Set up an isolated network by configuring a separate subnet or VLAN within your existing network settings.
Set up an isolated network by configuring a separate subnet or VLAN within your existing network settings.
Many helpful responses were shared, thank you! I’m new to VLANs, so this could be something worth thinking about later. I’m considering a simpler configuration and opting for the Deco mesh guest network for both personal and business visitors.
We currently have a large space upstairs (10,000 sqft) intended for future residential or warehouse use, and a similar-sized area downstairs (10,000 sqft) used for business and commercial activities that are already wired with Cat6 and the existing mesh system.
What do you think about adding an Airport router in bridge mode? It would provide a public guest network with an invisible 5GHz network. I’d like to keep the mesh Wi-Fi for personal use, while allowing the business to have a custom SSID (mybusiness.net) that turns off after hours.
I’m not sure if this adds too much complexity, but I can manage the channels myself. Since we’re in a downtown area with limited Wi-Fi competition—thanks to the brick buildings and ample space—I believe it’s a good idea. The signal strength is manageable, and manual channel adjustments will help.
Your support has been really appreciated!
This approach would be easier to manage and execute (for future reference) with a system like UniFi or similar. If you already have the Ethernet setup, it simplifies placing PoE APs connected to a PoE switch and/or UDM-Pro/SE. The entire setup is ready to handle VLANs and schedule multiple SSIDs. You could run an AirPort as an access point, but I’m uncertain it would provide strong coverage for many simultaneous connections. Also, the AirPort Extreme doesn’t support AP isolation, so all devices can see each other. Hiding a network name isn’t a real security feature—it’s easily discoverable if someone is determined to find it.