Prevent Guest Router from accessing Local LAN

[dvaz]

Been trying searching around but haven't found any concrete answers, but it looks simple to do with IPtables?

Basically I want to restrict the bandwidth of my guest network, so instead of fooling around with QoS and watnot, I got an old Asus RTN16 (100mbs LAN ports) as my guest router to cap their downloads to 1/3 of my total speed (300mbs).

My main router is RT-AC56U. DHCP is on the 192.168.1.x range.

Its connected to the main router via the WAN port. It runs its own DHCP and servers its client (guests) in the 10.0.1.x range.

I simply want to block ( on whichever router is easier ) access to main LAN (192.168.1.x) while still be able to connect to the internet.

Should be able to do it IPtables no?

Thanks for the help!

 

[Vexira]

tried a static route? Give setting onne of those up if you havent already might help, it will allow internet acess from.be hind the main router.

 

[ColinTaylor]

Should be able to do it IPtables no?

You should be able to do it by using the Network Services Filter (this will create the iptables rules for you ) on the RT-N16. You just need to block access to the 192.168.1.x network.

 

[dvaz]

You should be able to do it by using the Network Services Filter (this will create the iptables rules for you ) on the RT-N16. You just need to block access to the 192.168.1.x network.

Not at home to try, but wouldn't blocking 192.168.1.x also block the guest router access to the outside world since they need to pass thru the main router (192.168.1.1) to go out?

 

[ColinTaylor]

No, because you're blocking only on their destination IP address.