04-17-2018 04:55 AM
I have a guest network set up on my LAN, I do not however want guests to be able to browse to our servers or open file shares.
Can i add certain ip address that guests cannot see or connect to? e.g file servers
04-17-2018 05:03 AM
that's exactly what the "guest isolation" does.
In addition to that guest isolation, it's usually a good idea to stick the guest SSID on a different VLAN, and firewall it off from the main network.
04-17-2018 06:04 AM
04-17-2018 08:42 AM
If you create a second SSID with "guest isolation" enabled, they will get a DHCP-assigned IP address, and then isolated from the parent network. However, some services still tend to leak through (e.g. server discovery / mdns type things), hence why the use of a separate VLAN is a good idea.