Multiple SSIDs on GL-BE3600 (Slate 7)

Thynariel · April 10, 2025, 7:53pm

Hello everybody,

i have received the new GL-BE3600 (Slate 7) and tried to setup multiple SSIDs for different use cases:

Main Wifi (2g, 5g, Wifi 7)
Guest Wifi (2g, 5g, Wifi 7)
IoT Wifi (2g, 5g)
Wifi for Sonos Speakers (2g, 5g)

I have edited the wireless config file (root -> etc. -> config -> wireless) to the following

config wifi-device 'wifi0'
option type 'qcawificfg80211'
option channel 'auto'
option macaddr '94:83:c4:aa:a0:98'
option hwmode '11beg'
option disabled '0'
option country 'DE'
option txpower '30'
option random_bssid '1'
option band '2g'
option htmode 'HT40'
option legacy_rates '1'

config wifi-iface 'wifi2g'
option device 'wifi0'
option network 'lan'
option mode 'ap'
option ssid 'Main Wifi'
option encryption 'psk2+ccmp'
option macaddr 'F6:1B:CC:04:72:9D'
option factory_macaddr '94:83:c4:aa:a0:98'
option key 'Main Password'
option wds '1'
option isolate '0'
option hidden '0'
option ifname 'wlan0'
option ieee80211k '1'
option bss_transition '1'
option sae '0'

config wifi-device 'wifi1'
option type 'qcawificfg80211'
option channel 'auto'
option macaddr '94:83:c4:aa:a0:99'
option hwmode '11bea'
option disabled '0'
option country 'DE'
option txpower '30'
option random_bssid '1'
option band '5g'
option htmode 'HT80'
option channels '36,40,44,48'
option legacy_rates '0'

config wifi-iface 'wifi5g'
option device 'wifi1'
option network 'lan'
option mode 'ap'
option ssid 'Main Wifi'
option encryption 'psk2+ccmp'
option macaddr '1E:83:37:87:72:E6'
option factory_macaddr '94:83:c4:aa:a0:99'
option key 'Main Password'
option wds '1'
option isolate '0'
option hidden '0'
option ifname 'wlan1'
option ieee80211k '1'
option bss_transition '1'
option sae '0'

config wifi-iface 'guest2g'
option device 'wifi0'
option network 'guest'
option mode 'ap'
option ifname 'wlan01'
option encryption 'psk2+ccmp'
option key 'Guest Password'
option ssid 'Guest Wifi'
option macaddr '36:CF:5D:2F:3A:16'
option factory_macaddr '96:83:c4:aa:a0:98'
option guest '1'
option disabled '1'
option wds '1'
option isolate '1'
option hidden '0'
option sae '0'

config wifi-iface 'guest2g2'
option device 'wifi0'
option network 'SIoT'
option mode 'ap'
option ifname 'wlan02'
option encryption 'psk2+ccmp'
option key 'IOT Password
option ssid 'IOT Wifi'
option macaddr '36:CF:5D:2F:3A:16'
option factory_macaddr '96:83:c4:aa:a0:98'
option guest '1'
option disabled '1'
option wds '1'
option isolate '0'
option hidden '0'
option sae '0'

config wifi-iface 'Musik2g'
option device 'wifi0'
option network 'lan'
option mode 'ap'
option ifname 'wlan03'
option encryption 'psk2+ccmp'
option key 'Musik Password'
option ssid 'Musik'
option macaddr '36:CF:5D:2F:3A:16'
option factory_macaddr '96:83:c4:aa:a0:98'
option guest '1'
option disabled '1'
option wds '1'
option isolate '0'
option hidden '0'
option sae '0'

config wifi-iface 'wlanmld2g'
option device 'wifi0'
option network 'lan'
option mode 'ap'
option macaddr '4A:12:9D:9B:91:C5'
option factory_macaddr '94:83:c4:aa:a0:9a'
option ssid 'Main Wifi'
option encryption 'ccmp'
option sae '1'
option key 'Main Password'
option wds '1'
option isolate '0'
option hidden '0'
option ifname 'wlan02'
option ieee80211k '1'
option bss_transition '1'
option disabled '1'
option mld 'mld0'

