2 X RT-N56U - want safe guest ssid

[tshephard]

Hi all.

I bought a second RT on egghead sale day. I thought I would plug in second RT (downstream) and set AP Isolated for safe guest account... didn't work.

I would like to really understand AP isolated - does it even work, what exactly does it do, does that change when NOT the modem-attached router?

But regardless, I'd like a guest ssid - safe (both ways nice, me safe from them required) from the rest of network. I have RT attached backup drives, multiple PC's, and a HTPC, and 'secure' traffic, etc. I can put both routers side by side, but I have 2 'areas' and would like to separate them - guests would be remote along with the HTPC, Bluray, etc. - wired link between areas.

I'm using DHCP everywhere...

Any help?

 

[kbp]

I have a 66u and just use the guest setup for guests. It does isolate them from your intranet.

 

[tshephard]

Yeah, the 56 doesn't have a guest setting.
I thought I would accomplish that with 2nd RT.

Anyway, doing some more testing...
I have a Surface and an Android phone, both wireless to 2nd RT - supposed to be isolated. The Surface can dos ping the Android - exactly NOT what I thought minimum isolated AP was...

Is there a catch to this?

 

[tshephard]

new setup

Ok now I have:

private hosts>RT 'pri'
RT pri wan port>lan port RT 'pub'
RT pub wan port >modem

I use WPS switch to turn on RTpub radios for guests. This seems to get me security for RTpri safe from RTpub. Any suggestions, am I correct?

However, it does break DDNS for RTpri. I tried 'exposing' RTpri's wan assigned external ip through the DMZ setting on RTpub, but RTpri could tell it was downstream on a private network, and refused to allow DDNS. Any help on getting RTpri to be exposed for DDNS? (My purpose was to allow VPN when I was out of the house, not knowing what ip my modem had at the time.)

Any help appreciated!

 

[tshephard]

To try to resolve Double NAT, I tried making the second RT a peer - DCHP off, cable to LAN instead of WAN port.
Isolate AP, reboot all.
When I attached to the 1st, unsecure guest SSID, with Isolate on - I can see network, attached storage and homegroup through either RT.
I can see network over Isolated AP in all conditions - is there a trick to this?
Is the Asus translation way off and does not explain what it does?