Put wired device on to private network

[thomper]

I have a wired device (Samsung Smartthings hub).  I want to keep as many devices off of my private network as possible (less likely to have other devices on it hacked).  I know this is possible for wireless devices but I am unable to find how to do this for wired devices anywhere.

Your help would be most appreciated

[olavrb]

That's not possible with Nest Wifi. In fact it's not common functionality for most home network equipment.

For seperating wired deviced it's most common to use VLAN tagging, but that's advanced networking and out of scope of what this community is about. 🙂

[thomper]

I'm by no means a network engineer, but it seems to me that by selecting the public Wi-Fi network to connect with, it is setting up a vlan (and the reason I ask the question)...

Strikes me that this work is being done by the point acting as the router, so why does it really matter whether a device is connected to the Wi-Fi or ethernet? The Mac address is presented to the router that decides which network to put the device on... 

[olavrb]

The only ethernet port on the Nest Wifi does not speak VLAN. If it did, you would have to have a managed switch connected to it that could take multiple VLAN tags to it (aka trunking), then it could put devices on different ports on different untagged subnets.

But this will likely never come to Nest Wifi. For such functionality out of the box, check out products like Ubiquiti UniFi or Cisco Meraki Go for instance.

---

There are other jank workarounds that kind of could give you what you want, like setting up a inner network inside Nest Wifi, double NAT essensially.

[AbigailF]

Hey folks, 

Thanks for lending a hand, @olavrb.
@thomper, I wanted to follow up and see if you are still in need of any help. Please let me know if you are still having any concerns or questions from here, as I would be happy to take a closer look and assist you further.

Thanks,
Abi

[thomper]

Hi @AbigailF. I would love to know how to isolate an ethernet device from my private network using nest wifi. @olavrb said that it doesn't support vlan... Is there any way to protect my network from potentially rogue devices from attacking my other devices?

[Jeff]

Hey thomper,

As olavrb said, those advanced security and network management features are not likely to become available natively in the Google and Nest WiFi lines. Your best option for advanced security needs are to look into 3rd party software and hardware options. Still, I'm happy to pass your comments along to our internal teams in the form of a feature request.

Thanks,
Jeff

[Jeff]

Hi thomper,

I just wanted to check in real fast to see if you saw my reply and to find out if you still needed any help on this. If you're still needing assistance, please just let me know and I'll be happy to continue helping.

Thanks,
Jeff

[thomper]

Per your response, I've given up on this quest and assume that it will never be solved with this hardware/firmware.  Perhaps the folks at OpenWRT may look into it at some point

[Jeff]

Hi thomper,

I understand it's not the answer you were looking for. We've passed the comments along to our internal teams and they'll receive them as a feature request. Aside from that, is there anything else I can do for you on this? 

Thanks,

Jeff

[Jeff]

Hey everyone,

It looks like we've slowed down here. We'll be closing up the thread in the next day unless anyone else has any input or needs anything else. If so, just let me know and we can keep this open a bit longer.

Thanks,
Jeff