Re: [AFMUG] Guest access/mode on customer routers

[Dave]

Ah..
So a vlan like ssid with qos would work... I tried this with E400 and it 
seems to have a hard time being a router.

Router behind it works fine for this.
I could see a need for this on the R20xx routers but im sure some more 
memory and cpu would be needed to accommodate this.




On 12/19/2017 01:55 PM, Josh Luthman wrote:
I couldn't care less about the QOS - it's the access to my 
subnet/network that I don't like.  The way Ubnt does it is just 
BEAUTIFUL with a layer 2firewall?



Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Mon, Dec 18, 2017 at 11:15 PM, David > wrote:


You could just open up another ssid with new PSK

I have requested a feature for the R20xx series to do a QOS limit
per SSID



On 12/18/2017 3:21 PM, Josh Luthman wrote:

I'm not really interested in it for 99% of my customers. 
However, the odd one here or there it would be nice to enable
with option 66 or something.

I'd also like to have it for my house, but I can do it with any
one of a million devices easily.


Josh Luthman
Office: 937-552-2340 
Direct: 937-552-2343 
1100 Wayne St


Suite 1337
Troy, OH 45373

On Mon, Dec 18, 2017 at 10:21 AM, Justin Wilson > wrote:

I do this with unified and a controller.  I now have a cloudy.

There is a thread on the cambium forum I am following that
talks about guest access on the r series platform but there
have been no updates from anyone at Cambium in awhile.  I
will followup.


Justin Wilson
j...@mtin.net 

www.mtin.net 
www.midwest-ix.com 


On Dec 15, 2017, at 10:44 PM, Josh Luthman
> wrote:

Does anyone do this at all?  Wondering if it makes any
sense.  I know I'd like it at my house with the r200 routers
as I don't want to give up my PSK to random people.

Josh Luthman
Office: 937-552-2340 
Direct: 937-552-2343 
1100 Wayne St


Suite 1337


Troy, OH 45373










--

Re: [AFMUG] Guest access/mode on customer routers

[Josh Luthman]

I couldn't care less about the QOS - it's the access to my subnet/network
that I don't like.  The way Ubnt does it is just BEAUTIFUL with a layer
2firewall?


Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Mon, Dec 18, 2017 at 11:15 PM, David  wrote:

> You could just open up another ssid with new PSK
>
> I have requested a feature for the R20xx series to do a QOS limit per SSID
>
>
>
> On 12/18/2017 3:21 PM, Josh Luthman wrote:
>
> I'm not really interested in it for 99% of my customers.  However, the odd
> one here or there it would be nice to enable with option 66 or something.
>
> I'd also like to have it for my house, but I can do it with any one of a
> million devices easily.
>
>
> Josh Luthman
> Office: 937-552-2340 <(937)%20552-2340>
> Direct: 937-552-2343 <(937)%20552-2343>
> 1100 Wayne St
> 
> Suite 1337
> Troy, OH 45373
>
> On Mon, Dec 18, 2017 at 10:21 AM, Justin Wilson  wrote:
>
>> I do this with unified and a controller.  I now have a cloudy.
>>
>> There is a thread on the cambium forum I am following that talks about
>> guest access on the r series platform but there have been no updates from
>> anyone at Cambium in awhile.  I will followup.
>>
>>
>> Justin Wilson
>> j...@mtin.net
>>
>> www.mtin.net
>> www.midwest-ix.com
>>
>> On Dec 15, 2017, at 10:44 PM, Josh Luthman 
>> wrote:
>>
>> Does anyone do this at all?  Wondering if it makes any sense.  I know I'd
>> like it at my house with the r200 routers as I don't want to give up my PSK
>> to random people.
>>
>> Josh Luthman
>> Office: 937-552-2340 <%28937%29%20552-2340>
>> Direct: 937-552-2343 <%28937%29%20552-2343>
>> 1100 Wayne St
>> 
>> Suite 1337
>> 
>> Troy, OH 45373
>> 
>>
>>
>>
>
>

Re: [AFMUG] Guest access/mode on customer routers

[David]

You could just open up another ssid with new PSK

I have requested a feature for the R20xx series to do a QOS limit per SSID



On 12/18/2017 3:21 PM, Josh Luthman wrote:
I'm not really interested in it for 99% of my customers.  However, the 
odd one here or there it would be nice to enable with option 66 or 
something.


I'd also like to have it for my house, but I can do it with any one of 
a million devices easily.



Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Mon, Dec 18, 2017 at 10:21 AM, Justin Wilson > wrote:


I do this with unified and a controller.  I now have a cloudy.

There is a thread on the cambium forum I am following that talks
about guest access on the r series platform but there have been no
updates from anyone at Cambium in awhile.  I will followup.


Justin Wilson
j...@mtin.net 

www.mtin.net 
www.midwest-ix.com 


On Dec 15, 2017, at 10:44 PM, Josh Luthman
> wrote:

Does anyone do this at all? Wondering if it makes any sense.  I
know I'd like it at my house with the r200 routers as I don't
want to give up my PSK to random people.

