Forums

Security difference between unchecking diagonal vs separate VLANs

• Author
  Posts
• September 10, 2025 at 6:38 pm #6913
  Rocket88

  Participant

  I intend to extend my network by using moca ethernet to a second access point in my home. Since this secondary access point is not a pcWRT device (at least not for now) I understand I will only be extending one VLAN to the second WiFi access point.

  Originally my plan was to use separate VLANS for my IOT devices and my Guest network.

  It appears that as long as I go to Settings/Network VLAN section and uncheck the diagonal box for Guest to Guest I should have the same degree of protection.

  -Am I correct? Or possibly this gives Layer3 isolation but no Layer 2 isolation?

  I am very pleased with this purchase, but it requires careful consideration and setup so I may be asking a number of questions. Thanks for the product and the support.

  September 11, 2025 at 2:49 am #6918
  support

  Keymaster

  Unchecking the diagonal box prohibits communication between devices connected to the same VLAN (e.g. Guest). It turns on Wireless Client Isolation for WiFi and blocks communication to/from devices connected the VLAN via Ethernet.

  On the other hand, VLAN separation could block communication across VLANs but give you the option to allow communication between devices on the same VLAN.

• Author
  Posts