Guest WiFi
Enabling a guest WiFi hotspot to provide internet access to guests and add a security layer by keeping guest devices separate from the master network.
Last updated
Enabling a guest WiFi hotspot to provide internet access to guests and add a security layer by keeping guest devices separate from the master network.
Last updated
A guest WiFi hotspot can provide visitors or guests with internet access without compromising the main network's security. The guest WiFi runs on a separate subnet isolated from your primary network.
The EZR3X routers are prebuilt Guest WiFi and related interfaces and firewall zones. Below is the tutorial for setting Guest WiFi on EZR4X series routers, including EZR24 and EZR34(T).
The auto script tutorial is to automatically create Guest WiFi hotspots and interfaces without too many operations on the web UI.
Ensure the router has an Internet connection. Enter the SSH terminal and execute the commands below in two steps.
Explain on the above 2nd command:
guest.sh -- Abvove wget downloaded auto script file.
192.168.100.1 -- Guest Interface IP address
Guest-WiFi -- Customizable. It's the Guest WiFi hotspot name. 2.4G and 5.8G are on the same hotspot ESSID. You can edit it later under "Network > Wireless."
My-WiFi-Pass -- Customizable without space. It's the Guest's WiFi password. 2.4G and 5.8G are using the same password. You can edit it later under "Network > Wireless."
Navigate to the wireless overview page within "Network > Wireless." Refresh the web page and patiently wait for a few seconds until you locate "Guest-WiFi" listed under both b/g/n and an/ac hotspots. Modify their ESSID hotspot names and encryption passwords according to your preferences.
Establish a new interface for the Guest network by navigating to "Network > Interfaces" and selecting the "Add New Interface" option.
Specify a "Name for the new interface" using letters, numbers, or underscores.
Under the "Cover the following interface" section, scroll through the dropdown menu to "Custom Interface" and input "eth0.100"; subsequently, press Enter on the keyboard.
Complete the process by clicking the "Submit" button.
Then, it jumps to the new interface configuration page. Set the "IPV4 Address" to "192.168.100.1", and select "255.255.255.0" for the "IPV4 Netmask.
Click the "Firewall Settings" tab and choose "Guest" on the Firewall-zone option.
Then click the "Save & Apply" to perform the new interface settings.
VLANs are frequently used to separate different network segments, and the router is equipped to support multiple VLANs, enabling direct communication between devices within each VLAN.
To configure VLAN for the Guest WiFi, navigate to "Network > Switch," and incorporate the previously established Guest interface "vlan100" by clicking the "Add" button.
Set the VLAN ID to 100, matching the previously configured interface.
For CPU (eth0) and LAN1, select "Tagged." Keep the remaining options set to "off."
Then click the "Save & Apply" button.
Visit the wireless hotspot overview page on "Network > Wireless." On the right side of either the 2.4G (b/g/n) or 5.8G (an/ac) hotspots, click the "Add" button.
Maintain the "General Settings" without any alterations. These frequency modes, channels, bandwidth, and transmit power settings are linked to the primary WiFi hotspot.
Scroll down to the "Interface Configuration"
Mode: Leave it unchanged. The Mode should be set to "Access Point".
ESSID: Customize your Guest WiFi's hotspot name—e.g., Guest-WiFi-V5.
Password: Navigate to the "Wireless Security" tab to choose the Encryption type and enter the WiFi password into the "Key" field.
Click the "Save" button. Avoid clicking the "Save & Apply" button, as it will trigger a complete reboot of the WiFi function.
After returning to the wireless overview page, select the "Edit" button adjacent to the recently added Guest-WiFi-V5. Within the "Network" category, generate a new network labeled "guest." Subsequently, press the "Save & Apply" button to initiate a WiFi function reboot.
Go to the interface overview page under "Network > Interfaces" and click the "Edit" button on the "Guest" interface. Choose "Static Address" on the protocol, and click the "Switch Protocol" button.
Enter "192.168.100.1" as the IPv4 address and choose "255.255.255.0" for the IPv4 netmask. Save the settings by clicking "Save & Apply."
Note: Keep the DHCP Server section below enabled. Disabling the DHCP server will result in the Guest interface no longer assigning local IPs to guest devices.
