Guest WIFI on second router not working

[mensa]

Hello,
I have router1 (without using wifi) connected LAN to LAN to router2.
On router2 I use wifi (for my home network) and it works fine.
Now I created a virtual wifi for guests, but the clients can't access the internet.

Router1:
IP br0: 192.168.1.1

Router2:
IP br0: 192.168.1.99
IP br1: 192.168.2.1

The clients which are connected to the guest wifi can ping 192.168.2.1 but not 192.168.1.99 and also not 192.168.1.1 (which is the internet gateway).

How can I allow guests virtual wireless on router2 to only access the internet and not my private network? Could you please help me? I read so many threads now, but still did not get it to work.

I think there is missing a firewall setting, which allows traffic to from 192.168.2.xxx to 192.168.1.1 or some routing? I tried a lot of different things from other threads, but did not get it to work. Now I reconfigured the guest wifi and removed all the old settings. My config of router2 looks like on the following screens, so what is missing / wrong?

 

[sfx2000]

Many won't because of "trust" and security issues...

 

[mensa]

It is a clean install of Shibby 136 and completely erased nvram after installing. Then I only activated the guest wifi like you see on the screens. What else do I have to configure, that the guest wifi will work?

 

[sfx2000]

IIRC - on Tomato and variants, non-routable IP's on the WAN side cannot be vlan'ed out for guest access due to security issues (can still compromise the rest of the network) as a default.

Might have to go under the hood and muck around a bit with iptables

 

[mensa]

Can anyone explain that, how to get guest wifi working on router2 please?