NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
CAUTION: Orbi's Wifi Guest Network does not really isolate guests from main network
I was just playing around around with the Guest Network in Orbi and made a rather disturbing discovery that guest clients don't seem to be separated totally from the main network, in fact can access ...
From what i can see the Orbi today provides an IP address for the guest clients in the same IP range as the main network 192.168.1.0/24. It must be as there is no way I have found in the GUI to define a separate IP range or DHCP server settings for the Guest Network. Other routers I have had usually have that option.
It's might be possible to do a Guest Network in the same IP address range but it becomes very hard. It also assumes a pure Orbi setup and all traffic goes always through the router. If you have for example a semi-intelligent switch in such a configuration it learns IP addresses and could forward traffic in the same subnet without involving the router and that would circumvent all the policies.
The cleanest way IMO is to use a separate IP adddress range, e.g. 172.16.X.X for the Guest Network because then all traffic between the main and guest network has to go through the router to be routed probably and that's where you have a single point of control.
I was considering purchasing this for my office. I need to be able to have a guest network without the guests possibly being able to access and/or see the other devices hooked to the network (e.g. printers, servers, etc.). Has this been fixed or is it still a possible security issues?
It works as expected in AP mode in the latest firmware, unless you have an IPv6 network presence (which the filter completely ignores).
I believe it's worked properly in router mode for several releases now, so as long as you are IPv4 only, I think you should be fine with guest isolation.
Rodney
