Guest network with LAN access

[rcoolb2002]

Hi! I have been trying to tackle this problem and I thought I had it fixed with a kong build of DD_WRT but I was having major wifi issues.

I want a separate Wifi kids network to force DNS filtering, but they need to have LAN access to be able to cast to xbox/chromecast/etc.

Guest network isolates so that wont work well. I used a VAP in DDWRT but then i had issues connecting to the different wlan. Any simple way to do this? Thanks!

 

[ColinTaylor]

Why not just connect them to the LAN like normal users and then use Parental control > DNS Filtering on their MAC addresses?

 

[rcoolb2002]

Why not just connect them to the LAN like normal users and then use Parental control > DNS Filtering on their MAC addresses?

Because I will not always be here when friends come over and connect to the wifi. I want a "protected" OpenDNS connected wifi that is not double natted (separate router/ap) for any kid to connect to.

 

[CaptainSTX]

Because I will not always be here when friends come over and connect to the wifi. I want a "protected" OpenDNS connected wifi that is not double natted (separate router/ap) for any kid to connect to.

Why have you ruled out double NATing the network they connect to? A double NAT setup will work fine with just a minor increase in latency.

 

[rcoolb2002]

Why have you ruled out double NATing the network they connect to? A double NAT setup will work fine with just a minor increase in latency.

Well i initially didn't want to clog up the wifi space anymore with a second router. I also only have this one AC router. If the kids N clients drop the AC router to N speeds it might not be a bad idea actually I guess.

 

[ColinTaylor]

Why have you ruled out double NATing the network they connect to? A double NAT setup will work fine with just a minor increase in latency.

The only problem I can see is the requirement to "cast" to the primary LAN. I don't know how these devices work but if it's based on broadcast packets that might present a problem across subnets.

 

[CaptainSTX]

The only problem I can see is the requirement to "cast" to the primary LAN. I don't know how these devices work but if it's based on broadcast packets that might present a problem across subnets.

If only the kids need to be able to cast to a particular TV then put the Chromecast device on that network.

If you want to be able to cast from either network a possible solution is to install two Chromecast devices on the TV. The older Chromecast dongles (not Ultra HD 4K) are oftern on sale for $25 and most TVs today have multiple HDMI ports.

If OP doesn't want to spend the money then he could also change the network he is connected to and sign onto the kid's network.

Also Chromecasts have a "guest mode" that if enabled allows anyone to cast to a particular Chromecast device.

 

[rcoolb2002]

So I think i have it figured out. Set up my Router 2 on a separate subnet, but I need to enable NAT in the ac68u. If I was running DD_WRT I would add the following to the firewall command. How could I do this in merlin?
iptables -t nat -I POSTROUTING -o `get_wanface` -j SNAT --to `nvram get wan_ipaddr`

That should allow my subnet to access the internet.

 

[ColinTaylor]

NAT is enabled by default when configured as a router.

 

[rcoolb2002]

NAT is enabled by default when configured as a router.

By default it will only NAT its own subnet though correct? I need it to also nat the 2.x range.

 

[rcoolb2002]

So I realized that a simpler way to accomplish this is to DNS Filter global and then override for specific devices. Then I can allow guest network devices to the intranet. All will be DNS filtered except for my specific devices that i want to allow.