DD-WRT Firmware - Setting Up Guest Network
Aug 4, 2011
I have a router on which I installed DD-WRT firmware. I am trying to set up a virtual interface to use as a guest network. The guest network should be on the 192.168.8.0/24 subnet while our LAN is on the 192.168.1.0/24 subnet. The guest network should have full internet access, but no access to our LAN. I think I have everything set up correctly as far as creating the virtual interface and assigning it to a bridge (br1). I am able to connect to the guest network and the client gets an IP on the correct subnet. I am not able to access anything outside the 192.168.8.0/24 subnet however. I'm guessing I need to setup some iptables rules, but I'm pretty shaky with them. Here is what I currently have under firewall:
iptables -I INPUT -i br1 -m state --state NEW -j logaccept
iptables -I FORWARD -i br1 -o $wanif -m state --state NEW -j ACCEPT
Edit, more info: set up a wireless virtual interface (ath0.1) to be my guest network. Under Setup>Networking I then created a bridge called br1 with the ip 192.168.8.1 and assigned ath0.1 to it. I added a DHCP server to the bridge. Then under Services>Services I added the following to Additional DNSMasq Options
interface=br1
dhcp-range=br1,192.168.8.100,192.168.8.200,255.255.255.0,1440m
Finally, I added the iptables rules above to the firewall under Administration>Commands.
View 1 Replies
ADVERTISEMENT
Feb 18, 2013
I just installed and started using my E3000. Love it so far but I have a question about the guest network. I did set one up with a network name and password. It does show up under available networks but as an unsecured one. How do I go about securing it?
View 2 Replies
View Related
Apr 13, 2013
Region : UnitedStates
Model : TL-WDR3600
Hardware Version : V1
Firmware Version : TL-WDR3600_V1_130320
ISP :
Has anyone gotten the Guest Network feature to work from the new firmware TL-WDR3600_V1_130320?I have my WDR3600 setup as an access point:TPLINK with static IP address connected via ethernet cord from the LAN port and connected to the main Verizon FIOS router which distributes DHCP IP addresses to the netwrok. Can not get the Guest Network feature to work - I see the guest SSID I created but when I connect to it, the IP address assigned is in the 169. range meaning it does not get to my main router.It may be because I have the TPLINK setup as an access point, so are there any people who have gotten Guest Network work either with the TPLINK as the main router or as an access point?
View 1 Replies
View Related
Dec 1, 2012
I've just bought a dcs-2130. Any tips on setting up. Win7 and android based devices and any pointers to any firmware upgrades?
View 5 Replies
View Related
Oct 17, 2012
Any problems with the guest network on the ea4500 with the cloud firmware?  I am losing guest clients after about 24 hours and the re-authentication fails. you enter the guest  password and nothing happens until you reboot the router.Â
View 2 Replies
View Related
Oct 3, 2012
I have a Cisco RV120W Wireless-N VPN Firewall that provides wireless access to my small business employees. How do I provide customers and guests to the building with wireless access to the internet, while restricting their access to my network?
View 3 Replies
View Related
Nov 27, 2011
I am primarely enquiring whether the setup I have explained below is actually possible, and if so then how I can set this up. I know it isn't the easiest configuration and I need to set this up without purchasing any more equipment if at all possible.I have a Cisco SG 300-28 setup with three VLAN's. [code] Default Gateway is 192.168.10.1 (Netgear Router)I have a Wireless network setup (Netgear WMS and 2 WAP's) configured with the TWO VLAN's (1 and 3). These go into ports on the Cisco SG 300-28 which are tagged on both VLAN's. The Business wireless worked fine but the guest network didn't reout out to the internet.After some troubleshooting I realised the reason the guest wasn't working was because there was no route back from the internet to the router.
