AC RT88U guest wifi access still able to ping

[ugo1]

Hi,

I create an guess wifi access with no intranet access on off but when I ping the wi-fi device I'm able reach it, why?

Ugo

 

[Nullity]

Is the device in AP-mode or router-mode?

I think AP-mode is unable to do client isolation (but it may be able to be manually fixed via CLI).

 

[ugo1]

in router mode

 

[ColinTaylor]

ping it from where? Another wireless client, a LAN client, the router?

 

[ugo1]

ping from LAN client and router

 

[ColinTaylor]

I would expect the router to be able to ping the clients otherwise it wouldn't be able to "route" their traffic.

I don't know why you can ping from the LAN, but I suspect it is because BROUTING is only dropping TCP and not ICMP.