# Flint 4 Guest Routing **URL:** \ **Category:** Router\ **Created:** [October 1, 2026, 4:42pm UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721 "2026-10-01T16:42:39Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![horsingaround](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/h/ad7895/32.png) [@horsingaround](https://forum.gl-inet.com/u/horsingaround)\ **Post date:** [October 1, 2026, 4:42pm UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721/1 "2026-10-01T16:42:39Z")
Hi, I have a Flint 4. I have a device on a 5GHz Wifi (Guest) on VLAN 9. I have a server on a 2.4GHz Wifi (Main). Main devices can see Guest devices but Guest devices can't see each other or Main devices (which is what I want since they're on different Subnets). The server ufw allows the guest device to make requests to it. I've tried to forward the guest device to the server in Luci which didn't work. I also tried to do this via Security - \> ACL and it still didn't work. I ran a tcpdump on Server and it's obvious the Guest device just can't get to it. I temporarily put the Server on guest wifi and turned off AP Isolation and then they talked to each other, but this is not the VLAN I can keep Server on permanently. I'm not quite sure where I've gone astray, I'd appreciate any guidance or suggestions. ---
**Author:** ![AI\_bot](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/a/ecccb3/32.png) [@AI\_bot](https://forum.gl-inet.com/u/AI_bot)\ **Post date:** [October 1, 2026, 4:43pm UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721/2 "2026-10-01T16:43:09Z")
Use a **firewall traffic rule** , not port forwarding. Port forwarding is for connections arriving at another address—typically WAN—to be translated to an internal host. In LuCI, go to **Network → Firewall → Traffic Rules** and add an **Accept** rule with: - **Source zone:** the firewall zone containing VLAN 9 / the Guest interface - **Source address:** the guest device’s reserved IP - **Source port:** Any - **Destination zone:** LAN - **Destination address:** the server’s main-network IP - **Destination port:** the server service port - **Protocol:** the protocol used by the service, or TCP+UDP if required First check **Firewall → General Settings** to confirm VLAN 9 is actually assigned to the source zone selected in the rule; selecting the standard `guest` zone will not work if the custom VLAN interface belongs to a differently named zone. Reserve both devices’ IP addresses, and test the server by IP address and port rather than hostname. AP isolation can remain enabled—it controls communication between wireless clients and is separate from this routed Guest-to-LAN exception. > **This reply was generated by AI. Please verify its accuracy.** > > GL.iNet Technical Support reviews and responds to relevant threads on business days. Please allow time for a staff response. ---
**Author:** ![horsingaround](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/h/ad7895/32.png) [@horsingaround](https://forum.gl-inet.com/u/horsingaround)\ **Post date:** [October 1, 2026, 4:44pm UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721/3 "2026-10-01T16:44:50Z")
The forwarding I mentioned was done by Network - \> Firewall, not Port Forwarding. If I can get a human answer it would be appreciated. ---
**Author:** ![U\_U](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/u/a88e4f/32.png) [@U\_U](https://forum.gl-inet.com/u/U_U)\ **Post date:** [October 3, 2026, 12:03pm UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721/5 "2026-10-03T12:03:15Z")
I’d suggest adding a firewall rule in LuCI to allow guest network devices to access specific devices on your main network. That should be the smallest change needed to meet your needs. You can refer to the screenshot below. ![image](https://forum-static.gl-inet.com/original/3X/0/7/07685c03ffbedb25a4ebd6094b7fb0ee4624dfc3.png) ---
**Author:** ![test12138](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/t/ba9def/32.png) [@test12138](https://forum.gl-inet.com/u/test12138)\ **Post date:** [October 3, 2026, 12:52pm UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721/6 "2026-10-03T12:52:32Z")
![image](https://forum-static.gl-inet.com/original/3X/c/8/c81566333fb9a35f60c37722983842b6b040cd1c.png)dont enable ap Isolation ---
**Author:** ![charles2](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/c/9dc877/32.png) [@charles2](https://forum.gl-inet.com/u/charles2)\ **Post date:** [October 9, 2026, 6:22am UTC](https://forum.gl-inet.com/t/flint-4-guest-routing/71721/7 "2026-10-09T06:22:30Z")
Hi, As U\_U suggested, you can use a firewall rule in LuCI to allow traffic from the Guest network to a specific device on the Main network. Alternatively, you can try configuring this through **Security → ACL → Add Rule** in the GL.iNet Web Admin Panel. ![image](https://forum-static.gl-inet.com/original/3X/1/1/115c1c4e8b7acc8eb34da32617cd01d98a432336.png) Since you mentioned that you have already tried ACL. If the issue persists after trying the settings above, could you please share screenshots of your ACL rule and firewall zone settings so we can investigate further? And could you please try pinging the server's LAN IP address from the specified Guest device to check whether it is reachable? Thank you for your support.