What Does a Guest Network Do?
Вставка
- Опубліковано 14 вер 2023
- Check out the MSI MAG Z790 TOMAHAWK WIFI Motherboard at lmg.gg/MSI-MAG-Z790-TOMAHAWK-...
Should you make use of the Wi-Fi "guest network" option your router offers?
Leave a reply with your requests for future episodes.
► GET MERCH: lttstore.com
► LTX 2023 TICKETS AVAILABLE NOW: lmg.gg/ltx23
► GET EXCLUSIVE CONTENT ON FLOATPLANE: lmg.gg/lttfloatplane
► SPONSORS, AFFILIATES, AND PARTNERS: lmg.gg/partners
FOLLOW US ELSEWHERE
---------------------------------------------------
Twitter: / linustech
Facebook: / linustech
Instagram: / linustech
TikTok: / linustech
Twitch: / linustech - Наука та технологія
Ok, I’ve setup the guest network. Where are the guests?
They appear at your birthday party
Playing hide and seek, start seeking.
where you at?
@@denis2381 Thats a secure password, dont want to know how its related to you
Guest refer to visitor/temp/one time need. Separate helps protect your server from unauthorized access within network, only externally. Protect your ip address from being used as a vector to connect to locally.
My wife actually cross-stitched our guest network QR Code. And it works!!!
awww, that's awesome!!!
That’s pretty cool!
That's badass!
adorable!
That's actually really cool
This is very useful information. Now, all I need are guests, so I have a reason to use it.
This is very useful information. Now, all I need are guests, so I have a reason for it.
Pro tip for consumers not into networking but like to use IoT devices in their home. Chuck all of them into your guest network. Your main network would be your trusted network and your guest network is your untrusted network containing all devices you don’t want to have access to your trusted sensitive home devices. It’s an easy way to segment your network into a trusted, and untrusted vlan.
I have three. The main one, a guest one which also has my one IoT device on it and a DMZ one where anything that's accessible from the internet and might get hacked goes.
@@clemesnvi they clearly said "if you're not into networking" in other words, not a pro
Everyone please read the first line before commenting. I too have a heavily segmented pro networking setup. With a ton of security features which i'm not going to go into right now. But the majority is not as invested into networking as yourself. Many just make do with their ISP Modem/Router. I even know colleagues in networking that haven't setup anything fancy at home and are only using their ISP provided modem/router. But they are senior networking engineers.
Why would you want to put IoT devices onto a guest network?
Shouldn't you either have them not connected to WiFi at all, or need them to be on your main network so your phone/tablet can interact with them?
@@Trillyana1) Almost all IoT devices are WiFi
2) Almost all IoT devices phone home to central servers online, and don't communicate directly with IPs on the LAN.
(IoT = INTERNET OF THINGS)
I usually keep my TV and Wi-Fi speakers on my guest network. They are usually used when I have people over anyway and they can access it. If its not something you use daily just have it on guest, ypu just need to be on that network when using it.
My home router has guest network capability but it does not create a separate network SSID. It uses the same one but with a different password for each guest network
And I can create multiple passwords (and qr codes) for different guest network . And each guest network can be configured to have a certain number of devices connected to it. And also each guest network can be configured if I want them to have network access + internet access or just internet access
Pretty handy
How does the device know which one to connect to correctly if they have the same ssid? I would think same ssid with different passwords would cause problems with devices trying to reconnect, randomly hitting the wrong network and therefore having the wrong credentials to authenticate.
@@Raleford the device does not know, thats the routers job. When you have multiple networks under the same name with different passwords, when you tell you phone or other device to join, the router will look at which password its joining with and segment it based on whatever network that password is attached to. The devices dont know there are different networks as technically there aren't, its just the router, in software, separating things out
@@Raleford if you have the main password of the network you connect to the standard home network. However if you input any of the guest generated password to the wifi connection it will get you connected to the guest network in question that can be isolated from the main network devices or not based on what we configured initially for that guest network.. don't know how it is implemented by the router but I tested and it works.
