-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 El 2019-02-04 a las 09:03 -0500, James Knott escribió:
On 02/04/2019 07:56 AM, Per Jessen wrote:
I don't think that using different networks at home is the appropriate way, limiting functionality. Hmm, I would say it is both easy and appropriate - with DHCP it is easy to dish out the appropriate addresses and the firewall is easily set up to provide different privileges depending on the subnet. For instance, any unknown (undefined) device on my network is given addresses in a separate range, and given very limited access. This is for friends visiting with mobile devices. Similar with our VoIP devices.
Many home routers support guest WiFi, which only allows access to the Internet.
I just tried mine. It offers 3 or 4 guest keys. I activated #1, connected my other laptop to it, and could ping any host in my lan, could ssh to my desktop machine just fine. :-(( The only advantage is not giving them my main password, and changing to another when the guest leaves. So, don't assume guest wifi is isolated. The only thing mine does is something the router calls "isolate clients" (activated), disable WMM advertise, enable WMF, and limit the number of clients. - -- Cheers Carlos E. R. (from openSUSE Leap 15.0 x86_64 (Minas Tirith)) -----BEGIN PGP SIGNATURE----- iJIEAREIADoWIQQt/vKEw5659AgM/X2NrxRtxRYzXAUCXFjrDxwccm9iaW4ubGlz dGFzQHRlbGVmb25pY2EubmV0AAoJEI2vFG3FFjNccfIA/iqbPQma/zkHBe38BLg/ fecvsN342QMF39pD40buFc6WAP9n+EbQ+Trn6WPIoNH4gcHpbZEEZ0hToSr9iyda 8TTPQQ== =vX79 -----END PGP SIGNATURE-----