3

My scenario:

  • I just got a "smart" sprinkler device that needs to connect to the internet over WiFi

  • I do not want to put that device on the same network as my other Internet-connected Macs and devices in the home

  • I have one Airport Time Capsule and one Airport Extreme

  • I also have an unmanaged gigabit switch

  • I have Comcast cable Internet service with one cable modem. I don't think I have a static IP from Comcast.

Question(s):

  • Is it possible with the equipment I have to create two separate WiFi networks that can't see each other?

  • If so, would that be adequate protection for my Macs and home devices if the smart sprinkler somehow got hacked?

  • If yes to both of the above, how do I set it up?

So far, I've been able to create two WiFi networks, but haven't been able to get them both connected to the Internet without them obviously sharing the same underlying network. For example, I can print from WiFi network #1 to the wireless printer attached to WiFi network #2.

Any thoughts?

Improve this question
1
  • This is basic networking - if you have two networks - you need a router between them and optionally firewall rules to prevent things you don't like crossing.
    – bmike ♦
    Commented Dec 22, 2017 at 23:59

2 Answers 2

Reset to default
2

Apple networks do this well with the guest network. All the "suspect" devices only get to go to the internet and not infect / snoop / attack the trusted machines on the proper network. Many other network vendors have the same idea - either by making separate VLAN for the sequestered / DMZ devices as needed.

It doesn't make sense to address each of the separate questions since each would be a long several paragraphs. Perhaps narrow down on one item once you've chosen to set up your network and can document it and ask the subquestion with details needed for a more narrow answer.

Improve this answer
2
  • Thanks, bmike. I've got a guest network set up now. That's certainly simpler than using two different base stations. If you had, say, a paranoid wife, would you assure her that a guest network is "good enough" protection for the proper network?
    – eowen
    Commented Dec 23, 2017 at 0:56
  • With the guest network as a better name for what I was looking for, I found this discussion which focuses on my main question beyond the practicalities of setting it up: is it secure enough? discussions.apple.com/thread/2690067
    – eowen
    Commented Dec 23, 2017 at 1:01
1

Have you tried device isolation?

Your Comcast cable modem may have a feature called "device isolation" or something like that.

If so, just plug your two airports to your cable modem, and create a new network for each AirPort in the AirPort Utility App.

They would share the same gateway but I figure, they wouldn't be able to communicate witch each other.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .