AP and Guest Network Intranet

[Ninko]

Hi,
I have two ASUS routers, one of which is in AP mode, but I want to use a guest network that can't access my local network, but I've since learnt you can't do this in AP mode.

Is there anyway round this?

Thanks


Ninko

 

[CaptainSTX]

Hi,
I have two ASUS routers, one of which is in AP mode, but I want to use a guest network that can't access my local network, but I've since learnt you can't do this in AP mode.

Is there anyway round this?

Thanks


Ninko

If you want to use both routers then what you can do is double NAT the routers. The Internet facing router must be the one running the guest network. The second router will be your more secure personal router. For most users double NATing doesn't cause any issues unless you want to run some type of server.

Other solutions include setting up VLANs on the first router and then connecting the AP to a VLAN port that isn't your personal VLAN. This can't be done using the GUI using stock ASUS or Merlin firmware. It will require using a script or flashing at least one router with Tomato which supports setting up VLANs using the GUI.

 

[martinr]

This might be worth a look in case it gives you an idea or 2:

https://www.snbforums.com/threads/block-access-to-internal-lan-from-wired-device.62907/

 

[L&LD]

To expand on what @martinr is pointing to if you have a third router that you can use in Media Bridge mode, connect that router to your Guest network (wirelessly) and then connect one of it's LAN ports to the WAN port of your AP set up as a router as explained in the link below.

https://www.smallnetbuilder.com/bas...onvert-a-wireless-router-into-an-access-point

HTH.

 

[CaptainSTX]

If the OP already has a wired connection to his AP he would be sacrificing bandwidth and reliability using a wireless bridge. And it also assumes he has a decent WiFi signal back and fourth between the router and the bridge.

If the OP doesn't have a third router to throw into the mix it would probably be less expensive to spend $25 for an inexpensive smart switch for a VLAN vs. buying a third router.