479
edits
Changes
Template:Networking rut configuration example vlan guest wifi (view source)
Revision as of 11:13, 2 July 2020
, 11:13, 2 July 2020Created page with "__TOC__ ==Introduction== Sometimes there is a need to share your internet connection with visitors. It is not secure to share local area network with guest’s. They might ac..."
__TOC__
==Introduction==
Sometimes there is a need to share your internet connection with visitors. It is not secure to share local area network with guest’s. They might accidentally download a malicious program or connect an already infected phone or laptop to the network. Also if you have lots of home smart devices (IoT), they tend to be far more vulnerable than computers. That means that if they are connected to the main network and hacked, intruders can get into your other devices. One of the possible solutions is to create Guest WiFi separated by VLAN. This guide will show you how to do this for RUT devices.
==New wireless access point==
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2> [[File:Networking rut2 configuration examples vlan guest wifi 3 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Login to the router's WebUI and navigate to the '''Network → Wireless''' page and do the following:
<ol>
<li>Create new '''Wireless Access Point''' (click '''Add''').</li>
<li>'''Enable''' the instance.</li>
<li>Enter '''SSID''' on '''General Setup''' tab.</li>
<li>'''Save''' changes.</li>
<li></li>
</ol>
</td>
</tr>
</table>
----
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking rut configuration examples vlan guest wifi 1 v3.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white>
Switch to '''Wireless Security''' tab
<ol>
<li>Select '''Encryption''' type.</li>
<li>Select '''Cipher''' type.</li>
<li>Enter '''Key'''.</li>
<li>'''Save''' changes.</li>
<li></li>
</ol>
</td>
</tr>
</table>
----
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking rut2 configuration examples vlan guest wifi 4 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white>
Wait for configuration to apply. Two Wireless Access Points should be enabled
<ol>
<li></li>
<li></li>
<li></li>
<li></li>
</ol>
</td>
</tr>
</table>
==New LAN==
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>
[[File:Networking rut configuration examples vlan guest wifi 3 v1.1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Navigate to the '''Network → VLAN → LAN Networks''' page. There create a new LAN by writing the '''Name''' and clicking '''Add''' button.
<ol>
<li>Enter a custom '''LAN name''' for the LAN network.</li>
<li>Click '''Add New''' button.</li>
<li></li>
<li></li>
</ol>
</td>
</tr>
</table>
----
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>
[[File:Networking rut2 configuration examples vlan guest wifi 7 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Then you will be automatically forwarded to the new configuration settings. Now apply the following configuration:
<ol>
<li>Fill in the '''LAN IP address'''.</li>
<li>Select '''IP netmask'''.</li>
<li>'''Enable''' DHCP server.</li>
<li>'''Save''' changes.</li>
</ol>
</td>
</tr>
</table>
==LAN to VLAN==
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>
[[File:Networking rut2 configuration examples vlan guest wifi 8 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Navigate to the '''Network → VLAN → VLAN Networks''' page and do the following
<ol>
<li>Select VLAN '''Port based''' mode.</li>
<li>Click '''Add''' button. The new VLAN (VLAN ID 2 will be created).</li>
<li>For '''VLAN ID 1''' set main Wireless Access Point name (example: “'''RUT_WiFi'''”) and '''LAN''' => “'''lan'''”.</li>
<li>For '''VLAN ID 2''' set Guest’s Wireless Access Point name (example: “'''Guest_WiFi'''”) and '''LAN''' => “'''lan_Guest'''”.</li>
<li>'''Save''' changes.</li>
</ol>
</td>
</tr>
</table>
==Results==
Wireless users connected to SSID: “'''RUT_WiFi'''”, will be assign to “lan”, and will get IP from main pool '''192.168.1.0/24'''.
Wireless users connected to SSID: “'''Guest_WiFi'''”, will be assign to “lan_Guest”, and will get IP from new pool '''10.10.10.0/24'''.
Guest hosts are unable to access any data from pool 192.168.1.0/24.