config wifi-iface 'wlanmldguest2g'
option device 'wifi0'
option network 'guest'
option mode 'ap'
option ifname 'wlan03'
option encryption 'ccmp'
option sae '1'
option key 'Guest Password'
option ssid 'Guest Wifi'
option macaddr '4A:79:88:9E:6C:B9'
option factory_macaddr '96:83:c4:aa:a0:9a'
option guest '1'
option disabled '1'
option wds '1'
option isolate '1'
option hidden '0'
option mld 'mld1'

config wifi-iface 'guest5g'
option device 'wifi1'
option network 'guest'
option mode 'ap'
option ifname 'wlan11'
option encryption 'psk2+ccmp'
option key 'Guest Password'
option ssid 'Guest Wifi'
option macaddr '02:14:8E:CC:09:E8'
option factory_macaddr '96:83:c4:aa:a0:99'
option guest '1'
option disabled '1'
option wds '1'
option isolate '1'
option hidden '0'
option sae '0'

config wifi-iface 'guest5g2'
option device 'wifi1'
option network 'SIoT'
option mode 'ap'
option ifname 'wlan12'
option encryption 'psk2+ccmp'
option key 'IOT Password'
option ssid 'IOT Wifi'
option macaddr '02:14:8E:CC:09:E8'
option factory_macaddr '96:83:c4:aa:a0:99'
option guest '1'
option disabled '1'
option wds '1'
option isolate '0'
option hidden '0'
option sae '0'

config wifi-iface 'Music5g'
option device 'wifi1'
option network 'Music Wifi'
option mode 'ap'
option ifname 'wlan12'
option encryption 'psk2+ccmp'
option key 'Music Password'
option ssid 'Sonos'
option macaddr '02:14:8E:CC:09:E8'
option factory_macaddr '96:83:c4:aa:a0:99'
option guest '1'
option disabled '1'
option wds '1'
option isolate '0'
option hidden '0'
option sae '0'

config wifi-iface 'wlanmld5g'
option device 'wifi1'
option network 'lan'
option mode 'ap'
option macaddr 'B6:83:AA:DC:12:C1'
option factory_macaddr '94:83:c4:aa:a0:9b'
option ssid 'Main Wifi'
option encryption 'ccmp'
option sae '1'
option key 'Main Password'
option wds '1'
option isolate '0'
option hidden '0'
option ifname 'wlan12'
option ieee80211k '1'
option bss_transition '1'
option disabled '1'
option mld 'mld0'

config wifi-iface 'wlanmldguest5g'
option device 'wifi1'
option network 'guest'
option mode 'ap'
option ifname 'wlan13'
option encryption 'ccmp'
option sae '1'
option key 'Guest Password'
option ssid 'Guest Wifi'
option macaddr '62:FB:4F:76:69:16'
option factory_macaddr '96:83:c4:aa:a0:9b'
option guest '1'
option disabled '1'
option wds '1'
option isolate '1'
option hidden '0'
option mld 'mld1'

config wifi-iface 'sta'
option mode 'sta'
option ifname 'sta1'
option device 'wifi1'
option network 'wwan'
option ssid 'Repeater Wifi'
option bssid 'd0:21:f9:89:f3:83'
option macaddr '4A:39:CF:0F:65:0F'
option key 'Repeater Password'
option encryption 'psk2'

I have also setup the network for IOT devices in Lucy, including the corresponding firewall rules. The music wifi connects to the main network

After setting up above mentioned configuration, the additional SSIDs are shown in the GL inet GUI. If all the SSIDs are up, I can see the Guest Wifi, as well as the IOT wifi. The Music-Wifi is not shown on Client devices.

Additionally I can connect only to the Main Wifi and the Guest Wifi, but not to IoT Wifi or Music Wifi (which is, as mentioned, not shown).

With my old Beryl AX (Gl MT-3000) a similar configuration would work properly.

Can somebody help me with the configuration of Slate 7?

Thanks in advance!

Thynariel · April 12, 2025, 6:20am

I have checked the configuration again and tested further.

I think, that the router recognizes all SSIDs as the same Wifi, therefore i can only enable 1 SSID, as the first SSID overrides the second and third (Guest overrides IOT and Music SSID, IOT overrides IOT), so that only the first SSID is shown.

