Wireless Client mode with Isolation?

Hi,

How would I isolate devices in wireless client mode when joining a network from a scan

I only see the this option being available on access point mode

That doesn't quite make sense.

If your OpenWrt is client of another upstream wireless network, there are basically two circumstances:

  • either you've set it up as wwan, then its WAN IP is masqueraded/ doing NAT, including all the typical firewall features you'd expect from a wan interface
  • or it's a real client, in which case it can't really make policy decisions about the other stations in the network, as it's not in charge of that - the only thing you can do, is tightening the firewall rules for itself

Hi Slh,

currently set like this

but no isolate checkbox found withing edit of the ssid and if switching to access point mode the checkbox is found but main problem no network connectivity also you cant choose access point scanning and joining a network you gotta manually edit

I'm not sure how to have client mode in isolation also im using lan from the raspberry pi to a switch my plan is to hook it up to an extender or another wireless router

As @slh said, this is expected. Your device is 'downstream' -- it connects to an AP. You do not get to decide the policy of the AP if you are a client.

Think of it like being a guest in someone's home... you need to abide by their rules -- it's not your home, so you can't set the rules. If you have your own home (i.e. AP mode), you can make the rules that you desire.

What is it that you are hoping to achieve?

I see what you mean

how about another way, data going through raspberry lan from another router lan port or switch and output via raspberry wifi with its own broadcast on its own AP with isolate option selected

but not sure how to do this i've tried making the new the AP and within the new Interface Configuration section set Network as Lan but not receiving any live internet

The pi cannot operate as an ap and sta (client) simultaneously. It is one or the other.

What is the end goal?

Well, the onboard (everyones' favorite) Wi-Fi chip can't but the Pi can; if you add another radio.

Fair enough. But from the sounds of it, the op may not behave another radio attached (at least it hasn’t been mentioned).

seems i'd need another usb wifi to make this possible

Thank you both for your comments i will mark this as solved

You still have not described what you are really trying to do. You may or may not need another radio. Your goals need to be properly defined. You cannot make the upstream network client-isolated, but it is not clear if you actually need or would benefit from client isolation.

Raspberry pi used as Guest network
from lan to wifi or wifi to wifi

So you just to isolate guest Wi-Fi logged in on the Pi from each other?

The pi is a particularly bad device to use as a Wifi AP (even with USB wifi adapters). But if your goal is to make a guest network, you can do this pretty when connecting via ethernet. It is much more complex if you are connecting using wifi.

1 Like

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.