Josh Luthman
Office: 937-552-2340 
Direct: 937-552-2343 
1100 Wayne St


Suite 1337


Troy, OH 45373

Re: [AFMUG] Guest access/mode on customer routers

[Josh Luthman]

I'm not really interested in it for 99% of my customers.  However, the odd
one here or there it would be nice to enable with option 66 or something.

I'd also like to have it for my house, but I can do it with any one of a
million devices easily.


Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Mon, Dec 18, 2017 at 10:21 AM, Justin Wilson  wrote:

> I do this with unified and a controller.  I now have a cloudy.
>
> There is a thread on the cambium forum I am following that talks about
> guest access on the r series platform but there have been no updates from
> anyone at Cambium in awhile.  I will followup.
>
>
> Justin Wilson
> j...@mtin.net
>
> www.mtin.net
> www.midwest-ix.com
>
> On Dec 15, 2017, at 10:44 PM, Josh Luthman 
> wrote:
>
> Does anyone do this at all?  Wondering if it makes any sense.  I know I'd
> like it at my house with the r200 routers as I don't want to give up my PSK
> to random people.
>
> Josh Luthman
> Office: 937-552-2340 <(937)%20552-2340>
> Direct: 937-552-2343 <(937)%20552-2343>
> 1100 Wayne St
> 
> Suite 1337
> 
> Troy, OH 45373
> 
>
>
>

Re: [AFMUG] Guest access/mode on customer routers

[Justin Wilson]

I do this with unified and a controller.  I now have a cloudy.

There is a thread on the cambium forum I am following that talks about guest 
access on the r series platform but there have been no updates from anyone at 
Cambium in awhile.  I will followup.


Justin Wilson
j...@mtin.net

www.mtin.net
www.midwest-ix.com

> On Dec 15, 2017, at 10:44 PM, Josh Luthman  
> wrote:
> 
> Does anyone do this at all?  Wondering if it makes any sense.  I know I'd 
> like it at my house with the r200 routers as I don't want to give up my PSK 
> to random people.
> 
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373

Re: [AFMUG] Guest access/mode on customer routers

[Dave]

We have a Pword set for user level and the admin is different for the 
cambium routers we use.
 Anyone seen the issue where it seems the remote access shuts down both 
from WAN or LAN but still functions as normal?
I see this a bunch with DVRs and other devices that want to override any 
port forwarding you may have.




On 12/15/2017 09:44 PM, Josh Luthman wrote:
Does anyone do this at all?  Wondering if it makes any sense.  I know 
I'd like it at my house with the r200 routers as I don't want to give 
up my PSK to random people.


Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373


--

Re: [AFMUG] Guest access/mode on customer routers

[David Coudron]

Yes, those folks that are aware of it and what it should be used for, request 
that we set it up and we do.   However, for folks that don’t ask about it, we 
found out that we were getting more calls asking about the password (they lost 
the email stating what it was, misplaced any information we left with them, or 
forgot).   What typically happens is someone visits their place, wants to use 
the Guest network, and they can’t remember the password to give them since they 
don’t use it very often and that triggers a call to us.

We get fewer calls asking to set up Guest access than we do asking what the 
password was set up as.   We thought about printing labels and putting that on 
the router with the password for the Guest network for future reference but 
then we would have to use a standard password for all customers, which we 
didn’t want to do.   Using a standard password would probably be fine, but in 
some of our areas we have enough subscriber density that folks could literally 
drive down the road and get on everyone’s network.  It is just the Guest 
network, so likely not a big deal, but figured our customers wouldn’t want 
strangers doing that.  We could come up with a password scheme that uses part 
of the Mac address or something like that, but that is just more work for the 
technician to set up, or we would have to come up with some script trickery to 
automatically do it.For the few that ask for it, we found it was less work 
to not set it up by default and only do so for those that asked.

David Coudron
david.coud...@advantenon.com<mailto:david.coud...@advantenon.com>  |  Mobile: 
612-991-7474


From: Af [mailto:af-boun...@afmug.com] On Behalf Of Mike Hammett
Sent: Saturday, December 16, 2017 9:20 AM
To: af@afmug.com
Subject: Re: [AFMUG] Guest access/mode on customer routers

Most retail routers have done this for many years now. It shouldn't be 
surprising.


-
Mike Hammett
Intelligent Computing Solutions<http://www.ics-il.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/ICSIL>[http://www.ics-il.com/images/googleicon.png]<https://plus.google.com/+IntelligentComputingSolutionsDeKalb>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/intelligent-computing-solutions>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/ICSIL>
Midwest Internet Exchange<http://www.midwest-ix.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/mdwestix>[http://www.ics-il.com/images/linkedinicon.png]<https://www.linkedin.com/company/midwest-internet-exchange>[http://www.ics-il.com/images/twittericon.png]<https://twitter.com/mdwestix>
The Brothers WISP<http://www.thebrotherswisp.com/>
[http://www.ics-il.com/images/fbicon.png]<https://www.facebook.com/thebrotherswisp>[http://www.ics-il.com/images/youtubeicon.png]


<https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg>

From: "David Coudron" 
<david.coud...@advantenon.com<mailto:david.coud...@advantenon.com>>
To: af@afmug.com<mailto:af@afmug.com>
Sent: Saturday, December 16, 2017 7:55:08 AM
Subject: Re: [AFMUG] Guest access/mode on customer routers
We typically don’t do this unless specifically requested to do so by the 
customer.   We can set it up remotely since we provide Mikrotiks to all 
customers so we can always do it later without a site visit.   It seems like 
one more thing to educate the customer on unless they already know about it and 
request it.

