I've tried to setup guest WiFi based on mostly what's written in this post (using google translate).

I've set nvram to enable virtual WLAN:
Code:
nvram set wl0_vifs="wl0.1"
nvram commit
then after some google some nvram variables for WPA authentication (maybe more than needed and used by the firmware), so nvram show | grep wl0.1_ shows something like this:
Code:
wl0.1_hwaddr=92:E6:BA:XX:XX:CB
wl0.1_crypto=aes
wl0.1_security_mode=wpa2_personal
wl0.1_auth_mode=psk
wl0.1_akm=psk2
wl0.1_ifname=wl0.1
wl0.1_mode=ap
wl0.1_closed=0
wl0.1_ssid=GuestNW
wl0.1_bss_maxassoc=128
wl0.1_wpa_psk=GuestPass
wl0.1_wpa_gtk_rekey=0
wl0.1_wme=off
wl0.1_bss_enabled=1
plus modified /usr/local/etc/dnsmasq.conf so cat shows:
Code:
interface=br1
dhcp-range=br1,192.168.2.2,192.168.2.200,86400
dhcp-option=br1,3,192.168.2.1
After reboot the SSID is visible, cat /etc/dnsmasq.conf shows that DNS setup is taken from /usr/local/etc/dnsmasq.conf, however when trying to connect, not even key check succeeds (I've checked with tcpdumping br1).

This is how I've created bridge and used it to connect vlan3 created from vlan1:
Code:
ifconfig wl0.1 down
ifconfig wl0.1 hw ether $(nvram get wl0.1_hwaddr)
wl down
wl -a wl0.1 bssid $(nvram get wl0.1_hwaddr)
wl up
ifconfig wl0.1 up
brctl addbr br1
brctl stp br1 on
brctl addif br1 wl0.1
ifconfig br1 182.168.2.1 netmask 255.255.255.0 up
wl -a wl0.1 ssid "GuestNW"
vconfig add vlan1 3
ifconfig vlan3 up
brctl addif br1 vlan3
Where am I getting it wrong?