OpenWrt: Create and configure a new wireless controller

Create and configure a new wireless controller

After logging into the web-interface, manoeuvre to the Wifi page underNetwork. Click Add over the wireless controller (e.g., the 2.4GHz radio) you want to have your guest network on. A new interface will be added as shown here:




As you can see, our new wireless controller is created, and we named it guest. Next up is configuring it. Choose theEdit option for the controller. You will need to create a new network, as you can see we named our new network guest here:



Also, make sure to set up wireless security if you want to protect the connection.

Configure the new interface

Now if you manoeuvre to the Interfaces page under Network, and you should see your new interface, looking similar to this:




You will need to configure you interface before it is useful. Choose Edit, pick the protocolStatic address, and fill out your chosen IPv4 address. We chose 192.168.3.1 here, but you may have different preferences. However, avoid using 192.168.1.1 or 10.0.0.1 as they may already be in use and prevent your guests from acquiring IP-addresses. Remember to set the netmask. You will also need to enable DHCP, we chose to go with the default options here except for the Leasetime wich is only one hour, suitable for environments where a large number of guests connect and leave through a day.




Notice that you have a Firewall Settings tab to the far right of theGeneral Setup tab. Make sure you visit this tab, and create a new zone for your guest, like we have done here:

Configure the firewall

Now you are just about done. That last thing we need to do, is to open up for traffic between you guest network and WAN in the firewall. Go to theFirewall page under Network, choose Edit for your guest zone. SetInput to REJECT and tick wan under Allow forward to destination zones. Correctly configured it should look like this:



Remember to click Save & Apply. The last thing we need to do is to give our guests access to the Internet.

Right now neither DNS nor DHCP traffic will be accepted. We need to create two rules, which we can do from theTraffic rules tab under the Firewall tab. Both rules can be put in underOpen ports on router:. We name the first one Guest DNS here (you can name it what you want), setting both TCP and UDP traffic and port 53:




We need to configure the rule, so choose to edit it. Set Source zone toguest, and set Destination zone to Device (input) like shown here:



Similarly, create a new rule to allow DHCP for guests. We name this rule Guest DHCP, choose UDP as protocol, and set 67-68 for ports. Again edit the rule, settingSource zone to guest, and set Destination zone toDevice (input). When you are done it should look like this: