Router_config

Network
config interface 'loopback'
        option ifname 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config interface 'lan'
        option ifname 'eth0.1'
        option type 'bridge'
        option proto 'static'
        option netmask '255.255.255.0'
        option ipaddr '192.168.2.2'

config switch
        option name 'rtl8366rb'
        option reset '1'
        option enable_vlan '1'
        option enable_vlan4k '1'

config switch_vlan
        option device 'rtl8366rb'
        option vlan '1'
        option ports '0 1 2 3 4 5t'

config interface 'guest'
        option _orig_ifname 'wlan0-1'
        option _orig_bridge 'false'
        option proto 'static'
        option ipaddr '192.168.20.1'
        option netmask '255.255.255.0'

Wireless
config wifi-device 'radio0'
        option type 'mac80211'
        option hwmode '11ng'
        option macaddr 'MAC'
        list ht_capab 'SHORT-GI-40'
        list ht_capab 'DSSS_CCK-40'
        option txpower '27'
        option htmode 'HT40+'
        option noscan '1'
        option country 'HU'
        option channel '8'

config wifi-iface
        option device 'radio0'
        option network 'lan'
        option mode 'ap'
        option ssid 'SSID1'
        option encryption 'psk-mixed'
        option key 'PASS1'

config wifi-iface
        option device 'radio0'
        option mode 'ap'
        option ssid 'Guest'
        option network 'guest'
        option encryption 'psk-mixed'
        option key 'guest'

Firewall:
config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'

config zone
        option name 'lan'
        option network 'lan'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option masq '1'
        option mtu_fix '1'

config include
        option path '/etc/firewall.user'

config zone
        option forward 'REJECT'
        option output 'ACCEPT'
        option input 'REJECT'
        option network 'guest'
        option name 'guest'

config forwarding
        option dest 'lan'
        option src 'guest'

config rule
        option target 'ACCEPT'
        option name 'Guest_DNS'
        option src 'guest'
        option dest_port '53'

config rule
        option target 'ACCEPT'
        option name 'Guest_DHCP'
        option proto 'udp'
        option src 'guest'
        option dest_port '67-68'

config rule
        option name 'Disable_LAN'
        option proto 'all'
        option src 'guest'
        option dest 'lan'
        option dest_ip '192.168.10.0/24'
        option target 'REJECT'