Messages

I have a rooted AC68U. So it might be possible to route the guest clients through a different ethernet port... but I'd still need an extra ethernet port on my firewall.

An extra AP seems like overkill, but if that's the only reasonable way to do it...

I could take my wifi AP out of AP mode, in that mode it does have vlan support...but then I'm sure it would add a lot of overhead that I don't want.

I want to separate my IOT devices from the rest of the devices on my network. I don't entirely trust these cheap lightbulbs. The router is in AP mode, but doesn't seem to isolate the wireless networks from one another.

Apologies if this is a silly or obvious question. I'm new to this. I searched for 'AP' but it returned every word with 'ap' in, and the WiFI articles are all for physically attached wifi adaptors.

My network is currently like this:

Guest WiFi─Router in AP mode──Ethernet──OPNsense──Internet
Main WiFi  ─┘

First I tried to use vLANS but learned they were unsuitable. I considered firewall rules, but then realised any device could give itself a different IP address to get access it otherwise should not.