Allow communication between guest network device and primary network device

[Henrik_r]

Hi all!

Long time lurker, first post!

I have a device on my guest (IoT) network (192.168.1.50) for which I would like to allow two way communication to one specific device (192.168.1.10) on my “main” network. How would I go about doing this without allowing the entire guest work to see my primary network. I suspect it is solved with some iptables rule, but I would need some assistance as I’ve only used nftables.
Appreciate any help!

h

 

[ColinTaylor]

YazFi addon.

YazFi - YazFi v4.x

v4.4.4 Updated 2023-11-26 Feature expansion of guest WiFi networks on AsusWRT-Merlin, including, but not limited to: * Dedicated VPN WiFi networks * Separate subnets for organisation of devices * Restrict guests to only contact router for ICMP, DHCP, DNS, NTP and NetBIOS * Allow guest networks...

www.snbforums.com

 

[Henrik_r]

Thanks for the reply @ColinTaylor, I installed YazFi as you suggested, but from what I can tell, it is only possible to enable to two-way for _all_ devices on the guest network. Not just a single device. Am I missing something?

 

[ColinTaylor]

I don't use YazFi myself, but from what I've read my understanding is that you can achieve what you want by creating a YazFi custom firewall rule.

GitHub - jackyaz/YazFi: Feature expansion of guest WiFi networks on AsusWRT-Merlin, including SSID -> VPN, separate subnets per guest network, pinhole access to LAN resources (e.g. DNS) and more!

Feature expansion of guest WiFi networks on AsusWRT-Merlin, including SSID -> VPN, separate subnets per guest network, pinhole access to LAN resources (e.g. DNS) and more! - jackyaz/YazFi

github.com