Create Add Multiple WiFis/Radios Configuration - MT6000 Flint2

bruce · December 3, 2024, 8:18am

GL GUI -> Network -> Guest network, here can change the subnet IP. The 'br-guest' is hard code.

image1300×962 46.7 KB
It's not sense and cannot feasible, unless manually custom add a route rule.
Add new SSID WiFi for MT6000 (v4.8.3, stable), on the SSH:

#Notes:
#1. Add 2 new subnets: "br-iot" and "br-custom", with isolation between br-lan.
#2. Add separate 2.4 GHz and 5 GHz Wi‑Fi radios for the "iot" and "custom" network.
#3. The "From-Specified Connection Types" in the VPN policy mode, support displaying these new interfaces.
#4. The CLIENTS list does not support to display clients of the new subnets.

# /etc/config/network
uci add network device # =cfg1b0f15
uci set network.@device[-1].type='bridge'
uci set network.@device[-1].name='br-iot'
uci set network.iot=interface
uci set network.iot.proto='static'
uci set network.iot.device='br-iot'
uci set network.iot.ipaddr='192.168.11.1'
uci set network.iot.netmask='255.255.255.0'

uci add network device # =cfg1e0f15
uci set network.@device[-1].type='bridge'
uci set network.@device[-1].name='br-custom'
uci set network.custom=interface
uci set network.custom.proto='static'
uci set network.custom.device='br-custom'
uci set network.custom.ipaddr='192.168.12.1'
uci set network.custom.netmask='255.255.255.0'

# /etc/config/dhcp
uci set dhcp.iot=dhcp
uci set dhcp.iot.interface='iot'
uci set dhcp.iot.start='100'
uci set dhcp.iot.limit='150'
uci set dhcp.iot.leasetime='12h'
uci add_list dhcp.iot.ra_flags='none'

uci set dhcp.custom=dhcp
uci set dhcp.custom.interface='custom'
uci set dhcp.custom.start='100'
uci set dhcp.custom.limit='150'
uci set dhcp.custom.leasetime='12h'
uci add_list dhcp.custom.ra_flags='none'

# /etc/config/firewall
uci add firewall zone # =cfg26dc81
uci set firewall.@zone[-1].name='iot'
uci set firewall.@zone[-1].input='REJECT'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='REJECT'
uci add_list firewall.@zone[-1].network='iot'
uci add firewall forwarding # =cfg27ad58
uci set firewall.@forwarding[-1].src='iot'
uci set firewall.@forwarding[-1].dest='wan'

uci add firewall zone # =cfg27dc81
uci set firewall.@zone[-1].name='custom'
uci set firewall.@zone[-1].input='REJECT'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='REJECT'
uci add_list firewall.@zone[-1].network='custom'
uci add firewall forwarding # =cfg27ad58
uci set firewall.@forwarding[-1].src='custom'
uci set firewall.@forwarding[-1].dest='wan'

uci set firewall.iot_drop_leaked_dns=rule
uci set firewall.iot_drop_leaked_dns.name='iot_drop_leaked_dns'
uci set firewall.iot_drop_leaked_dns.src='iot'
uci set firewall.iot_drop_leaked_dns.proto='udp'
uci set firewall.iot_drop_leaked_dns.dest_port='53'
uci set firewall.iot_drop_leaked_dns.mark='!0x8000/0xf000'
uci set firewall.iot_drop_leaked_dns.target='DROP'
uci set firewall.iot_drop_leaked_dns.enabled='1'
uci set firewall.iot_drop_leak_adgdns=rule
uci set firewall.iot_drop_leak_adgdns.name='iot_drop_leak_adgdns'
uci set firewall.iot_drop_leak_adgdns.src='iot'
uci set firewall.iot_drop_leak_adgdns.proto='udp'
uci set firewall.iot_drop_leak_adgdns.dest_port='3053'
uci set firewall.iot_drop_leak_adgdns.mark='0x0/0xf000'
uci set firewall.iot_drop_leak_adgdns.target='DROP'
uci set firewall.iot_drop_leak_adgdns.enabled='1'
uci set firewall.custom_drop_leaked_dns=rule
uci set firewall.custom_drop_leaked_dns.name='custom_drop_leaked_dns'
uci set firewall.custom_drop_leaked_dns.src='custom'
uci set firewall.custom_drop_leaked_dns.proto='udp'
uci set firewall.custom_drop_leaked_dns.dest_port='53'
uci set firewall.custom_drop_leaked_dns.mark='!0x8000/0xf000'
uci set firewall.custom_drop_leaked_dns.target='DROP'
uci set firewall.custom_drop_leaked_dns.enabled='1'
uci set firewall.custom_drop_leak_adgdns=rule
uci set firewall.custom_drop_leak_adgdns.name='custom_drop_leak_adgdns'
uci set firewall.custom_drop_leak_adgdns.src='custom'
uci set firewall.custom_drop_leak_adgdns.proto='udp'
uci set firewall.custom_drop_leak_adgdns.dest_port='3053'
uci set firewall.custom_drop_leak_adgdns.mark='0x0/0xf000'
uci set firewall.custom_drop_leak_adgdns.target='DROP'
uci set firewall.custom_drop_leak_adgdns.enabled='1'