Â
The router I have isn't really ideal, it is a Netgear DGN2200, but I managed to create a static route to 192.168.30.1 with a metric of 2, with 192,168,10.254 being the hop. Success, the connection worked, the only problem is that now my guest network can see my business network because the business network is using the static route on my router to route back over to the guest network (due to the limitations of this device I can't do anything about that)Guest network can connect to Business VLAN via switch. I am assuming this is because the router is on the Business VLAN and the default gateway is the router. As they are on the same network the Guest network can inevetably see the business server and network.The Business network can get back to the Guest network via the router using my static route I created. The static route is really basic and I can't create a firewall rule on the router to prevent the Business network speaking to guest network because it only has a LAN - WAN firewall and this connection is LAN - LAN.
Â
What I need is...to somehow stop any traffic from the 192.168.30.0 network routing to anything on the 192.168.10.0 network, appart from the router on 192.168.10.1.Is this possible? I have this setup on a number of different site, the only difference is I have a CIsco Security Router on these with the VLAN's configured so I don't have this problem. Because I have a rather limited Netgear DGN2200 I am unable to setup the VLAN's correctly and as such I need to see if I can do this on the switch in any way.
View 2 Replies
View Related
Jan 28, 2011
I have both working in a cluster and traffic is flowing but now I desire to seperate my intranet from internet guest traffic only. Having an issue with understanding how to accomplish this task. I have one 2003 server in the intranet that supports DHCP and using a private network address.
View 4 Replies
View Related
Jan 19, 2012
Have DIR-655, HW A3, F/W 1.10. Â On the Advanced tab, there is no Guest Zone option. Â Can this be fixed with a firmware update? Â If so, which one?
View 2 Replies
View Related
Aug 1, 2012
I've been asked to create 2 wireless networks for guest access. They are to be used by clients of 2 different companies and they have asked for the website of each company to automatically open as a landing page. e.g.
-WLAN1 - password is companyname1 - landing page = www.companyname1.com
-WLAN2 - password is companyname2 - landing page = www.companyname2.com
Is this possible with our 5508 WLC? I have googled it and can see that you can set a web auth page but I need different landing pages depending on which WLAN is connected to.
View 11 Replies
View Related
Mar 6, 2012
We are trying to setup a WAP4410N with 2 SSID's. One SSID for our private network and the other for guest internet access. On the VLAN and QoS page there is a setting for priority. What would be the suggested values for this setting? We obviously want our private network to receive priority over our guest network.Also, does VLAN Tag setting need to be on Tagged to determine private from guest traffic?
View 2 Replies
View Related
Dec 7, 2012
I would like for Cisco to offer a firmware update for my 4200 so that the password for the guest account can be disabled.
View 1 Replies
View Related
Oct 10, 2011
I just replaced my old rv042 with the v3 and updated firmware to 4.0.4.02. i am looking for the MTU setting but i can't find it anywhere. Where that can be found?
View 2 Replies
View Related
Feb 18, 2013
What's the least expensive way to enable Guest Network authentication in a network with WLC 4404 controllers and no WCS? Management would like guests to register with a valid email address and enter a 'password du jour' to keep unauthenticated users from chewing up bandwith with automatic connections.Â
View 4 Replies
View Related
Oct 29, 2012
Having an issue with a Cisco Linksys E1500 on a home network. The device has a feature to provide a guest wireless network but the guest network can't get to the internet. A wired connection is fine, as is the normal wireless network but not the guest. The cheesy thing is, that it doesn't list an option for what type of wireless security protocol you want on the guest network. I'm assuming that it uses the same security protocol that the normal wireless network uses, but who knowsEspecially weird is that it asks you what password you want on the guest network but then the guest network show to be insecure when you try to connectthought maybe it was something funky with some of my configurations so I went ahead and factory defaulted it and just set it up with an insecure network for both the normal and guest networks. This didn't solve it. The guest network still couldn't get to the internet. In fact, the guest network can't even ping the router.
View 1 Replies
View Related
May 6, 2012
My landlord downstairs has set up a guest network for me from his Netgear WGR614v10 so I can ditch my dsl and just pay him. First I tried using my Netgear WNR2000 router to act as a receiver (bridge?) but messed it up and couldn't even access the router config anymore, had reset to factory settings.I bought a Netgear WN311B PCI adapter, but I can not connect. My laptop works fine, and after a bit I got my nook to work. We've gone through having an open network with no encryption to currently trying with WPA2-PSK. If I try to connect with Win 7 it just says "Windows is unable to connect to network." Troubleshooting just says to restart the router. If I try NetGear's Smart Wizard it will detect the network fine in setup, and say the signal is at 79-80%.
