Home Network Community > All Threads > Archer ax1500 device isolation not working
< All Threads

Archer ax1500 device isolation not working

Archer ax1500 device isolation not working

Archer ax1500 device isolation not working
Archer ax1500 device isolation not working
2024-08-17 22:58:05 - last edited 2024-08-23 09:20:56
Tags: #Guest Network #Device Isolation #Network Connectivity
Model: Archer AX1500  
Hardware Version: V1
Firmware Version: 1.3.10 Build 20240130 Rel. 77367(4555)

I have a weird situation where 2 issues are combined and not working. is not nice.

 

my setup is 2 archer ax1500 in easymesh over wireless backhaul (ethernet backhaul makes no difference)

 

1- device isolation in the main netowkr does not work no matter what I do.

2- devices in the guest network with allow access to local network devices can see also my wireless devices in the main network. Local network should be only LAN port devices. why does this feature even exist if it just bridges the 2 networks and not the interfaces. (poor choice)

3- 1 specific device cannot connect to the main network when 5ghz is enabled (it is a N/AC device an android tv official device) hence my use of the guest network as 2.4 only with allow local network access enabled. (I have no idea whats happening here. I tried an archer A6 and the device conencts to the N/AC 5ghz networks but cannot in any way negotiate 5ghz connectivity with the archer ax1500)

 

  1      
 
  1      
 
#1
Options
8 Reply
Re:Archer ax1500 device isolation not working
2024-08-18 00:14:17

 for any readers of this undocumented buggy features.

 

if you use ip address reservation. any devices in the "main network" either with static or reserved ips are always shared to the guest network.
I assume the address separation is gone all at the dhcp level and is buggy as hell.

 

if you have any servers or nas etc with static ips or iot devices u want to reserve.

 

1- DO NOT enable guest allow network as these are shared by default.

2- AP isolation on the main network is wonky it only prevents the wireless devices provisioned with dhcp to not see other devices provisioned with dhcp. it will always show the static and reserved ip sets regardless. For my use case I left it enabled and it just prevented access within the only 2 devices in the main network with dynamic dhcp allocation.

IMO this is a lame way to implement network isolation and firewall ruling.
At least it could be better documented in more complex scenarios and not let users to discover and think its a bug.

Although it looks and feels like a buggy implementation while is not.
 

  0  
  0  
#2
Options
Re:Archer ax1500 device isolation not working
2024-08-23 10:17:48

  @sbearg 

 

Hi, thanks for posting question on our community.

1. As this guide says, while isolated, the devices can still access the internet and are able to communicate with other isolated devices. However, isolated devices cannot transfer data with devices on your home network, including managing gateway devices, accessing USB devices, etc. So you may share more details about how it does not work, then we can get better understanding about your problem.

2. For Easymesh network, currently guest network can not synchronize to satellite router. On your main router, did you enable "Allow guests to access your local network"?  "Local network should be only LAN port devices. "--Sorry, I am afraid it is only your understanding. All wireless and wired connection to main router belongs to local network. 

3. Can I confirm whether you use Archer A6 to replace main Archer AX1500? Please check whether their 5GHz wirless settings are totally the same.

Thanks for your cooperation~

 

Check Out the Latest Posts: Archer GE550 - BE9300 Tri-Band Wi-Fi 7 Gaming Router EasyMesh Is Available When Wi-Fi Routers Work in AP Mode as A Controller. Archer BE550 New Software Enhances System Stability and Optimizes MLO Network Stability. TL-WA3001 Supports EasyMesh, Speed Limit, Guest Network in AP Mode and/or Multi-SSID Mode.
  0  
  0  
#3
Options
Re:Archer ax1500 device isolation not working
2024-09-07 00:41:10
Marvin, learn how to read.
  0  
  0  
#4
Options
Re:Archer ax1500 device isolation not working
2024-09-07 00:48:22 - last edited 2024-09-07 00:50:22

what a secure network looks like is

 

1: devices in LAN ports

2: devices in main-wifi

3: devices in guest-wifi

 

devices in lan can access internet and can see main and guest wifi devices.

devices in main-wifi cannot see devices in guest-wifi but can access lan devices such as nas or dns server.

devices in guest-wifi can access lan devices such as a nas or dns server and internet but cannot see main-wifi devices.

