NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
grasshopper1969
Jun 09, 2026Guide
Any updates on guest network in AP mode
Hi, understand that Routers in AP mode in the past, that Guest network does not isolate from local network. Just wondered if this has been changed now as I have a spare Netgear RAX10 that is going t...
grasshopper1969
Jun 10, 2026Guide
Hi, thanks for the reply, unfortunately the RAX10 router in AP mode is in another house approx 150m away so guest on main router RS600 wont reach which is active at present for IOT and my sons children when they are at our place. I will test AP just in case it does work as I have seen on forums everyone says it wont but they have tried it and it apparently worked.
StephenB
Jun 10, 2026Guru - Experienced User
muhammadammar23 wrote:Guest Network isolation still does not function the same way when a Netgear router is operating in AP mode.
The guest network isolation will still isolate other wifi devices connected to the guest wifi (not allowing them to communicate with each other or with other devices connected to the RAX10 wifi).
But the guest devices aren't isolated from devices on the main router (RS600), since the main router has no idea that they should be isolated. Also, the guest devices might be able to reach anything connected to the RAX10 ethernet.
A newer orbi mesh system (using a wired backhaul) would give full guest isolation.
Although it is a bit messy, you can also achieve full guest isolation with a third router. You'd connect the third router to the internet at your home (functioning as an "edge" router). Then you'd connect both the RS600 and the RAX10 to LAN ports of the edge router. All three routers would need to be in router mode, not AP mode. And only the RS600 and RAX10 can be connected to the edge router. This would prevent any devices connected to the RAX10 from reaching the RS600 (and vice versa). And guest networks on both routers would be isolated.
One disadvantage of the three-router approach is that it uses double-NAT. If you use port forwarding now, you'd have to forward twice (forwarding ports in the edge router to the RS600 or RAX10, and forwarding again to the client device). Also, uPNP wouldn't work, so if you use that to open router ports you'd need to switch to something else.
grasshopper1969 wrote:the RAX10 router in AP mode is in another house approx 150m away
How is that connected to the main router? 150m is further than the ethernet spec (which is 100m). That could create network issues (slow speeds due to packet loss) at the RAX10.
- grasshopper1969Jun 10, 2026Guide
The RS600 is connected via cable (20m) to a ubiquiti wifi bridge for the 150m (guess 450mbps haven't activated yet) to house, I also have another ubiquiti wifi bridge connected to my other sons house approx 350m (250mpbs) away all works 100%, just wished could activate their guest isolation at each end at the AP level, but if not I will just put up with it. I have read TPlink are doing it to some of there AP's apparently don't know if that's true or not. I still need local access to AP at the cable level for Local Plex (free ver) to work on their TV's etc.
- StephenBJun 10, 2026Guru - Experienced User
grasshopper1969 wrote:
I have read TPlink are doing it to some of there AP's
An Orbi mesh would do it (replacing both routers). For instance the Orbi 870 series.