But at the "Settings" tab, it just says "scanning" in the status bar, it always says channel 6, and shows signal at 1 dot. Window's network connections list it at "Good." I did very briefly get it to work when I first tried the new adapter. Windows even asked me what type of network this was (Home/Work/Public) but when I tried to open a web browser it was not working anymore.I don't think it's range as my laptop and nook work. I can get it to connect to my WNR2000 router, so I don't think it's necessarily the adapter
View 1 Replies
View Related
Apr 16, 2011
I've been fighting the Rev A4 HW and 1.3x firmware stability issues. I would like to try the 1.21 firmware, but I use the guest network feature. The unofficial backrev'in instruction look to be a PITA... and I just would like make sure the guest network feature exists in the 1.2x firmware before I got through the trouble.
View 2 Replies
View Related
Aug 16, 2011
I have a crappy router/modem from comcast with two windows machines and a linux web server connected. I also have another router, a Linksys WRT54G with DDWRT firmware with WAN connected to the modem/router. The linux web server has a static IP, configured with /etc/network/interfaces The network goes down randomly. Disconnecting and rebooting the linux web server usually fixes it. It's possible that the WRT54G could be at fault as well.The problem is that I just don't have any information on what is happening on the network. (Well even if I had the information, I'm not sure I would know what to do with it) I installed wireshark, I figure I should just leave it running until the network goes down, then I can go through the packets and see if I see anything weird?
View 4 Replies
View Related
Jan 28, 2013
I run a certain program in my PC and I need to make its data available to an iPhone app.I would like to broadcast it over WIFI from the laptop.How can I set up a simple wifi network so the iPhone can connect as described?I was thinking of wireless router connected directly to the PC.
View 6 Replies
View Related
May 5, 2012
Alrighty, a little misdirected here. been reading docs for a little while and experimenting around maybe someone can point me in the right direction, How to you create a Guest Network in IOS Zone Firewall. For some reason Cisco, while using the term DMZ, applies differently on their routers than it does on their ASA's. I know how to do this on ASA's all day long however on the router it is a little different story.
View 5 Replies
View Related
Apr 22, 2012
I'm a member of a club and we have just got BT Business Broadband with BT Business Hub 3. The club has one WiFi laptop which will occasionally access the BT Hub 3 using WiFi for internet use only. So essentially we have no network as such, just the BT Hub and a laptop.I would like to allow some club members to have internet access (WPA2 password), but without allowing access to the club laptop in any wayAs I said previously, the club laptop will only be active occasionally, so actual exposure is limited, but ideally I would like for the club laptop to be invisible to others when it is connected. I would also like each members equipment to be hidden from each other, so nobody can access each others data etc.. Can I achieve this simply? If so, do I need extra equipment?
I do have some donated equipment available: Netgear WAG102 Wireless Access Point, D-Link DSL-2640R Broadband Wireless G ADSL2+ Router and US Robotics 9106 SureConnect ADSL Wireless Gateway. Could I use any or all of these?I know this donated equipment is only Wireless G, but speed for the members is not important as they will only use internet access for emails and occasional google searches etc.I've tested the WAG102 at home, by plugging it into a LAN port of my BT HomeHub3 and giving it a different SSID, which works OK, but I can still see the other equipment connected wirelessly to my BT HomeHub3, although I cannot access my home laptop etc. because they are password protected.
View 3 Replies
View Related
Jan 6, 2013
I wish to establish a private and guest network for a local business. They have Verizon service with its wireless router plus their own personal wireless router.The Actiontec mi424wr (rev i) wireless router is connected via Coax and will remain the first in line so as not to disrupt the set top boxes (STB) channel guide and other features managed by the Actiontec. The radio is active with an SSID of "ABC-Private" and its network is 192.168.1.xx. The thought is that only business personnel will connect to this router for internet.I have connected their Linksys WRT54GS to the LAN port of the Actiontec, using a static IP which I have allocated in the Actiontec's DHCP pool for this purpose. This radio is active with an SSID of "ABC-Guests" and its network is 192.168.2.xx. The thought is that only patrons will connect to this router for internet.
