Question can (Wireless - General) be disabled turned off but the (Guest Network) be turned on.

[girotel]

Hi,

Have the following question.

Could (Wireless - General) be disabled turned off but (Guest Network) be turned on.

I am not talking about Hide SSID but really turn off Wireless - General.

Wireless - Professional Enable Radio set to No disables all wifi traffic and that is also not good.

So only the Guest Network should be working and the Advanced Settings - Wireless should be turned off.

If possible how should this be accomplished?

ROUTER: RT-AC87U
Firmware: 380.66_2 (16_May-2017)

Thank you

 

[RMerlin]

No. Guest Networks are sub-interfaces of the main one.

 

[girotel]

Ok thanks.

Other question Could the Wireless - General be configured like the Guest Network with Access Intranet Disabled

 

[RMerlin]

Ok thanks.

Other question Could the Wireless - General be configured like the Guest Network with Access Intranet Disabled

No. Why? A Guest Network can do it already, there's no benefit of doing it on the primary radio instead of a Guest Network.

 

[Martineau]

Ok thanks.

Other question Could the Wireless - General be configured like the Guest Network with Access Intranet Disabled

Yes - although not by physically switching off Wifi, it can be emulated by using an ebtables based script.

Why? I needed to be able to restrict a standard non-guest WiFi client from accessing restricted LAN resources or WAN.

e.g. a tablet is used to show only the feeds from the home I/P cameras, so has no WAN access and apart from the allowed camera devices no other LAN access such as NAS etc.

QED The script is also capable of allowing ONLY WAN access which essentially emulates the Guest WiFi 'Access intranet disabled' feature!

Spoiler: BlockWifiClient.sh

#======================================================================================================= © 2016-2017 Martineau, v1.01
#
# Allow blocking of standard Wifi devices (non-Guest) from accessing LAN/WAN etc.
#
#     BlockWiFiClient   [help | -h] | [status [full] | ['from_ip' ['to_ip' | lan | wan] ] [accept] [del]
#                                     [ {'config_file'} [del] ]
#     BlockWiFiClient   10.88.8.155 10.88.8.197
#                       Wifi Client 10.88.8.155 will be BLOCKED from accessing 10.88.8.197
#     BlockWiFiClient   10.88.8.155 del
#                       All blocking rules for WIfi Client 10.88.8.155 will be deleted
#     BlockWiFiClient   10.88.8.155 lan
#                       Wifi Client 10.88.8.155 will be BLOCKED from accessing LAN (10.88.8.0/24) but WAN Internet is allowed unless:
#     BlockWiFiClient  10.88.8.155 wan
#                       Wifi Client 10.88.8.155 will be BLOCKED from accessing the (Internet) WAN
#     BlockWiFiClient   Nexus-7 DS-416
#                       WiFI Nexus-7 Client (10.88.8.155) will be BLOCKED from accessing DS-416 (NAS 10.88.8.197) - LAN or WiFI
#     BlockWiFiClient   Nexus-7 DS-416 accept
#                       WiFI Nexus-7 Client (10.88.8.155) ALL LAN access will be BLOCKED except for access to DS-416 (NAS 10.88.8.197)
#                            i.e. ALL previous BLOCK rules for this WiFi Client are deleted
#     BlockWiFiClient   Nexus-7 DS-416 accept del
#                       WiFI Nexus-7 Client (10.88.8.155) will be allowed access to DS-416 (NAS 10.88.8.197) unless the LAN BLOCK rule still exists.
#     BlockWiFiClient   Nexus-7 lan
#                       WiFI Nexus-7 Client (10.88.8.155) will be BLOCKED from accessing anything on the LAN
#     BlockWiFiClient   Nexus-7 del
#                       WiFI Nexus-7 Client (10.88.8.155) will be allowed access to LAN/WAN (all rules deleted for this WiFI Client)
#     BlockWiFiClient
#                       will show status of the 'logical' rules
#     BlockWiFiClient   status
#                       will show status of the relevant ebtables rules (use 'status full' for full ebtable -t broute BROUTING chain)
#     BlockWiFiClient /jffs/config/Nexus-7
#                       All Peer to Peer DROP/ACCEPT rules are to be read from the file and applied to WiFi Client Nexus-7
#     BlockWiFiClient /jffs/config/Nexus-7 del
#                       All blocking rules for WiFI Nexus-7 Client (10.88.8.155) will be deleted.
#
#                       NOTE: The name of the file is assumed to be the HOSTNAME of the WiFi Client.
#
#                             Format of config directives: (DROP/ACCEPT cannnot be used concurrently - comment either out with #)
#
#                             e.g.  # Peer rules
#                                   DROP         DS-416
#                                   DROP         10.88.8.120-10.88.8.125,RaspberryPiB
#
#                                   or
#
#                                   ACCEPT       CAMERAS
#
#                             For the ACCEPT rule, a LAN subnet BLOCKING (DROP) rule is automatically added and the exception ACCEPT rules are then inserted,
#                                 and ALL BLOCK rules below the LAN Blocking rule are deleted!
#                             Custom IP Groups may be defined/referenced in '/jffs/configs/IPGroups'
#                                    e.g. 'CAMERAS' entry (Uppercase text!)
#                                         CAMERAS  10.88.8.10,10.88.8.15-10.88.8.20,10.88.8.50:10.88.8.55