Added dhcpserver rule for private network /etc/config/dhcp config dnsmasq option domainneeded 1 option boguspriv 1 option filterwin2k 0 # enable for dial on demand option localise_queries 1 option rebind_protection 1 # disable if upstream must serve RFC1918 addresses option rebind_localhost 1 # enable for RBL checking and similar services #list rebind_domain example.lan # whitelist RFC1918 responses for domains option local '/lan/' option domain 'lan' option expandhosts 1 option nonegcache 0 option authoritative 1 option readethers 1 option leasefile '/tmp/dhcp.leases' option resolvfile '/tmp/resolv.conf.auto' #list server '/mycompany.local/1.2.3.4' #option nonwildcard 1 #list interface br-lan #list notinterface lo #list bogusnxdomain '64.94.110.11' config dhcp lan option interface lan option start 100 option limit 150 option leasetime 12h config dhcp wan option interface wan option ignore 1 config dhcp private option interface private option start 100 option limit 150 option leasetime 12h Added zone and forwarding tables in /etc/config/firewall config zone option name private option network 'private' option input ACCEPT option output ACCEPT option forward REJECT config forwarding option src private option dest wan Added interfaces in /etc/config/wireless config wifi-iface option device radio0 option network lan option ifname wlan0 option mode ap option ssid OpenTest option encryption none config wifi-iface option device radio0 option ifname wlan1 option network lan option mode ap option ssid CloseTest option encryption none config wifi-iface private option device radio0 option ifname wlan2 option network private option mode ap option ssid PrivateTest option encryption psk2 option key 12345678 option isolate 0 option hidden 0 option enable 1 Added private interface in /etc/config/network config 'interface' 'lan' option 'type' 'bridge' option 'proto' 'static' option 'ipaddr' '192.168.1.1' option 'netmask' '255.255.255.0' option 'ifname' 'eth0.1' config 'interface' 'wan' option 'ifname' 'eth0.2' option 'proto' 'dhcp' config interface private option ifname wlan2 option proto static option ipaddr 102.100.10.1 option netmask 255.255.255.0