Questions on creating guest network

eww34445

Honorable
Jun 4, 2013
22
0
10,510
So, I have a section of my home that will be rented as an apartment. I want them to have a guest network that is segregated from my network.

I have one of the newer Comcast Xfinity dual band gateways. It does not seem to have any option to create a normal guest network like used to be on most routers. They only seem to have the option for people to use the "xfinity wifi" where they input their Comcast credentials, but I am not happy with that option, as my renter will probably not have a comcast login.

Also, I should note that I do have phone service through the gateway as well.

I called comcast about this and they told me that I should set the 2.4ghz band up for the rental and I use the 5ghz band. But this has some problems. One is that some of my devices, like my printer are not 5ghz capable. And this just seems hokey to me. Also does this actually keep my data safe? Are the 2.4 & 5ghz bands actually totally segregated from one another? I thought they were just 2 different ways to access the same network.

Also, I had been using wifi range extenders to get the wifi to the apartment, so do those work with a guest network? There will need to be some extra device to get the wifi from the router to the apartment.

I know one solution would be to have separate service with another gateway installed into the apartment, but I would like to avoid that if possible.

So does anyone have any suggestions on how to accomplish this?

Ideally, I would still have 2.4 & 5ghz for my personal use and then at least 2.4ghz on the guest network. I am assuming I will need to buy my own modem and router (or have an 2nd router in addition to the comcast one?), but I was worried about the phone service part of it.

Thanks in advance!

 
Solution

kanewolf

Titan
Moderator
The only way to do what you want is to use a managed switch and two WIFI access points. Turn off WIFI on the Comcast device and use wired connections to a managed switch. Create two VLANs on the managed switch. One with your devices, access point and the upload to the internet. Create a second VLAN with just the guest WIFI source and upload only. By doing this you could also physically put the guest WIFI source in the apartment for optimum coverage.
 
Comcast have public guest wifi enabled on their systems, unless you disabled it, it is isolated form your network.

https://www.xfinity.com/support/internet/help-guests-get-online/

If you prefer more control, then you would have to ask Comcast to put their modem in bridge mode and you would then connect it to your own router that has guest wifi capabilities.
 

eww34445

Honorable
Jun 4, 2013
22
0
10,510


This seems like an awfully complicated setup. Couldn't I accomplish the same thing by removing the comcast equipment altogether and get my own modem and router instead?
With the router having guest network capability and also one that would work with the comcast phones?

The only part of that I'm not sure about is whether I could extend the guest network with range extenders.

I am wary of your solution, as I have never used managed switches, or set up a VLAN. So I'm just wondering if there is some benefit to your solution over what I described.
Thanks
 

eww34445

Honorable
Jun 4, 2013
22
0
10,510


The problem with this is that I don't know that the renters will have an Xfinity login, which is required for the comcast guest wifi.
But, yes, I guess the 2nd part could work, where I could use the comcast gear as just the modem and for phones, and then get another router and set the guest network from there.
Although, like I said in my post to kanewolf, I have never tried to extend a guest network with range extenders. Do you have any idea if that works?

 

kanewolf

Titan
Moderator


What a router with guest WIFI does is EXACTLY what I described. It just does it internally.

Personally, I believe that internet service should be up to the tenant. Why, because you open yourself to liability for everything that tenant downloads. If they are pirating movies or downloading kiddie porn, it is YOUR IP address that is tagged, not theirs. Provide the necessary cabling to allow them to purchase internet service. That is really the smartest answer.
 
Solution

eww34445

Honorable
Jun 4, 2013
22
0
10,510


Hmmm, wow, I hadn't thought about that. That's a good point.
I think this is enough info for me to make a decision. Thanks very much for your help.
Oh, and also, I did find out about extending the guest network, and that is possible with range extenders according to Netgear's FAQ page.
Thanks again!