# One-Way LAN to Guest Client Communication **URL:** \ **Category:** Router\ **Created:** [November 20, 2025, 6:10pm UTC](https://forum.gl-inet.com/t/one-way-lan-to-guest-client-communication/65663 "2025-11-20T18:10:00Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Isotope7812](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/i/e47c2d/32.png) [@Isotope7812](https://forum.gl-inet.com/u/Isotope7812)\ **Post date:** [November 20, 2025, 6:10pm UTC](https://forum.gl-inet.com/t/one-way-lan-to-guest-client-communication/65663/1 "2025-11-20T18:10:00Z")
Hi, I plan to get a Flint 2 and use the Guest Network solely for wireless IOT devices only. I understand (I hope) that Guest subnet communication to the Primary LAN subnet is blocked by default (and vice-versa). However, is there a way to allow a one-way communication from the Primary LAN subnet to the Guest subnet (but not the other way) - either with a firewall rule or some kind of Traffic Routing rule? Some IOT devices require local intranet access (not via Public Internet) so I would need a way to connect and/or communicate with these devices locally from the Primary LAN without having to connect to the IOT network myself. ---
**Author:** ![xize11](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/xize11/32/5340_2.png) [@xize11](https://forum.gl-inet.com/u/xize11)\ **Post date:** [November 20, 2025, 7:26pm UTC](https://forum.gl-inet.com/t/one-way-lan-to-guest-client-communication/65663/2 "2025-11-20T19:26:39Z")
> [@Isotope7812](#): > > However, is there a way to allow a one-way communication from the Primary LAN subnet to the Guest subnet (but not the other way) - either with a firewall rule or some kind of Traffic Routing rule? Yes this is possible by using the advanced settings. If you install luci (or it already is), you have to navigate to network -\> firewall. Then just edit lan, and go to the section forward to: And add guests zone to it. Depending how much isolation the guest network has, by gl firewall rules you may also have to look into the tab traffic rules, maybe just set input of zone guests to accept. However there are also other type of iot devices which uses broadcast or multicast, broadcast I think will not be possible, for mdns you can easily use avahi but its not easy for a beginner, often chromecasts use mdns. ---
**Author:** ![DaWeav](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/daweav/32/14805_2.png) [@DaWeav](https://forum.gl-inet.com/u/DaWeav)\ **Post date:** [November 21, 2025, 4:56am UTC](https://forum.gl-inet.com/t/one-way-lan-to-guest-client-communication/65663/3 "2025-11-21T04:56:25Z")
> [@Isotope7812](#): > > …is there a way to allow a one-way communication from the Primary LAN subnet to the Guest subnet (but not the other way)… > [@Turning Guest network into IoT - issue with firewall](https://forum.gl-inet.com/t/turning-guest-network-into-iot-issue-with-firewall/64768/3): > > Hi If you want devices on the LAN to be able to access the Guest network, but not vice versa, simply enable forwarding from the LAN to the Guest network in the default configuration. We verified this locally using BE9300 with firmware 4.8.2 beta and drop-in gateway enabled, and it works as expected. Please note that if you need to access devices on the BE9300 Guest network from the AX1800 LAN, it also needs to do: Configure a static route from the AX1800 to the BE9300 Gu… ---
**Author:** ![Isotope7812](https://forum-assets.gl-inet.com/letter_avatar_proxy/v4/letter/i/e47c2d/32.png) [@Isotope7812](https://forum.gl-inet.com/u/Isotope7812)\ **Post date:** [November 21, 2025, 1:37pm UTC](https://forum.gl-inet.com/t/one-way-lan-to-guest-client-communication/65663/4 "2025-11-21T13:37:48Z")
Thanks for the comments so far. Also, slightly off-topic - can you do DHCP reservations for devices in the Guest subnet as well? ---
**Author:** ![system](https://forum-static.gl-inet.com/original/3X/7/7/77e28f6cb342ac4bd641bd9a6254595d61b2812a.png) [@system](https://forum.gl-inet.com/u/system)\ **Post date:** [February 19, 2026, 1:37pm UTC](https://forum.gl-inet.com/t/one-way-lan-to-guest-client-communication/65663/5 "2026-02-19T13:37:52Z")
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.