NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
meegeek1
May 30, 2020Aspirant
Guest Network isolation on Secondary Nodes/AP Mode of Orbi Systems fixed?
HiHi! Can I check for the RBK23 / RBK53 models of orbi: Is the Guest Network's isolation from main network fixed yet for Orbis acting as Secondary Nodes or in AP mode. Previously: I underst...
meegeek1
May 30, 2020Aspirant
CrimpOn wrote:Please clarify the meaning of "isolation". As far as I can determine, both router and satellites behave as expected. There are two choices:
- Devices on the Guest network can connect with devices on the primary network, or
- Devices on the Guest network cannot connect with devices on the primary network.
There was a post recently pointing out that devices on the Guest network appear to be able to "ping" the primary network to learn which IP addresses are in use (and which are not). However, they cannot "connect" for any other purpose.
If you have a specific concern, I am happy to set up an experiment to demonstrate how the Orbi behaves.
Thanks for the response!
To clarify: my use case is that
I want devices on my guest network to be unable to connect to devices (pinging is fine) on my primary network.
Are you saying when in router and satellite mode. Satellites are able to broadcast Guest Network and correct behavior is observed?
What about if all Orbi devices ase used in AP Mode. Does guest network still function as expected?
Thanks for the help
my concerns stem from this thread:
CrimpOn
May 30, 2020Guru - Experienced User
meegeek1 wrote:
I want devices on my guest network to be unable to connect to devices (pinging is fine) on my primary network.Are you saying when in router and satellite mode. Satellites are able to broadcast Guest Network and correct behavior is observed?
What about if all Orbi devices ase used in AP Mode. Does guest network still function as expected?
Thanks for the help.
That is my understanding. Alas, my Orbi is in router mode and cannot be set to Access Point mode because I have "only a modem" from my ISP.
I just now did another experiment. Activated Guest network and connected a laptop to it. The laptop
- Cannot "ping" a computer on the primary network (which normally responds to ICMP (ping))
- Cannot open a web site on the primary network (I have two: Orbi and Pi-hole)
- Cannot "iPerf3" to a server on the primary network
As far as I am able to determine, Netgear has plugged whatever "holes" existed in the earlier firmware.
(And, yes, I also think it would have been wiser for Netgear to have defined an entirely different subnet for the Guest WiFi SSID as they did on the "Pro" system. Either way, they have to do some "magic" to give customers options.)