What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Security of Guest network

Galaxysurfer

Regular Contributor
How is guest network isolated from main network? As far as I could tell devices are still assigned an ip within same range as main network. It seems the only barrier is the individual keys assigned to each network. I decided to activate my guest network as temp measure to isolate roku devices from the rest of my network. Was hoping to avoid a code hack to institute proper vlan setup on my Asus RT-AC68U. The main network devices are also a part of an Openvpn client network. Any suggestions how to easily beef up my security easily without much extra work or needing additional hardware? ( other than adding vlan script) Will add script if it is the best option. A bit nervous about diving into the router os. Ideally am probably looking at a vlan setup. I would like to isolate & more securely lock down voip as well. Sanoma ip phones do support vpn according to their site. My main traffic is a home media server/client setup. Dont have them as dedicated hardware meaing pc isnt strictly a media server alone. If budget allows would switch that over as well to really secure up my network. So basically looking to have 4 separate vlans to segment /segregate various devices from each other. Voip, Computing/surfing, Media Streaming/Guest ( only one on wan, all the rest through vpn) & Mobile Devices.
 
How is guest network isolated from main network? As far as I could tell devices are still assigned an ip within same range as main network. It seems the only barrier is the individual keys assigned to each network.
No. Each wireless network has it's own interface. netfilter is used to drop/block packets from traversing the bridge between interfaces.

Was hoping to avoid a code hack to institute proper vlan setup on my Asus RT-AC68U.
Then you'll need to look at a different hardware solution (or possibly a different firmware like Tomato).
 

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top