Reply

Re: WAC124 and Guest network client isolation?

surecomp
Follower

WAC124 and Guest network client isolation?

Can someone please set me straight in this WAC124?  What is the point of allowing 3 seperate SSIDs if they are all on the same subnet?  I would like to have one SSID that is a guest network so it will not have access to computers on my main network.  Is there a setting somewhere for client isolation for those on a guest network? Thanks.

Model: WAC124|AC2000 Dual Band 4x4 
Message 1 of 5
yellowhouse
Aspirant

Re: WAC124 and Guest network client isolation?

I'm as well in the same situation. Can't figure out how to do this.

Model: WAC124|AC2000 Dual Band 4x4 
Message 2 of 5
antinode
Guru

Re: WAC124 and Guest network client isolation?

> Can someone please set me straight in this WAC124? [...]

 

   Not I, but there may be a greater chance of finding some actual
expertise in a more appropriate forum than this "General WiFi Routers
(Non-Nighthawk)" forum.  For example:

 

      https://community.netgear.com/t5/x/bd-p/business-wireless-for-business

 

(Where "WACxxx" topics abound.)

 

   Visit http://netgear.com/support , put in your model number, and look
for Documentation.  Get the User Manual.  Read.  Look for "guest"?  In
my quick skim through it, I found nothing which looked useful.

 

   Knowing nothing, I'd guess that it'd involve some kind of firewall
rule(s) and/or a VLAN.  (But what do I know?)

Message 3 of 5
Kris_W
Aspirant

Re: WAC124 and Guest network client isolation?

I'd also like to know if this is possible.  Having the Guest WIFI on a different subnet is why I bought this three SSID router. 

 

As far as I can tell the router is not capable of having one SSID running as an access point and the other using IP addresses assigned by the router.

 

It looks like the easiest solution is to buy a second router.

Model: WAC124|AC2000 Dual Band 4x4
Message 4 of 5
schumaku
Guru

Re: WAC124 and Guest network client isolation?


@Kris_W wrote:

I'd also like to know if this is possible.  Having the Guest WIFI on a different subnet is why I bought this three SSID router. 


All three SSIDs on the WAC124 bridge to the very same LAN, there is no VLAN support - so no isolation or the like.

 


@Kris_W wrote:

As far as I can tell the router is not capable of having one SSID running as an access point and the other using IP addresses assigned by the router.


Like any other Wireless Access Point, this is not a router, it's a device bridging wireless radio SSIDs to a LAN. It has no DHCP server or the like (would make a mess on the same LAN anyway!).

 


@Kris_W wrote:

It looks like the easiest solution is to buy a second router.


If it's OK to run this Guest VLAN on double NAT, and there is a dedicated cabling available, as a consumer solution, probably yes.

 

The usual business approach for proper network isolation are wireless access points with VLAN support (like the WAC505, WAC540, ...), switches with 802.1Q VLAN support, and a router supporting multiple security zones, either based on ports, or on VLAN.

Message 5 of 5
Top Contributors
Discussion stats
  • 4 replies
  • 1807 views
  • 0 kudos
  • 5 in conversation
Announcements

Orbi WiFi 6E