NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Micro Segmentation with Orbi RBR50
Can RBR50 plus satellites be set up with micro Segmentation to isolate my SmartThings network? If so, how? If not, is the newest ORBI better suited?
CrimpOn wrote:.......
You can ask on the Orbi WiFi 6 forum if that product has more advanced features: https://community.netgear.com/t5/Orbi-AX/bd-p/en-home-orbi-ax
An additional functionality in Orbi AX is that the guest network has its own subnet that is different than the subnet of the main network.
ekhalil wrote:
An additional functionality in Orbi AX is that the guest network has its own subnet that is different than the subnet of the main network.
It would be nice if this feature will trickle down to non-AX Orbi in future FW update.
Good to see someone is talking about this basic feature missing in Orbii RBR50.
I see this option - "Allow guests to see each other and access my local network" in guest network settings... Cant this be used to bring the segmentation when all LoT devices are moved to Guest network?
Using the Guest network for IoT devices and not allowing them to communicate with the primary network or other devices on the Guest network appears to isolate them from the primary WiFi network. This, of course, assumes that ALL interaction with the IoT devices is through some sort of "cloud" connection. In essence, when each IoT device is powered up and connects to WiFi, it opens a TCP connection to its "cloud". When the user app wants to interact with the device, that communication goes through the cloud, not directly from a device on the Orbi primary network to the Orbi Guest network.
This would not work for me. My IP cameras are set to FTP recordings to my home server, which is not open to the internet. If my cameras were on the Guest network, I could "remote" to them using their cloud connection, but would have to open an FTP port through the Orbi and use DDNS to get my recordings. Too much bother (and "more risk").
p.s. I have read more articles on "Micro Segmentation" and still do not understand anything about it, except that what the Orbi does is "not that."
Yes, that level of isolation helps keep IoT devices away from internal devices.
This way even if anyone get access to the network through any one of the IoT devices, they cant access anything beyond Guest network.
I agree a better Access control list to allow certain IP, Ports could be helpful in your case.
