Guest network

For guest devices Keenetic provides a separate Wi-fi network. Users connected to this network can only access Internet, but can not connect local network resources. This alows to secure the local network, when you provide Internet access for third-party users. For example, your friends came to you with their mobile devices (smartphones, tablets) and asked you to temporarily provide Internet access for them. However, your local network contains valuable information that can become a victim for viruses contained on your friends' devices. To avoid your local information damage you can offer them to use Guest Wi-fi network.

Guest network is disabled by default.

This example will show how to configure the guest network for the 2.4 GHz band, but on the dual band routers the guest network for the 5 GHz band also might be configured. Settings of the 5 GHz Wi-Fi network are the same to the settings of 2.4 GHz Wi-Fi network.

To turn on the Guest network please go to the 'Guest segment' page. To enable the Guest network, set the switch to 'Enabled' state.


The network Name (SSID) field specifies the name of the guest network that will be visible on client devices. You can change it by typing new name in this field.
In the network protection field, you can specify a security algorithm. The default value is 'Unprotected'.

NOTE: Important! Using an open (unprotected) network is unsecured. PLease use 'WPA2-PSK' algorithm which provides maximum security.

Create and enter a password in 'Password' field.  This password will be used by clients of the guest network. 

In the 'Work schedule' field, you can add a schdule for the Guest network to work.

Click the 'Additional settings' to display the full settings of the guest network segment. 


IP and DHCP settings are represented in 'IP settings' section. Click on 'Show DHCP settings' to display the full settings.


Local IP address of router in guest segment displayed in 'IP address' field.

The 'Starting address of the pool' is the IP address from which the guest network clients will start receiving IP addresses.

'Address pool size' – default value is 20. This means that the router allocates a maximum of 20 connections to the guest network (with IP addresses from to

NOTE: Important! With the default settings, the guest network speed is limited to 5 Mbps (5120 kbps).

If you want to configure a speed limit for Wi-Fi guest network devices, you can do so in the 'Restrictions for devices in segment' section. In the 'Maximum speed' field, set the speed using kbit/s or Mbit/s. This speed is allocated for the entire interface and will be distributed among the clients of the Guest network. This speed will be set for both incoming and outgoing traffic.


The 'Clients isolation' option is disabled in the default settings. If you enable this option, wireless clients will not be allowed to exchange information between themselves and the wired segment. 

If you enable the 'Access to home network applications' option (disabled by default), access to router services from the guest network will be allowed. Do not enable this option unless necessary.

NOTE: Important! The web interface of the router must be password protected to prevent guest network clients from changing the settings of the router. To protect your device from unauthorized access, create and set a password for the administrator of the router. In the future, you will need to enter the admin user name and password to log in to the Web Control Panel.

You can connect to the guest network not only via Wi-Fi, but also using the LAN connectors of the device. This setting is located in the 'Ports and VLANs settings'. For example, you want to add port 4 to the Guest segment. LAN ports is not included to Guest network segment by default. Set the 'Belonging to segment' value to the desired port. Now you can use port 4 to connect user to guest segment by cable.


TIP: Tip:

1. Sometimes there are cases when the client of the guest network can not get an IP address from the router, or gets an IP address, and there is no Internet access. The reason may be that this client has previously connected to the main network of the router and a permanent IP address is assigned to this client. In this case, you need to remove the registration of this device in the home network, or uncheck the box 'Permanent IP-address' when setting up a device registration.

2. You also can set up a Wi-Fi guest network on router which works in 'Access Point mode'.


Have more questions? Submit a request



Please sign in to leave a comment.