Firewall Rules for wifi? bthomehub & ubiquti ac lr

alexx · 16 Sep 2016 at 15:11

Hi all, I've just setup my AC LR and the interface ect seems great.

Other than a better signal everywhere my other requirement is to separate guest access from my access as well as throttling the network and capping ports to prevent torrent downloads ect.

I've created a separate access point and limited the speeds which is working great - I just need to setup firewall rules for that specific user group / wifi connection..

I've got a BT homehub but suspect I'm going to need a better router - does anyone know if the unifi router allows a plug and play solution for me to manage my unifi user group and firewall rules together easily?

bledd · 16 Sep 2016 at 15:16

Our of interest, what kind of guest environment is it?

Will the guest network also have a password set on the SSID?

alexx · 16 Sep 2016 at 15:27

It's not a guest environment setup using what unifi call a "guest" it's basically just a separate SSID and password on that access point - it allowed me to simply give any traffic through that ssid a "user group" which allowed for a limited upload/download" but that was the only settings the access point offered

bledd · 16 Sep 2016 at 15:52

No I mean who will be using it...

If it's a coffee shop for example, then the torrent limiting thing is more important.

Or if it's for when friends come over and some internet for the to use, then I'd just stick to the built in bandwidth limiter for the second SSID.

I'm very familiar with the Ubiquiti controller

Fishing for further info before recommending options etc.

alexx · 16 Sep 2016 at 17:22

Ahh sorry my bad.. it's for my home network - basically I've got a lodger and planning on getting another or maybe airbnbing a room and don't really have control over that person / user to tell them not to so I'd rather just prevent it as I'm assuming legally I'm responsible for the usage of my internet connection?

I've had a look at the homehub but it's only got port forwarding options and no blocking.. I've also had a look at the ubiquti hardware but can't seem to find any answers for what I'm after.

OR am I simply overthinking it all?

EDIT*

I've got a private internet access vpn account - maybe I could set the wifi ssid to use that or similar so the traffic is private?