Requires not telling the kids the password to the other SSID used by the parents on a different VLAN, and making sure the kids cannot get the password from your other devices (e.g. This way firewall rules can just be applied to the entire VLAN of that SSID. These are locally controllable/configurable, have a built in RADIUS server, and they do not require license fees in order to download the latest firmware, and while they are no longer being made they are still supported for a few more years.ī.) if you don’t want to use wifi enterprise security, just Get a VLAN aware wireless Access Point and give the kids their own SSID associated with a unique VLAN #. I suggest an HP/Aruba IAP access point used from eBay.

Use mdns forwarding between subnets if required).

non-IOT devices, and put those on a separate VLAN & SSID. Use this Enterprise security on SSID’s that have user-configurable devices (I.e. Get a Wi-Fi AP that has both a built-in radius server and VLAN support, and use WPA2-AES (Enterprise) or newer Enterprise Wi-Fi security which is generally the strongest practical way of identifying each unique user on any Wi-Fi network.

in addition to the suggested solution by I believe 2 other methods can further help with this as well as give you additional traffic control options:Ī.) Strongest solution for this and securing your networks in general that I’m aware of that’s also relatively practical to implement is:.Note: After the MAC Address randomization is turned off, the device will be discovered as a new device on the next connection to the network. Turning it off in your own network will not stop you from enabling it in other Wifi networks, such as Public WiFi. All the existing rules configured for that device may not work any more.įor Firewalla to identify and protect your device properly, please follow the instruction below to turn off MAC Randomization on the network monitored by Firewalla. With MAC Randomization turned on, Firewalla may not be able to track the device because it may be discovered as a new device when it uses another random mac address to connect to the network. It is often called Randomized MAC or Private Address. Nowadays many devices support MAC Address Randomization, which enables the device to use a different random MAC address for each Wi-Fi SSID, to prevent the device's activity and movement being tracked on networks.

Remove wifi network mac address