Guest Network and AP Mode

[fax]

Having read around this it seems this is very typical, not just of Asus. This thread seems to discuss the issue pretty well: http://www.snbforums.com/threads/guest-network-not-restricting-local-network-access.22659/

This problem seems fixed in the latest firmware release (beta):
RT-AC87U_3.0.0.4_378_4825 - Unofficial beta firmware

Fix: Close Access Intranet can still access LAN

 

[Jong]

Interesting. Thank you very much. May take a look at the Singapore forum and give it a try if all good. But as it doesn't specifically mention AP mode, I'm not sure if that was some other bug.

BTW, I'd found that Singapore forum before. Seems like it is THE place in the world for this router. There is an Asus employee in there all the time sharing betas and discussing issues!

 

[fax]

It was working correctly here in wireless router mode, so it may likely be limited to the AP mode but it is indeed not specified. I am afraid the only way to know is to try it.

 

[Jong]

It could be some rare bug in router mode that we haven't seen. But yep, it needs testing! I think I'll give it 24hrs to see what those here and in Singapore have to say. If all is good I'll give it a whirl. Thanks again.

 

[Jong]

Asus in Singapore seem to be saying this fix stops guests in router mode accessing router, which is great, but not related to the AP problem.

I'm probably going to install it later today as the consensus seems to be it's as solid as 4608. My only hesitation is Asus have said another release is just around the corner! Maybe even later today? Don't know if it's an updated full release, another beta, or the same beta turned into full release.

 

[fax]

Yes, I see indeed that a new build is approaching, probably better to wait. For what I understand, you may be able to see resources but you will not be able to access them. Important in this cases to reboot the PCs connected to the AP as otherwise you will still see cache data not actually there.

 

[Jong]

Yes, I see indeed that a new build is approaching, probably better to wait. For what I understand, you may be able to see resources but you will not be able to access them. Important in this cases to reboot the PCs connected to the AP as otherwise you will still see cache data not actually there.

For sure with 4608 you have full access to all network resources (subject to access controls on the respective devices of course) from guest network devices in AP Mode. I'm not expecting more from 4825, just a block to prevent guests from logging onto router, but we'll see.

I've logged a ticket with Asus UK and they have been very good in responding. They have even tested the config and confirmed the behaviour I was reporting. They have said they have passed on the problem to Taiwan "to see if our engineers can change this behaviour when using guest network in AP mode in the next firmware update". I'll be honest though, I'm not holding my breath .

 

[Chrismallia]

Hi I any news on this topic? I need a AP for my house and was thinking of buying a second ac87u as AP or instead a xclaim xi3 that I am sure I can have a second ssid with client isolation.

 

[Jong]

Personally I don't expect this ever to be fixed. I am just having to live with having a guest network from the main router and no guest network from my AP. Obviously this means guests have poorer coverage, but such is life!

I'd like guest mode to work properly, of course, but my main beef is that Asus lead you to believe it works. They make guest mode available and give no hint anywhere that guest mode on an AP is a whole different (very insecure, very throughput wasting) thing.

 

[Chrismallia]

Personally I don't expect this ever to be fixed. I am just having to live with having a guest network from the main router and no guest network from my AP. Obviously this means guests have poorer coverage, but such is life!

I'd like guest mode to work properly, of course, but my main beef is that Asus lead you to believe it works. They make guest mode available and give no hint anywhere that guest mode on an AP is a whole different (very insecure, very throughput wasting) thing.

Ye it senseless to offer guest mode in AP mode and does not even warn that your whole network is open to evryone. well for the price of the ac87u as AP is not worth the price as the features are lost/not needed, so we are better off spending the same money on a enterprise AP such as Xclain, as you can set multiple ssid for guest that can't see your network, cloud manager, bandwidth limiting social login captive portal and so on. 87U is great for router APs are great for APs