My overall goal is that business personnel will have unrestricted access to the internet AND to each other¦ while patrons will only have HTTP and HTTPS access to the internet¦ and no communications will be permitted between the two network subnets. I realize there are hardware firewalls designed for accomplishing such a goal, but the business hopes to avoid the additional expense, if the aforementioned model can provide this capability.In order to accomplish this goal, my remaining tasks as are follows:
1. On the Linksys, permit only http and https traffic (and whatever else the patrons would need/want).
2. On the Actiontec, deny Linksys IP address access to everything except for the Actiontec gateway.
View 1 Replies
View Related
Dec 29, 2012
I have a wired DLink DGL-4100 as my main router and DHCP server. Attached to this, I have a hard-wired Linksys WRT610N which is acting as a dual-band access point. All are on network 192.168.1.0/24.I would like to create a second "guest" wifi network using a spare DLink DIR655 router. Guest clients should have access to Internet but absolutely NO access to machines and resources on the 192.168.1.0/24 network.I connected the DLink DIR655 WAN port to one of the Linksys LAN ports (since it is basically a switch). I configured the DLink DIR655 with LAN IP 192.168.2.1, activated its DHCP to give out 192.168.2.100-105. I set the DLink DIR655 WAN Internet Connection Type as Dynamic IP (DHCP). The DLink DGL4100 assigns an IP to the DIR655 on the WAN side (e.g. 192.168.1.200).With this setup, wireless clients on the DLink DIR655 2.0/24 network get assigned an IP on the 2.0 network. They can access the Internet. However they can still see all the 1.0/24 clients. how come the networks aren't isolated?How should I set this up properly?Do I need to use the DMZ setting on the DLink DGL4100?I know I could get rid of the Linksys and use the Guest Access feature on the DLink DIR655. However I would like to use the Linksys for its dual band feature.
View 4 Replies
View Related
Oct 30, 2011
On the Dap1522 access point, in access point mode, would it be possible to have the following 2 features implemented?
1) Ability to simultaneously broadcast on the 2.4GHZ AND 5GHZ band.
2) Ability to specify a guest network.
View 2 Replies
View Related
Feb 1, 2011
Is there any way to access the router's configuration pages (192.168.0.1) via the Guest wireless network when routing between the zones is disabled?
Here's the story:
I am using my landlords wireless internet, but I administer the router myself. The router is 'upstairs' and i am 'downstairs' and he has his computer plugged into it plus one wireless laptop. He knows nothing about computers and is vulnerable to downloading viruses (and other ****) and I don't want my computers to be on the same 'network' as his.
I had a brilliant idea that since I am 100% wireless, I can make a guest network, put all my computers on that network and disable routing between them. Now all of my computers (some connected through a wireless bridge) can not see his computers at all (perfect!). The only problem now is I can no longer access the router config pages at 192.168.0.1!
Is there any way I can segregate my computers from his and also access the router config? I've tried accessing the WAN IP for the remote admin pages from inside the NAT, but it still blocks it.
View 6 Replies
View Related
Aug 18, 2012
I have a DIR-825 (hardware rev B1, v2.06 firmware) with 2 guest networks active (one on each frequency). I recently attached a laptop to the network using the computer's PCI NIC, with the wireless card completely turned off. Much to my surprise, Windows (7 Pro) indicated that I was connected to the 2.4GHz guest network. The only place in the router's configuration where the indicated name appears is in the "Guest zone" configuration page, where it asks for an SSID to use for the "wireless guest zone". Not only that, but it was the only connection that I could get for the computer, unless I turned the wireless card back on. That's also interesting because no other computer on the network, connected via cable, displays any "named" connection when viewing the networking properties. They simply show "Network" as their connection.Â
View 1 Replies
View Related
Jan 21, 2013
I have a 2504 WLC with a 1042 AP and I have it placed on my edge Cisco 3750 switch. I have the management interface of the WLC set on my WAN IP 71.x.x.x subnet range, and I have the WLC doing DHCP duties with a DHCP scope of 192.168.X.0. I have my DNS servers set on external DNS servers out on the Internet.I have two Cisco 3845 Routers on my edge network - one for each ISP with BGP protocol.
