Blocking ip address range on openwrt instead of vlan on isp router?

I have a huawei router from my isp in which I am not able to do VLAN. I bought a second router (archer c7) and hooked it up (huawei lan port -> archer wan port). On the archer I have openwrt with a vlan created specifically for the server and while the server is not able to see the devices hooked up to the archer, it is able to see all the devices hooked up to the huawei router. The Huawei has an ip of 192.168.18.1 with a statically assigned ip for the archer of 192.168.18.2. The archer has its network 192.168.1.1 and the server on the vlan has an address of 192.168.3.1. If I block the entire range of ip 192.168.18.X on the archer except 192.168.18.1 will this work and is it a relatively safe solution? If so, how to do it in openwrt?

You could make a Block (or Drop) Forwarding rule - from <server_vlan_interface> to WAN, DST IP range 192.168.18.0/24.

3 Likes

Just like this?

1 Like

Yes - but personally I would call the rule BlockToHauwei

2 Likes

Okey, Thanks for help, a lot

1 Like