I have a network and a WAP connected to that main network. The WAP is a Buffalo WZR-HP-AG300H running DD-WRT, serving DHCP on a different subnet than the main. What I would like to have is a setup in which clients of the WAP cannot access the main network, while still allowing traffic to and from the internet (via the main network). Is this possible?
Here is a diagram of the current network structure:
Internet | Modem | Switch / \ AP1. AP2 (Forwards to a new subnet)
If you can't tell from the diagram, AP 1 just acts as a WiFi forwarding device, but AP 2 acts as the base of a new network. What I'm trying to do is block the nets from communication, but still allow for an internet connection.
Also, for iptables commands, the two subnets are 192.168.0.0/24, and 192.168.11.0/24 NOTE: I don't own the network. I'm just making a private network, so that if something within gets hacked, it can't reach main, and so everything outside of the subnet is safe. NOTE 2: I have a Netgear prosafe plus connected to the WAN port so I can control traffic outside of the router, to solve that problem.