Allowing main network to access guest networks

[purpleman]

Hi everyone,

Running on the 3006 firmware version, I have 3 guest networks that are isolated from everything. I'd like to have the main network (192.168.0.0/24 on br0) be able to reach one-way to those 3 guest subnets.
I currently achieve this with a firewall-start script that runs the following commands:

iptables -I FORWARD -i br0 -s 192.168.0.0/24 -d 192.168.1.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -s 192.168.0.0/24 -d 192.168.2.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -s 192.168.0.0/24 -d 192.168.3.0/24 -j ACCEPT

I was just wondering if there's any way to achieve the same thing through the GUI, any setting that would do that?

Thanks!

 

[bennor]

@purpleman, the Guest Network Pro feature of the 3006 firmware has its issues and limitations as many have discovered and discussed in other threads. There does not currently appear to be a way to implement YazFi's One Way to Guest (or Two Way to Guest) through the GUI. Instead it's an all or nothing affair by either enabling or disabling the Guest Network Pro option Use same subnet as main LAN. With that option enabled the GNP clients should have full access to the main LAN and main LAN clients should be able to access GNP clients. Disabled and the GNP clients/main LAN clients are isolated from each other. That GNP option may or may not be available depending on which of the Guest Network Pro presets one selects.

Scripting the IPTables is currently apparently the only way to emulate some of the features the YazFi addon brought to the non 3006 firmware's guest wifi.

There is a similar running discussion taking place near the end of the following thread:

YazFi - Allowing cast traffic from guest network to IoT (media) network

Hi, new to AsusWRT-Merlin and YazFi! (Not to mention iptables.) I'm trying to allow my "true" guest network (wl0.1, wl1.1) one-way access to my "media" guest network (wl0.2, wl1.2). The intent being to allow house guests to be able to cast music/video to my speakers/TV. Per Google's help page...

www.snbforums.com

And a few posts discussing related things in this thread:

YazFi - YazFi Lite with Router in AP Mode?

Hi @Jack Yaz , your addon has been outstanding, especially for my recent needs. Are there any plans to implement a lite version of your addon to operate in AP Mode? Most of the functions wouldn't work but I think it would be a great function to add. It would allow soft handoff between SSID's on...

www.snbforums.com