Probably too late for you but I just setup 2 GL.iNet GL-MT6000 Flint 2 routers, 1 as a dumb AP. I had the same challenges and I’ll share my tips with anyone else who is new to OpenWRT.
I had problems with the stock GL.Inet firmware (even though I liked it) so I flashed it with OpenWRT 24.10.0-rc5 (as 23.05.5 had performance issues for me). Use the firmware selector and the SYSUPGRADE version.
Note when you connect for the first time, the router IP will be 192.168.1.1, not GL.Inet’s 192.168.8.1.
Follow the OpenWRT documentation Quick Start guide for initial setup (password, ssh, time, etc).
Learn to backup your configuration and recover as necessary when you make misconfigurations and need to start over.
Watch the onemarcfifty VLAN, firewall and dumb ap videos:
I setup 4 vlans with matching firewall zones and interfaces.
- 10 lan 192.168.10.1
- 20 guest 192.168.20.1
- 30 iot 192.168.30.1
- 40 media 192.168.40.1
Note that for the trunked ports my lan vlan id had to be set U while the others were set to T to allow my router to talk to the dumb ap. Also set lan as PVID.
-[How to configure OpenWrt as Firewall for your home network and Guest Wifi and IPTables explained]
I haven’t completely restricted my iot devices as some of them need to connect and I’m still working on the firewall rules.
Read the OpenWrt docs on Wi-Fi Extender/Repeater with Bridged AP over Ethernet.
For switches, I decided that a single vlan capable 1G switch (Netgear GS308E) would be sufficient for iot and tv devices. I’ll see how it works when it arrives. I have direct connected the router to the dumb ap using the 2.5G connection.
When you get that all sorted out, you may be interested in Adblock (luci-app-adblock) and banIP (luci-app-banip) and DoH with Dnsmasq and https-dns-proxy (https-dns-proxy).
If you do a whois search on Loblaws, you’ll find that the contact emails point to @weston.ca. My guess would be [email protected].
You can probably confirm email format through LinkedIn or something like ZoomInfo.