The Guest and Music SSIDs work on their own. With the SIOT Network there seems to be a configuration issue as a connection is not possible.

bruce · April 14, 2025, 6:48am

Hello,

Please try to execute these commands on the SSH to add WiFi radios (IoT+Custom) which they are on "iot" interface and zone:

uci add network device # =cfg150f15
uci set network.@device[-1].type='bridge'
uci set network.@device[-1].name='br-iot'
uci set network.iot=interface
uci set network.iot.proto='static'
uci set network.iot.device='br-iot'
uci set network.iot.ipaddr='192.168.11.1'
uci set network.iot.netmask='255.255.255.0'


uci set dhcp.iot=dhcp
uci set dhcp.iot.interface='iot'
uci set dhcp.iot.start='100'
uci set dhcp.iot.limit='150'
uci set dhcp.iot.leasetime='12h'


uci add firewall zone # =cfg17dc81
uci set firewall.@zone[-1].name='iot'
uci set firewall.@zone[-1].input='REJECT'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='REJECT'
uci add_list firewall.@zone[-1].network='iot'
uci add firewall forwarding # =cfg18ad58
uci set firewall.@forwarding[-1].src='iot'
uci set firewall.@forwarding[-1].dest='wan'
uci add firewall rule # =cfg1792bd
uci set firewall.@rule[-1].name='Allow-DHCP'
uci add_list firewall.@rule[-1].proto='udp'
uci set firewall.@rule[-1].src='iot'
uci set firewall.@rule[-1].dest_port='67-68'
uci set firewall.@rule[-1].target='ACCEPT'
uci add firewall rule # =cfg1892bd
uci set firewall.@rule[-1].name='Allow-DNS'
uci set firewall.@rule[-1].src='iot'
uci set firewall.@rule[-1].dest_port='53'
uci set firewall.@rule[-1].target='ACCEPT'





uci set wireless.wifi5g1=wifi-iface
uci set wireless.wifi5g1.device='wifi1'
uci set wireless.wifi5g1.network='iot'
uci set wireless.wifi5g1.mode='ap'
uci set wireless.wifi5g1.ssid='GL Router-IoT-5G'
uci set wireless.wifi5g1.encryption='psk2+ccmp'
uci set wireless.wifi5g1.key='goodlife'
uci set wireless.wifi5g1.wds='1'
uci set wireless.wifi5g1.isolate='0'
uci set wireless.wifi5g1.hidden='0'
uci set wireless.wifi5g1.ifname='wlan14'
uci set wireless.wifi5g1.ieee80211k='1'
uci set wireless.wifi5g1.bss_transition='1'
uci set wireless.wifi5g1.sae='0'
uci set wireless.wifi5g1.disabled='0'


uci set wireless.wifi5g2=wifi-iface
uci set wireless.wifi5g2.device='wifi1'
uci set wireless.wifi5g2.network='iot'
uci set wireless.wifi5g2.mode='ap'
uci set wireless.wifi5g2.ssid='GL Router-Custom-5G'
uci set wireless.wifi5g2.encryption='psk2+ccmp'
uci set wireless.wifi5g2.key='goodlife'
uci set wireless.wifi5g2.wds='1'
uci set wireless.wifi5g2.isolate='0'
uci set wireless.wifi5g2.hidden='0'
uci set wireless.wifi5g2.ifname='wlan15'
uci set wireless.wifi5g2.ieee80211k='1'
uci set wireless.wifi5g2.bss_transition='1'
uci set wireless.wifi5g2.sae='0'
uci set wireless.wifi5g2.disabled='0'



uci set wireless.wifi2g1=wifi-iface
uci set wireless.wifi2g1.device='wifi0'
uci set wireless.wifi2g1.network='iot'
uci set wireless.wifi2g1.mode='ap'
uci set wireless.wifi2g1.ssid='GL Router-IoT-2.4G'
uci set wireless.wifi2g1.encryption='psk2+ccmp'
uci set wireless.wifi2g1.key='goodlife'
uci set wireless.wifi2g1.wds='1'
uci set wireless.wifi2g1.isolate='0'
uci set wireless.wifi2g1.hidden='0'
uci set wireless.wifi2g1.ifname='wlan04'
uci set wireless.wifi2g1.ieee80211k='1'
uci set wireless.wifi2g1.bss_transition='1'
uci set wireless.wifi2g1.sae='0'
uci set wireless.wifi2g1.disabled='0'


