A Guest LAN can be added as a dedicated network to provide visitors with internet access and avoids providing credentials for other networks.
The Guest LAN is separate to but coexists with an existing bridged LAN or routed (NAT) LAN or LANs.
The policy on the Guest LAN can be set so that clients only have access to the internet and cannot
access anything else on the LAN, including other connected client devices.
Guest LANs typically provide Wi‑Fi access but not wired Ethernet access, so VeeaHub ports do not need
to be associated with a Guest LAN.
Configuring a Guest LAN
Clients on a guest LAN use a separate IP subnet and the LAN is configured in routed (NAT) mode.
IP Subnet Selection
In future releases the IP subnet will be chosen automatically based on the Gateway VeeaHub Model
according to the following table.
| VeeaHub Type | Primary Subnet | Secondary Subnet |
| VHE09/10, VHH09/10 | 10.100.3.0/24 | 172.20.3.0/24 |
| VHC25, VHC25 PoE | 10.100.23.0/24 | 172.20.23.0/24 |
If the primary subnet clashes with a WAN or LAN network, the secondary subnet is selected.
For now, the subnet is manually chosen when the Guest LAN is configured.
Guidelines and Constraints
Items to note when configuring a Guest LAN:
- A Guest LAN is configured on the Gateway Node for the mesh
- The Guest LAN adds to, but is separate from other VeeaHub LANs
- The LAN and associated Wi-Fi access points are configured separately
For item 1, the LAN is automatically added to all Mesh Nodes and so is a mesh-wide configuration.
For item 2, once the guest LAN is created, it can be used immediately.
For item 3, all configuration changes are made before the change is applied.
Guest LAN after Configuration
The Guest LAN can be accessed from any Mesh Node in the VeeaHub mesh.
The example shown is for a wired daisy chain mesh but may be a single Gateway VeeaHub or a wired multi‑node mesh with dedicated or existing network switches. See vMesh: Wired Installation for more information.
The mesh may also be wireless or a combination of wired and wireless.
In the diagram, the LAN is shown extending across the whole VeeaHub mesh network including the
switch and wired Ethernet. However, Guest LAN packets are encapsulated over a VXLAN tunnel between
VeeaHubs.
For the purposes of this article, this is still a good representation as only wireless clients can connect to the Guest LAN and there are no assigned LAN ports.
Control Center
Information on how to access Control Center is available in Introduction to Control Center.
Mesh Selection
Click on the Meshes tab on the left sidebar.
Select the mesh on which to configure a Guest LAN.
VeeaHub Settings
In the VEEAHUBS ON THIS MESH dialog, click on the Gateway Node.
Click VeeaHub Settings .
Click Local Area Network in the right menu sidebar.
Here, only a default LAN is configured and the next LAN entry is available to configure.
Add a Guest LAN
Open the next free LAN entry using the > button and then update the LAN settings.
The fields listed in the following table are entered.
| LAN Field | Description |
| Enable | Slide the toggle on the LAN header to the right |
| Name | A name for the LAN, here Guest LAN is used |
| Wi-Fi APs / Ethernet Ports | Here the 2nd 2.4GHz and 5GHz APs are assigned. No ports are assigned |
| IP Subnet | 10.100.3.0/24 is used but any IP subnet can be configured |
| Client Isolation | Enabled. Clients can only connect to the internet. |
For Wi-Fi APs / Ethernet Ports the 2nd 2.4 and 5GHz AP entries are available to assign to the
Guest LAN. You can confirm this be checking the first (default) LAN entry to see what APs have been
assigned.
Typically, only a single 2.4GHz AP and 5GHz AP is needed for a LAN, so LANs and APs are configured in
step.
There are no Ethernet LAN ports assigned to the Guest LAN, it is for use by Wi‑Fi clients only.
The other fields are left with default settings and the Guest LAN is configured as a routed (NAT) LAN.
VeeaHub 2.4 GHz AP Settings
Click 2.4GHz AP in the right menu sidebar.
Only one 2.4 GHz AP is already configured and the next is available for the Guest LAN.
Add a Guest 2.4 GHz AP
Open the next free 2.4GHz AP entry and update.
The fields listed in the following table are entered.
| AP Field | Description |
| Enable | Slide the toggle on the AP header to the right |
| Alias | A name for the AP, here Guest is used. Can be omitted |
| Wi‑Fi Network Name (SSID) | The name of the SSID to be transmitted, again Guest is used |
| Security Type | Select Open if no password is required, PSK for a passphrase |
If the PSK is selected, then click on Configure to enter the passphrase.
WPA Mode and other 802.11 options can be configured but these are left as default here.
The SSID is shown as Guest (Network) in the header bar. This indicates the SSID is configured
across the VeeaHub mesh.
An SSID can be renamed or disabled on any VeeaHub in the mesh.
VeeaHub 5 GHz AP Settings
Click 5GHz AP in the right menu sidebar.
Only one 5GHz AP is configured and the next is available to configure.
Add a Guest 5 GHz AP
Open the next free 5GHz AP entry and update as shown.
The fields listed in the following table are entered:
| AP Field | Description |
| Enable | Slide the toggle on the AP header to the right |
| Alias | A name for the AP, here Guest is used. Can be omitted |
| Wi‑Fi Network Name (SSID) | The name of the SSID to be transmitted, again Guest is used |
| Security Type | Select Open if no password is required, PSK for a passphrase |
The SSID can be configured to distinguish between 2.4GHz and 5GHz access points if required. 2.4GHz has better range depending on the environment but 5GHz supports higher throughput and naming as Guest and Guest-5G will allow the user to decide. Leaving as Guest just keeps the selection simpler for the end user.
If the PSK option is selected then click on Configure to enter the passphrase.
WPA Mode and other 802.11 options can be configured but these are left as default here.
At this time there are no differences between the 2.4GHz and 5GHz PSK configuration options.
Apply Configuration Changes
Click Apply Changes in the top right. All changes are applied.
After a short period of time the new Guest LAN becomes operational and Wi‑Fi clients can then connect to the new Guest LAN.
The overall mesh status shows whether the Guest LAN is now operational.
This is also shown for the LAN status.
Also, the 2.4GHz access point status.
And finally, the 5GHz access point status.