Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[jonahwicky]

I need some expert advice on setting up and securing the guest zone on my home network.  I tried searching but wasn't able to find my specific issue.

My DIR-655 is behind an AT&T Uverse RG3801 residential gateway.  The RG3801 serves the wired clients on my network.  Since it's only 802.11g, I use the DIR-655 for wireless clients.  The DIR-655 is connected to the RG3801 LAN port to LAN port, according to the setup directions I've found on the internet.

The main zone works fine, but the guest zone won't connect to the internet unless I check the box to Enable Routing Between Zones.  From what I've read, this is because the guest zone ties directly to the WAN port.  Doing this defeats the point of having a guest zone by exposing my LAN to anyone connected to the guest zone.

Is there another way to set up the devices to provide the privacy I need?  Is there any work-around for keeping the guest zone secured?

Thanks for any advice or suggestions.

[FurryNutz]

Link>Welcome!

• What Hardware version is your router? Look at sticker under router.
• Link>What Firmware version is currently loaded? Found on the routers web page under status.
• What region are you located?

How do you have the DIR-655 connected to the Uverse modem? WAN or LAN port. Bridge Mode vs Relay vs Access Point (AP) / Routers vs Dedicated Access Points (AP)

Yes, GZ requires the use of the WAN port on the 655 as it connects to the WAN port and bypasses any of the LAN side networking and allows GZ access directly to the internet with out any router processing or access to the LAN side, unless you enable routing between zones. Then GZ and the LAN side can communicate between each other.

Normal preferred methods for connecting these routers to ISP modems is to have an ISP modem with out any built in router features. Using a stand alone modem is preferred.

• If this modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT and How NAT Works. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged (Uverse modems) then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ.

[jonahwicky]

Thanks for the reply.  For the router info, I have version A4, firmware 1.37NA, located in the U.S.

The DIR-655 is connected to the Uverse gateway via LAN port.

As you noted, the Uverse modem does not have a bridge mode, but it does have a DMZ.  If I put the DIR in the DMZ, does it connect via the WAN port (and thereby enable a secure GZ)?

My intention is to use the DIR solely for wifi.  I've turned off the Uverse wifi since it's only 802.11g.  I believe it's best to let the Uverse modem handle the TV STBs directly rather than running them thru an additional device (the DIR).  The Uverse modem also manages another wireless A/P (a DAP-1522).

I need the DIR's wifi to increase coverage and to provide a GZ.  At the moment, the only other option I can think of is to protect the network shares with a password.  That would work fine for me, but my wife would not be happy.

[FurryNutz]

Thanks for the reply.  For the router info, I have version A4, firmware 1.37NA, located in the U.S.

The DIR-655 is connected to the Uverse gateway via LAN port.

As you noted, the Uverse modem does not have a bridge mode, but it does have a DMZ.  If I put the DIR in the DMZ, does it connect via the WAN port (and thereby enable a secure GZ)?
Yes it should.

My intention is to use the DIR solely for wifi.  I've turned off the Uverse wifi since it's only 802.11g.  I believe it's best to let the Uverse modem handle the TV STBs directly rather than running them thru an additional device (the DIR).  The Uverse modem also manages another wireless A/P (a DAP-1522).

I need the DIR's wifi to increase coverage and to provide a GZ.  At the moment, the only other option I can think of is to protect the network shares with a password.  That would work fine for me, but my wife would not be happy.