參考 https://wiki.openwrt.org/doc/recipes/guest-wlan-webinterface
1. 在2.4GHz Wireless Controller下, 創建訪客WiFi
在編輯界面中, Channel選擇與現有網絡不同編號,Advanced Settings都保持默認
ESSID設置一個易於辨認的名稱, 例如OpenWrt-Guest, Mode選擇Access Point, Network選擇create, 填入guest, Wireless Security先不用設置
Save & Apply
2. 設置Network中新增的 GUEST interface
Protocol選擇Static address, 點擊switch protocol, 填入與當前子網不同的網段IP, 例如192.168.1.1, mask 255.255.255.0
Firewall Settings 選擇create, 填入 guest
啟用dhcp
Save & Apply
3. 設置Firewall, 點擊guest對應的edit
Input設置為reject, Covered networks只選guest, Inter-Zone Forwarding中, 僅勾選Allow forward to destination zones的 wan部分
Save & Apply
4. 設置Firewall -> Traffic Rules
Open ports on router
添加 Name: Allow-Guest-DNS, Protocol:TCP+UDP, External port:53
添加 Name: Allow-Guest-DHCP, Protocol:UDP, External port:67-68
再分別編輯這兩個rule, 將Source zone改為guest, Destination zone改為Device(input)
Save & Apply