David Coudron
david.coud...@advantenon.com<mailto:david.coud...@advantenon.com>  |  Mobile: 
612-991-7474



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Steve Jones
Sent: Friday, December 15, 2017 10:29 PM
To: af@afmug.com<mailto:af@afmug.com>
Subject: Re: [AFMUG] Guest access/mode on customer routers

Cnmaestro doesnt do it the way i expected

On Dec 15, 2017 9:45 PM, "Josh Luthman" 
<j...@imaginenetworksllc.com<mailto:j...@imaginenetworksllc.com>> wrote:
Does anyone do this at all?  Wondering if it makes any sense.  I know I'd like 
it at my house with the r200 routers as I don't want to give up my PSK to 
random people.
Josh Luthman
Office: 937-552-2340<tel:(937)%20552-2340>
Direct: 937-552-2343<tel:(937)%20552-2343>
1100 Wayne 
St<https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373=gmail=g>
Suite 
1337<https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373=gmail=g>
Troy, OH 
45373<https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373=gmail=g>

Re: [AFMUG] Guest access/mode on customer routers

[Mike Hammett]

Most retail routers have done this for many years now. It shouldn't be 
surprising. 




- 
Mike Hammett 
Intelligent Computing Solutions 

Midwest Internet Exchange 

The Brothers WISP 




- Original Message -

From: "David Coudron" <david.coud...@advantenon.com> 
To: af@afmug.com 
Sent: Saturday, December 16, 2017 7:55:08 AM 
Subject: Re: [AFMUG] Guest access/mode on customer routers 



We typically don’t do this unless specifically requested to do so by the 
customer. We can set it up remotely since we provide Mikrotiks to all customers 
so we can always do it later without a site visit. It seems like one more thing 
to educate the customer on unless they already know about it and request it. 

David Coudron 
david.coud...@advantenon.com | Mobile: 612-991-7474 



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Steve Jones 
Sent: Friday, December 15, 2017 10:29 PM 
To: af@afmug.com 
Subject: Re: [AFMUG] Guest access/mode on customer routers 


Cnmaestro doesnt do it the way i expected 



On Dec 15, 2017 9:45 PM, "Josh Luthman" < j...@imaginenetworksllc.com > wrote: 



Does anyone do this at all? Wondering if it makes any sense. I know I'd like it 
at my house with the r200 routers as I don't want to give up my PSK to random 
people. 

Josh Luthman 
Office: 937-552-2340 
Direct: 937-552-2343 
1100 Wayne St 
Suite 1337 
Troy, OH 45373 

Re: [AFMUG] Guest access/mode on customer routers

[David Coudron]

We typically don’t do this unless specifically requested to do so by the 
customer.   We can set it up remotely since we provide Mikrotiks to all 
customers so we can always do it later without a site visit.   It seems like 
one more thing to educate the customer on unless they already know about it and 
request it.

David Coudron
david.coud...@advantenon.com<mailto:david.coud...@advantenon.com>  |  Mobile: 
612-991-7474



From: Af [mailto:af-boun...@afmug.com] On Behalf Of Steve Jones
Sent: Friday, December 15, 2017 10:29 PM
To: af@afmug.com
Subject: Re: [AFMUG] Guest access/mode on customer routers

Cnmaestro doesnt do it the way i expected

On Dec 15, 2017 9:45 PM, "Josh Luthman" 
<j...@imaginenetworksllc.com<mailto:j...@imaginenetworksllc.com>> wrote:
Does anyone do this at all?  Wondering if it makes any sense.  I know I'd like 
it at my house with the r200 routers as I don't want to give up my PSK to 
random people.
Josh Luthman
Office: 937-552-2340<tel:(937)%20552-2340>
Direct: 937-552-2343<tel:(937)%20552-2343>
1100 Wayne 
St<https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373=gmail=g>
Suite 
1337<https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373=gmail=g>
Troy, OH 
45373<https://maps.google.com/?q=1100+Wayne+St+Suite+1337+Troy,+OH+45373=gmail=g>

Re: [AFMUG] Guest access/mode on customer routers

[Steve Jones]

Cnmaestro doesnt do it the way i expected

On Dec 15, 2017 9:45 PM, "Josh Luthman"  wrote:

> Does anyone do this at all?  Wondering if it makes any sense.  I know I'd
> like it at my house with the r200 routers as I don't want to give up my PSK
> to random people.
>
> Josh Luthman
> Office: 937-552-2340 <(937)%20552-2340>
> Direct: 937-552-2343 <(937)%20552-2343>
> 1100 Wayne St
> 
> Suite 1337
> 
> Troy, OH 45373
> 
>