HAP AX3, guest wifi

RouterOS Wireless Networking
1

Hello,
I am new to mikrotik. Firmware/OS is now 7.10. I used the quick setup to make a guest wifi/lan (works). I was just wondering which method mikrotik uses (default) to isolate the guest wifi from the lan. There’s just one bridge, guest ip-range is the same as for the LAN. Sorry for being a noob ( for now.. :slight_smile: )

Greetz!

2

I haven’t checked but if it does isolate, it could be in firewall using interface corresponding to guest wifi.

3
  • Use a different bridge for guests
  • Add a DHCP to guest bridge and a new IP range
  • Add rules to firewall to block the LAN access from guest IP range/guest bridge or add routing rule to do the same
4

@FurfangosFrigyes
a second bridge is usually not advised unless there is a really complex setup.
Guest network is not considered being part of that category.

@pakikje
It seems to be in help pages:
https://help.mikrotik.com/docs/display/ROS/Quick+Set

Guest network: Useful for house guests who don’t need to know your main WiFi password. Set a separate password for them in this option. Important! Guest users will not be able to access other devices in your LAN and other guest devices. This mode enabled Bridge filters to prevent this.

Bridge filters are being used to do the isolation. Guest to LAN and Guest to Guest should be blocked. Only Guest to WAN will be possible if I understand it correctly.

5

Yeah, leave it to MT to enable an advanced feature, way beyond a new persons understanding of RoS for a default quickset feature LOL.
Im with the others in that learning RoS
a. use a different subnet
choices are
1 - use a second bridge
2 - start learning vlans and use two vlans for your network ( bridge does just bridging and no dhcp which is how god designed RoS LOL )