uci set wireless.wifi2g2=wifi-iface
uci set wireless.wifi2g2.device='wifi0'
uci set wireless.wifi2g2.network='iot'
uci set wireless.wifi2g2.mode='ap'
uci set wireless.wifi2g2.ssid='GL Router-Custom-2.4G'
uci set wireless.wifi2g2.encryption='psk2+ccmp'
uci set wireless.wifi2g2.key='goodlife'
uci set wireless.wifi2g2.wds='1'
uci set wireless.wifi2g2.isolate='0'
uci set wireless.wifi2g2.hidden='0'
uci set wireless.wifi2g2.ifname='wlan05'
uci set wireless.wifi2g2.ieee80211k='1'
uci set wireless.wifi2g2.bss_transition='1'
uci set wireless.wifi2g2.sae='0'
uci set wireless.wifi2g2.disabled='0'

and

uci commit

reboot

pabb85 · July 17, 2025, 6:26pm

Adding a note here that it seems that for the be3600, fast transition (if enabled) breaks the wifi, if you have multiple SSIDs (including main and guest). Should this be raised as a bug?

Opisek · September 12, 2025, 7:53pm

Multiple SSIDs no longer work on 4.8.1

bruce · September 25, 2025, 11:47am

Please ssh to Slate7 and execute commands, I tested it works fine:

uci add network device # =cfg150f15
uci set network.@device[-1].type='bridge'
uci set network.@device[-1].name='br-iot'
uci set network.iot=interface
uci set network.iot.proto='static'
uci set network.iot.device='br-iot'
uci set network.iot.ipaddr='192.168.11.1'
uci set network.iot.netmask='255.255.255.0'


uci set dhcp.iot=dhcp
uci set dhcp.iot.interface='iot'
uci set dhcp.iot.start='100'
uci set dhcp.iot.limit='150'
uci set dhcp.iot.leasetime='12h'


uci add firewall zone # =cfg17dc81
uci set firewall.@zone[-1].name='iot'
uci set firewall.@zone[-1].input='REJECT'
uci set firewall.@zone[-1].output='ACCEPT'
uci set firewall.@zone[-1].forward='REJECT'
uci add_list firewall.@zone[-1].network='iot'
uci add firewall forwarding # =cfg18ad58
uci set firewall.@forwarding[-1].src='iot'
uci set firewall.@forwarding[-1].dest='wan'
uci add firewall rule # =cfg1792bd
uci set firewall.@rule[-1].name='Allow-DHCP'
uci add_list firewall.@rule[-1].proto='udp'
uci set firewall.@rule[-1].src='iot'
uci set firewall.@rule[-1].dest_port='67-68'
uci set firewall.@rule[-1].target='ACCEPT'
uci add firewall rule # =cfg1892bd
uci set firewall.@rule[-1].name='Allow-DNS'
uci set firewall.@rule[-1].src='iot'
uci set firewall.@rule[-1].dest_port='53'
uci set firewall.@rule[-1].target='ACCEPT'





uci set wireless.wifi5g1=wifi-iface
uci set wireless.wifi5g1.device='wifi1'
uci set wireless.wifi5g1.network='iot'
uci set wireless.wifi5g1.mode='ap'
uci set wireless.wifi5g1.ssid='GL Router-IoT-5G'
uci set wireless.wifi5g1.encryption='psk2+ccmp'
uci set wireless.wifi5g1.key='goodlife'
uci set wireless.wifi5g1.wds='1'
uci set wireless.wifi5g1.isolate='0'
uci set wireless.wifi5g1.hidden='0'
uci set wireless.wifi5g1.ifname='wlan14'
uci set wireless.wifi5g1.ieee80211k='1'
uci set wireless.wifi5g1.bss_transition='1'
uci set wireless.wifi5g1.sae='0'
uci set wireless.wifi5g1.disabled='0'


uci set wireless.wifi5g2=wifi-iface
uci set wireless.wifi5g2.device='wifi1'
uci set wireless.wifi5g2.network='iot'
uci set wireless.wifi5g2.mode='ap'
uci set wireless.wifi5g2.ssid='GL Router-Custom-5G'
uci set wireless.wifi5g2.encryption='psk2+ccmp'
uci set wireless.wifi5g2.key='goodlife'
uci set wireless.wifi5g2.wds='1'
uci set wireless.wifi5g2.isolate='0'
uci set wireless.wifi5g2.hidden='0'
uci set wireless.wifi5g2.ifname='wlan15'
uci set wireless.wifi5g2.ieee80211k='1'
uci set wireless.wifi5g2.bss_transition='1'
uci set wireless.wifi5g2.sae='0'
uci set wireless.wifi5g2.disabled='0'



