Help with VLANS with AP on LAN1

[ErikOW]

Many thanks to both of you, @newbietesting and @psherman. If you’re happy with the current result, it would be very informative and convenient to get one more time all the config files in the final working order (all relevant devices). Would that be possible?

Thanks in advance.

[newbietesting]

Reverted to v23.05.4 as there's an issue versions later than 23.05.4 regarding the router freezes on boot

resolving this thread

thanks for the help @psherman

Reference:

[OpenWrt Wiki] TP-Link Archer AX23

[newbietesting]

@newbietesting

config rule
	option name 'Allow Guest DNS'
	list proto 'udp'
	option src 'Guest'
	option dest_port '53'
	option target 'ACCEPT'

hi, just a follow up, why should we allow guest to have DNS?

thank you

[psherman]

@newbietesting

hi, just a follow up, why should we allow guest to have DNS?

Generally speaking, DNS is a required service for any practical internet use. Therefore, there must be a valid DNS option provided to the clients. If you do not specify DHCP option 6, dnsmasq will automatically advertise your router as the DNS server, and the clients will expect to be able to reach the router for this purpose.

That said, it's not strictly required to provide dNS services to the guest network via your router. Instead, you can use DHCP option 6 to advertise the preferred DNS servers (i.e. public ones like Google, Cloudflare, or others). And one that is done, the clients won't need DNS services from your local router and you can omit that rule.