Actually I even use it when I WFH I connect my work laptop to my wifi with the guest password and it has internet but it is oblivious of other network devices on my home network.
And I never had any kind of conflict
What brand/device? This sounds like something I want to look into.
@@dwchristofferson I specifically know that Plume, the wifi router company, does this in their devices but i dont suggest them as they are an always online based router meaning if they dont have inet or access to plumes cloud infrastructure, they stop functioning. they are also a paid service, you cant just get the pods/ router and have them work without a subscription
as for other router brands that do such a thing i could not tell you off the top of my head though you will more then likely run into them on mesh networks where ease of use is key for an end user
in germany u can leave guest networks open; we dont get sued anymore if a guest is doing illegal things in the internet, that law is cancelled, we call it Störerhaftung
My recommendation: hide the SSID of your main network (be careful when doing this so that you don't get locked out of your router) and rename your guest network so that your guests/family/friends don't know that you're connecting them to your guest network.
In addition, your phone can generate a QR phone for your guests to scan.
2.4g home, 5g guests.
@@wobblysauce my main network is 2.4 and 5 with separate names and the guest network is both with the same name
Don't hide the SSID of your home network unless you want your devices to broadcast it everywhere they go, looking for it (hint: you don't).
@@johnberkers434 Are you sure that's how it works?
@@johnberkers434Your devices do this anyway. In one of my security courses at Uni, my lecturer set up a packet sniffer to demonstrate and got my family's home wifi network name (it was obviously mine as it had my family name in it). He then used it during an exam to sniff out who didn't turn their phone off (actually came up to me and I said "oh it's on do not disturb" and could show it in my bag so it was all good, but still!)
I miss when repair technicians were the cool kids. Like when The Fonz would troubleshoot and repair the local music streaming appliance, he would get raucous applause. Ayyy!
Thanks for this! I'd love to see the follow-up video on advanced guest network setup
I was actually leaving my guest network open so they didn't have to ask for a password, just connect. I didn't think about the security issue when I have device isolation enabled for the guest network. I am going to fix this immediately, and put up QR codes as suggested. Thanks.
good info thanks
Excellent guide. You can also limit their bandwidth.
I have a secondary guest router setup where all traffic is routed through a VPN for guests..
This
Very useful. Thanks!
QR code at the door. Now you know you enter a cool kid party :D
does enabling guest network effect the performance of my main network?
Thanks for the video!
I just set up my 7th Guest network
It took me all day but at the 11th hour I got it done.
Yep, VLAN. I use MAC address authentication, which was one more reason to have a guest network... because it's a PITA to add new devices to the white list.
Every step counts. Probably wouldn't rely on that 100% (not saying that you are) as it isn't voodoo magic to bypass MAC filtering
I have "most other things" that need only Internet access connect to my "guest" SSID. Of course, any actual visitors connect to this one. My few other devices that actually need to talk to other wireless, or even wired devices, or need to ptint, etc... are on my main SSID. That one's my "walled garden."
If you leave your router's guess network open if it isn't programmed "securely" people might be able to access your router's configuration and similar things.
Thanks you 😍
Honestly, I’ve wanted to build a PC for music production and gaming since 2019.
I wound up buying a used Legion laptop instead in 2020 because I was priced out of anything valid for my use case, and added some fresh ssd’s & Ram last month because I’m still priced out of a fresh build 🤷🏻♂️
I’ve basically been a sidelined enthusiast for 4 years now and I have a feeling I’m not the only one who’s caught the PC bug but can’t scratch the itch with these prices
Guest quickie
Can we get something on KVMs? What to look out for, how to best use a KVM? Also can we get something about having a PC in 1 room but being able to axxess it in another room as well, similar ro Linus' home setup, but maybe a bit of a cheaper solution using a HDMI extender or something similar?
