Messages

Thank you for the answers!

I always asked what RADIUS is for - now i might have a use case (and yes my motivation is also better setting up my home network in times of IoT devices regarding security).

For now I'll give VLANs a try - seems to be a big task to separate an existing network  ;)

No other possibilities to achieve this because I also wanted to use this for my wifi devices but my AP doesn't support VLANs... :-(

Yes all devices are connected to the same (managed) switch. Perhaps I need some kind of VLAN setup to achieve this?

I have two interfaces each with its own subnet and own purpose:

IF A: 10.10.10.0/24 - trusted clients
IF B: 10.10.20.0/24 - untrusted clients

My idea was to activate DHCPv4 on interface B so that new clients automatically belong to the subnet for untrusted clients.
If now I trust one client, that only can be configured by DHCP it will always be untrusted.
I tried to add static ARP entries for those trusted clients in DHCP settings of interface A but the trusted client always gets an ip address in the DHCP range of interface B.

Is it possible to have the idea of an untrusted client pool via DHCP on one interface and cherry pick the trusted DHCP clients to sort them in another subnet?