Multiple SSID using Tomato USB firmware

 credits goes to the thread owner:
source

"
You often happens that someone such as a friend wants to take a moment out of your internet? Administration wifi password it is not safe, given that it receives from unlimited access to our entire network LAN (often U.S.). Skipping the fact that often "for himself" does not limit the speed of internet access. At the end I will add that the culprit can easily (often unconsciously) zawirusować other computers on our network. And what if it is a stranger to us? It's all something to think about and reflect on the time I do not need to network "demilitarized," or limited confidence. In this tutorial, we'll call her hospitality network.

Here's a quick tutorial showing how to set up the guest wifi network under the assumption that:
- Br0 -> LAN port 1 +2 +3 +4 + 1 by addressing SSID 192.168.1.1/24 DHCP server enabled
- Br1 -> SSID 2 for guests with addressing 192.168.2.1/24 DHCP server enabled


Step 1 The new bridge

The Basic-> LAN doing a new bridge br1 192.168.2.x, DHCP enabled (192.168.1.x br0 already have as default). I suggest the lease time set relatively low, eg 60 minutes. In addition, position the DHCP range on up to 5 devices. Rather more visitors at a time to use your network will not be ... is not it?




Step 2 New VLAN

The Advanced-> VLAN VID doing a new example (3) and assign to it LAN1 bridge (br1). VLAN does not have to include any of the LAN ports. Important to exist. When you press Save router will reboot.




Step 3 New SSID

The Advanced-> Virtual Wireless Overview tab to add a new interface wl0.1 example, I set the broadcast (SSID) and plug in to the newly created br1 network.



After pressing the "Add" automatically jump to a bookmark wl0.1 to further configure a new wireless network.



Set the encryption on it (or if you do not want it to be an open network) and press the "Overview". We will return to the main tab. If everything is correct, click "SAVE".


Step 4 Verification

We can check the Advanced-> VLAN or our wlan'y are correctly assigned to the different bridge, Bridge eth1 to LAN (br0) and Bridge wl0.1 to LAN1 (br1).




Council

1) If you want to block a br1 mapping Samba shares (eg usb drive plugged in), we add the Samba File Sharing-Custom Configuration hosts allow = 192.168.1., Or authorized for use only Samba br0 ip class

2) The newly created `a WLAN can not be removed (not the GUI). You can only disable it. You can decipher in the Notes. 
"