Guest Wi-Fi on a dumb wireless AP / Firewall

[akapuma]

Hello,

I am using OpenWrt on my WiFi Range Extender TP-Link RE650v1. I am using it as access point with WiFi guest network. I used this manual to configure it:

Guest Wi-Fi on a dumb wireless AP using LuCI

I have a question regarding the third rule "Block_Guest_from_Lan" in "3. Firewall Part 2 - Firewall traffic rules". There is a "destination address" 192.168.1.0/24. If I click on "add IP", I can choose:

• 192.168.1.1 (OpenWrt.lan)
• 192.168.238.1 (Mac-address .... ), this is the IP of my Router FritzBox in my network.

What must I use? Nothing ends with "0" or "/24".

Thank you in advance.

Best regards

akapuma

[psherman]

At the bottom of the list, there is a custom box that allows you to enter your own value.

[mopsza]

Hi,
same answer as Peter but with a litte more explanation:

The IP Adress (its a range btw) in the box was typed in manually (by me ).
As Peter said, if you scroll down all IP Adresses you can type in any value you like.

We took the openWrt Standard LAN IP range -
192.168.1.0/24
which is short for
192.168.1.1 - 192.168.1.254

you will find plenty info about this kind of describing a network range on wikipedia ..

but I think you wonder what YOU in your network shall fill in.
answer is .. it is the IP range you are using for LAN.
The range that shall NOT be accessable for your Guests.

You seem to have at least to network ranges, the one the fritzbox is in
( 192.168.238.0/24 ) and the one your openWRT router works in ( 192.168.1.0/24 ).
So whatever network you want to hide from your guests .. this is the place to tell the system what netwok shall be hidden from guests.

[akapuma]

Many thanks for the quick reply!

And also many thanks for the work you are doing here. There hasn't been a firmware update from TP-Link for over 3 years. Thanks to OpenWrt. I now have WPA3 and a guest network.