Access IoT device traffic on Guest network

[MrMortar]

I recently bought a Flint2 and moved all my IoT devices—including a Wi‑Fi CCTV camera—onto its guest network, which has AP isolation enabled. I’d like to access the camera’s RTSP stream from my main (non‑guest) network. Is there a way to make this work?

[DaWeav]

Here's something from a GL staff member @will.qiu that might help.

Turning Guest network into IoT - issue with firewall

Hi If you want devices on the LAN to be able to access the Guest network, but not vice versa, simply enable forwarding from the LAN to the Guest network in the default configuration. [image] We verified this locally using BE9300 with firmware 4.8.2 beta and drop-in gateway enabled, and it works as expected. [image] Please note that if you need to access devices on the BE9300 Guest network from the AX1800 LAN, it also needs to do: Configure a static route from the AX1800 to the BE9300 Gu…

[MrMortar]

ok great i’ll give that a go - thanks so much for the response.

[MrMortar]

@Turning Guest network into IoT - issue with firewall

o

With reference to your first image on your response you show Guest being added as a forward zone from the LAN. When I set it up like this without making other changes it actually opens up all traffic from the LAN to reach the Guest Zone which is not what I want.

[will.qiu]

If you only want LAN devices to access a specific device in the Guest network (such as a camera), you can add the following rule under Luci -> Network -> Firewall -> Traffic Rules.

Please ensure you assign a static IP to the camera via address reservation to prevent the firewall rule from becoming invalid.

[MrMortar]

ok great, thanks - that appears to have done the trick (my configuration attached). With this I have allowed Windows dynamic ports to talk to the RTSP feed on my camera on the Guest network.