Restrict LuCI Access to Ethernet Only (Block Wi-Fi and SSH Access)

Hello!
I'm trying to secure my OpenWrt setup by allowing access to the LuCI web interface (192.168.1.1) only via Ethernet cable. I want to completely block access over Wi-Fi and also disable or restrict SSH access.

My goal is to ensure that only devices physically connected via LAN can reach the router's GUI, while wireless clients and SSH attempts are denied.

Has anyone implemented something similar or interface settings to achieve this? I'd appreciate any guidance or examples of how to configure this properly

Router: TP-Link Archer AX23
Version: OpenWrt 24.10.0 (r28427-6df0e3d02a)

This is possible, but it means that the wired and wireless networks must be different. Therefore, setup a guest wifi network using the following guide, and then disable the wifi SSID that uses the standard lan.

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.