NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

stevefxp's avatar
stevefxp
Apprentice
Nov 28, 2019

Separate Subnets for Wifi

Is there a way to subnet the main WiFi network from the guest WiFi network? I would like to do this since I can then shape the traffic in/out to the guest WiFi, to provide general access for web browsing and mail. I do not want Internet streaming on the guest network.

8 Replies

Sort By
  • ekhalil's avatar
    ekhalil
    Master
    Nov 28, 2019

    This is currently not possible in Orbi Gen1 (AC3000, AC2200 and AC1200), but only available in the new Orbi AX6000.

  • CrimpOn's avatar
    CrimpOn
    Guru
    Nov 28, 2019
    stevefxp wrote:

    Is there a way to subnet the main WiFi network from the guest WiFi network? I would like to do this since I can then shape the traffic in/out to the guest WiFi, to provide general access for web browsing and mail. I do not want Internet streaming on the guest network.

    Interesting concept. How do you propose to "shape the traffic" by subnet?

    • stevefxp's avatar
      stevefxp
      Apprentice
      Nov 28, 2019
      My firewall can set QoS by subnet, both inbound and outbound. If I can subnet the Wifi networks then I just set a total bandwidth rule for the guest subnet.
      • CrimpOn's avatar
        CrimpOn
        Guru
        Nov 28, 2019

        Thanks for the explanation.  Sounds like the Orbi is a router "behind a router", which is generally not recommended.  (Obviously, it "works" because that's the default Orbi configuration and most customers would not think to change it.  I didn't for over a year, until it "didn't work" anymore when I wanted to set up VPN.)

         

        You could accomplish this with the residential Orbi, but it would be a chore I would find unpleasant.

        • Change the subnet mask to 255.255.254.0
        • Assign IP's to every device in 192.168.1.x
        • Set the DHCP pool to 192.168.2.x

        Now any "new device" that connects is in a different subnet than all of the pre-defined devices.  In a way this is simply a variation on Access Control.  No new device gets full service until you assign it an IP in the "good" subnet.  But, what a tedious process!

         

        I also forsee some awkward conversations.  Wife has friend over. They talk about something interesting.  Friend says, "I'll show you." Whips out tablet, connects to Guest WiFi.  And, the video doesn't play.