[Solved] Archer C7 v2, two bridged networks, configuration does not work

[uweklatt]

Hello,

I can not successfully configure my Archer C7 V2 as I want

A network "LAN" has bridge with eth1 and two wireless interfaces
This network hat Archer IP 192.168.178.120/24

A second network "GAST" has bridge with eth0 and another wireless interface
This network has Archer IP 192.168.180.120/24

Default gateway and DNS is located in network "LAN" 192.168.178.1

Users in network "LAN" should be able to reach LAN and internet (over default gateway)
Users in network "GAST" should only be able to reach internet!

I have added forwarding rules to limit GAST access to 192.168.178.1 but
GAST users can not reach the internet...

Can somebody please check my configuration?

Uwe

[uweklatt]

Hello again,

I solved the problem on my own.

I used the example from
https://openwrt.org/docs/guide-user/network/wifi/guestwifi/guest-wlan-webinterface and removed eth0 from network GAST.

But there is a pitfall.
I use only two zones (LANZONE, GASTZONE) and need an additional ADMIN firewall rule.
This rule permits management of the router itself!
The last two rules are limiting LAN acces to the internet gateway.

This is my working configuration:

Hopefully this helps other people with the same situation.

Uwe