Gargoyle Forum

THE PROBLEM:
I've a WLAN on 2.4 and 5GHz setup, no MAC filtering, hidden SSID. I've a guest WLAN on 2.4GHz called DMZ with visible SSID.

My devices connect to the normal WLAN and get an IP address/internet. When I connect to the guest WLAN they don't get an internal IP but a 'random' one like 169.254.104.110.

Everything use to work fine in the past and I didn't make any big changes that should have caused this.

All configuration of the Gargoyle has been done via the GUI, I didn't touch any files via SSH.

DHCP on the Gargoyle is disabled and is served from a pfSense firewall, no MAC filtering there either and NO 'only the clients defined below will get DHCP leases from this server' option ticked (I have some static mappings there).

On Gargoyle's firewall are no port forwardings, restrictions or quotas setup.

I'm on an Archer C7 with gargoyle_1.12.0-ar71xx-generic-archer-c7-v2-squashfs-sysupgrade (recently upgraded from gargoyle_1.11.0-ar71xx-generic-archer-c7-v2-squashfs-sysupgrade).

I don't know if the issue is related to the upgrade because only Guests use my guest WLAN and I normally don't use it. I did tick 'keep configuration' during the update but since also restored a backup which didn't change anything.

What connection type are you using in Gargoyle, and what is the relationship to rhe dhcp server I.e. is it a peer, upstream, downstream etc

A bit more of a description of your network might help.

I‘m not at home right now but Gargoyle is connected via LAN (not WLAN), do Connection type is empty. The pfSense box is also the gateway.

I don't entirely understand how it ever worked in the first place.

The guest WLAN is ebtables isolated from the LAN. They're only allowed to access WAN (which you don't have) and the router itself for DHCP/DNS.
I don't think Gargoyle's guest WLAN is appropriate for your use case.

I can't actually run test this in my own network unfortunately... but i don't have any better advice at this stage.

Hm, interesting, I'm pretty sure it was up and running like that for about 2 years (last checked 8 months ago). Did I maybe delete some other setting/configuration on the Gargoyle that connects the Guest WLAN to the LAN?

Pinging from the guest WLAN supports what you said, I couldn't ping any other IPs in the subnet (after I manually set the IP of my phone).

Let me ask you what Gargoyle mode you set?
a) Gateway or b) as LAN switch + WiFi AP or c) WiFi client + repeater.

a) DHCP server must be activated on Gargoyle, statistics and restrictions work, LAN@WAN must be different subnets. Input uses WAN port and output LAN port (eg 1-4) + WiFi AP.

b) DHCP server must be deactivated on Gargoyle, all statistics in this mode do not work (or limitations). The subnet must be the same as the gateway and Gargoyle will have an IP address other than the gateway. WAN port is not used (or bridged to LAN switch) and input is used LAN port (eg 1) and output LAN port (eg 2-4) + WiFi AP

c) I do not assume that you have this scheme.

socialbutterfly wrote:Hm, interesting, I'm pretty sure it was up and running like that for about 2 years (last checked 8 months ago). Did I maybe delete some other setting/configuration on the Gargoyle that connects the Guest WLAN to the LAN?

Pinging from the guest WLAN supports what you said, I couldn't ping any other IPs in the subnet (after I manually set the IP of my phone).

I don't think so. It should always have been this way.

What's the purpose of the guest network? Do you actually want/need isolation? Or is just having a separate password what you want?
Understanding this might help us move forward with a suggestion.

Lantis wrote:I don't think so. It should always have been this way.

What's the purpose of the guest network? Do you actually want/need isolation?

I ask - Guest WLAN is absolutely isolated? even against LAN ports (eg 1-4)? - in that case, Gargoyle cannot be used as a switch (suggestion b)), it must only be used as gateway suggestion a) and client suggestion c). It is so?

Yes, which has already been discussed in my second reply...

Lantis wrote:Yes, which has already been discussed in my second reply...

OK thank you.
I didn't know that (I've never used "Guest WLAN").

I also propose to add documentation in the section: https://www.gargoyle-router.com/wiki/doku.php?id=basic