Guest wifi with single port access

[oldgringo]

Hi guys,
I'm trying to set separate wifi guest network with access to only specific service on single port but I can't get it working. Can you help me?
Thanks.

 

[PrivateJoker]

Hi guys,
I'm trying to set separate wifi guest network with access to only specific service on single port but I can't get it working. Can you help me?
Thanks.

Can you explain a little more what you're trying to do (or why) and you might get some more suggestions. . .

AFAIK I don't believe the Guest network feature native to the Asus & Merlinware lets you finesse settings that much (or at all really). If you let these devices on your main network you could certainly assign things IP addresses manually and then do all the port rules you want.

I believe people have run Tomato Shibby (?) on Asus h/w and run multiple SSIDs with probably a little more access to the kind of controls you are looking for. Sorry I can't be more helpful, but I saw you hadn't gotten any answers yet, thought maybe this could get you researching in the right direction?

HTH

 

[oldgringo]

I've got a few guest PC's with wifi adapters separated from my network and I want to update their AV software from the mirror on one of my server (to save my pppoe bandwidth a bit). I know I can use subnet with another router but I want to know whether there is any possibility without additional hardware. Thank you for your help.

 

[PrivateJoker]

I've got a few guest PC's with wifi adapters separated from my network and I want to update their AV software from the mirror on one of my server (to save my pppoe bandwidth a bit). I know I can use subnet with another router but I want to know whether there is any possibility without additional hardware. Thank you for your help.

When you say "guest" is that distinction just for purposes of keeping them separated for this reason? Are the machines yours and under your physical control?

 

[oldgringo]

Yes, they are, but from certain reason they have to run under admin account. Their real user might be everybody, from children to the oldest people, from ordinary users to IT experts. Therefore I don't want them to see my whole network.
Only thing I need to know is whether is possible to route communication between two different vlans, let say through iptables or so. I have only small experience in this area.

 

[PrivateJoker]

Yes, they are, but from certain reason they have to run under admin account. Their real user might be everybody, from children to the oldest people, from ordinary users to IT experts. Therefore I don't want them to see my whole network.
Only thing I need to know is whether is possible to route communication between two different vlans, let say through iptables or so. I have only small experience in this area.

I don't have an answer for you, hopefully someone else here with more savvy in that area will.

It also looks like this guy has a similar question/objective.

I've accomplished similar things in the past by using user/group policies and/or various methods of offline updates (this being one).

I'm not sure how tight of a bandwidth squeeze you're on and how much bandwidth your updates take, etc. On my network my auto uploaded crash logs and automatic bug reports, etc., tend to take much more bandwidth than antivirus definition updates. But thankfully I don't have a bandwidth cap either.

Good luck, I'm sure someone might have a good suggestion or two.