# 📞Creating a Guest Wi-Fi on OpenWRT that can only access WhatsApp🤙

This is a article explains how to configure OpenWRT so that a guest WiFi can only access Whatsapp but it can be used generically to whitelist access from the guest Wi-Fi.

Make certain the /etc/resolv.conf has Quad9 as the name server:

```plaintext
search lan
nameserver 9.9.9.9
nameserver 1.1.1.2
```

We are using a dumb interface with no WAN interface. The WAN interfaces are deleted.

Create a bridge device named br-guest that is empty and make it for startup.

Create an interface named guest with the device br-guest. Associated the zone guest with this interface. Configure a static IP on the interface such as 192.168.254.254/24. Enable DHCP from 50 and allocation 200 IP addresses.

The firewall needs to look like this:

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1722087116262/f44fc619-fa14-489b-b67e-40f1b8a1ad6f.png align="center")

You can now add Wi-Fi SSIDs to the interface guest.

In the DNSMASQ configuration select ignore resolve file. DNSMASQ will now not resolve anything on the guest Wi-Fi.

You then add the whitelisted domains. In our case its whatsapp.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1722087522299/97934c0f-b1c4-4cf9-8d20-e781fa17838d.png align="center")

The guest Wi-Fi will now only work with Whatsapp!

---

[Ronald Bartels](https://www.linkedin.com/in/ronaldxbartels/) ensures that Internet inhabiting things are connected reliably online at [Fusion Broadband South Africa](https://www.linkedin.com/company/fusion-broadband-south-africa/) - the leading specialized SD-WAN provider in South Africa. Learn more about the best SD-WAN provider in the world! 👉 [Contact Fusion](https://fusionsdwan.co.za/failure-proof/)

%[https://hubandspoke.amastelek.com/cappuccino-a-day]