What about a solution for having 2PCs sharing a monitor, keyboard and mouse in room 1, so they could use a KVM, but them having one or both of those PCs accessible in other rooms on a totally different monitor, keyboard and mouse?
Okay this was very interesting! I kinda did wonder how that worked. Really cool.
How about a video on port forwarding? When to do it, how difficult it is for the average viewer, what risks are involved and how can it break your work VPN login.
port forwarding (& dmz) should only be used for game consoles
@@gamecubeplayer you forgot hosing game servers and other server software
@@gamecubeplayer ??? There are lots of reasons a person might port forward and game consoles aren't even on that list in the modern day that i know of.
@@gamecubeplayerfound the guy who knows nothing about networking.
@@Bob_Smith19i know some things about networking:
you need port forwarding or dmz to get past error 86420 on wiimmfi
you can use usb tethering into asus rt-ac68u (& other rt-__00u) router
if you don't need wps then disable it
if all of your devices (nowadays they all should) support wpa2 then only use wpa2 or wpa2/wpa3 mixed
20mhz 802.11ac has a max speed of 86mbps per stream
my router just does ap isolation but still use the same lan ip
Just make a separate protected network for guests and print out a QR code with the info ;-)
Looks like someone didn't watch the video
no way as they can take that away and give to someone who isn't even in your house
Google Cast has a guest mode which works over any network or offline (as long as you have internet)
I had this separation prevent an old nintendo DS (connected to guest network using WEP since that is all the original ds could connect to) from connecting to an emulator. both where using "online" play and would see each other online, but when the game attempted to connect the 2 players together, since most DS games used P2P for multiplayer, when it paired them up there would be a connection failure. I was stumped for a while until I turned off the feature to keep guests separated and then it started working. only thing i can think of is when the router was planning the shortest path to connect these 2 devices together it completely ruled out using the internet and tried to directly connect them via their local ip , but that was getting blocked by the separation rule.
When the DSs attempted to connect, they realised they were behind the same Internet connection and tried to directly connect to each other.
Most Router Interfaces automatically generate a QR Code for your Networks. You can just download the pdf.
Furthermore most phones nowadays can share a WiFi they connect to as an QR Code.
What I'm saying is normally there is no need for an external Website to create your QR Code.
Riley getting a random black tshirt at 3:23 👕
Majority of the consumer routers in the market only utilize ap isolation on its guest ssid.
Have to be sure that the router doing this actually keeps it separated and is the head of the network. If your wifi router is plugged into something else that is the actual head of your network, you can end of with access to private things from the guest network.
How could I not like it Riley? You're the one in it!
video suggestion: home video AV and speakers vs top of the line soundbar, sub, and satellites. compare ease of use, price, setup and features.
Wanna send a video to the tv from the Guest network?
Change the network on the tv 🤷🏻♂️
Also you can set up a QR code for guests, so that you can turn off SSID broadcasting.
What traffic is unencrypted in the case I don’t want to password protect my WiFi?
I never knew a Guest Network existed...
Just set alarms on godforsaken hours with alexa or google pods when you're somewhere ;-)
Is it possible to isolate a 2nd router to serve as a guess network so that guests can connect both via wired and wireless? Thank you!
I like your haircut Riley
our guest network has a captive portal with terms and conditions and a password :)
Video suggestion about captive portals
I need Riley to bust out a Tom Selleck style mustache.
Welcome to the guess network, Everyone!
Ohhhh, nice social security profile!!😯😏
I have a guest network, everytime people are over they ask for my wifi credentials. I answer that I have a guest network and they go about their day. The next time they're over, they ask for my wifi credentials again 😅. It never ends
Alright, now what does a party do?
...how common is it for people to go around, looking for open wifi networks, just to connect to them to do some shady shit? like, im sure it DOES happen, but is it really common enough to be worth mentioning in a video like this?
The people that do that just drive around with a full automated setup
All you need is a weird neighbour or a random friend of theirs
It's not just the criminals up to shady shit.
