NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Guest isolation not supported in AP mode?
The good news: Guest access works. The bad news: You can't do guest isolation in AP mode, apparently - the option is greyed out. That makes it rather useless, unfortunately - why is this? ...
The VLAN tag could be used in either router or AP mode. It merely serves to easily identify guest traffic. How much extra work the base station needs to do in order to handle the guest traffic depends on whether it is in router or AP mode. In AP mode, the Orbi could apply the sorts of checks that rhester72 described several posts above. In addition, the it could also support an advanced mode whereby it doesn't strip the VLAN tag but, instead, forwards it to a router that understands VLAN tagging. The router could, then, enforce the traffic segregation. This is how some enterprise-class networking gear work.
VLAN tags for Guest Network will work. The Apple Airport devices use VLAN tag 1003 for the Guest Network to separate it from the main network traffic.
If you using the wireless device in AP mode this becomes a bit harder to configure on your main router/firewall and other network devices as they need to be able to understand and deal with the VLAN tag traffic rather than a different subsegment but it's entierly possible.