Guest Wi-Fi

Set up a separate WiFi access point for your guests.

A guest Wi-Fi network is a separate wireless access point on your router. All of your home or office devices are connected to the main Wi-Fi access point and joined as a network. The guest network is isolated in a different subnet to provides access to the Internet, but not to your home network.

i. Create new SSID

After accessing the router admin at http://192.168.30.1, surf to Network > Wireless. Click the Add button on the first row of Generic MAC80211 802.11bgn.

(Guest WiFi) Wireless Overview > Add New WiFi SSID

ii. Edit New Radio0

After clicking the Add button, we jump to the below edit page. Scroll down to the Interface Configuration section.

Mode: Use the default Access Point mode ESSID: Your guest Wi-Fi SSID name Network: Create a new network, such as guest

Click the tab Wireless security, choose the Encryption type, and enter the Wi-Fi password in the field of Key. Then click Save & Apply button.

(Guest WiFi) Edit New Guest SSID of Radio0 - Network2

iii. Edit Guest Interface

Go to Network > Interfaces. On the interface overview page, click Edit on the row of the newly created interface named GUEST.

Choose Static Address on the protocol field, and click the button of Switch Protocol. Then configure the static IP address for the guest interface.

IPv4 address: Enter a different subnet as the main LAN interface. For example, 192.168.33.1. IPv4 Netmask: Choose one of the netmasks from the dropdown list. IPv4 gateway: Leave it blank

Click the tab of Firewall Settings. On the first row of Create / Assign firewall-zone, create a new firewall zone by entering the guest on the last row of the dropdown list.

Scroll down to the DHCP Server section. Unselect the checkbox of Ignore Interface to turn on the DHCP server on the guest interface.

(Guest WiFi) Edit Guest Network Static IP Address and DHCP

iv. Edit Firewall Zone

Go to Network > Firewall. On the firewall zone overview, click Edit on the guest zone. Set the zone configuration as below listed.

Input: Reject Output: Accept Forward: Reject

Scroll down to Inter-zone Forwarding, select WAN (WAN/Mobile) on the dropdown list of Allow forward to destination zones.

(Guest WiFi) Edit Guest Firewall Zone Input and Destination Zones

v. Edit Traffic Rules

A. Guest DHCP

Go to Network > Firewall, click the tab Traffic Rules, scroll down to the New Forward Rule section. Enter the name Guest DHCP, click Add and Edit to enter the configure page. Change the below parameters.

Name: Guest DHCP Protocol: UDP Source zone: Guest Destination zone: Device (Input)" Destination port: 67-68 Use the default settings in the other fields.

B. Guest DNS

Add another new forward rule of Guest DNS. Edit the parameters as below.

Name: Guest DNS Protocol: TCP+UDP Source zone: Guest Destination zone: Device (Input) Destination port: 53 Use the default settings in the other fields.

(Guest WiFi) Add and Edit New Firewall Traffic Rules DHCP and DNS

Save and apply the new settings, then reboot the router to activate the new firewall rules.