NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
WAX610 and guestSSID set up
Hello, I just set up (2)WAX610 AP’s in my home. I have one placed in the central part of the house and one placed in the garage. I’d say they are spaced 22-25feet away from each other and they have...
Declan,
Thedeck wrote:
Also, I set up 3 SSIDs. One main SSID, a guest SSID and a IoT SSID to connect WiFi clocks and thermostats on and ect. Both APs are plugged into a Netgear Poe+ switch but according to Netgear insight app, it is a limited support switch.
Devices showing up with "Limited Support" are discoverable by Insight, but not manageable by Insight. Tells me these are Netgear switches, without Insight Cloud support. This could be any Netgear Plus, Gaming (XXnnnE), or Smart Managed (XXnnnT) models, probably even the Managed Switch class.
Thedeck wrote:
I would just like to ensure my guest SSID is secure and when guests log into it, they do not see or can connect to printers or cameras on my main network. I only enabled “client isolation” on the SSID configuration page but that seemed to not do anything. I did a test and I could still see my cameras and printers while on that guest network.
One possibility would be to configure the Guest SSID to be - instead of bridged to the main network - in NAT mode: This does create a pure WAX6xx local network. Means Guests can reach the Internet, however can't discover other guests, and not even that NATed local network on your infrastructure, on your other APs, ...:
Thedeck wrote:
I saw a video of a guy setting up a guest network using the insight app but he created ports and could access settings on his main network switch. I apparently don’t have the options that he had. Is there another way to set VLAN ids to keep guest devices clear of my main network? I just want guest SSID users to have internet access only. No viewing of devices on the main network. Hopefully this process isn’t too complicated for I am not heavily trained in AP configurations.
This is certainly the ideal solution, configuring multiple VLANs and different IP subnetworks. This requires more than just the WAX610 and an unmanaged switch. Switch and switch ports can be configured using Insight and/or slightly more knowledge and time intensive on any Plus, Smart, or Managed class switch.
Does this help?
Thanks for the reply and information. I will switch to NAT for the guest network and give it a go. Should I also remove the “root AP” setting for the garageAP? I would just like to ensure seamless connectivity between the two APs I have.
Reading to much consumer Mesh marketing literature?
With all WAX6xx (and WAC5xx) - all connected to a wired network, with each AP configured to the same SSID, the same security (PSK, WPA2, ...) - this functionality is granted. Insight cloud does care about the WPA3 part. All you have to do is enable 802.11k, 802.11k (everything done automatically when managing multiple APs in Insight for the same location), plus 802.11r on each SSID.
Enabling any kind of Mesh is required only in case you have some APs (WAX6xx) operated in Mesh, using a wireless backhaul - then one, ideally two or more can act as wired root(s). And one, two or more can be operated without a wired backhaul.
- Haha! Yes you can say that. Thanks for the information on this. 🙂
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
