Guest Network on WAX160 / AX1800

Question

Hi there. I am trying to set up a guest network on my new WAX160 where guests can only access the internet, and not be able to see or access other devices connected to the network. I tried enabling Wireless Client Isolation, but that did not fix the issue. Any guidance would be appreciated. Thank you.

kgeoffrey · Answer

To clarify, I am trying to set up a guest SSID. There is a different SSID on which I want the devices to be able to see and access each other. Thank you.

schumaku · Answer

Talking of the WAX610 here?

kgeoffrey · Answer

Yes

schumaku · Answer

Based on an earlier report, the SSID Client Isolation seems to have a flaw, probably related to the intro of the mid 2021 "option to specify network devices that are exempt from WiFi client isolation" - this is probably what you are experiencing now. This flaw seems to exist on other WAX6xx APs with current firmware as of writing, too.
&nbsp;
Intended is that some kind of (undisclosed details) L2 isolation does take care of blocking the WiFi clients by SSID from any local network, while retaining Internet access as documented&nbsp;in the&nbsp;Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y User Manual&nbsp;
&nbsp;
===
Enable or disable client isolation for a WiFi networkBy default, client isolation is disabled for a WiFi network (SSID or VAP), allowingcommunication between WiFi clients that are associated with the same or different WiFinetworks on the access point. For additional security, you can enable client isolation sothat clients that are associated with the same or different WiFi networks cannotcommunicate with each other, except for communication over the Internet, which remainspossible.
===
&nbsp;
Don't blame the writer - we're implementing guest networks using the much stricter dedicated VLAN and appropriately configured&nbsp;security zones (like many other) - that's why many of us [especially those with strict Insight managed VLAN environments] never experienced the issue.
&nbsp;
RaghuHR&nbsp;please let engineering to look into this issue, and inform your customers about intended fixes.

kgeoffrey · Answer

Thank you, schumaku. When I chatted with Netgear, after doing some troubleshooting, they suggested downgrading the firmware.Is there a way to make a second VLAN with my current setup? WAX160 &gt; WNDR3400 Router (Wifi disabled for now) &gt; CM400 ModemI also noticed the Guest1 option under MAC ACL. Is this something I can use for my purposes?I’m inexperienced in advanced networking, but I’m capable of learning. Thanks for your reply and any additional assistance.

Forum Discussion

Guest Network on WAX160 / AX1800

6 Replies

Related Content

MK84 (AX1800) Mesh Network

AX1800 (RAX20) network speed testing results

AX1800

Extending ATT Fiber BGW320 Wireless Network with AX1800 & AX8 Concurrently ?

AX1800 Router - Issues with AP Mode

NETGEAR Academy

ProSupport for Business