this post was submitted on 04 Mar 2024
69 points (94.8% liked)

Selfhosted

40347 readers
340 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

I am worried that there is not really a benefit of doing that, just more noise and energy consumption.

you are viewing a single comment's thread
view the rest of the comments
[–] BearOfaTime@lemm.ee 5 points 8 months ago (11 children)

Guest devices can't communicate with other guest devices

How do you accomplish this isolation since they're on the same subnet/broadcast domain? Is it a feature of the hardware you're using?

[–] dan@upvote.au 9 points 8 months ago (4 children)

A lot of access points, even consumer-grade ones, have this option. It's usually accomplished via predefined firewall rules on the access points themselves.

Consumer-grade access points usually let you have just one isolated guest network, whereas fancier ones (Omada, Unifi, Ruckus, Aruba, etc) usually let you enable isolation for any SSID (ie the "guest network" is no different from any other SSID)

[–] BearOfaTime@lemm.ee 1 points 8 months ago* (last edited 8 months ago) (3 children)

Isolated guest networks I get, but isolating guests from other guests on the same subnet/isolated net is what I haven't seen.

[–] jemikwa@lemmy.blahaj.zone 2 points 8 months ago

If there's an option on the AP to not permit link local routing within a vlan/ssid, that will force all traffic up to the firewall. Then you can block intrazone traffic at the firewall level for that vlan.
I've seen this in Meraki hardware where it's referred to as "client isolation". Ubiquiti might be able to do this too.

load more comments (2 replies)
load more comments (2 replies)
load more comments (8 replies)