Isolating Main network

Isolating Main network

Isolating Main network
Isolating Main network
Yesterday
Model: TL-WR841N  
Hardware Version:
Firmware Version:

Hi,

 

I'm trying to give guests in 4 separate lodges access to the internet via starlink which is on my house, so want to make sure they don't have access to main network. See below for an of current setup.

 

 

 

I guess I'm going to have to put Starlink router into bypass mode and get a new router and switches. Could someone advise what router and switches would be required. Thanks.

 

 

 

The starlink router is wired into 8 port switch and then also plugged into that switch is one of the cpe210 that is configured as ap and then it connects via ptp to client CPE from that a cable is wired to another 8 port switch, a WR841N which is on the lodge is then connected via ethernet cable from that switch.

  0      
  0      
#1
Options
1 Reply
Re:Isolating Main network
17 hours ago - last edited 17 hours ago

  @AndyHarrowven 

 

 

Hi, you need to go to Wireless -> Wireless advanced -> Turn on client isolation, ensure WDS is turned off in Wireless basic, this will stop your devices talking to each other as well so you need to figure out what you need to be available to you but this will make it as secure as it can be.

 

Next enable the guest wifi and enable -> the 2nd option which  is -> Guest isolate, don't forget to save each time you alter a setting, you may want to restrict their bandwidth as well but be sensible with it.

 

 

Personally I'd go get a newer AX router at the very least given what you want to use it for so you and your guests will have WPA3 as an option as well, you should set the guest network to use WPA2/3 mixed or you may have guests that can't connect on just WPA3.

 

I suggest you have a rolling password on the guest network so you need to change it each time you have a totally new set of guests and use something simple but effective for them like ... ( ANDYFi591?285!wel-come2025 ), this will be simple for them to set up but I suggest you use an alternative version of characters for the password not this one I've just posted, or you can leave it open without a password but that wouldn't be something I'd suggest you do.

 

Also if the lodges are spaced out and you want the guests to actually be able to use the wifi you're going to need a router with some shout behind it, I'd suggest something that is at least 5400mbps as an 1800mbps model may not throw far enough for the lodges to get a signal, yours is a 300mbps model so it's not going to shout far or very fast.

 

 

  0  
  0  
#2
Options