how to hide local IP addresses of connected devices on guest net

linuxpc4me · Jun 30, 2020, 4:37 PM

Hello All!

I have PfSense 2.4.5 running with 1 WAN port, 1 LAN port and several VLANS. I created a Guest VLAN and set rules blocking it from all other LANS as well as the PfSense firewall.
I cannot figure out how to hide all devices connected in the Guest VLAN from each other.

How can I prevent a person from discovering any other laptop, tablet, etc. on the network?

Thanks for any suggestions

viragomann · Jun 30, 2020, 4:58 PM

pfSense is only able to block traffic who passes it. Traffic between devices within the same subnet does not pass the router.

However, assuming your guest VLAN is a wifi, you may be able to prevent communication between its connected devices on the access point. There may be an option called "inter client communication" or "client Isolation" or something similiar.

linuxpc4me · Jun 30, 2020, 6:13 PM

Thanks

johnpoz · Jun 30, 2020, 6:23 PM

Yeah I would assume when you say guest is wifi.. This would be done on the wireless.. unifi you would have to enable guest policy.

On a wired network is often called private vlan.. Neither of these options have anything to do with what pfsense does.