Messages

there's a chance he isn't attacking my devices but going forward I think its best to keep a Guest LAN configured, as well as a Guest WIFI

so I already have a guest wifi through the super hub

Like you've mentioned the google mesh wifi, is there a similar one which allows me to have Ethernet guest ports? a switch that allows Ethernet and WIFI Guest, isolated from rest of the network sounds great, though my main concern at the minute is Ethernet. Or a cheap managed switch that can be configured to seperate itself from rest of the network via vlan or some clever options?

Update, my super hub 3 has IP filtering rules, so I can potentially set 'unsecure' device's IP, and block it from communicating with 'secure devices' IP addresses. So this can potentially block the device talking to it, will that stop sniffing for that secure device? or only stops it from pinging etc, if so I can manually add our main computer IP's?

thank you for detailed responses. For peace of mind do you know what checks I can do on the PC (Windows 10) to see if there is any hidden traps he can be using to sniff out the network or anything suspicious? Also can he sniff out passwords, websites another PC is using on the network if the PC he remotely accesses is rigged with something? (Without me even knowing even though I'm using the PC and he has remotely connected on - telnet or CMD style access)

Other than that would you recommend any cheapish switch I can plug the LAN into then create a filtered Guest VLAN of some sort? which can also be a WIFI extender for a Guest wifi too? That way my Main Router is used by my trusted devices, and 1 LAN connection out of that router then goes into a 'potential' switch or router which is set up to be a Guest LAN and WIFI? I really think this sounds like the best plan as Super Hub does not seem to have many security features unless I've overlooked it

I appreciate further help and advice 

For example:
My nosey friend has remote access to our shared windows machine, which is LAN connected to my main internet router, and this computer is running 24/7.
When they visit they also use a LAN port to get connected to their laptop

With remote access and full admin control of the shared computer, I'm not sure what the exact risks out there are to sniffing my personal data from my other LAN & WIFI connected devices etc, but I think its essential I work on getting the shared device, and guest lan connections isolated from the rest of the network.

If theres no free solution (or anything I can do to make use of the spare Super hub 2), I can buy a recommended switch or hardware that can help me achieve this

Thanks in advance for any help and advice

I'm Dav and have some computer knowledge and hoping to improve my awareness and skills around networking to make my home secure

I have VM Super hub 3, and want to isolate LAN connected guests so they cannot sniff around my network and see personal devices in any way

Can I restrict via Mac addresses at all?

I have a spare Super hub 2 which I have tried to do this but no luck - I've got a connection through it but no idea how to restrict LAN connected devices to treat them as Guests

I do have a guest WIFI set up, but this is no good for LAN guests

Any help and advice is very much appreciated as trying to secure my home network.