Guest network isolation is not working

Technical Support for Routers
1

Hi everyone!

I have an MT-3000 with two 2.4GHz Wi-Fi networks, one internal and one guest. The first network is 192.168.2.0/24 and the guest network is 192.168.3.0/24. What I need is to allow internet access on both subnets, but I don’t want the guest devices to be able to reach the devices inside the main network. Right now, I can ping the devices in both directions, and this is not what I want. I have already checked the "AP Isolation" inside the guest network settings and the “isolate client” option inside LuCI (luci/admin/network/wireless). If you need any more info, please ask as I might have forgotten something.

Thanks!!

2

You should not need to do anything and it should work for you.

If you can ping each other subnet pls just post screenshots.

4

Hi, thank you for your response. As you can see from the screen below, from the guest network (3.0/24), I can ping the IPs on the private subnet (2.0/24). 192.168.2.1 is now working, which is correct because it is the IP of the router. I can also ping a guest device from my private subnet, but in this case, I don’t know if this is correct or not. I can also ping all the devices through the VPN from my guest subnet (I don’t have a screenshot of this case right now, sorry). Any ideas to solve this problem?

merge
merge676×1298 25.5 KB

5

I verifed on my MT3000 (firmware v4.7).

I turned on guest network, change to 192.168.3.1/24 subnet.
Change private network to 192.168.2.1/24 subnet.

My router works correctly. Here is what it should be

  1. On guest network (3.1/24) you cannot ping 2.1, 2.2 etc.
  2. On private network (2.1/24) you ccannot ping 3.1/24 network
  3. On guest network (3.1/24) you cannot ping each other (3.x)

This is achieved using the default config, nothing need to do in luci.

Kindly let me know what else you configured so that I can check.

6

This is exactly what i was expecting. Probably there are some bugs in the code. I have this router running no stop from a lot of time, and i have always updated the router keeping the config. maybe something stopped working. I will proceed resetting the router, and i will let you know.

1 Like
7

Ok, i reset the firmware from the web gui, and now the guest network is working properly!
Thank for your help!

1 Like