Reply
New Member
Posts: 3
Registered: ‎02-28-2018

Guest Network, block certain servers

I have a guest network set up on my LAN, I do not however want guests to be able to browse to our servers or open file shares.

Can i add certain ip address that guests cannot see or connect to? e.g file servers

Highlighted
SuperUser
Posts: 20,365
Registered: ‎09-17-2013
Kudos: 5101
Solutions: 1455

Re: Guest Network, block certain servers

that's exactly what the "guest isolation" does.

 

In addition to that guest isolation, it's usually a good idea to stick the guest SSID on a different VLAN, and firewall it off from the main network.

New Member
Posts: 3
Registered: ‎02-28-2018

Re: Guest Network, block certain servers

Sorry for my ignorance, but what access does the guest have? they get an IP assigned from DHCP- after that can they explore the network? or are they restricted enough to only be able to access the web etc?
SuperUser
Posts: 20,365
Registered: ‎09-17-2013
Kudos: 5101
Solutions: 1455

Re: Guest Network, block certain servers

If you create a second SSID with "guest isolation" enabled, they will get a DHCP-assigned IP address, and then isolated from the parent network.  However, some services still tend to leak through (e.g. server discovery / mdns type things), hence why the use of a separate VLAN is a good idea.

Reply