hide IoT WiFi and enable mac filter

2026-06-22 14:50:20 +02:00
parent 6cec5c234b
commit a5464cf7a4
2 changed files with 7 additions and 1 deletions
@@ -25,6 +25,12 @@
      network: iot
      mode: ap
      ssid: szafa
+      hidden: '1' # Stop broadcasting SSID
+      macfilter: allow # Apply MAC filter allowing only specific addresses
+      maclist:
+        - 80:64:7c:99:21:20 # Thermomether
+        - C0:F8:53:89:E5:EF # Smart plug
+        - C0:F8:53:89:E3:42 # smart plug
      encryption: psk2
      key: "{{ openwrt_iot_wifi_password }}"
      disabled: '0'
@@ -50,7 +50,7 @@ Network is divided to multiple VLANs to enforce strict access control rules usin
  Internet access only<br>
  IP: 192.168.5.0/24 / 2001:470:61a3:a::/64<br>
  Gateway: 192.168.5.1 / 2001:470:61a3:a:ffff:ffff:ffff:ffff<br>
-  DHCP / SLAAC, accessible via separate WiFi network "szafa" from D-Link for absolutely untrusted Tuya and like devices
+  DHCP / SLAAC, accessible via separate, hidden WiFi network "szafa" from D-Link with strict MAC filtering for absolutely untrusted Tuya and like devices
 - 6: Internet access for OpenWRT<br>
  Internet access only<br>
  IP: 192.168.6.0/24 / 2001:470:61a3:600::/64<br>