Configuring guest WiFi network

nims0c · June 10, 2015

My family is using one of the rooms in our house for Airbnb. I'd like to configure our WiFi network such that there's a guest zone that cannot access any devices on the primary network (specifically our NAS, even though it's already password protected).

We have a Sagemcom 2864 (modem, access point, etc. in one) from our ISP. Since the range is utter crap on this unit, I connected our D-Link DIR-825 router to it. I disabled the access point functionality of the Sagemcom unit and its DHCP server is enabled, whereas the DHCP server on the DIR-825 is disabled.

I set this up a while ago so I forget why I did it this way, but it worked for us. Now I tried enabling the guest zone on the DIR-825, but I can't load anything while connected to it without enabling "routing between zones". Unfortunately, ticking this box allows someone on the guest network to connect to the NAS, and presumably other devices on the primary network, if they have the passwords.

Is there a way to make the guest zone work without guests having such access?

EthanMcL · June 10, 2015

For security, I would personally get a new router and set it up on a new IP range.

d3sl91 · June 10, 2015

My family is using one of the rooms in our house for Airbnb. I'd like to configure our WiFi network such that there's a guest zone that cannot access any devices on the primary network (specifically our NAS, even though it's already password protected).

We have a Sagemcom 2864 (modem, access point, etc. in one) from our ISP. Since the range is utter crap on this unit, I connected our D-Link DIR-825 router to it. I disabled the access point functionality of the Sagemcom unit and its DHCP server is enabled, whereas the DHCP server on the DIR-825 is disabled.

I set this up a while ago so I forget why I did it this way, but it worked for us. Now I tried enabling the guest zone on the DIR-825, but I can't load anything while connected to it without enabling "routing between zones". Unfortunately, ticking this box allows someone on the guest network to connect to the NAS, and presumably other devices on the primary network, if they have the passwords.

Is there a way to make the guest zone work without guests having such access?

Is your internet coming into the dlink through the WAN port or a standard ethernet port?

Most consumer Guest stuff is not going to be able to run guest mode properly without connecting your internet connection to the WAN port.

nims0c · June 10, 2015

For security, I would personally get a new router and set it up on a new IP range.

I don't know if my parents would be willing to invest in another router. Where are we vulnerable with the current setup?

Is your internet coming into the dlink through the WAN port or a standard ethernet port?

Most consumer Guest stuff is not going to be able to run guest mode properly without connecting your internet connection to the WAN port.

Using the WAN port worked.

The 2.4 GHz, 5.0 GHz, and guest networks all have Internet access, and I confirmed that the guest network cannot access the NAS even with the correct username and password.

Aside: Within the Sagemcom's configuration page, there's an "Internet + TV" setting with PPPoE selected from a dropdown menu (DHCP being the other option). I currently have DHCP servers enabled on both the Sagemcom unit and D-Link router, which I believe I had to do otherwise I couldn't connect to the Internet. I saw within the router's configuration page that I could set it up with PPPoE as well, as long as I can find the username and password. Would there be any point to this or should I leave the network as it is, since everything seems to be working?

EDIT: I'm noticing slowdowns and random connectivity issues now. Would this be related to PPPoE vs DHCP as I mentioned above?

EDIT2: I contacted my ISP for my PPPoE username and password and configured the router to use PPPoE. Everything still works and connectivity seems better!