Home and Guest network settings are shown in the 'My network and Wi-Fi' section. By default Home network (Home segment) combines the LAN ports of the built-in switch with the main Wi-Fi access point (hosts connected via wire and Wi-Fi). And for the Guest network (Guest segment), a separate Wi-Fi network is considered. This network is isolated from the home network. Segmenting the network allows it to improve its security and optimize the network's performance. A segment is a logical interface that can include one or more physical interfaces. Within a single segment, all interfaces are combined into a network bridge. The segment settings include the following parameters — network identifier (VLAN ID), IP parameters (IP address, subnet mask, DHCP server, IP address lease time), access profile for unregistered devices, IGMP Proxy And PPPoE transit connections (PPPoE Pass Through).
1. Using network segments, you can create an additional local network in the router. To add a new segment, press '+' while on the 'Home segment' page and then configure the new segment (select network ports and specify other necessary parameters).
2. On the same page, you can configure the main Wi-Fi and guest Wi-Fi network. For additional info, please refer to the following articles:
3. To bind segments to the LAN ports of the built-in switch, please use the 'Ports and VLANs settings' section. In our case, port 2 is included in the Guest segment, and the remaining ports belong to the Home segment.
If you use VLAN, you can specify VLAN ID and bind the required ports to the segment.
4. In the 'IP settings' section, you can make changes to the local IP address and DHCP settings (for example, change the IP address lease time). You can find additional information in the 'Changing IP and DHCP settings in the Home segment' article.
In this section, you can disable NAT, if necessary, and enable mDNS and DNS-SD messaging between all network segments.
5. In the 'Connection policy for unregistered devices' section, you can choose a profile, which will be applied to all unregistered devices within the segment. For example, in the Home segment, set the profile 'Without Internet access' for all unregistered devices. In this case, only registered devices will have Internet access.
NOTE: Important! Firewall rules take precedence over this setting.
For more information, see How to block Internet access of a home network device.
6. In the 'IGMP Proxy' section, you can enable the IGMP Proxy option (by default, it's disabled), allowing devices to receive IPTV. IGMP proxy relays IGMP protocol between interfaces. IGMP (Internet Group Management Protocol) is a network protocol that manages group data communication (multicast) in IP networks.
7. The 'PPPoE pass-through' section allows you to enable the transit of PPPoE connections to an external server initiated directly from home network devices.
This section is only displayed in the web interface if the 'IGMP/PPPoE proxy service' component is installed in the router.
For more information, see the article PPPoE pass-through.