I need to set up separete VLAN without access to internet

[Tristan333]

Hello

I need to set up separete VLAN without access to internet

Can anyone advice me how to do so?

I have printers, cameras and NAS in LAN. But i don't trust IOT to be in the same network as other devices. Generally, i need them to be only accessible in LAN.

So my goal is: separate wifi network without internet (WAN) access, while my main wifi network works as usual

[bruce]

I assume you can use the Guest WiFi, right? (If the Guest WiFi is not used for guest people or other devices)

But these works have to be configured, to make devices connected to Guest WiFi accessible to each other and cannot access WAN and the Internet:

1. Disable the "AP Isolation" in the GL GUI > Network > Guest Network:
   

   

2. Modify the Firewall guest zone in Luci > Network > Firewall, refer to:
   

   

[Tristan333]

It worked! Thanks!