Hi,
Today I followed the following wiki article on setting up guest network without vlan on dumb AP: https://openwrt.org/docs/guide-user/network/wifi/guestwifi/guestwifi_dumbap#step_3aset_up_the_firewall_zone
However the wiki article doesn't mentione that you need to leave the firewall and dnsmsaq "on" when you are doing this kind of setup. I do not have an access to modify the wiki, but it may be beneficial for others.
Kr
K
It doesn't explicitly mention it, and that is probably worth updating. However, the fact that the firewall is being specifically configured should be an indicator that the firewall service should be active.
I'd say that is also true about dnsmasq because the wiki article also instructs the user to enable a DHCP server. But I would agree that for those who are not already familiar with the dnsmasq service, they may not know that the DHCP server is provided by dnsmasq.
So yeah, I think these are good call-outs. And while someone (maybe me if I have time) is editing the wiki, it would probably be good to mention this on the bridged-AP wiki article which is considered the pre-req for the guide in question. I am of the opinion that the services should be running but explicitly managed via the configs (i.e. explicitly disable the lan dhcp server, and make sure that the management network is granted input permissions in the firewall).
2 Likes
Thanks @psherman
In addition, it was very hard for me to find out this wiki page ( I knew it was existing, as I saw it before) - probably because of the new categories of the guest articles, and google not indexing them - but I believe it is worth of introducing this article better.
Kind regards
K