NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

aefsdfsafwefaf's avatar
Feb 21, 2021
Solved

Guest network can't access internet when client isolation is enabled

Hi,

 

I got an AX1800 wireless AP. I'm trying to set up a guest network and personal network. I configured each of them to have a separate SSID and separate VLAN. My problem is that when I "enable wireless client isolation" I can't access anything, even the internet. When I disable that setting everything works fine.

 

Does anyone have any advice on what I can look into? Is the AP unable to access the gateway?

  • Hi aefsdfsafwefaf 

     

    We have made some improvements to address your issue mentioned here. Current ETA to release the firmware is in mid of March. 

    Kindly wait till that time and provide your feeback.

     

    Thanks,

    Raghu

13 Replies

Replies have been turned off for this discussion
  • RaghuHR's avatar
    RaghuHR
    NETGEAR Expert

    Hi aefsdfsafwefaf 

     

    Could you please send your network diagram with VLAN info and diagnostic logs? Please PM me.

     

    Thanks,

    Raghu

    • I was able to fix the problem.

       

      It seems that you MUST have the DHCP client setting enabled in order for the "wireless client isolation" feature to work. Is this how it is intended or is this a bug?

       

      I hope that it is a bug, becaues I don't want the AP management interface IP to be assigned by a DHCP server. The other weird thing is that when my computer was connected to the guest network, it was still properly being assigned a gateway, DNS, and IP address, even with the DHCP client disabled on the AP.

       

      Thanks for any information you can provide.

       

      • schumaku's avatar
        schumaku
        Guru - Experienced User

        AX1800 is some fancy marketing speed class definition - not a model. Are you talking of a WAX214 or a WAX610 or another WiFi 6 device with an access point feature ... and what firmware version are we facing here?

         


        aefsdfsafwefaf wrote:

        It seems that you MUST have the DHCP client setting enabled in order for the "wireless client isolation" feature to work. Is this how it is intended or is this a bug? .. I hope that it is a bug, becaues I don't want the AP management interface IP to be assigned by a DHCP server.


        This is at least very strange. It should not matter on how the device management interface is configured (IP, subnet mask, GW, DNS) for the wireless client isolation.

         

        It's never a bad policy to have MAC IP pair reserved on the DHCP server, even if using static configs.

         


        aefsdfsafwefaf wrote:

        The other weird thing is that when my computer was connected to the guest network, it was still properly being assigned a gateway, DNS, and IP address, even with the DHCP client disabled on the AP.


        Assuming we talk of the WAX2xx/WAX6xx here: None of these devices does offer a DHCP service. The DHCP client is just to get the management interface config in place. Any DHCP service does come from the network, where what would be used as a guest network must be on a dedicated VLAN, with the appropriate router handling the routing, NAT, DHCP, ... There is no "magic" guest network thing, these are not consumer mesh type guest network devices.

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More