OpenWRT 21.02 - Setup Guest WiFi

In this video, we will setup guest WiFi on OpenWRT 21.02 with LuCI (no SSH or CLI required). The process consits of creating guest network interface, wireless client isolation and guest firewall zone configuration.
The purpose of Guest WiFi is to create an open wireless network independent from your LAN/WLAN. Devices in the Guest network can only access the internet and won't be able to communicate with devices in your internal network (LAN) and the router management IP (LuCI/SSH).

Video timeframe:
00:00 - OpenWRT 21.02 Guest WiFi Introduction
00:59 - Create Guest network interface on LuCI
03:22 - Configure Guest wireless interface
05:04 - Configure Guest firewall zone (Network - Firewall)
06:19 - First connection test (no IP address received)
06:57 - Configure Firewall rule to allow DHCP & DNS from Guest zone
08:24 - Second connection test (successful)
10:13 - Block all other traffic from Guest WiFi to the router

Resources:

Good luck and see you in the next video!

[jayak]

I don't think your limit is correct. Limit of 120 to me looks like a maximum of 120 devices. So starting from 100 => 100 + 120 = 220 as the last device. To set the limit to 20 just put in 20. So start 100 => 100 + 20 = 120 end address

[romafrancisco]

This is definitely my favorite OpenWrt channel, thanks for your contributions, they are very useful.

[tonajki]

I have been trying to implement a VLAN for my IOT things through a lot of other guides, but I couldn't make it work. Then I found this video, just followed along and it worked like a charm. I guess it's not a VLAN per se but just using the 2.4Ghz antenna on my Belkin RT3200 for my security camera whose manufacturer is a Chinese company is good enough for me. Thank you Van!

[marcussantos]

This is the best OpenWrt related channel on YouTube!

[ramanpaliakou]

Thank you for the details!
The part with DNS and DHCP ports' rules was Very useful. I got my router bricked trying to apply network configs from openwrt 19 (while it only supports 21) and didn't know even where to go to solve my problems until I saw this.

[hairyfairy]

Many thanks Van, great tutorial I adapted it for an isolated IoT network.

[jamesflynn]

Thank you so much, this was a huge help understanding the newer look of the UI

[ismailelayachi]

Thank you so much. This is what i was looking for

[hotnikq]

Works Fine! OpenWRT need's to be standart

[James-uwit]

Thanks great video as always, keep it going :)

[odhiambo]

Why is it that we do not need masquerating for the Guestwifi firewall zone? My Internet only works when I enable masquerading.

[richardchu]

Dear Van,

I have a usage scenario that I do not know how to set it up on OpenWRT, it will be really great if you can shed some lights on it :)

[AntonioHenrike]

nice tutorial, you can please make a tutorial with VLAN?

[turnkit]

This is great. Perfect detail.

When I got done following I could connect the phone and the firewall ports allowed for a successful IP assignment for the phone.

Unfortunately I couldn't browse the internet through the Guest SSID. I think the issue is that I am using several of these radios in mesh node and my radios are Meraki MR24 running OpenWRT 21.02 and only have one ethernet port and two radios -- the guestwifi interface shows the IPv4 gateway as the (lan) not (wan) as in your video -- at 1:46.

Do you have any suggestions?

[lands]

this only partially works for me, for some reason devices cannot connect to the internet unless a vpn is enabled.
edit: misheard the dns port, i put the right port in and now i can access websites, but only when i use the site's IP address. DNS still does not work.

[alwanosuarez]

how to setup this with dumb ap, or extend the network with dumb ap? Thanks !

[irober]

Excellent demonstration but how do I add a second 2.4 GHz wifi device to the guest network?

[JefFrey-ulvl]

Why don't you allow TCP for the guest network? Additionally, why do you set the desination port to 67? Explanations of anything that is not default would be greatly appreciated

[TheSleepSmith]

Great Channel and EXCELLENT tutorial... However, ... all connections worked fine Until later added WPA3 Encryption Security key after the initial Guest set up... then Phone Wifi will not/connect/ and/or accept the WPA3 security Key? Reviewed/Checked and Changed WPA3 encryption key several times but still no connect Except when I 'Open' the Wireless security channel with No Key....Hmm? Solution or Workaround? I appreciate any Suggestion/Help with this. Thank You

[ati]

normaly guest wifi means, another 5ghz wifi with ssid , but here you configured same main 5ghz wifi, so whats the point ?