Question

Hi All,

is the configuration illustrated below possible with a RUT955 please?

The goal is:

1) Clients A, B, or C on ESSID1 access the internet via the OpenVPN server and have remote LAN access 
2) Clients D & E cannot communicate with A B and C , Nor can the access OpenVPN, they just have internet 
access only

effectively Im looking for a Wifi VLAN! :-)

currently I have the two ESSIDs set up and working , on ESSID2  I have ticked the box to prevent clients talking to one
another but they can still ping clients in ESSID1 as they share a common LAN segment 

I'm happy to battle on with a configuration as a mental challenge but any heads up that Im wasting my time would be appreciated 

Many thanks

Regards 

BB

Answer 1

Hello,

Please see thread below:
https://community.teltonika-networks.com/9108/how-can-exclude-access-the-wan-zone-vlan-excepting-some-ports

Is this what You was looking for? 
 

Comments

HI,

No I'm afraid it isn't - but I see completely why you ask - Sorry! - I could have drawn it better

My goal is:

ESSID1 - all connected clients traffic is forced into the OpenVPN tunnel - internet access is attained via the remote site firewall
ESSID2 - all clients can access the internet only  - cannot see / route via the OpenVPN
ESSID2 clients cannot see / reach ESSID1 clients 
ESSID1 clients can go anywhere 

and in my perfect world where ESSID1 & 2 are in separate sub-networks with separate default gateways
e.g. 192.168.100.0/24 & 192.168.101.0/24

Hope that clarifies 

Regards 

BB