest network the same word says it I'll look for it _________________ Fiber Modem/Router: ZTE-ZXHN F670L ►►►►►► Internet 1
2G,3G,4G Modem: Amplimax FIT Elsys EPRL18 ►► Internet 2 (failover)
Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 18:09 Post subject:
ok using the wiki and what ho1Aetoo tellsme i got this
ho1Aetoo wrote:
AP3 A7
if you want to keep your normal encrypted network at the AP then >>
2,4gh
add virtual AccessPoint
different SSID
unbridged
netisolation
IP 192.168.4.1/24
wireless security = none
ho1Aetoo wrote:
In the network tab add the additional DHCP servers for wlan0.1 and wlan1.1
As I said, this sets up 2 open, unbridged, isolated guest networks
See the pictures I have posted
In the wiki says something similar to that I don't know if it's the same or something else
Quote:
In Additional DNSMasq Options, add the IP address and range for the appropriate virtual guest interface
Example for Broadcom (5 GHz is wl1.1), Atheros is ath0.1 or ath1.1, but depends on the router:
interface=wl0.1
dhcp-option=wl0.1,3,192.168.7.1
dhcp-range=wl0.1,192.168.7.100,192.168.7.200,255.255.255.0,12h
I think it is important to clarify again that the device in which the guest network is being configured (I think it is VAP abbreviated) is an AP(3) wired to another AP(2) that at the same time is wired to the mainrouter so Both does not handle WAN or DHCP _________________ Fiber Modem/Router: ZTE-ZXHN F670L ►►►►►► Internet 1
2G,3G,4G Modem: Amplimax FIT Elsys EPRL18 ►► Internet 2 (failover)
Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 18:30 Post subject:
yeaah i found it
tis of what the wiki says dont have to doit?
Quote:
In Additional DNSMasq Options, add the IP address and range for the appropriate virtual guest interface
Example for Broadcom (5 GHz is wl1.1), Atheros is ath0.1 or ath1.1, but depends on the router:
Joined: 07 Jun 2007 Posts: 244 Location: La Paz, Bolivia
Posted: Sat Aug 21, 2021 18:41 Post subject:
Ok everything stayed like this
this, and this _________________ Fiber Modem/Router: ZTE-ZXHN F670L ►►►►►► Internet 1
2G,3G,4G Modem: Amplimax FIT Elsys EPRL18 ►► Internet 2 (failover)