Gl-Inet Private VLAN Setup
- Go to Network then interfaces
- Choose which Eth# it is on.
- Uncheck that Eth port out from the lan interface.
- I believe the ports and Eth# may not 100% the same.
- Make a new interface for your device and add that Eth#.
- Protocol: Static Address
- Give it an IPv4 address and netmask 255.255.255.0
- Create a new firewall in the same tab and DHCP server with default settings.
- Go to Network then Firewall
- The settings you should use to let that port be accessed via lan but not publicly are:
- input accept
- output accept
- forward accept
- covered network, the one you made in step 1
- allow forward to destination zones lan and tailscale if you use it
- allow forward from source zones lan and tailscale if you use it
- Enjoy :)