I've been working on this for the past 6 hours and have made no progress.
The setup looks like this:
|Internet|---|Router1|---|Router2|---|LAN1| | | L---|Router3|---LAN2
Problem: I want to restrict Router3 from seeing the other LAN while maintaining Internet access. Restrictions: Router 1 and 3 are on the 3rd floor. Router2 is on the first floor. Willing to completely reconfigure for an elegant solution.
Things I've Tried:
- Different combinations of subnets
- Plugging Router1 into the LAN port of Router3 (total connectivity loss behind Router3)
- Inserted the following to Router2's /etc/storage/post_iptables_script.sh:
iptables -I FORWARD -m mac --mac-source 00:00:00:00:00:00 -j DROP (Where 00:00:00:00:00:00 is Router3's MAC address)
Router1: Model: DGL-4300 IP: 10.1.1.11 Subnet: 255.255.255.0 Router2: Model: RT-N56U IP: 10.1.1.1 Subnet: 255.255.255.0 Router3: Model: DGL-4300 WAN IP: 10.1.1.200 WAN Subnet: 255.255.255.0 LAN IP: 192.168.0.1 LAN Subnet: 255.255.255.0