NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
R7450 AP Mode Stop Guest access LAN
I am new to AP Mode
I have a R7450 router and have placed it into AP mode.
I connected the WAN RJ45 to a LAN RJ45 on another Netgear Router (This is the one that is in normal router mode that actually has a connection to the internet) I will call this the "Master router"
The Master router is a R6350 and is configured as follows:
WAN RJ45 is connected to the ISP gateway
LAN RJ45 has a wired uplink to the R7450 (the one in AP mode)
The Guest Network WiFi is enabled and I don't allow guest devices to see each other or access my local network
The Slave router (R7450) running in AP Mode is configured as follows:
WAN RJ45 has a wired uplink to the R6350 (the master running in normal router mode)
The Guest Network WiFi is enabled. The picks to allow guests to see each other is "greyed out" (I can't change it) but it does looked "checked"
When I connect to the Guest Network on the AP router (R7450 - Slave) I am able to see everything on the LAN back at the Master router (R6350) I am even able to log onto the R6350 using a guest connection on the AP.
My question is how do I stop guest devices on the AP router from getting to my LAN? How do I lock a guest down to internet only?
6 Replies
You can't due to the AP being on same subnet as the host router.
Thanks for everyone's replies. I
It is really too bad Netgear did not put more effort into programming more features into the device when in AP mode.
Locking down the Guest network to Internet Only is of great importance to me. There are so many IP enabled devices running in my house (Alexa, thermostats, Roku, garage doors, smart watches, washer/dryer, etc.) I don't trust them on the same network with my laptop that has important data. All of those smart gadgets are a Cyber attack waiting to happen.
One day I might upgrade to mesh but for now I am going to just run multiple devices in router mode.
Thanks
One problem with IoT devices and being on a separate isolated network is that the IoT devices supporting apps pn phones and pads won't beable to connect to there IoT devices if the mobile phone or pad is not on the same network or not isolated from the Iot device. Most phones and pad will connect to the main network for most users. GN brings in this isolation and could block communications between the IoT device and there supporting apps.
Also historical use of APs is designed for being on same network. GN is not a factor in most home class APs. GN is always handled at the host router level. So one reason why these low end routers don't have extras or what some users want. If you need this then you may need to find something else.
I've had IoT devices on my main network for years. Haven't had any issues to date. Justed added some more smart bulbs.
Locking down the Guest network to Internet Only is of great importance to me.
If you follow my block diagram (connecting the R7450 as a router to your ISP, and connecting the R6350 as a router to a LAN port on the R7450), you will find that it does exactly that. CrimpOn used the wrong arrangement in his experiment.
You might find that setting up some new devices will require temporarily disabling the client isolation. I know that Arlo cameras can't be installed unless the phone can directly reach the camera (and vice versa).
All my IOT devices are on my Guest network with no ability to talk to each other or my home LAN. I have not found 1 IOT device that could not function this way. I have smart switches (controlling outlets and lights), Honeywell Thermostat, Alexa Echo, Samsung washer/dryer, Chamberlain Garage door openers, Roku, etc.
All of the devices only need the internet. The IOT App on your smartphone then connects to some database on the internet/cloud to control these devices. That's why when the internet goes down you can't control these IOT devices even though your home LAN is still powered up and working fine.
There are some technologies (like Home Assistant) that starting to make use of the new IOT standard (MATTER) that does all the control locally but most IOT users dont have this
Thats why I leave my IoT devices on the main home network. If internet goes down, I can still control them if needed from the WLAN side.
