Wireless Client Isolation / Network Question...

wsiono

Distinguished
Sep 22, 2009
52
0
18,630
Here's the layout :

Internet / ISP / ADSL2+
|
D-Link Wired ADSL2+ Modem/Router - - Wire connected computers
|
Wireless Router with Wireless Client Isolation - - Rest of house connected through wireless

My question, as far as i can articulate it with my currently rudimentary understanding of networking... stuff is :

Does Wireless Client Isolation do anything to protect the wired clients on the D-Link Modem/Router?

Hypothetical : If a client connects to the Wireless Router (with isolation) that has a virus which can spread through networks, does isolation prevent the virus from spreading to the clients connected to the wired D-Link modem/router?

The context : My mom is retired, travels with her computer, and connects to a huge variety of hotspots all over the place. I currently have some systems connected to the D-Link Wired Modem/Router, and leave the wireless for guests, and some tablets. If she visits with a compromised system, with a network virus, how do i minimize the risks to the rest of the network?

Does wireless isolation do anything for wired clients at the modem/router? Does it do anything at all in this context?

 
Solution
I would suspect yes. Most guest network only allow connections between the guest network and the internet. If you wanted to protect between the machines on the guest wireless I am going to bet you are going to have to use a combination of the guest and the isolation.

This is very hard to say since there really is no formal standard and router manufacture vary a lot on how they handle this. Still most completely isolate the guest network machines. Some advanced ones allow the guest network to also have wired ports.

If you didn't have a ADSL router I would recommend one of the third part firmwares like dd-wrt since it can pretty much do any type of filtering you can think of.

wsiono

Distinguished
Sep 22, 2009
52
0
18,630


Thank you for the clarification! Much appreciate :)...

Could anyone provide a more verbose response? I'm trying to learn more about this stuff...
 
It varies a little between manufactures. All manufactures prevent wireless to wireless traffic with this option. SOME prevent wireless to wired also. This works ok when you have a single network device. It gets very complicated if you have multiple router/ap. This is why many devices limit the protection only between wireless. The wired ports in many cases can be the uplinks to the router which must be allowed or you break you network.

This seldom works in a enterprise network because you have many AP...ie wireless. You can protect wireless to wireless within a single AP but wireless to wireless between AP is allowed because it flows though the switch. Normally a feature like private vlan is used to solve this instead.
 
I would suspect yes. Most guest network only allow connections between the guest network and the internet. If you wanted to protect between the machines on the guest wireless I am going to bet you are going to have to use a combination of the guest and the isolation.

This is very hard to say since there really is no formal standard and router manufacture vary a lot on how they handle this. Still most completely isolate the guest network machines. Some advanced ones allow the guest network to also have wired ports.

If you didn't have a ADSL router I would recommend one of the third part firmwares like dd-wrt since it can pretty much do any type of filtering you can think of.
 
Solution