Guest networks?

beachBOYken · 8 Mar 2015 at 21:00

Hi

I have an Asus n66u and use merlin firmwares. Since owning the n66u I have never really used any of its features.
Now I'm sure this is a basic feature found on all routers....

Guest network

Is it a good idea to create a guest network, I occasionally have visitors that want to use my Internet and I have to give them my pass code which I can never remember myself

Are there any disadvantages to adding guest networks, are they just as secure as private networks?

Thanks

MissChief · 8 Mar 2015 at 21:48

You can usually configure guest networks to allow (or block) access to certain things such as your NAS or any other part of your network but allow them online for example. If you have the option and you have a NAS or other devices connected then I'd recommend it. If it's purely for internet access then it's up to you but you can set it with a simple key that you can remember. Car reg+postcode or something.

pepp77 · 8 Mar 2015 at 21:49

I have Guest Network turned on. I have it set so that it is internet access only, no access to the locally shared files at all.

DJMK4 · 8 Mar 2015 at 22:25

Generally a guest network should be a different subnet/vlan with a default route out to the internet only. No access to any production or coporate networks

Terrier_Jimlad · 8 Mar 2015 at 23:12

If you're running Merlin's FW, the Guest network is put on a separate VLAN and cannot see anything internal, it's just given Internet access only by default (you can enable it if you're stupid enough)

APM · 9 Mar 2015 at 09:26

disable SSID broadcast for an extra bit of security too

jfish · 9 Mar 2015 at 10:40

pepp77 said:
I have Guest Network turned on. I have it set so that it is internet access only, no access to the locally shared files at all.

same as you also I went one step further and only allow 5Mbit/sec bandwidth to the guest network

beachBOYken · 9 Mar 2015 at 11:57

APM said:
disable SSID broadcast for an extra bit of security too

thanks guys I may give it a go then.

Are you saying disable my private network SSID broadcasting? I have read that its a good idea but others have said is not worth doing?

Danny091 · 9 Mar 2015 at 12:05

beachBOYken said:
thanks guys I may give it a go then.

Are you saying disable my private network SSID broadcasting? I have read that its a good idea but others have said is not worth doing?

Dont bother its actually less secure as devices start broadcasting they are looking for x network and this allows rogue access points to pretend to be network x. Also anyone that can run a basic program can see all the SSID's around them hidden or not. Just ensure you have a strong WPA2 password and you will be fine.

V_R · 9 Mar 2015 at 12:05

APM said:
disable SSID broadcast for an extra bit of security too

Thats just one of those myths that go around, doing this has no real value tbh.

beachBOYken · 9 Mar 2015 at 12:19

Danny091 said:
Dont bother its actually less secure as devices start broadcasting they are looking for x network and this allows rogue access points to pretend to be network x. Also anyone that can run a basic program can see all the SSID's around them hidden or not. Just ensure you have a strong WPA2 password and you will be fine.

V_R said:
Thats just one of those myths that go around, doing this has no real value tbh.

Thought so.

I will just have a go with the guest network.

cheers

V_R · 9 Mar 2015 at 12:52

Going back to your OP, I have the same router and FW combo, I use the guest network now and again for visitors etc, I acrually turn it on and off when needed.

I have it set to just let them have internet access and not to the local network, it works fine.

APM · 9 Mar 2015 at 13:53

beachBOYken said:
Thought so.

I will just have a go with the guest network.

cheers

is that right?

I turned my SSID broadcast off yesterday on the recommendation of a youtube vid I saw,oh dear.

beachBOYken · 9 Mar 2015 at 14:10

V_R said:
Going back to your OP, I have the same router and FW combo, I use the guest network now and again for visitors etc, I acrually turn it on and off when needed.

I have it set to just let them have internet access and not to the local network, it works fine.

What firmware version are you using, Im presently on 374.43 (Merlin Fork version) which is an old version but contains the latest security fixes).
I might try the merlins latest 378.51 soon.

APM said:
is that right?

I turned my SSID broadcast off yesterday on the recommendation of a youtube vid I saw,oh dear.

well you hear all different reasons, I think I will just leave it on, never had a problem and as long as you have a strong password.

V_R · 9 Mar 2015 at 15:02

I'm running the latest one .51 - I updated it yesterday.

No issues to report, but It was recommended to do a factory reset when upgrading to 378.50 from previous as there were quite a few big changes, just fyi if you decide to update.

beachBOYken · 9 Mar 2015 at 15:10

V_R said:
I'm running the latest one .51 - I updated it yesterday.

No issues to report, but It was recommended to do a factory reset when upgrading to 378.50 from previous as there were quite a few big changes, just fyi if you decide to update.

thanks yeah I always do a reset no matter what version I come from as I dont have to worry to much about losing loads of custom settings as I dont really change much.

I did try .50 but I had problems with my wireless printer but I have decided to hard wire that to solve any more issues. Other than that .50 was ok so I might move to 378.51 soon.

cheers