troycarpenter
New Around Here
I've seen this topic come up every now and then, but I don't know if I've seen anyone answer it satisfactory.
I am using the guest functionality on my N66U on both the 2.4 and 5GHz bands, as well as my normal network in both bands. I needed to put a separate access point deep in my house to extend my wireless coverage. The AP allows 4 SSIDs per radio, and can also do per-SSID vlan tagging. I am wanting to extend my guest network to the access point by tagging the guest network SSID with a vlan ID, then having the N66U know that vlan as the guest network to prevent access to the rest of the network.
After reading a few threads about the topic and testing, it looks like the guest network coexists with the main network using the same IP address range.
Another thread was close:
http://forums.smallnetbuilder.com/showthread.php?t=14164
but the end solution looks based on the wireless interface ID, not vlan, and simply creates a separate subnet for the guest to provide better protection.
So, I'm wondering if there is any way to define a guest network by vlan so that traffic coming from other devices can be properly handled by the router.
EDIT below:
Let me see if I can draw a picture.
I was hoping that the N66U created a vlan for the guest network, and I could use the same vlan tag on the AP. The tagged packets would then flow across port 4 with their existing tags and the N66U would handle them correctly. Only the Guest wifi networks would be tagged, so port 4 would have tagged and untagged packets flowing.
I am using the guest functionality on my N66U on both the 2.4 and 5GHz bands, as well as my normal network in both bands. I needed to put a separate access point deep in my house to extend my wireless coverage. The AP allows 4 SSIDs per radio, and can also do per-SSID vlan tagging. I am wanting to extend my guest network to the access point by tagging the guest network SSID with a vlan ID, then having the N66U know that vlan as the guest network to prevent access to the rest of the network.
After reading a few threads about the topic and testing, it looks like the guest network coexists with the main network using the same IP address range.
Another thread was close:
http://forums.smallnetbuilder.com/showthread.php?t=14164
but the end solution looks based on the wireless interface ID, not vlan, and simply creates a separate subnet for the guest to provide better protection.
So, I'm wondering if there is any way to define a guest network by vlan so that traffic coming from other devices can be properly handled by the router.
EDIT below:
Let me see if I can draw a picture.
Code:
Internet ----- N66U -------port 4------- AP
| |
Wireless2.4 Wireless2.4
Wireless5 Wireless5
Guest2.4 Guest2.4
Guest5 Guest5I was hoping that the N66U created a vlan for the guest network, and I could use the same vlan tag on the AP. The tagged packets would then flow across port 4 with their existing tags and the N66U would handle them correctly. Only the Guest wifi networks would be tagged, so port 4 would have tagged and untagged packets flowing.
Last edited:
