Cannot access LAN ports from Wifi on dumb AP

Installing and Using OpenWrt
1

I set up a dumb AP with OpenWRT 24.10, having a standard wifi, guest wifi and Wireguard VPN. Everthing works fine, but I noticed that I cannot acces my NAS that is wired to the AP when I am connected to the dumb AP wifi. Works fine when using wireless or wired connection from the main router. Wifi

config device
	option name 'br-lan'
	option type 'bridge'
	list ports 'lan1'
	list ports 'lan2'
	list ports 'lan3'
	list ports 'lan4'
	list ports 'wan'

config interface 'lan'
	option device 'br-lan'
	option proto 'static'
	option ipaddr '192.168.1.2'
	option netmask '255.255.255.0'
	option ip6assign '60'
	option gateway '192.168.1.1'
	list dns '192.168.1.1'

The wireless network is linked to lan:

config wifi-iface 'default_radio1'
	option device 'radio1'
	option network 'lan'
	option mode 'ap'
	option ssid 'SSID'
	option encryption 'psk2'
	option key '***'

Any ideas how to create the missing links appreciated.

2

doesn't look like "Client Isolation" is enabled from your settings. Did you confirm? It needs to be disabled (Default)

3

Client isolation i disabled on both radios (same SSID on the 2.4 ghz band).

4

Show firewall rules. In config zone section for lan option forward must be set to accept

5

It is:

config zone
	option name 'lan'
	option input 'ACCEPT'
	option output 'ACCEPT'
	option forward 'ACCEPT'
	list network 'lan'
	option masq '1'
	option mtu_fix '1'
6

Remove the option masq '1' & option mtu_fix '1' lines. Restart firewall.
Also make sure DHCP Server is disabled for dumb AP

7

Let's see the complete config (rather than just selected sections):

Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </> " button (red circle; this works best in the 'Markdown' composer view in the blue oval):

Screenshot 2025-10-20 at 8.14.14 PM

Remember to redact passwords, VPN keys, MAC addresses and any public IP addresses you may have:

ubus call system board
cat /etc/config/network
cat /etc/config/wireless
cat /etc/config/dhcp
cat /etc/config/firewall
8

Thanks for all suggestions. After some research on VLAN’s, I decided do configure the dumb AP with VLAN. Lot easier to set up standard, guest and VPN devices and only have to configure the primary router.

I think my earlier problem is related to adding the WAN port to the switch. This seems to constantly give problems on the Nightgear R7800.

9

Exactly!
See: