Gl-Inet Private VLAN Setup

  1. Go to Network then interfaces
    1. Choose which Eth# it is on.
    2. Uncheck that Eth port out from the lan interface.
      1. I believe the ports and Eth# may not 100% the same.
    3. Make a new interface for your device and add that Eth#.
    4. Protocol: Static Address
    5. Give it an IPv4 address and netmask 255.255.255.0
    6. Create a new firewall in the same tab and DHCP server with default settings.
  2. Go to Network then Firewall
    1. The settings you should use to let that port be accessed via lan but not publicly are:
    2. input accept
    3. output accept
    4. forward accept
    5. covered network, the one you made in step 1
    6. allow forward to destination zones lan and tailscale if you use it
    7. allow forward from source zones lan and tailscale if you use it
  3. Enjoy :)