isolating 3 different users on a mesh system

[Skyzoomer]

I have a friend that needs mesh coverage for her large 2 story house, since a single router (Netgear Nighthawk R7000-100NAS) doesn't do it. There are 3 different families living in the house.

Can a mesh system allow 3 different families to each have their own network and be completely isolated from each other, so one family cannot view or access data for a different family on a different network? If so, any suggestions for which mesh system?

 

[SamirD]

This is actually an idea setup for just putting 3 different routers, one for each family, behind the main router. This way, they can control their own setup and one family will not be connected with another.

Mesh systems are designed for cohesive coverage of a single network. There is no reason to use one of these as a backbone when you actually want the networks to be separate.

 

[VirtualLarry]

Yeah, unless you want to setup the "primary LAN" as a mesh network (mesh back-haul), and then on each mesh node, connect via wired, a router, for each family. But I'm not sure how easily it would be to simply bypass "their" router, and access the mesh directly.

Maybe someone with more wifi experience can chime in? I'm not sure if Mesh supports VLANs, like wired networks do.

https://community.cisco.com/t5/wireless-security-and-network/mesh-trunking/td-p/2385628
https://community.cisco.com/t5/othe...cts/mesh-point-point-with-vlan-s/td-p/2142269

 

[extide]

I'd do it with different SSID's on different VLANs for each family -- and all terminating into something like pfsense. Of course you'd need wifi AP's that could do that, but if you were able to hardwire all the AP's then you could use standard stuff and not "mesh" wifi. Ubiquity Unifi would work great for something like this.

 

[Skyzoomer]

SamirD, VirtualLarry, extide:

Thanks for your responses. The owner of the house says she absolutely does not want any wiring run since renovations will be done but she has not finalized the plans yet.

Using only wireless, can 3 isolated networks on the same cable modem be set up? With the cable modem downstairs at one corner of the house, a mesh system that can provide signal hopping to distant rooms on the 2nd floor seems ideal, though maybe not possible for the 3 isolated networks.

I'm a novice at this so thanks for the help.

 

[ch33zw1z]

You either have to physically separate the networks or logically using vlans. You could hypothetically use one main access point like a ubiquiti to get the signal to each area (maybe), 3 networks SSID's each with a vlan, then connect the mesh devices to the network coming from the main access point.

A task like you require will take some skill and possibly trial and error if you're a novice

 

[JackMDS]

One can also do an ""Outrages"" thing, like having three separate accounts with three separate simple Networks.


😎

 

[Skyzoomer]

You either have to physically separate the networks or logically using vlans. You could hypothetically use one main access point like a ubiquiti to get the signal to each area (maybe), 3 networks SSID's each with a vlan, then connect the mesh devices to the network coming from the main access point.

A task like you require will take some skill and possibly trial and error if you're a novice

It will take me some time to research and try to understand what you suggested. Thanks for the help.

 

[Skyzoomer]

One can also do an ""Outrages"" thing, like having three separate accounts with three separate simple Networks.
😎

Would that prevent one family from seeing stuff on another family's network? If so, could you explain in more detail or maybe provide a link that does? Thanks!

 

[JackMDS]

That is involved talking to the ISP and ask if possible to get three IPs.

Then, each IP can connect to one Apt with a Modem/Router and thus each "Family" would be separated from the others.


😎

 

[Skyzoomer]

That is involved talking to the ISP and ask if possible to get three IPs.

Then, each IP can connect to one Apt with a Modem/Router and thus each "Family" would be separated from the others.
😎

Thanks for the explanation. I'll pass on that one.

For only 2 families, I believe a guest network will isolate the guest from the main network. Is there such a thing as two guest networks?

 

[VirtualLarry]

There exists Wifi routers with multiple Guest Networks. I forgot which, offhand, but I know that I've seen that capability.

 

[mxnerd]

I think most modern router / mesh wifi systems will let you create multiple SSIDs. Some even offer different IP ranges and network isolation.

Best way to verify is to download & read individual product's pdf manual.

 

[Skyzoomer]

There exists Wifi routers with multiple Guest Networks. I forgot which, offhand, but I know that I've seen that capability.

Only found 2.4GHz and 5.0GHz guest networks on one router. Problem with that is a family will not have all 5GHz capable devices. Need two 2.4GHz guest networks.

Also, having one router does not solve the initial problem of whole large house coverage.

Stumped.

 

[Skyzoomer]

Finally found the solution to my problem (I think).

The Netgear Orbi Pro system can have admin, employee and guest networks. Also provides the mesh system I was looking for. Expensive though since a 3 pack runs about $500 on amazon.

The owner of the house may not want to pay that much but I'll just tell her it's the only system that I could find for 3 isolated networks plus mesh for whole house coverage.

 

[ch33zw1z]

Finally found the solution to my problem (I think).

The Netgear Orbi Pro system can have admin, employee and guest networks. Also provides the mesh system I was looking for. Expensive though since a 3 pack runs about $500 on amazon.

The owner of the house may not want to pay that much but I'll just tell her it's the only system that I could find for 3 isolated networks plus mesh for whole house coverage.

That seems like a good solution. The specs tout good speeds, coverage, and easy to use interfaces. If you go with that, come back and let us know how it goes