IB3 capabilities

  • I need to help a friend with a new, simple (but not entirely standard) Swisscom installation.

    Minor issues include: I have never touched Internet Box 3; or used Swisscom WiFi radios; and (as usual!) I can’t find any decent documentation covering the IB3.

    Three simple questions to folk who know IB3:

    How many BSSID can I have on IB-3 (I’m used to 8 per radio on my UI APs)

    I would like at least 3:

    BSSID myNet1: 2.4 GHz
    
    BSSID myNet2: 2.4 & 5 GHz
    
    BSSID myNet3: 2.4 & 5 GHz

    How many DNS can I use?

    I would like 3, a different DNS for each BSSID

    Can I impose client-isolation for a selected BSSID?

    Thanks for reading, Chris

    • @Tchris

      >… I guess that IB3 “guest” network will do “client isolation”….

      it’s exactly a solution with an Internet-box to set up to isolate visitors

      Notes:
      - Guest WLAN allows separate WLAN access to be provided for personal use (e.g. for guests at your home or for your employees).
      - The provision of WLAN access to third parties with whom you have no personal or employment relationship (e.g. your customers) is not authorised. Please refer to the specific Internet Contract Terms for further details.

      - The guest WLAN password is used to protect your network from non-authorised access. The WLAN password must be between 8 and 63 characters. Swisscom recommends using at least 11 characters consisting of letters, numbers and special characters.

    @Tchris

    > How many DNS can I use?

    2

    > I would like 3, a different DNS for each BSSID

    not possible

    > Can I impose client-isolation for a selected BSSID?

    please specify client isolation

    “On apprend parfois plus d'une défaite que d'une victoire” — José Raúl Capablanca

    @Black Mamba

    Thanks for the reply.

    By “client isolation” I mean dozens of clients can connect to myNet2 WiFi and see the internet

    …and nothing else! They can’t see each other. They can’t see any network infrastructure (printers, servers, etc).

    [EDIT] Forget it: I can’t do what I want to do without adding hardware and over-complicating what is supposed to be a simple setup. I guess that IB3 “guest” network will do “client isolation”.

    Chris

    The question is more why would you want to do that in a home setup?

    @Tchris

    >… I guess that IB3 “guest” network will do “client isolation”….

    it’s exactly a solution with an Internet-box to set up to isolate visitors

    Notes:
    - Guest WLAN allows separate WLAN access to be provided for personal use (e.g. for guests at your home or for your employees).
    - The provision of WLAN access to third parties with whom you have no personal or employment relationship (e.g. your customers) is not authorised. Please refer to the specific Internet Contract Terms for further details.

    - The guest WLAN password is used to protect your network from non-authorised access. The WLAN password must be between 8 and 63 characters. Swisscom recommends using at least 11 characters consisting of letters, numbers and special characters.

    “On apprend parfois plus d'une défaite que d'une victoire” — José Raúl Capablanca

    Thanks @Black Mamba

    I didn’t find the docs and won’t get my hands on the Box until the day I’m supposed to set it up.

    Chris

    @bitracerwhy would you want to do that in a home setup?

    Fair question!

    Not all internet content is suitable for all ages, not all users are safety/security savvy, not all users should be able to print 50 pages of nonsense, zero users have the time/skills/equipment to identify emerging malware-sites in near real-time, and many more why's…but you know them all already.

    Fair answer?

    I do that at my own home site because I already have all the necessary gear to do it!

    Up till now, my guest-net users have ranged from 28 to 87 years old, so I left it on SwisscomDNS..

    Other regular guests aged 16-days to 8-years have not been granted access (yet!).

    Very soon I’ll be getting access requests from the older grand-kids: after some tests in the coming week or two, I imagine that guest-net will shift to NextDNS.

    I’ll need to warn adult guests that they can no longer access porn, gambling, violence, drug, malware sites (I will “forget” to mention that they can if they know how to bypass the default DNS).

    My friend’s site is home to folk from 2 to 72 years old.

    The majority of guests are under 10.

    I can’t do that at my friend’s site, so I guess I will just slow everything down with NextDNS and see how many complaints I get!

    why would you NOT want to do that in a home setup?

    Fair question???

    Chris

    Content filtering DNS service with platform specific age appropriate content restrictions should be enough.

    I wouldn’t put the printers and such in the guest network.

    4 days later

    @“x”#114038 wrote: Thanks @Black Mamba I didn’t find the docs and won’t get my hands on the Box until the day I’m supposed to set it up. Chris


    Device and ports / Set up and use / Frequently asked questions on this page

    Internet-Box 3: Overview and instructions – Help | Swisscom

    For Guest WLAN there’s no specific documentation, just go to the Internet-Box 3 Web portal

    You can easily view and adjust the settings at https://internetbox.home

    You only have access to the Web portal when you are connected to your Internet-Box within your home network.

    Enter the Guest WLAN settings, then Save. Then activate it as required.

    Guest WLAN.jpeg

    “On apprend parfois plus d'une défaite que d'une victoire” — José Raúl Capablanca