Here is the draft version of my DD-WRT OpenVPN server guide. I am eager for constructive criticism.
https://zerobin.net/?8f9e659771cffcd0#17K9ygdqBeM6xrNtjZYM5VUp9I455jAfYq94lL4a0Sk=
cc: @opie @spacesloth @john_b @RandomUsr @Dobo @jordicusmaximus
nosanitize
@voltronic @opie @spacesloth @john_b @RandomUsr @Dobo @jordicusmaximus
I'm looking for an easy to follow guide to set up multiple SSIDs and default gateways so I can set up a public one for my IOT and guest networks and another one for private with an always on VPN from the router. Haven't found anything easy to follow out there.
pretty sure how I do it is not "easy to follow"...
I use APs which support SSID to VLAN mapping, so my main SSID is on say VLAN10 while the guest SSID is on VLAN20
the wired connection from the AP is now an 802.1q trunk carrying multiple VLANs, so whatever the AP connects to needs to be VLAN aware enough to be configured as an 802.1q trunk as well...
guessin combo WiFi routers have an "easy button" for this
// @voltronic @spacesloth @john_b @RandomUsr @Dobo @jordicusmaximus
@opie
I'm not sure all consumer wifi routers can do this easily or not. TP-link routers I used could easily do a guest network, and later ones had wireless client isolation. DD-WRT also allows further isolation of your guest network, pretty much making it a VLAN behind the scenes. You can also do the more granular stuff you describe here, but it's easier if you're starting with hardware specifically designed for this.
@Beerdini @spacesloth @john_b @RandomUsr @Dobo @jordicusmaximus
@opie
I bet the interface on your APs have much better UI/UX as well.
@Beerdini @spacesloth @john_b @RandomUsr @Dobo @jordicusmaximus
@Beerdini
Multiple SSIDs and guest networks are pretty simple. It's typically as easy as going into your router config, enabling the Guest Network option, specifying the SSID and password, and checking the "AP isolation" and "client isolation" options
When you say "pubic" for your guest network and IoT devices, I think you mean that you want those things isolated from "your" network on their own VLAN.
@opie @spacesloth @john_b @RandomUsr @Dobo @jordicusmaximus