How to configure WiFi with access to LAN?

Tell me, how in router mode, through the WAN port (eth1) to get the Internet and local network?
hEX lite distributes the Internet and LAN (through the eth2 port), but hAP lite receives only the Internet from it (through the eth1 port).
Me need ideas on how to forward local network, so that it is possible to create a virtual wlan2 that should not have access to the main local network.

As much as I have not tried, I can’t lift the virtual network so that it has Internet access …
All instructions with the old firmware are not suitable, since the Out port does not appear in them. Inteface List: WAN

Made a scheme for understanding in the image:
sheme-primer3.jpg
Old version (not right): https://i.postimg.cc/NF9xvZ5z/sheme-primer2.jpg

You can not have the same subnet 192.168.88.0/24 on both your routers and at the same time be able to access both LANs from each of them (not impossible)…
Create a different subnet on your HAP, lets say 192.168.89.0/24 and then through Firewall you can block access to/from 192.168.88.0/24 …

For hAP requires access to SMB via wlan1
In solving the problem will help EoIP or bridge?

p.s. i indicated two different subnets 192.168.88.0/24 and 192.168.99.0/24

To convirm hapac is NOT a router in this setup its only an access point/switch?

I would use vlans for all my subnets and separate traffic that way.

vlan10 .88
vlan20 .99

I gather .88 is like for home users and .99 is like for guests.
I do something similar for my router and capacs…

Post your configs for both units and we can see what is going on.

/export hide-sensitive file=anyname

You need to have LAN access on the hAP to the hEX. hEX will be DHCP server for all. LAN hEx and LAN hAP are bridged.
Fastest way to do this is connecting the hEX to the ether2 on the hAP, and replace the DHCP server on the bridge on the hAP with a DHCP client.

<-Internet- WANport - hEX- LAN port (ether2) - LAN port (ether2) - hAP - LAN ports (wlan1,wlan2) →

(Or change ether1 from WAN list to LAN interface list,. add ether1 to bridge, remove DHCP server from bridge, then you can use ether1 on the hAP, because it is now identical to ether2,3,4 …)
(DHCP client must be on the bridge, not on the ether(1))

Thanks for the help on VLAN, I found the instruction, but on the old firmware, I will try this method:
https://www.youtube.com/watch?v=h642v_KDq7g

If it doesn’t work, I will try to connect using the method:

<-Internet- WANport - hEX- LAN port (ether2) - LAN port (ether2) - hAP - LAN ports (wlan1,wlan2) →

001.png

For hAP requires access to SMB via wlan1
In solving the problem will help EoIP or bridge?

It’s just routing…