@Kevin_Z 

Kevin_Z wrote

@Vassilis 

 

Hello, the guest network and host network are isolated from each other when Deco works as the regular router. We did a test at our end and the devices connected to the guest network cannot ping the device which has connected to the home network. 

 

Back to your case, we can do further analysis.

 

1. Please tell us the current network diagram and how do you connect these devices.

 

2. Please show us a screenshot of the ping result which indicates you can access the host network with your device connected to the guest network. 

 

3. Please ensure that the firmware is up to date. 

 

Thanks in advance, and have a good day. 

 

I apologize in advance if this is in bad manners or not allowed since I'm not OP. I'm actually trying to seperate the 5ghz and 2.4ghz on my Deco m5 setup.

We have some old phones with bugged firmware that samsung has not fixed in over three years. Basically, we get hit with an authentication error when our phones swap between 5ghz and 2.4ghz when swapping between bands with the same SSID. The only fix is to seperate the bands with different names.

Right now my deco is in Router mode and if I seperate the bands and I activate guest mode, then I cannot communicate with my chromecasts when I'm connected on the guest wifi. If I go from Router mode to Access Point mode will my "guest internet" have all of the access as the main connection? Can I communicate with my chromecast? I could just deactive the 5ghz but my grandpa will literally throw a fit if he is not getting the absolute max best of the best internet speed for his netflix. 

Kevin_Z wrote

@Vassilis 

 

Hello, the guest network and host network are isolated from each other when Deco works as the regular router. We did a test at our end and the devices connected to the guest network cannot ping the device which has connected to the home network. 

 

Back to your case, we can do further analysis.

 

1. Please tell us the current network diagram and how do you connect these devices.

 

2. Please show us a screenshot of the ping result which indicates you can access the host network with your device connected to the guest network. 

 

3. Please ensure that the firmware is up to date. 

 

Thanks in advance, and have a good day. 

 

@Kevin_Z  Thanks Kevin for the quick reply.

Ok i think that the whole issue is bad phrasing and symantics. I got an epiphany last night and i believe that by guest network and home network Tp-Link talks about devices connected only through the M4.

Explaining:

• Home network, one subnet /24,  in gigagib switch, one computer (Computer1) connected on the switch via LAN and two laptops from M4 to main network=>The laptops (Laptop1 , Laptop2) from the WiFi can access each other and Computer1 as designed.
• Enable Guest Mode=> Connect Laptop3. If i figured this out correctly then Laptop3 cannot access Laptop1 and laptop2 but CAN access Computer1 which is via ethernet cable connected on the same subnet.

Now if this is the case then again it is wrong. You do not separate on the FAQ or anywhere that you are talking about isolation of the SSID on the M4 and ONLY ON THAT , everything else on a ethernet cable on the same subnet can be accessed with no issues.

Can you confim on this ?

Also if this is the case, will on the nect firmware be a true guest network totally isolated ? If no, any other tp-link AP that can do that or i have to return M4 ?

Many thanks in advance.

@Vassilis 

Are you you saying that Computer1 is connected to a switch on the *outside* of the master Deco?  In that case, it is on the Internet as far as the Deco is concerned.   It is an external resource and should be accessible from the Guest network as that is what the Guest network is for.  

If the devices connected to the switch are supposed to be private the switch should be on the inside of the Deco router.  The second Ethernet port on the Master Deco, and any spare ports on the slave Decos are part of the private network.  

I apologise  if I have misunderstood your topology.  

ajharvey wrote

@Vassilis 

 

Are you you saying that Computer1 is connected to a switch on the *outside* of the master Deco?  In that case, it is on the Internet as far as the Deco is concerned.   It is an external resource and should be accessible from the Guest network as that is what the Guest network is for.  

 

If the devices connected to the switch are supposed to be private the switch should be on the inside of the Deco router.  The second Ethernet port on the Master Deco, and any spare ports on the slave Decos are part of the private network.  

 

I apologise  if I have misunderstood your topology.  

@ajharvey 

Yes, i think you had it correct, here is the diagram in a very simple way.

So the only solution is to keep the "Router" Mode of Deco and connect the VDSL to the first LAN port of deco and from the second port of Deco to take a cable and connect it on the switch. In that way the LAN is on the "main network of deco" and when people on the "Guest" SSID will not have access to the "main" network even though is is a local lan cable/subnet. Did i understand this correctly ?

@Vassilis 

Yes, that’s right.  

@ajharvey ok , i will try it then and report back my findings 

ah, question @ajharvey and @Kevin_Z , will that scenario play also in "AP mode" when the new firmware will be released that isolates the guest network as in "router mode" ?? 

many thanks people

its me again 

If i go with the solution designed above and stay on the "router" mode so i connect the vdsl modem to the M4 in order to get the main network and guest network.

I have seen that on the M4 it has port forwarding. Which i have on my vdsl modem. I haven't seen the wizard on M4 but does it have UDP forward ?

cause i have an openvpn server that works on UDP now from my NAS.