Guest WiFi config

I need to configure 3 APs with guest wifi where the routing, firewall & dhcp is done by the omnia. I’ve already configured the 3 APs as dumb AP and they are working fine. The APs are wired to omnia. I have removed the omnia WiFi. The guest WiFi should only provide internet access (no local LAN access).
Is this configuration possible? If so, can someone guide me through the process? Tutorials, videos, etc are welcome. I’m not an expert in network but I’m willing to learn through the process.

Many thanks in advance

TurrisOS is based on OpenWrt and most of that documentation works fine. There’s lots of videos on YouTube.

This is the OpenWrt docs for it:
https://openwrt.org/docs/guide-user/network/wifi/guestwifi/start

Well, I would like to do the same with 2 Omnias (one placed in the cellar), but when I am trying to attach that network to the guest, there is no internet connection. When it is attached to LAN, everything is working… So, I am curious how to solve it properly too :slight_smile:

Tip - the LAN ports on Omnia to which the APs are connected must be removed from br-lan bridge, then you should assign these ports to the br-guest-turris bridge. So every device connected to these ports will be in the guest network only ( dhcp, firewal for guest network )…

Nope. That would be a solution if AP were serving only guest network. In case one want to serve two network its necessary to incorporate VLANs. I have two Omnias one is acting as a dump AP with guest and home networks. I could explain how to do that. But I suggest learning from openwrt and public domain resources about VLANs. Ok nevermind.

In short you would have to add lan3.4 to br-lan and remove lan3 and lan3.5 to br-guest and remove lan3 if it was there (lan3 which is one of the ports APs are connected to and 4 and 5 are VLANs of choice) and do similar to all port of APs and on AP do the analogy so add lets say eth2.4 to br-lan and remove eth2 from br-lan on AP and add eth2.5 to br-guest on AP and remove eth2 from br-guest (in case eth2 is the interface on AP facing Omnia) done.

You might want to do the changes first on AP and you will loose access and then do the changes on Omnia and you should regain access and all should work. If you are sure of what you are doing there is an option in Luci Apply changes without checking so the AP wont revert that

Right - I misunderstood the answer … I thought he wanted only guest network on APs.
I also use Omnia no wifi with 2 VLANs for the UBNT APs serving 2 networks …

@DannyPM write fast. I am online and bored can help you out😉

I presented a rather simplified version of my network:
The current state of affairs is that the omnia solely connects a zyxel switch (GS1900-16). From this switch one port is feeding a 5-port PoE switch where my APs are connected.
It’s omnia > zyxel switch > PoE switch > APs.

Can you share your line of thought on this scenario?

Thank you.

Well you have similar setup to mine. I also have Zyxel switch in between Omnias. I have ZyXEL GS1900-24E. Are you running OpenWRT on the switch?

Ok simplified version of VLAN lesson. If you want to pass few networks on one port/cable you use tagged VLAN if you want to distribute it (so access port) then you use untagged VLAN

Also I would replace Zyxel and PoE switch with one device. But it depends physically how they may have been placed in your location

I’m running Zyxel stock firmware. Are you recommending flashing Zyxel with Openwrt?

Well it depends on you. It is your device. I flashed it with OpenWRT to have consistant systems on devices.

Also those switches are dual-partition (pretty small. I would like to use all of the chip space for OpenWRT but for now not possible) so I have OpenWRT running from one partition and on the other there is original firmware. You can switch between two in Uboot command line (or env variable) of the switch.

What is your local currency? Do you have public IP (OpenVPN?)? I am proposing to configure all of it for you for 5 units of your local currency :yum: And then you can analyze how its configured and learn. If my proposal is agains forum rules please mark my post as unappropriete howewer you spell it.:yum:

But only after you have OpenWRT on switch! Have fun! Well actually it doesnt matter what firmware you have. All can be done. Just different gui.

My setup is :

Omnia with SSD - LXC with Debian and Unifi Netwok Controler
br-lan : LAN0, LAN1, LAN2, LAN3
br-guest-turris : LAN4.7 ( physical LAN4 )

Switch TP-LINK TL-SG2428P - PoE so no need for another swtch

  • all ports except 24 on VLAN ID 1 untagged
  • ports 21-24 on VLAN ID 7 tagged
    on ports 1-20 there is only VLAN ID 1 available ( private network )
    on ports 21-23 there are available VLAN ID 1 and VLAN ID 7 ( UBNT APs serving both networks )
    on port 24 there is only VLAN ID 7 available - connection to Omnia port 4 - LAN4.7

Well my setup is like the second Omnia is with NAS perk + Trasnmission and I would like to run geast wifi on that thing, but when it wifi network is attached to guest, there is no internet at all, even when IP is from the guest network range.

Because you have DHCP enabled on your second Omnia so it gets IP and that should be disabled and you should get IP from your first Omnia after configuring VLANs

DHCP is turned off on second Omnia (second Omnia gets IP from first Omnia), everything is set as it should be, but there is still no internet for guest wifi on second Omnia…
When wifi on second Omnia is attached to LAN zone, there is internet and everything is working.
Now both Omnias got TOS7 update just now, so, maybe, this will be solved, or there will be some other more important problems :smiley: