I have the following situation, setup.
- Router with OpenWRT 19.07.3 connected to internet.
- A lan port of the router connected to a 24 port switch.
- Several wired devices connected to the switch.
- A mesh wifi network (3 devices) connected by Ethernet cables to the switch (wired backhaul).
- The wifi network is in access point mode.
- The wifi devices are configured with a guest network.
My problem is that the wifi devices (access points) offer a guest network (in access point mode), but connected devices (to the normal wifi network or the guest wifi network) are treated equally. DHCP offers are handled by my OpenWRT router.
I want to achieve that guests cannot access devices on my network. I want my own devices to be able to access other devices on the network.
My wifi devices do not offer vlan, or other settings to separate.
I was think to separate by creating 2 ip ranges. I know it is not very secure, but better than nothing....
I was thinking in the following direction to achieve this:
- Create a second fixed ip address on the lan interface of the router.
- Normal lan would be 192.168.1.1, guest lan would be 192.168.11.1
- Configure dhcp to offer ip address in the range 192.168.1.0 for 'known' devices / mac addresses. Offer ip address in the range 192.168.11.0 when not known.
I do not know how to set this up. Is this possible? If so, how can it be configured? Preferably via the GUI/ Luci?
I am open for other suggestions and/or better solutions. But 'buying other wifi devices' is not one of them I want to 'solve' it with the hardware I have.