''Following a tribunal ruling, constabularies in England and Wales can refuse to confirm or deny whether they use mass surveillance devices, known as IMSI-catchers to monitor people’s location, phone calls and text messages''
@@RadioactiveBlueberry I'd believe in a wierd neighbor, or the wierd friend of a wierd neighbor...but someone driving around in a van, looking to steal wifi?
@@asificam1 1. thats not what i asked
2. even if you have one of those long range antennas, usually the issue is constant/stable/reliable transmissions. sure, you can receive the SIGNAL, but can you actually transmit data over it? Most consumer routers aren't going to be able to transmit over such long distances either
Well, here is plot twist: I don't have such option.
If I select a "Allow guests to access each other" will they also be able to access my chromecast on my main network? Or they can only connect each other within the guest network?
Well, i'll just extend neighbor's wifi and let the guests connected to it... no one on your local network and they can enjoy your neighbor's 1Gbps wifi 😂😂😂
Last time I tried messing with router settings I ended up Bricking the whole network and we had to wait a week for a new router. (I'm pretty good with tech and I still managed to fuck it up.)
I just used it so I could change the password for other people without affecting my main one.
"...and I know I can trust you to fin..."
Bye... ha gotcha.
Does enabling a guest network reduce the effectiveness of your main network in any way (range, speed etc.), given that your router now needs to broadcast two SSIDs instead of one?
I don’t believe so, not to any significant capacity anyway
I just always leave a guest network with no password called Free Wifi, as I hate paying for carrier data and if everyone did the same we could ditch them for a more reliable system.
Until a bad actor uses it for illegal shit 💀
Sorry bud, but that's a dumb move. Just takes one person of millions out there to screw ya. There's ton of cheap mobile data providers out there as options. Don't risk your own network for silliness.
Not to mention you seem to think ISP's are saints. They often charge a buttload as well for data and many places charge more than some mobile carriers do for data depending on where you live so it's all relative anyhow.
Please at least run your Wi-Fi through a trusted VPN
Useful tip especially with my wife's small business in the basement
If my router doesn't support this, can I get something similar with my phone's mobile hotspot?
well yes, because you woud be using your networks wifi to feed your phone that creates another network with another SSID and password, or no password at all
Wtf is up with the guy in the background at the beginning?! That’s a sick guitar solo
You gotta clean up the sides of that cut man. It's all out of wack
Wasn't windows basically creating guest networks and sharing log on credentials for friends of friends and People in yours and their contacts?
But why is some traffic blocked in guest networks? Like Whatsapp calls etc.
Heres a tech quickie idea:
How does Microsoft tie windows into a motherboard ID?
How does it know if you try to move your win key to a new motherboard?
Windows has databases and access to information about the hardware it's running in and the key associated with that hardware. It creates a fingerprint and when the device no longer matches that it knows it isn't valid. The best place to actually learn more about that is another UA-camr that literally designed it from scratch.
Back when windows actually gave more of a dam about consumer level licensing. He is retired from MS, but still makes great videos and a tin if his stuff is still used today by far. As a side note, you never have to pay for windows home. It is completely free to use windows home and only comes with a barely even noticeable watermark, because MS does not care about you individually using it. Just big companies.
OEM key ties to the motherboard but a retail key doesn't. The benefit of a retail key is that it's only allowed to be used on 1 active pc. These keys are also more expensive though.
I was lucky enough to get one cheap when I was still on win7 years back.
Does the guest network weaken the main signal as the new ssid is being broadcasted?
It does not weaken. If you have too many SSIDs then that could start to big down the network.
Though if you have someone using a lot of bandwidth on the guest network it will reduce bandwidth available on the main network.
They can if you use channels that are close to the other. More of an issue for older WiFi standards. Normally the the hardware can adjust the channels automatically
@@Canesnifferbut not in a different way than if someone was hogging a lot of bandwidth on the main network.
