Forum Thread

Guest network and Internet of Things device security.

5,621 1,257 June 17, 2020 at 10:06 PM
Ok, a friend of mine bought some crummy Chinese HD IP Cameras that he wants to install in his second home. From the reviews I read, I advised returning them as they look like real security risks imo, but it is what it is. He also unfortunately does not want to run a PC with Blue Iris.

Regardless, since he wants me to install them for him, can one use the guest network of a Netgear r6700v3 router with stock firmware to isolate the cameras away from the rest of the home network with any degree of real safety\security? There is an option to not allow guests to see each other or access the local network but I am not sure how that works security wise or wrt access control or whether that puts the guest network on a separate segment (tend to doubt it). Trying to avoid using a second router, which would be another approach.

3 Comments

1

Sign up for a Slickdeals account to remove this ad.

This comment has been rated as unhelpful by Slickdeals users
Joined Jul 2003
L10: Grand Master
34,667 Posts
6,164 Reputation
#2
Quote from YanksIn2009
:
Ok, a friend of mine bought some crummy Chinese HD IP Cameras that he wants to install in his second home. From the reviews I read, I advised returning them as they look like real security risks imo, but it is what it is. He also unfortunately does not want to run a PC with Blue Iris.

Regardless, since he wants me to install them for him, can one use the guest network of a Netgear r6700v3 router with stock firmware to isolate the cameras away from the rest of the home network with any degree of real safety\security? There is an option to not allow guests to see each other or access the local network but I am not sure how that works security wise or wrt access control or whether that puts the guest network on a separate segment (tend to doubt it). Trying to avoid using a second router, which would be another approach.
Unless you flashed the router with tomato or DDWRT so that you KNOW it will keep stuff segmented, I'd opt for a 2nd router.
What if anything is going on the main SSID?
Is this a vacation home, that his phones, laptops, etc... will be on when using the property?
0
0
0
0
Reply
worshipTHANK YOU to those whom have fought and are fighting for our FREEDOMworship

Please Support Autism Awareness [autismspeaks.org]
Yahoo!Yahoo! 7/11/2009
This comment has been rated as unhelpful by Slickdeals users
Joined Oct 2010
L9: Master
5,621 Posts
1,257 Reputation
Original Poster
#3
Quote from DC
:
Unless you flashed the router with tomato or DDWRT so that you KNOW it will keep stuff segmented, I'd opt for a 2nd router.
What if anything is going on the main SSID?
Is this a vacation home, that his phones, laptops, etc... will be on when using the property?

2nd home while he tries to sell his home in NJ...He was in the process of moving and getting the NJ home ready for sale but got caught in NJ during the lock down.

So his new home has the router and internet service with kasa and alexa\amazon devices attached currently. He is sending me the cameras as he now figures he wants a little piece of mind, but is doing it the quick and dirty way. Once he gets here, he will bring his main laptops and desktops with him and they will be on the same router along with his phone and tablets and everything else. Don't really want to go through the trouble of setting up a second router for him just because of a couple of cheap Chinese hacked cameras he insists on using so figured maybe I could leverage the guest network which is currently not enabled. Flashing his router with DDWRT is not really an option given his current setup and the fact that it is not my router.
0
0
0
0
Reply
Last edited by YanksIn2009 June 18, 2020 at 11:29 AM.
This comment has been rated as unhelpful by Slickdeals users
Joined May 2004
L42: The Ultimate Answer
1,577 Posts
1,033 Reputation
#4
According to Netgear [netgear.com], the Guest Network option isn't available when the router is in access point mode, which would lead me to believe that guest network isolation is accomplished with either firewall rules or VLANs since those are functions of a router. Seems like either would be secure enough to handle what you're looking for.
0
0
0
0
Reply
Page 1 of 1
1
Join the Conversation
Add a Comment
 
Link Copied to Clipboard