In openwrt, you can have multiple vaps, more than just 2. I can't say for sure if this is possible on glinet openwrt, but I'm pretty sure it's possible. This is old school (vanilla openwrt) way of doing it, so I would adjust IPs accordingly because glinet uses 192.168.8.1 by default.
Log into Luci, Network > Wireless it should show your radios.
radio0 for 2.4Ghz radio1 for 5Ghz
For the radio you want to use, click edit.
Set your basic radio settings like mode, channel, and width.
Set your country code.
Set transmit power
Check enable if it's not already.
Save and apply. This activates the radio.
On the Wireless page, under your radio (e.g., radio0), you'll see existing interfaces (if any). Click Add to create a new wireless interface (this is your VAP).
Configure the new interface:ESSID: Enter the SSID (network name), e.g., Home-WiFi.
Mode: Select Access Point (default for VAPs).
Network: Choose or create a network to attach this VAP to:For the main network, select lan (your default LAN bridge).
For a guest or isolated network, you'll create a new one later—temporarily select lan or leave as None for now.
Wireless Security (under the tab or section):Encryption: Choose WPA3 Personal (recommended) or WPA2-PSK for compatibility.
Cipher: Auto or CCMP (AES).
Key: Enter a strong password.
Advanced Settings (optional tab):Hide ESSID: Check to make it hidden.
Hide ESSID: Check to make it hidden.
Isolate Clients: Check for guest networks to prevent devices from seeing each other.
Short Preamble: Enabled for better performance.
Click Save (not Save & Apply yet).
Repeat this step for additional VAPs:Example: Add another with SSID Guest-WiFi, attach to a new guest network, enable client isolation, and set a different password.
Repeat this step for additional VAPs:Example: Add another with SSID Guest-WiFi, attach to a new guest network, enable client isolation, and set a different password.
Example: Add one more with SSID IoT-Devices, attach to a new iot network.
Most hardware supports 4–8 VAPs per radio. If you hit limits, you'll get an error.
If your VAPs need separate subnets (e.g., for guest or IoT), configure them here. VAPs attached to the same lan will share the network; new ones allow isolation.Go to Network > Interfaces.
Click Add new interface....
For a guest network:Name: guest.
Protocol: Static address.
Interface: Create a new one or bridge (e.g., br-guest if bridging).
Under Interface Configuration > General Setup:IPv4 address: e.g., 192.168.2.1.
IPv4 netmask: 255.255.255.0.
Under DHCP Server (enable it):
Start: 100, Limit: 150 (for IP pool).
Lease time: 12h.
Click Save & Apply.
Repeat for other networks, e.g., iot with IP 192.168.3.1.
Back in Network > Wireless, edit each VAP and attach it to the correct network (e.g., Guest-WiFi to guest).
Click Save & Apply on the Wireless page.
To prevent guest/IoT devices from accessing your main LAN or each other:
Go to Network > Firewall.
Under Zones, click Add for a new zone.
For the guest zone:Name: guest.
Input: Reject.
Output: Accept.
Forward: Reject.
Masquerading: Check (for NAT to WAN).
Covered networks: Select guest.
Under Traffic Rules or Forwardings:Add a forwarding: Source zone guest to Destination zone wan (allows internet access but not LAN).
For DNS/DHCP on guest: Under Traffic Rules, allow UDP/TCP port 53 (DNS) and 67-68 (DHCP) from guest to the router.
Repeat for other zones like iot.
Click Save & Apply.Tip: For stricter isolation, add rules to block access between zones (e.g., reject forward from guest to lan).
On any page, click Save & Apply.
Wi-Fi may restart briefly.
From a device, scan for Wi-Fi networks—your new SSIDs should appear.
Connect to each:
Test internet access.
From a guest device, try pinging a LAN device (should fail if isolated).
Check IP: Main should be 192.168.1.x, guest 192.168.2.x, etc.
Monitor via LuCI: Status > Overview shows connected devices per interface.
