[TriLUG] Network configuration help?

[Wes Garrison via TriLUG]

Sorry if this has been mentioned, but you may not need both APs at all.

Many APs support multiple SSIDs on the same AP, and can assign them to
different VLAN IDs.

That would allow you to route traffic on SSID1 over VLAN1, which has access
to the network, while traffic on SSID2 is part of VLAN2, which only has
access to the WAN port and the Internet.

I believe OpenWRT supports this, but I'm not sure.

Some router/AP combos make this even easier by setting up a "Guest SSID".
If it has that, you'll probably want to turn off the "captive portal",
which is that annoying screen that requires you to agree to terms before
you continue.


On Mon, May 3, 2021 at 11:23 AM Mauricio Tavares via TriLUG <
trilug at trilug.org> wrote:

> On Mon, May 3, 2021 at 11:05 AM Brian McCullough via TriLUG
> <trilug at trilug.org> wrote:
> >
> > On Fri, Apr 30, 2021 at 05:29:55PM +0000, Triangle Linux Users Group
> discussion list wrote:
> > >
> > >  If your home router has multiple
> > > ethernet cards (eg it's an old repurposed PC, my preferred type of
> router),
> >
> > Good point, Joe.
> >
> > Yes, for years, I used to use various machines running OpenBSD as my
> > firewall machines, but more recently have switched to lower-power,
> > lighter machines with OpenWRT as my primary outward-looking machines.
> >
>       I am joining in later but from what I understood, you want to
> run two wifi networks with their separate APs: guest and private. I
> too have an openwrt router which I have never been able to run two
> separated wifi APs on; it might be because I wanted one to be 5GHz and
> one 2.4. Is there anything in the wireless network which is an
> appliance that needs to access your private network? If not, consider
> making your wireless by default guest and then configuring the router
> to do openvpn (openwrt has the package).
>
> Now, if I missed something else in the thread, start with this fancy
> ascii diagram and make it look like what you want:
>
>  [Modem]
>    |
>    | (port1)   vlan1
>  [Router]----+--------(port2)[desktop 1]
>              |
>              | vlan1
>              +--------(port3)[Cafe au sucre]
>              |
>              | vlan1
>              +--------(port4)[Something]
>              |
>              | vlan2
>              +--------(port6)[Something else]
>              |
>              | vlan1
>              +--------(port6)[WiFi]
>
>
> >
> > Brian
> >
> > --
> > This message was sent to: raubvogel at gmail.com <raubvogel at gmail.com>
> > To unsubscribe, send a blank message to trilug-leave at trilug.org from
> that address.
> > TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> > Unsubscribe or edit options on the web  :
> https://www.trilug.org/mailman/options/trilug/raubvogel%40gmail.com
> > Welcome to TriLUG: https://trilug.org/welcome
> --
> This message was sent to: Wes <wes at xitechusa.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
> address.
> TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  :
> https://www.trilug.org/mailman/options/trilug/wes%40xitechusa.com
> Welcome to TriLUG: https://trilug.org/welcome