this post was submitted on 04 Mar 2024
69 points (94.8% liked)

Selfhosted

40173 readers
1067 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
 

I am worried that there is not really a benefit of doing that, just more noise and energy consumption.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 46 points 8 months ago* (last edited 8 months ago) (20 children)

Energy consumption is essentially the same, as it's using the same radios.

For what it's worth, I have several SSIDs, each on a separate VLAN:

  • my main one
  • Guest. Has internet access but is otherwise isolated - Guest devices can't communicate with other guest devices or with any other VLANs.
  • IoT Internet: IoT and home automation devices that need internet access. Things like Ecobee thermostat, Google speakers, etc
  • IoT No Internet: Home automation stuff that does not need internet access. Security cameras, Zigbee PoE dongle (SLZB-06), garage door opener, ESPHome devices, etc

(to remotely access home automation stuff, I use Home Assistant via a Tailscale VPN)

Most of these have both 2.4Ghz and 5Ghz enabled, with band steering enabled to (hopefully) convince devices to use 5Ghz when possible.

This is on a TP-Link Omada setup with 2 x EAP670 ceiling-mounted access points. You can create up to 16 SSIDs I think.

[–] [email protected] 5 points 8 months ago (11 children)

Guest devices can't communicate with other guest devices

How do you accomplish this isolation since they're on the same subnet/broadcast domain? Is it a feature of the hardware you're using?

[–] [email protected] 1 points 8 months ago (1 children)
[–] [email protected] 0 points 8 months ago (2 children)

I'm not seeing anything there that says guests can't see other guests - quite the opposite.

guests connected to your Hotspot Portal will be isolated from all other networks except the one they are assigned to.

Guests on this network are able to access the internet, and communicate with the UniFi gateway to obtain a DHCP lease and resolve names using DNS

I suppose a switch could be configured to prevent traffic going to other ports, which is how I would assume this would have to be done. This functionality would have to exist in the access point, I guess?

Does UniFi have a feature to isolate devices from each other on the same subnet? Seems like it would require some kind of Layer 2 routing?

[–] [email protected] 2 points 8 months ago (1 children)

It does. I have it enabled and tested. "Client Device Isolation." It's enabled per SSID.

[–] [email protected] 0 points 8 months ago

Oh, neat. I'll have to look into it.

Thanks!

load more comments (9 replies)
load more comments (17 replies)