Need a guest network for home devices

Hi All


We have four Macs in our house, one wired and three via wireless on main home network. Anything non Apple is connected via a guest network on Asus router. None of the Macs have anything shared that I have set. Have problems with Guest network as going off several times an hour for a couple of minutes at a time but main network not affected. Are the Macs safe if I connect our other non apple devices to the same network


Thanks in advance.

Matt

iMac with Retina 5K display, macOS High Sierra (10.13.6), Final Cut X

Posted on Aug 13, 2018 7:07 AM

Reply

Similar questions

8 replies

Aug 13, 2018 7:27 AM in response to AppleMacCider

"Guest network" sharing functions are determined by your router's settings, so you will need to consult its documentation.

Are the Macs safe if I connect our other non apple devices to the same network

It's not clear to me what you mean by "safe" but if you want information on your Macs to be available to other devices, you need to explicitly enable Sharing services on a Mac.

Conversely, if you want your Macs to remain off-limits to other devices (whether on your own LAN or not) then leave those Sharing services disabled.

For an introduction to file sharing services read How to connect with File Sharing on your Mac.

Aug 13, 2018 8:41 AM in response to AppleMacCider

Rather than using a guest network which seems somehow to keep cutting off regularly, I will just set up two separate networks - a 2.4Ghz and 5Ghz with separate names. The 2.4Ghz will be for older non apple devices and the 5Ghz will be for Apple only devices and also they will be the ones which use Apps and will go on sensitive websites like banking.


Not best, but as options go it's ok.


It's a much better idea to use a simultaneous dual band router that is also capable of creating a "guest network". I know nothing about Asus routers but it sounds like yours ought to be capable of doing that.


The simultaneous dual band aspect of it bridges the 2.4 and 5 GHz networks—not to be confused with "guest network" which is not bridged to the other.


The reason is that it's best to let your Mac decide which network and which of their available wireless channels offers the optimal throughput: 2.4 or 5 GHz, enabling it to nimbly change from one to the other as required in response to ever-changing wireless conditions. For that reason the 2.4 and 5 GHz networks need identical names. No matter which one it chooses though, it will be separate and distinct from "guest network" (which also probably offers simultaneous dual band capability).


"Guest Network" should obviously have a different name.

Aug 13, 2018 8:23 AM in response to John Galt

I have used AirPort Extreme and Express units in the past but they technology soon became outdated so I moved to Asus router before Apple pulled the plug earlier this year.


Rather than using a guest network which seems somehow to keep cutting off regularly, I will just set up two separate networks - a 2.4Ghz and 5Ghz with separate names. The 2.4Ghz will be for older non apple devices and the 5Ghz will be for Apple only devices and also they will be the ones which use Apps and will go on sensitive websites like banking.


Does like sound the best option - as my router only allows for a main network - 2.4Ghz and 5Ghz and 6 guest networks - 3 x 2.4Ghz and 3 x 5Ghz

Aug 13, 2018 8:43 PM in response to AppleMacCider

A mesh network is the way to go these days.


So now would be better to just keep both frequencies with the same name so the device chooses the best network for it and keep a separate guest network for other devices (non apple).


Yes.


I understand the control aspect of wanting to know and constrain which network your Macs will be using and whether that's 2.4 or 5 GHz. However, it really, really is a better idea to enable both, provide identical SSIDs, and let your Macs decide which is "best". I would not have believed that myself had it not been for an Apple wireless engineer explain the reasons to me. That was years ago and I've long since forgotten those reasons.


Another reason for doing this in the past is I thought the slowest device slows other traffic using the same wifi network.

I think you may be recalling the behavior of a network that had to serve 802.11b/g-only capable clients in addition to newer 802.11n-capable devices. That hasn't been a problem for a long time, and even back then it was a problem only when those legacy were actively communicating. You created a mesh network, using 802.11ac, and that's the best option there is today.

Aug 13, 2018 10:18 AM in response to John Galt

Thanks John


The Asus routers I have use AiMesh software (part of the Asus router firmware) which forms a mesh network around the house. The router does come with the option to auto everything including the channels the wifi is broadcast on. So, rather than do this I have up to now kept 2.4Ghz and 5Ghz separate say with an name then 1 or 2 after it so I know which is the 2.4 and 5Ghz networks. I want to be able to tweek the settings as the auto mode is not the best option.


So now would be better to just keep both frequencies with the same name so the device chooses the best network for it and keep a separate guest network for other devices (non apple). Another reason for doing this in the past is I thought the slowest device slows other traffic using the same wifi network.

Aug 14, 2018 1:51 AM in response to John Galt

Thanks again John


I've taken all your advice, have checked with WIfi Explorer app on my Mac and can see the my home network and guest network signal strength is almost static and not dropping. I have always thought that older devices slowed down the whole network. Most devices in the house are AC with just a few N, so I have set the 5Ghz to N/AC and 2.4Ghz to N only so that no older devices like G (would only be a guest if anyone) can connect to the router.


Any devices which are unable to get future updates are now on the Guest Network which as far as I know with Asus is just Wifi only.


Thanks

Aug 13, 2018 7:59 AM in response to AppleMacCider

"Guest Network" on an Apple AirPort Base Station (for example) is completely isolated and separate from its usual network, and I surmise the Asus does the same thing.


As far as your Macs are concerned, the only information about them anyone or any thing using your LAN could determine would be their mere presence, and even that is not possible if they are connected to separate networks. For example, I have no way of determining their existence from where I sit, nor does anyone else—even if they were to successfully "hack" your PS4—unless those Macs were also connected to their Guest Network. It's just a separate network.


However, if you were to connect those theoretically "hacked" PS4 or other devices to the same network as your Macs... that's a different matter altogether.


Also, even if you were to enable Sharing services, a remote user would still to provide login credentials (user name and password) for access. At some point in the distant past it was possible to create a User Account with a blank or null password. I don't know if that's still possible, but it was never a good idea to begin with.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Need a guest network for home devices

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.