Not in the way i think you're thinking in any meaningful way
Yea definitely use a password, otherwise you will find that you have a lot of neighbors as "guests" and your bandwidth is strangely low 😂.
i have a guest network on my router, but it only does IP V4, the IP V6 client just bypasses it
I use a guest network for my work laptop as my VPN doesn't want to work with my standard connection
What vpn? Mullvad?
@@MtFoxt It's a VPN I use for work called Pulse
I used Sky Internet and moved to Virgin and it worked for a bit but then wouldn't let me connect. They couldn't help me and I know other people who have no problems
I had a look around the settings and found Guest Network and luckily that worked OK. Not sure why that one and not the main one works
Cool !
Cool Kids don't use QR codes, they've got a NFC Tag you can scan to automatically connect to your Guests Network.
Guest wifi is weird in a land of unlimited mobile data
While prices may vary here's what ''Free Unlimited Data'' might look like for me on avg in the UK.
Unlimited Mobile data on PAYG Network (4G/5G) = £30-35 p/m
Unlimited Internet via various ISP's (ADSL) = £20-30 p/m
Unlimited Internet via Social Tarriff (ADSL/FTTC) = £15-20 p/m
Unlimited Internet via various ISP's (FTTC) = £20-40 p/m
Unlimited Internet via various ISP's (FTTP) = £40-60 p/m
Asking my neighbour if I can connect to his WIFI = £PRICELESS!
We don't have that here in Australia (as far as I know anyway). It's available for home internet but not mobiles.
Not everyone has unlimited data, plus it has caveats with high speed throttling thresholds etc, some homes or locations have bad cell reception, and some devices you might want to connect won't have cellular connectivity as an option, such as laptops or tablets. So while it might not be necessary for everyone, it's pretty far from useless.
Most European houses are not built out of matchsticks like American housing. So often, especially in older buildings made from thick concrete/brick, or in huge steel blocks of flats, mobile reception can be pretty bad.
@@Eagle3302PLOnly newer houses in the US are built like that. Pre WW2 they were brick and plaster. Framing was a true 2x4 if not 3x5. Most of the houses built now won’t last 100 years.
Can guests see other guests though or is it restricted for 1 device just to the internet?
like how are hotels setup with their garbage password on a webpage that 'never expires' and yet you're forced to get back on and do the reset every day..
At hotels, you often see a captive portal, which is a different thing.
Some home routers will give you more options when it comes to the guest networks, like giving guests access to your home network, or blocking all access to other guests, and even sometimes, the ability to hit the router. It really depends upon the router and the features that it comes with. Usually manufacturers set the settings for guest networks access to the internet, and by default stop everything else; i.e. the most secure option. Some brands will let you select options to make the guest network LESS SECURE. I was using a TP-Link router, and that gave me the "best" options, including isolating guests, or not, isolating from the home network or not, WPA3/WPA2 options more so than other brands, and allowing one to provide access to the router interface from the guest network ( you typically should want your guest network completely isolated, guests completely isolated, access to the router interface blocked, and no access to the home network. ) Overall, the brand is pretty good, and also provides application layer protections as well - in that model.
Yes, I want more isolation in my home network, things that the TP-Link cannot provide. Currently, I use the guest networks for IOT devices, and for older devices that don't support wpa3.
The cheaper home wifi routers typically don't have any guest wifi options. In case you ask, it's a tp-link ax6000
Guests still need WiFi? 💀
Giving guests access to your main network or not having a password on your guest network Yikes!
you have weird friends then
My guest network is the modem's wifi and my network is anything post firewall. Why rely on cheap router security? and... anyone on the guest network is free to see any other devices on the guest network.. simple.
If I had friends that were on tiktok they wouldn't be my friends
Ok. Is 73mbps enough speeds cause Tesco only has a quarter of that?
