Guest VLAN Tagging + No AP Isolation?
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi,
I am looking to replace my current mesh wifi service with something that can support the following;
1) Disabling the AP Isolation.
I have read that the Deco product doesn't allow wireless devices to connect to LAN connected devices. Can this feature be disabled? I absolutely need some of my wireless devices to connect to devices that are connected to the LAN (e.g. file server, NAS, Sonos, etc.)
2) Guest SSID with VLAN Tagging
I am looking to enable the GUEST mode on the Deco (access point) and for those devices that connect to the Guest SSID to utilise a separate IP address and be a member of a seperate VLAN. The underlying switch supports VLAN Trunking, etc. so I should be able to utilise just the one LAN connection to support 802.1Q tagging.
I haven't purchased a device as yet, but want to make sure TP-Link supports these features before purchasing.
Many thanks for any help you can provide.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
@MattSBR exactly my point. I also don't want to use the device in router mode, I need it in AP mode too.
@Kevin_Z I just confirmed that the guest network in AP mode provides no isolation to the subnet whatsoever when in AP mode. IMO this is a big security flaw as it allows guests the same access privileges as if they were connected to the regular network. TP-Link should not have provided a Guest mode at all in AP mode like this, or fix this problem. This is a security issue with the device the way it is implemented now. And calling it a feature request is not acknowledging the issue at hand. Please correct me if I'm wrong and tell me what kind of isolation the guest network provides in AP mode, the way it is implemented now.
- Copy Link
- Report Inappropriate Content
@micheloe you are 100% right, no needs to provide a guest network in those condition.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
@Kevin_Z Are there any news about this implementation? I guess there will be more demand of VLAN in AP mode as the IoT security awareness rises. In the end users will choose a system that supports this feature. And using Deco in router mode is not a solution for many people with special demands from their ISPs not viable in Deco.
- Copy Link
- Report Inappropriate Content
Thanks for your requesting.
While we are sorry to tell you that there is no update yet. We need get enough feedback to push the product department to evaluate the feasibility and make the RD team work on it afterwards. And it usually takes a long time to release the new firmware based on the firmware devolpment, capacity/performance tests and so on.
It is very recommended to keep an eye on Deco APP or official website for the updates.
Thanks for your kindly support in advance. Good day.
- Copy Link
- Report Inappropriate Content
@troozers I just received the latest firmware update, which includes VLAN isolation in AP mode, I'm a happy camper now :)
- Copy Link
- Report Inappropriate Content
@BAMS I don't see that firmware update, i'm on 1.3.0 Build 20190821 Rel. 54023 and no isolation in AP mode.
- Copy Link
- Report Inappropriate Content
@MattSBR The same for me, i'm also on 1.3.0 Build 20190821 Rel. 54023. FWIW, I have V1 hardware. I just saw there's also V2 hardware out already with a different firmware version. Could this be the reason?
- Copy Link
- Report Inappropriate Content
@micheloe very possible, mine is indeed v2 hardware
- Copy Link
- Report Inappropriate Content
@troozers ok hopefuly will be release on V1 soon.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 17568
Replies: 38
Voters 0
No one has voted for it yet.