Home

Forums

Stories

Knowledge Base

Home Network Community > Deco > Deco S4 no isolation from other clients on guest network

< Deco

Deco S4 no isolation from other clients on guest network

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Deco S4 no isolation from other clients on guest network

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

dev_null

2020-07-21 21:21:36 - last edited 2020-10-31 03:59:13

Posts: 16

Helpful: 8

Solutions: 0

Stories: 0

Registered: 2020-07-21

Deco S4 no isolation from other clients on guest network

2020-07-21 21:21:36 - last edited 2020-10-31 03:59:13

Model: Deco S4

Hardware Version: V2

Firmware Version: 1.4.0 Build 20200628 Rel. 52605

Clients on the guest network can "see" each other (all services, all protocols). This is not how a guest network should function. Instead, security best practice is clients on a guest network should only be able to see the Internet and nothing more.

2 Reply

David-TP

2020-07-23 06:38:22 - last edited 2020-10-31 03:59:13

Posts: 12431

Helpful: 1715

Solutions: 1196

Stories: 9

Registered: 2020-04-14

Re:Deco S4 no isolation from other clients on guest network

2020-07-23 06:38:22 - last edited 2020-10-31 03:59:13

@dev_null

Hello,

Basically, when Deco works in router mode, the guest network is isolated from the main network, while the clients connected to the guest network can still "see" each other.

This will be recorded and forwarded to the related department as a feature request.

Thanks.

▶Check What's Currently Going on With Deco ▶Deco Starts Supporting Changing Wireless Channels! Deco BE85_1.1.1 Supports WireGuard VPN,Channel Selection and Matter Deco BE65_V2_1.1.0 Supports WireGuard VPN, Channel Selection and More ▶Deco APP 3.8.102/3.8.112-Ready for A New Deco Onboarding Experience! Try to leave a Message if urgent help is required.

dev_null

LV1

2020-10-31 03:58:50

Posts: 16

Helpful: 8

Solutions: 0

Stories: 0

Registered: 2020-07-21

Re:Deco S4 no isolation from other clients on guest network

2020-10-31 03:58:50

Hi, This can easily be implemented by using VLAN's and judicious usage of interface device bridge(s). Here is a very important use case: IoT devices should ALWAYS be put onto a guest network. Security in such devices is an afterthought as history has shown time and time again, repeatedly, across major vendors and popular consumer product offerings. A critical piece of mitigating IoT device exploitation is by effectively isolating each device connected to a guest network from each other, including from the main network.

Deco S4 no isolation from other clients on guest network

Deco S4 no isolation from other clients on guest network

Information

Voters 0

Tags