Hi All!

Fairly new to the networking game but decided to give the below scenario a whirl. Its currently "working" although not quite as I intended so any help / guidance would be appreciate.

Goal / Aim

I set up an AX3000 as my main router (currently have Fiber to the Home, so its in PPPoe mode using VLAN 10 tagging). I have an apartment at the side of my property and rather than get another supply of broadband fitting (and a new line!) I decided that my Gigabit fiber would be more than sufficient. I purchased a TP Link C50 with a view to creatings a second network while running an ethernet cable to the c50 from the ax3000 (this is currently connected from AX3000 LAN to C50 WAN).

Steps taken

AX3000

1. Once it was set up and internet was live, I set the following;

IP Address : 192.168.0.1 (Default)

Subnet Mask: 255.255.255.0 (Again, Default)

DHCP - Enabled with IP Address Pool 192.168.0.2-192.168.0.109 (Just decided to give myself c.100 available IP's on main network).

Other than configuring the DHCP on AX3000 - this has basically be left alone.

C50

1. Set up in Access Point mode.

2. DHCP has been disabled (I was having some issues with network devices (on my main network) accessing internet with this enabled, I also think this may create a Double NAT?!? No expert in this area!)

3. Lan Type has been set to Static IP and I set the IP address to 192.168.0.110 (note this is outside the IP Pool Range of the AX3000). Subnet Mask has remained the default 255.255.255.0. I did set the Gateway to 192.168.0.1

Result

Having completed the above, all devices (on both networks) have access to internet and appear to work fine. I found it interesting that when I log into the AX3000 gateway I was able to see devices connected to the 'sub network' on the C50. Furthemore, I have a printer on my main network which I can see from the C50 network! This is kinda where I have an issue.

Desire

I feel like I'm 90% of the way there, I just need to isolate the C50 network but cant seem to be able to figure this bit our. Ideally, they would not be able to see any on the devices on the network so both networks would in-effect be private (or at the very least the c50 network devices cannot see the main network devices.

Thanks for reading and any help is greatly appreciated!!