 

this has eternally been impossible in tplink routers. always one side does not work and leads to compromise. if you enable in guest that devices have access to local they can see the wifi devices in the main wifi network. allowing my guest for example to scan my network and discover my phone when they should only discover my nas.

  0  
  0  
#5
Options
Re:Archer ax1500 device isolation not working
2024-10-09 13:01:54 - last edited 2024-10-09 13:02:37

  @sbearg  the same on ax23

Archer ax 23 device isolation - Home Network Community (tp-link.com)

  1  
  1  
#6
Options
Re:Archer ax1500 device isolation not working
2024-10-09 23:22:22 - last edited 2024-10-09 23:24:36

after more mingling around ended up with this setup

 

network > dhcp server > reserving X number of IPs

wireless > aditional settings > enable ap isolation on main network

wireless > guest network > disable allow guest to see eachother, enable allow guests access local network

 

I make sure all devices that need to be accessed by everyone such as DNS, NAS are either STATIC IPS over ethernet or are DHCP wireless reserved ips (a wireless printer or chromecast guest room for example).

This allows

 

my lan devices to see all devices across, lan, wireless main, wireless guest (i have nmap network scanners running)

my guest wireless devices can access pihole, and chromecast devices but cannot see any other non ip reserved main wireless devices

my main wireless devices can see guest and lan devices (while is not ideal that they can see guest devices at least guest devices can't see the main wireless that are non dhcp reserved devices)

 

the main flaw IMO is the combination of dhcp reservation to allow sharing cross networks.

but i assume someone might call this an undocumented feature

  1  
  1  
#7
Options
Re:Archer ax1500 device isolation not working
2024-10-10 12:00:15

  @sbearg 

It seems like you're facing multiple issues with the TP-Link AX1500 Wi-Fi 6 Router (ARCHER AX10). Here are some suggestions that might help:

  1. Device Isolation Not Working on Main Network: Double-check that device isolation is properly enabled on both routers in your EasyMesh setup. Sometimes, resetting the network settings and reconfiguring EasyMesh can fix this issue. You might also want to update the firmware if you haven't already or contact TP-Link support for guidance on potential bugs related to device isolation.

  2. Guest Network Access to Main Network Devices: The guest network should ideally be isolated from the main network, including wireless devices. However, it seems like enabling "Allow access to local network devices" is bridging the networks in your case. If this feature is causing the two networks to be mixed, consider turning off that option or checking if a firmware update has addressed this behavior. Again, this might be something TP-Link should address in their future firmware updates.

  3. 5GHz Connectivity Issue with Specific Device: The 5GHz issue with your Android TV device could be due to a compatibility problem between the device and the AX1500. Try forcing the AX1500 to use a lower channel in the 5GHz range, as sometimes certain devices have trouble with higher channels. Also, check if the TV’s firmware is up-to-date. If none of these work, using the guest network as a temporary workaround, as you’ve done, seems like the best option until a permanent fix is found.

If these steps don't resolve your issues, contacting TP-Link support might be the best course of action.

T.I Digital Solution Ltd
  0  
  0  
#8
Options
Re:Archer ax1500 device isolation not working
2024-10-10 19:32:54
IMO kavin your comment is very much useless.
  3  
  3  
#9
Options

Information

Helpful: 1

Views: 321

Replies: 8

Tags

Guest Network Device Isolation Network Connectivity
Related Articles
Archer AXE75 - Device Isolation
548 0
Device Isolation Not Applying
671 1
Archer ax 23 device isolation
202 1
Device Isolation not working on satellite router
518 1
Problems with the archer ax1500
2445 0
Archer AX10 AX1500 not working on WiFi
5735 0
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.