Set up Guest Network to hide the rest of the Home Network
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.Set up Guest Network to hide the rest of the Home Network
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi All,
I have a home Network - basically an EE router with all the other things in my house plugged in either by Wifi or LAN.
I want to set up a Guest Wifi Access - such that it is secured from my main mani home network. I dont want guests to have access to my network.
I bought the Archer C50, as it can work in Access Point mode and has a Guest Access feature.
So - I have set it up in Access point mode - and have it connected to my main Router with a cable.
I set up the Guest access details. All seems to be working fine, and I can connect to the Guest network wifi and browse the web etc.
But, when I download Fing app on the phone - and connect to main network, and scan network I get the 15 devices connected to my main network.
When I then connect to the Guest Wifi, and do the same thing - I still get Fing showing me details of all devices on my home network????
These should be hidden? There should be no access to what is on the rest of the network from the Guest Wifi login?
What have I got set up wrong please?
Many thanks
Safara
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
YAY - it is not dead.
I tried resetting it to default again, and this time it did.
I went through the setup process again as per Case2 above
Set the Guest access - set the option there - Guest Networ Isolation - to Enable
Reboot the router - and it vanishes.
Cannot connect to it from anywhere.
Reset it to default again
Go through setup
Set guest access again but have all 3 top options as disable.
Reboot - all good, can connect to the 2 Wifi chanels etc
But - cannot connect to the Guest channel - My phone can see it.
But when I tap on it to connect - it just spins - does not ask me for the password?
There is an option in the Guest Network settings called Authentication Type - and it is set by default to Auto
Should this be changed to WPA2-PSK ?
- Copy Link
- Report Inappropriate Content
Here some simple settings if you don't want guests to provide a password:
If you insist that guests should authenticate to connect to the guest network then use WPA2-PSK/AES mode.
If the issue connecting to the guest network persists give the normal wireless router mode a go to determine if the configuration issue.
Reset C50 to factory, configure all basic wireless settings without disabling its DHCP server and test.
Main router LAN port <=> C50 WAN port
- Copy Link
- Report Inappropriate Content
@terziyski
Cheers :)
I am very lucky to have you helping me Terziyski.
I have set the Guest access to use WPA2-PSK and AES
Saved, rebooted.
Can connect to normal wifi very quick.
Guest wifi connect just hangs...
So, I set it to Disable Wireless Security for Guest Wifi
Same story - cannot connect, just spins connecting.
Will do a factory reset as you say :-
Without disabling its DHCP server and test.
Main router LAN port <=> C50 WAN port
And report back
- Copy Link
- Report Inappropriate Content
Hokay,
Did the following
Reset to factory settings - connected by pluging direct into PC 192.168.0.1 and set up only the 3 wifi details
SSID for 2.4 / 5.0 and the Guest Access
And Saved and rebooted.
Connected Main Router LAN <=> C50 WAN
And tested with phone - can connect to normal wifi channels - and the Guest Wifi without issue - very quick.
I have not set the LAN on the C50 to a IP address outside of the DCHP range of the main router - and I have not turned DHCP on the C50 to Disable
So, what does that tell us?
- Copy Link
- Report Inappropriate Content
This is a normal wireless router mode for C50. There is a double NAT in your network now, but it may not be a problem for you.
Make some tests if everything's working fine including guest network isolation.
Basically that tells us - the configuration I proposed initially (AP mode - Case 2) doesn't work for you (guest network not accessible).
So, test this setup for now and see if it works for you.
Otherwise you have to use the built in AP mode (avoiding double NAT), but then you won't be able to restrict guest network from seeing local users (my first post).
- Copy Link
- Report Inappropriate Content
Great :)
I shall test it and see how other things on the network are affected.
The first issue I can see is that I cannot access the C50 on the network
The Main router reports it as being on 192.168.1.83 - but, when I try and visit that IP I get a "Connection has timed out, too long to respond"
Does that mean I can only access the C50 if I connect it directly to a PC - but other than that it sort of runs?
- Copy Link
- Report Inappropriate Content
That's the tricky part introduced by double NAT:
When connected to the main router network (wireless or wired) connect to the C50 on 192.168.1.83.
When connected to the C50 router network (wireless or wired) connect to the C50 on 192.168.0.1.
Make your wireless SSIDs on main router and C50 different, so you would know to which device exactly you're connected currently.
If you want to have C50 WAN port IP address outside main router DHCP range, then set it to Static IP - 192.168.1.55.
Important: To be able to access C50 when connected to the main router network you have to enable remote management feature:
- Copy Link
- Report Inappropriate Content
Ya, this is the bit I cannot do at the moment :-
"When connected to the main router network (wireless or wired) connect to the C50 on 192.168.1.83. "
That just times out.
So, Connect it back directly to PC - access it via 192.168.0.1 - and set the Network LAN to not use DHCP - use something I set eg : 192.168.1.55
This would then mean that when I connect the C50 back to the Main Router LAN to WAN - then I should be able to connect to it when on the network via 192.168.1.55 ?
- Copy Link
- Report Inappropriate Content
Ahhh - have just seen your section about the Remote Management feature.
I shall connect to the router by direct plugin in 192.168.0.1 and get that set
Then connect it back to the LAN from the Main router.
And let you know how it goes :)
- Copy Link
- Report Inappropriate Content
Great :)
" Important: To be able to access C50 when connected to the main router network you have to enable remote management feature: "
That works - yay!!
Shall test things out over the next few days
Many thanks for all your help :)
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 3100
Replies: 20
Voters 0
No one has voted for it yet.