==Introduction==
Sometimes there is a need to share your internet connection with visitors. It is not secure to share local area network with guest’s. They might accidentally download a malicious program or connect an already infected phone or laptop to the network. Also if you have lots of home smart devices (IoT), they tend to be far more vulnerable than computers. That means that if they are connected to the main network and hacked, intruders can get into your other devices. One of the possible solutions is to create Guest WiFi separated by VLAN. This guide will show you how to do this for RUT devices.
==New wireless access point==
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2> [[File:Networking rut2 configuration examples vlan guest wifi 3 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Login to the router's WebUI and navigate to the '''Network → Wireless''' page and do the following:
<ol>
<li>Create new '''Wireless Access Point''' (click '''Add''').</li>
<li>'''Enable''' the instance.</li>
<li>Enter '''SSID''' on '''General Setup''' tab.</li>
<li>'''Save''' changes.</li>
<li></li>
</ol>
</td>
</tr>
</table>
----
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking rut configuration examples vlan guest wifi 1 v3.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white>
Switch to '''Wireless Security''' tab
<ol>
<li>Select '''Encryption''' type.</li>
<li>Select '''Cipher''' type.</li>
<li>Enter '''Key'''.</li>
<li>'''Save''' changes.</li>
<li></li>
</ol>
</td>
</tr>
</table>
----
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking rut2 configuration examples vlan guest wifi 4 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white>
Wait for configuration to apply. Two Wireless Access Points should be enabled
<ol>
<li></li>
<li></li>
<li></li>
<li></li>
</ol>
</td>
</tr>
</table>
==New LAN==
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>
[[File:Networking rut configuration examples vlan guest wifi 3 v1.1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Navigate to the '''Network → VLAN → LAN Networks''' page. There create a new LAN by writing the '''Name''' and clicking '''Add''' button.
<ol>
<li>Enter a custom '''LAN name''' for the LAN network.</li>
<li>Click '''Add New''' button.</li>
<li></li>
<li></li>
</ol>
</td>
</tr>
</table>
----
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>
[[File:Networking rut2 configuration examples vlan guest wifi 7 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Then you will be automatically forwarded to the new configuration settings. Now apply the following configuration:
<ol>
<li>Fill in the '''LAN IP address'''.</li>
<li>Select '''IP netmask'''.</li>
<li>'''Enable''' DHCP server.</li>
<li>'''Save''' changes.</li>
</ol>
</td>
</tr>
</table>
==LAN to VLAN==
<table class="nd-othertables_2">
<tr>
<th width=395; style="border-bottom: 1px solid white;></th>
<th width=700; style="border-bottom: 1px solid white;" rowspan=2>
[[File:Networking rut2 configuration examples vlan guest wifi 8 v1.png|border|class=tlt-border]]</th>
</tr>
<tr>
<td style="border-bottom: 1px solid white;>
Navigate to the '''Network → VLAN → VLAN Networks''' page and do the following
<ol>
<li>Select VLAN '''Port based''' mode.</li>
<li>Click '''Add''' button. The new VLAN (VLAN ID 2 will be created).</li>
<li>For '''VLAN ID 1''' set main Wireless Access Point name (example: “'''RUT_WiFi'''”) and '''LAN''' => “'''lan'''”.</li>
<li>For '''VLAN ID 2''' set Guest’s Wireless Access Point name (example: “'''Guest_WiFi'''”) and '''LAN''' => “'''lan_Guest'''”.</li>
<li>'''Save''' changes.</li>
</ol>
</td>
</tr>
</table>
==Results==
Wireless users connected to SSID: “'''RUT_WiFi'''”, will be assign to “lan”, and will get IP from main pool '''192.168.1.0/24'''.
Wireless users connected to SSID: “'''Guest_WiFi'''”, will be assign to “lan_Guest”, and will get IP from new pool '''10.10.10.0/24'''.
Guest hosts are unable to access any data from pool 192.168.1.0/24.