Hi,

Has anyone succeeded in making a mixed wired and wireless guest network? I'm failing so far
I have 3 VLANs trunked between my G2260 switch & 2862ac router, one of which is to be my guest network.
On the router guest SSIDs I have member isolation checked, this stops WiFi to WiFi client traffic but guests can reach the router & out to the internet.
On the switch I have the guest ports and trunk port in a Private VLAN with port isolation on for the guest ports (but not the trunk port). This stops wired guest to wired guest traffic but the router can still be reached.

The problem is WiFi guests can see all wired guests and wired guests can see all WiFi guests. The only way I have found to stop that is to check member isolation for the trunk port in the private VLAN on the switch. But if I do that the wired clients cannot reach the router & internet.

How can I stop the router routing between the trunk port (P1) and Wifi for this VLAN?

Thanks in advance.

PlayerOne wrote:
How can I stop the router routing between the trunk port (P1) and Wifi for this VLAN?

Use different VLANs for wired and wireless guests?

That's my thinking too if nothing better turns up. Allegedly (unconfirmed) Asus routers have a checkbox to extend client isolation to hard ports, hope is fading that it's there somewhere yet to be found in DrayTek.
Bit of a PITA having yet another subnet & VLAN to manage. I lied in my first post for simplicity, I'm actually up to 5 VLANs which already feels faintly ridiculous for a home office environment.

Oh well, keeps the grey cells from rusting

Thanks hornbyp