2:15 skip ad
haha why use only use one Guest(VLAN) instead of have many and insolated even as set rules as Deny, Allow, Deny if possible to in the firewall for each VLAN. or we just use OWE instead of OPN for the Wi-Fi security
ok. but how do i turn on a guest network but still have my main wifi turned off. i only use ethernet cables at home as i have no use for wifi and i just find it safer. but it would be cool to have a guest network for if friends come over. at the moment if friends need wifi i just turn on a hotspot with my phone and turn it off again when they leave.
Most routers give you ( most require ) an option to set a different SSID and password per network; on your regular wifi network, set it to a randomized password that you don't pass out. Set the password for the guest network to something that is somewhat complicated, i.e. by using a passphrase or similar.. Many wifi routers also have an option to set the strength of the wifi signal, so setting the signal strength to 25% or such will reduce the range of the wifi signal as well. Turn off the guest and home wifi networks when you don't need them. Some routers also allow you to schedule your wifi - like turn it on and off by schedule. Better wifi routers allow you to enable just the guest network, and leave the "home" wifi turned off.
@@MrPir84free oh cool. Ill have a dig in my router settings and have a look at whats possible. Thanks for the reply.
Chill out people, 😂 paranoid much,oh no they might be able to see your printer. Big deal.
Like he said at the end of the video ‘ you might make friends you actually trust’ 😂
I have a guest network for my roomate. my wifi here in germany is LITERALLY 10 times slower than what I am paying for and my roomate also told me he want to cover half of my monthly bill it has been half a year he didnt give me anything but the router is in his room since that is where the port is. :((( cant even hook up my laptop or pc with lan and i do have a pretty long 5meter (ultra fast greatest of them all) lan cable... but what for? i should get 500mbits... i get 50....
Here's a few tests to do - plug in a short new cat 6 cable (1m) to router run a speed test - if it's less than half the speed you are paying for tell your service provider - that means it's faulty wiring outside ... but the problem most probably is the long lan wire you are using - also your WiFi could be bad because it might be WiFi 5 modem instead of 6 ... or just interference
Hope that helps
Wi-Fi 5 wouldn't limit them to 50mbs, but i agree that the first trouble shooting step is to figure out if they get anywhere near the expected speed when wired instead of wireless.
@@Raleford lool yeah you are right not even WiFi 4 is that slow - for WiFi try both bands 2.4 & 5ghz and run a speed test
I don't have friends nor guests so I'm safe. o:-)
Should do a video with instructions on how to appropriately configure one of these routers with vlans and subnets, so there's more than just the 2
time for some seedy (torrenting copyrighted materials) things
Why they fired James for?
Is mobile internet so terrible in America/Canada that WiFi is so critical? Even 4G is plenty enough to stream video.
Mobile data has limits and coverage differs everywhere including your country my boy. Not to mention, you do realize not every device has chips designed for mobile right? Mobile networks are way more congested period than having a more dedicated home network and even having wired connections are way more reliable than any wireless connection in general too.
Most mobile networks also don't ever achieve the speeds that home networks can and do. Mobile providers also tend to throttle you after a certain amount of data. There's tons of reasons for wifi. It isn't a U. S. Canada thing my guy. Not everything in the world is just cat videos and having control over your own network has a ton more benefits than you using your phone for cat vids does over mobile data.
The point of the guest network is to enable blocks on it to restrict your guests from accessing social media so they are forced to interact with you.
Short answer: get hacked.
Me
wow
no NAT or discovery
In before the Hate-Fi mob
Who has friends?
Guest network is the poor man's IoT VLan, if u want to segregate IoT traffic form rest of LAN traffic? use vlan if ur router has vlan, if not enable guest network and put all ur IoT devices on the guest network, easy peasy lemon squeezy, now if one of your IoT devices gets compromised will not be able to sniff main LAN traffic and grab passwords codes etc and send them over to hacker servers ...
F 'em. Let them use their own data.
Are cryptocurrency and business incompatible? I think youre not keeping up with the news. While you thought it was impossible, some enthusiasts from Cannafarm Ltd integrated cryptocurrency into the production of medical cannabis. What do you say now?