uci set wireless.wifi2g1=wifi-iface
uci set wireless.wifi2g1.device='wifi0'
uci set wireless.wifi2g1.network='iot'
uci set wireless.wifi2g1.mode='ap'
uci set wireless.wifi2g1.ssid='GL Router-IoT-2.4G'
uci set wireless.wifi2g1.encryption='psk2+ccmp'
uci set wireless.wifi2g1.key='goodlife'
uci set wireless.wifi2g1.wds='1'
uci set wireless.wifi2g1.isolate='0'
uci set wireless.wifi2g1.hidden='0'
uci set wireless.wifi2g1.ifname='wlan04'
uci set wireless.wifi2g1.ieee80211k='1'
uci set wireless.wifi2g1.bss_transition='1'
uci set wireless.wifi2g1.sae='0'
uci set wireless.wifi2g1.disabled='0'


uci set wireless.wifi2g2=wifi-iface
uci set wireless.wifi2g2.device='wifi0'
uci set wireless.wifi2g2.network='iot'
uci set wireless.wifi2g2.mode='ap'
uci set wireless.wifi2g2.ssid='GL Router-Custom-2.4G'
uci set wireless.wifi2g2.encryption='psk2+ccmp'
uci set wireless.wifi2g2.key='goodlife'
uci set wireless.wifi2g2.wds='1'
uci set wireless.wifi2g2.isolate='0'
uci set wireless.wifi2g2.hidden='0'
uci set wireless.wifi2g2.ifname='wlan05'
uci set wireless.wifi2g2.ieee80211k='1'
uci set wireless.wifi2g2.bss_transition='1'
uci set wireless.wifi2g2.sae='0'
uci set wireless.wifi2g2.disabled='0'



uci commit

reboot

Actually, the same as what I posted above.

router-not-found · January 14, 2026, 10:12pm

Make sure you upgrade the firmware to the latest version (openwrt 24 as of now).

I had to do a “Firmware Local Upgrade” for mine to work.

bruce · January 16, 2026, 9:17am

Hey,

We’d like to clarify there is not an op24 firmware for BE3600. You’re likely referring to the current latest firmware v4.8.3 (snapshot) or v4.8.1 (stable).

distante · February 7, 2026, 9:21pm

Hi @bruce my I ask,

Would this also work for the GL-MT3000 ?
The Firewall rules can be changed later on the UI?
The extra SSIDs can also be disabled and/or renamed on the UI if needed?

When I travel, I take a couple of baby cams with me, at home they are connected to an specific SSID that goes into my Camera VLAN.

I want to reproduce my "home SSIDs" so that my phone and devices can connect to the current main Network, have a guest if needed, and add Thrird SSID with the same name as my home Camera SSID, so the cameras just connect direclty. For the new Camera VLAN I want to set some rules for internet connection (mostly block all but allow access to NTP).

Thank you

Thynariel · February 8, 2026, 4:13pm

Yes, this works on GL-MT3000, too.

Additional SSIDs must be configured via luci, but network settings for additional networks can be configured via luci. My GL-MT3000 is configured to provide 3 different SSIDs on both bands:

Main Network for all of my devices
Guest Network, fully isolated for all guest devices
IOT-network (Communication from Main network to IOT is possible, but IOT → Main network is only possible as response to communication from main network)

Never had any issues after I added the wifi networks via luci.

distante · February 8, 2026, 5:47pm

Hi,

I did not quite follow this. Maybe you meant Additional SSIDs must be configured via UCI? (terminal UCI)

Thynariel · February 8, 2026, 7:20pm

Sorry I meant: additional networks can be configured via luci, additional ssids must be configured via the config file

distante · February 9, 2026, 5:37am

Thanks!

I followed the commands posted before and now I get me new SSID and new network. Also my devices connect correctly.

I see the new SSID from in the gl-inet UI. Also the new 2.4Ghz wifi.

The only con I saw until now is that connected clients are not visible on the gl-inet UI, just on luci.

system · August 8, 2026, 5:38am

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.