AP Settings for Secure Networks

[Gordo_GT]

Hi everyone, 

is there a way to achieve the 3 goals below? I’m looking for literature or tutorials. 

• 1) have a dedicated network for smart home devices (i.e. thermostat, printer, smart lock, garage door, etc.); to broadcast only on the 2.4 band. The goal is if one of these devices were to be hacked, they will be segregated from the main network 
• 2) have a dedicated network for my main devices (laptop, iPhone, etc.)
• 3) have a dedicated guest network that will allow guests to use internet in the house but not be able to interact with networks 1 and 2 above

Current setup: Fiber ISP > Ubiquiti EdgeRouter X modem > ICX-7150 Switch > pair of R510 APs

My settings are currently stock, meaning that they haven’t changed since the initial setup by the Amazon rep/contractor. 

[Vásquez_Fer]

Hi @Gordo_GT 

Hope you are doing well ! 

I have some links and videos that can definitely help you on this!

1 and 2 -For dedicated network '2.4G' or '5G' here is a short guide. 

Creating a New Wireless WLAN (SSID)

https://community.ruckuswireless.com/t5/RUCKUS-Support-for-Lennar-Homes/Creating-a-New-Wireless-WLAN...

https://www.youtube.com/watch?v=JYONV1q1Zws&t=149s

https://www.youtube.com/watch?v=L_oAReVK1qo&t=22s

3-For guest Access I will leave a short guide 

https://docs.commscope.com/bundle/unleashed-200.9-onlinehelp/page/GUID-324C4A62-20E4-4FB4-8991-FD99C...

Unique Password ( guest WLAN ) 

https://www.youtube.com/watch?v=Hr1OxK9AG0s

guest pass generation ( Guest WLAN ) 

https://www.youtube.com/watch?v=KuPfDhreW90

Best Regards 

Fernando Vasquez 

[Gordo_GT]

Thank you for the reply and the resources. I will study and review them in greater detail. As for the security aspect, is there anything else that I should look into or is it as simple as setting up the the 3 different networks? My main concern is one of the smart devices being compromised (weakest link). 

[Vásquez_Fer]

Hi @Gordo_GT 

Basically I listed a way to separate 2.4g and 5g and 2 ways to create a wlan guest, the rest of the work is up to you.

When it comes to network security, it's a pretty broad subject.

What I always recommend is not to compromise the network with  (strange) sites  or viruses that may affect your devices.

Best Regards 

Fernando Vasquez 

[Gordo_GT]

Makes sense. Thanks again for the information. I will do some research down the line.