2
I am wanting some ideas and advice for how to do my home network. I am an IT Technician and know the basics, however networking is not my strong suite and I want to improve.
[Current setup]
There are two family's in my house so I need to segregate the networks. I have a TP-Link Arch c9 router(R1) connected to the internet box. Next I have my Asus RT68R (R2) connected to lan port of R1 and hosting the network for the reset of the house. The other family has their Linksys Router(R3) also connected to lan port on R1. All routers provide their own network with DHCP I understand that this is called triple nating and may cause some issue or latancy. R1 Has ip scheme of 10.0.20.x and R2 has IP scheme of 192.168.1.x R3 i dont know for sure but I believe it starts with 10.something. I belive all routers subnetmasks are set to 255.255.255.0 Not fully sure for R3 as I dont have access to their router.
Behind R2 is a file and domain server 2016 data center with 4-5 desktops and 2-3 wireless devices. R2 Also has a wireless ssid for the network and a guest ssid. R2 has a static ip from R1 and is on DMZ to allow for vpn access to R2 file server
[Problem]
The family that uses R3 has a problem every now and then were their router loses internet and the only thing that fixes it is rebooting R1 and some times even have to reboot all routers and internet box. To trouble shoot the issue I have tried scanning the network for R3 and pinging it from a device behind R2 But dose not find or see it how ever I can see R1 just fine. I talked with some co-workers and they believe the famly using R3 has configured something on their router that causes it to some times boot to a different setting like AP mode or bridge mode. Also discovered if I disable DHCP on R1 internet works fine for R2 and R3 but after a while R3 loses internet.
[What I would like to do]
I want to completely segregate R2 and R3 so they are not communicating at all to remove any type of conflict or issue that may be caused by the current setup. Behind R2 I would like to have a couple subnets for various devices to improve the security for more important devices. Example would be R2 main network With domain server and general home devices like media computer or roku or fire tv stick ect. Next would be a subnet for more personal device that may contain more important documents and files but I still want them to be able to communicate with the domain server and file server for network drive. Lastly I want two subnets one that is for testing purposes and fixing computers that may be infected so cant communicate with any other networks. The second would be for guests.
I understand some of what I want to do may cost more money and a firewall would be a good idea to help segragate R2 and R3 I just wonder if its at any way possible for me to do with type of setup with consumer grade routers and waps or if I really need business grade firewall/ managed switchs and waps
I have thought about buying some newer routers like netger xr500 or asus ac3100 and ubiquity waps.
Last question. is it possible to setup a guest ssid network on my asus router and assign devices on the lan ports to that network or is the guest network only accessible via wifi
I appreciate any help or advice any one has to offer.
1Regarding the last question about guest network, I believe that is only on wifi. Haven't heard of guest network that is wired on the same router. A possibility is a wifi guest network and a access point that connects to the guest wifi. This will then be an access point with cable connections (and some models wifi repeat) as a guest network of your router. – Andreas – 2018-08-31T03:01:56.650