uci add firewall rule # =cfg2b92bd
uci set firewall.@rule[-1].name='Allow-DHCP-iot'
uci add_list firewall.@rule[-1].proto='udp'
uci set firewall.@rule[-1].src='iot'
uci set firewall.@rule[-1].dest_port='67-68'
uci set firewall.@rule[-1].target='ACCEPT'
uci add firewall rule # =cfg2c92bd
uci set firewall.@rule[-1].name='Allow-DHCP-custom'
uci add_list firewall.@rule[-1].proto='udp'
uci set firewall.@rule[-1].src='custom'
uci set firewall.@rule[-1].dest_port='67-68'
uci set firewall.@rule[-1].target='ACCEPT'
uci add firewall rule # =cfg2d92bd
uci set firewall.@rule[-1].name='Allow-DNS-iot'
uci set firewall.@rule[-1].src='iot'
uci set firewall.@rule[-1].dest_port='53'
uci set firewall.@rule[-1].target='ACCEPT'
uci add firewall rule # =cfg2e92bd
uci set firewall.@rule[-1].name='Allow-DNS-custom'
uci set firewall.@rule[-1].src='custom'
uci set firewall.@rule[-1].dest_port='53'
uci set firewall.@rule[-1].target='ACCEPT'

# /etc/config/wireless
uci del wireless.mt798612.disabled
uci set wireless.wifinet4=wifi-iface
uci set wireless.wifinet4.device='mt798612'
uci set wireless.wifinet4.mode='ap'
uci set wireless.wifinet4.ssid='GL Router-IoT-5G'
uci set wireless.wifinet4.encryption='psk2'
uci set wireless.wifinet4.key='goodlife'
uci set wireless.wifinet4.network='iot'
uci set wireless.wifinet4.ifname='rax2'

uci del wireless.mt798611.disabled
uci set wireless.wifinet5=wifi-iface
uci set wireless.wifinet5.device='mt798611'
uci set wireless.wifinet5.mode='ap'
uci set wireless.wifinet5.ssid='GL Router-IoT-2.4G'
uci set wireless.wifinet5.encryption='psk2'
uci set wireless.wifinet5.key='goodlife'
uci set wireless.wifinet5.network='iot'
uci set wireless.wifinet5.ifname='ra2'

uci set wireless.wifinet6=wifi-iface
uci set wireless.wifinet6.device='mt798611'
uci set wireless.wifinet6.mode='ap'
uci set wireless.wifinet6.ssid='GL Router-Custom-2.4G'
uci set wireless.wifinet6.encryption='psk2'
uci set wireless.wifinet6.key='goodlife'
uci set wireless.wifinet6.network='custom'
uci set wireless.wifinet6.ifname='ra3'

uci set wireless.wifinet7=wifi-iface
uci set wireless.wifinet7.device='mt798612'
uci set wireless.wifinet7.mode='ap'
uci set wireless.wifinet7.ssid='GL Router-Custom-5G'
uci set wireless.wifinet7.encryption='psk2'
uci set wireless.wifinet7.key='goodlife'
uci set wireless.wifinet7.network='custom'
uci set wireless.wifinet7.ifname='rax3'

uci commit
reboot