• The questioner has marked this post as solved.

IB3 capabilities

Tchris
Level 3
1 of 9

I need to help a friend with a new, simple (but not entirely standard) Swisscom installation.  

Minor issues include: I have never touched Internet Box 3; or used Swisscom WiFi radios; and (as usual!) I can't find any decent documentation covering the IB3. 

 

Three simple questions to folk who know IB3:

 

How many BSSID can I have on IB-3 (I'm used to 8 per radio on my UI APs)

  I would like at least 3:

    BSSID myNet1: 2.4 GHz

    BSSID myNet2: 2.4 & 5 GHz

    BSSID myNet3: 2.4 & 5 GHz

 

How many DNS can I use?

  I would like 3, a different DNS for each BSSID

 

Can I impose client-isolation for a selected  BSSID?

 

Thanks for reading, Chris

ACCEPTED SOLUTION 1

Accepted Solutions
Black Mamba
Super User
5 of 9

@Tchris 

 

> ... I guess that IB3 "guest" network will do "client isolation". ...

it's exactly a solution with an Internet-box to set up to isolate visitors

 

Notes:
- Guest WLAN allows separate WLAN access to be provided for personal use (e.g. for guests at your home or for your employees).
- The provision of WLAN access to third parties with whom you have no personal or employment relationship (e.g. your customers) is not authorised. Please refer to the specific Internet Contract Terms for further details.

- The guest WLAN password is used to protect your network from non-authorised access. The WLAN password must be between 8 and 63 characters. Swisscom recommends using at least 11 characters consisting of letters, numbers and special characters.

 

Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
8 Comments 8
Black Mamba
Super User
2 of 9

@Tchris 

 

> How many DNS can I use?

2

 

> I would like 3, a different DNS for each BSSID

not possible

 

> Can I impose client-isolation for a selected  BSSID?

please specify client isolation

 

Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Tchris
Level 3
3 of 9

@Black Mamba 

Thanks for the reply.

By "client isolation" I mean dozens of clients can connect to myNet2 WiFi and see the internet

...and nothing else! They can't see each other. They can't see any network infrastructure (printers, servers, etc).

 

[EDIT] Forget it: I can't do what I want to do without adding hardware and over-complicating what is supposed to be a simple setup. I guess that IB3 "guest" network will do "client isolation".

 

Chris

 

Edited
bitracer
Super User
4 of 9

The question is more why would you want to do that in a home setup?

Black Mamba
Super User
5 of 9

@Tchris 

 

> ... I guess that IB3 "guest" network will do "client isolation". ...

it's exactly a solution with an Internet-box to set up to isolate visitors

 

Notes:
- Guest WLAN allows separate WLAN access to be provided for personal use (e.g. for guests at your home or for your employees).
- The provision of WLAN access to third parties with whom you have no personal or employment relationship (e.g. your customers) is not authorised. Please refer to the specific Internet Contract Terms for further details.

- The guest WLAN password is used to protect your network from non-authorised access. The WLAN password must be between 8 and 63 characters. Swisscom recommends using at least 11 characters consisting of letters, numbers and special characters.

 

Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Tchris
Level 3
6 of 9

Thanks @Black Mamba 

I didn't find the docs and won't get my hands on the Box until the day I'm supposed to set it up.

 

Chris

Tchris
Level 3
7 of 9

@bitracer " why would you want to do that in a home setup?  "  

Fair question!

 

Not all internet content is suitable for all ages, not all users are safety/security savvy, not all users should be able to print 50 pages of nonsense, zero users have the time/skills/equipment to identify emerging malware-sites in near real-time, and many more why's ...but you know them all already.

Fair answer?

 

I do that at my own home site because I already have all the necessary gear to do it!

Up till now, my guest-net users have ranged from 28 to 87 years old, so I left it on SwisscomDNS..

Other regular guests aged 16-days to 8-years have not been granted access (yet!).

Very soon I'll be getting access requests from the older grand-kids: after some tests in the coming week or two, I imagine that guest-net will shift to NextDNS.

I'll need to warn adult guests that they can no longer access porn, gambling, violence, drug, malware sites (I will "forget" to mention that they can if they know how to bypass the default DNS).

 

My friend's site is home to folk from 2 to 72 years old.

The majority of guests are under 10.

I can't do that at my friend's site, so I guess I will just slow everything down with NextDNS and see how many complaints I get!

 

 " why would you NOT want to do that in a home setup?  "

Fair question???

 

Chris

 

bitracer
Super User
8 of 9

Content filtering DNS service with platform specific age appropriate content restrictions should be enough.

 

I wouldn’t put the printers and such in the guest network.

Black Mamba
Super User
9 of 9

@Tchris wrote: Thanks @Black Mamba  I didn't find the docs and won't get my hands on the Box until the day I'm supposed to set it up. Chris

Device and ports / Set up and use / Frequently asked questions on this page

Internet-Box 3: Overview and instructions – Help | Swisscom

 

For Guest WLAN there's no specific documentation, just go to the Internet-Box 3 Web portal 

You can easily view and adjust the settings at https://internetbox.home 

You only have access to the Web portal when you are connected to your Internet-Box within your home network.

Enter the Guest WLAN settings, then Save. Then activate it as required.

 

Guest WLAN.jpeg

Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Un "Like" fait toujours plaisir / Valider une réponse comme "Solution"
Back to top