Â
Since my native VLAN is 71.x.x.x, I added a sub interface on my main core router and gave it a 192.168.x.1 255.255.255.0 address for the gateway. Also, I added ip prefix-list iBGP seq 10 permit 192.168.x.0/24 le 32 to my main core router. On my secondary ISP router I added ip prefix-list iBGP seq 10 permit 192.168.X.0/24 le 32, and ip prefix-list OUT seq 10 permit 192.168.x.0/24 statements.
Â
I added VLAN 10 to my edge switch and gave it IP 192.168.x.2 255.255.255.0, and the switchports that my core router and my WLC are connected to the edge switch, are in trunk mode with encapsulation dot1q 10. The switchport on my edge switch that the AP is connected to is in switchport access mode.
Â
I can connect to the wifi with a 192.168.x.x IP address on my laptop, but I cannot get any Internet access. Is it possible to have the DHCP scope be in a different subnet than my WAN IP subnet, and allow guests to get to the external Internet only? Do I need to put the WLC somewhere internal on my network i.e. the DMZ and then tunnel the traffic out to the Internet with no Internal network access?
View 5 Replies
View Related
Mar 6, 2012
So have a wireless guest network on an N600 router. Here is my setup:
pf sense -> untangle -> switch <- N600
the N600 is just an access point and does no DHCP. The primary wireless network gets IP no problem but the guests are not getting an IP. I'm assuming the N600 has no way of issuing an IP on the guest network. how to set a DHCP server on the guest network and have a static route to the pfsense firewall from that network.
View 10 Replies
View Related
Mar 23, 2011
We have a 4402 wlc setup for guest network access. We are using the local net users to provide access to our guests. We have an issue where if a user signs in through the web, sometimes but not always, they are then forced to keep signing back in almost every 30-60 seconds.
View 8 Replies
View Related
Jun 7, 2012
I have a guest House with 10 rooms The wireless network in not secured as we are in the middle of nowhere One guest has mentioned that she thinks her files have been accessed over the network (by another guest?)
View 4 Replies
View Related
Oct 9, 2012
I purchased a WNDR3400v2 probably around two months back and since then I haven't had any issues with it. Now, I like to keep the security setting on WPA2-PSK for the security but my brothers and my own Nintendo DS don't support this security for connecting. So, since my previous router had a guest network, I decided to activate and deactivate that network with no security when it was needed (Half hour or less), and I haven't had any issues until doing this with the WNDR3400v2.
Basically what happens is, after disabling the guest network again, no wireless devices can connect to the router... PERIOD... Upon trying to connect it also says "You are unable to connect) right after it verifies the password. I spent a few hours trying to fix it but I haven't gotten anywhere really..
What I have tried-v
-Resetting the Router
-Powercycling the Router
-Resetting it to factory defaults and restoring previous settings
-Enabling and disabling the network
-Deleting the original network saved on the computers and connecting as if from a new network.
-Also tried restarting my computers
-Updating the firmware (For some odd reason I couldn't find any firmware last week..)
I researched it a bit and found some solid leads, but nothing that fixed the issue. The only "Fix" I could find was disabling the security and leaving it open.. Which I would prefer not to do for obvious reasons...
Router Type: Netgear Wireless Dual-Band N600 Router (WNDR3400v2)
Firmware: V1.0.0.34_1.0.52
View 2 Replies
View Related
Oct 11, 2012
I have my working computer and laptop which use my Cisco wireless. Recently I got a tablet samsumg galaxy tap 2 GT-P5113. The Andriod Version 4.0.4?
View 1 Replies
View Related
Oct 11, 2012
I got a problem with my netgear WNDR3400V2.As u see in this picture the box allow guest to access my local network is greyed out.I made the router an access point and have no clue how to make it normal again.
View 2 Replies
View Related
