Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




69 posts

Master Geek


#265725 7-Feb-2020 11:34
Send private message

Hi,

 

I've set up a guest network, but it seems like the option to isolate clients doesn't work.
I'm on firmware version NF18ACV.NC.Vocus-R6B040.EN.
When connected via WiFi I can still see all other connected devices.

 

Anyone else encountered this issue?
I tried disabling then enabling the option and resetting the router, but neither fixed it.

 

Thanks!

 

 


Create new topic
483 posts

Ultimate Geek

Lifetime subscriber

  #2414142 7-Feb-2020 12:06
Send private message

Can you explain what you mean by 'isolate clients'?  What problem is this the solution to?





--

OldGeek.




69 posts

Master Geek


  #2414207 7-Feb-2020 13:16
Send private message

The Netcomm manual says:
Clients Isolation Select to prevent clients on the wireless network being able to access each other.

 

There's more about it on this site:
https://www.howtogeek.com/179089/lock-down-your-wi-fi-network-with-your-routers-wireless-isolation-option/

 

I want to restrict access for my IoT devices and guest devices, so they only have access to the internet and not the other devices on the network.

 

But now that I read it again, maybe the devices on the guest WiFi network can't see each other but they can see other connected devices such as the ones connected via ethernet?
Is that what this option enables, not total isolation from the rest of the LAN? Can anyone confirm please?

 

 

 

Thanks.


 
 
 
 


483 posts

Ultimate Geek

Lifetime subscriber

  #2414236 7-Feb-2020 14:18
Send private message

I looked at this some weeks ago and came to the conclusion that 'Client isolation' meant that every device had internet access only - ie no access to other devices on the LAN (wired or wireless).  So this would only work on a LAN if you have no communal devices such as printer/scanner etc.  The use of a 'guest' network allows a second (or more) SSID to be defined and used with devices for which internet access only is enforced.

 

A guest network exactly fitted my needs.  The purposes of this are to ensure that guests can connect but not see any of my devices.

 

As you can configure multiple guest networks, it would seem to me that you could define a 'guest' network (the SSID is configurable) for the exclusive use of your IoT devices (or any device where network use is internet-only and isolated from devices connected to your main SSID(s).  You can turn on 'isolate clients' for each 'guest' network while leaving it off for your main network(s), ensuring that your IoT devices cannot see any other devices on your guest network.

 

Having said all this, this is expertise gained purely from reading the NF18ACV manual augmented with related Google searches.  I do not have any real-world expertise.





--

OldGeek.


29036 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  #2414291 7-Feb-2020 15:55
Send private message

It's been a while since I've tested that on a Netcomm but on all routers based on that chipset reference design the client isolation only works on the WiFi, it disabling L2 and L3 connectivity between devices connected to that SSID. It does not stop discovery of LAN devices on that same subnet (but did at one point when the feature was broken on a particular Netcomm software release).

 

 




69 posts

Master Geek


  #2414355 7-Feb-2020 18:27
Send private message

Thanks for your replies.
sbiddle:

It's been a while since I've tested that on a Netcomm but on all routers based on that chipset reference design the client isolation only works on the WiFi, it disabling L2 and L3 connectivity between devices connected to that SSID. It does not stop discovery of LAN devices on that same subnet (but did at one point when the feature was broken on a particular Netcomm software release).


 


Now that I'm home from work and able to test the behaviour, it does seem to the case. The feature ironically reminds me of the cone of silence in the tv show Get Smart where the Chief and Max can't communicate to each other but everyone else outside the contraption can.
I guess I'll have to look at getting some managed switches to set up VLANs.

29036 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  #2414370 7-Feb-2020 19:30
Send private message

Isolation between wired and wireless clients is always going to be a challenge because you're having to bridge two different L2 networks so would need to use something such as a split horizon which is well beyond the capabilities of a router such as this.

 

 


Create new topic





Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Chorus completes the build and commissioning of two new core Ethernet switches
Posted 8-Jul-2020 09:48


National Institute for Health Innovation develops treatment app for gambling
Posted 6-Jul-2020 16:25


Nokia 2.3 to be available in New Zealand
Posted 6-Jul-2020 12:30


Menulog change colours as parent company merges with Dutch food delivery service
Posted 2-Jul-2020 07:53


Techweek2020 goes digital to make it easier for Kiwis to connect and learn
Posted 2-Jul-2020 07:48


Catalyst Cloud launches new Solutions Hub to support their kiwi Partners and Customers
Posted 2-Jul-2020 07:44


Microsoft to help New Zealand job seekers acquire new digital skills needed for the COVID-19 economy
Posted 2-Jul-2020 07:41


Hewlett Packard Enterprise introduces new HPE GreenLake cloud services
Posted 24-Jun-2020 08:07


New cloud data protection services from Hewlett Packard Enterprise
Posted 24-Jun-2020 07:58


Hewlett Packard Enterprise unveils HPE Ezmeral, new software portfolio and brand
Posted 24-Jun-2020 07:10


Apple reveals new developer technologies to foster the next generation of apps
Posted 23-Jun-2020 15:30


Poly introduces solutions for Microsoft Teams Rooms
Posted 23-Jun-2020 15:14


Lenovo launches new ThinkPad P Series mobile workstations
Posted 23-Jun-2020 09:17


Lenovo brings Linux certification to ThinkPad and ThinkStation Workstation portfolio
Posted 23-Jun-2020 08:56


Apple introduces new features for iPhone iOS14 and iPadOS 14
Posted 23-Jun-2020 08:28



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.