Benefits of running 2 Wi-Fi networks from the same router? What are the downsides? (I don't know if there is a better community for this question)
Benefits of running 2 Wi-Fi networks from the same router? What are the downsides? (I don't know if there is a better community for this question)
I am worried that there is not really a benefit of doing that, just more noise and energy consumption.
Energy consumption is essentially the same, as it's using the same radios.
For what it's worth, I have several SSIDs, each on a separate VLAN:
(to remotely access home automation stuff, I use Home Assistant via a Tailscale VPN)
Most of these have both 2.4Ghz and 5Ghz enabled, with band steering enabled to (hopefully) convince devices to use 5Ghz when possible.
This is on a TP-Link Omada setup with 2 x EAP670 ceiling-mounted access points. You can create up to 16 SSIDs I think.
How do you accomplish this isolation since they're on the same subnet/broadcast domain? Is it a feature of the hardware you're using?
A lot of access points, even consumer-grade ones, have this option. It's usually accomplished via predefined firewall rules on the access points themselves.
Consumer-grade access points usually let you have just one isolated guest network, whereas fancier ones (Omada, Unifi, Ruckus, Aruba, etc) usually let you enable isolation for any SSID (ie the "guest network" is no different from any other SSID)
Unifi out of the box settings.
For Unifi devices you setup a Virtual Network then assign the guests to that. https://help.ui.com/hc/en-us/articles/115000166827-UniFi-Hotspot-Portal-and-Guest-WiFi
Ooh I like the idea of "no Internet." I do trust all of those devices (open source), but they could still be pwned.
That was an amazing read. Thank you.
What do you say is the use case for separating guest Wi-Fi with the more "private" stuff on your network?
As far as I understand... Basically all communications, even inside a network, are encrypted... So I guess you do that to avoid someone trying to exploit some vulnerability?
LOL, oh no.
Even internet traffic isn't encrypted by default.
Sadly TCP/IP isn't encrypted.
I think the main benefit is that Guests devices on your network can't find and exploit your own devices.
Remember that once you give the password out, they likely have the password from now on. They will always have access until you change the password.
No, a lot of local traffic is not encrypted, especially residential. No, residential probably doesn’t use much authentication or separation of privileges.
I don't want my guests to be able to access my home server or Omada controller for example, or spread malware (their phone may have malware without them even knowing). Also, I give the guest wifi to people other than friends, like contractors. Phone reception is horrible at my house so I give them the wifi so they can use wifi calling.