Bug with AC networks and network isolation

[pstonethompson]

I have attempted several times to set up network segmentation and isolation and been frustrated by an apparent bug with DHCP on the AC networks.

Here's a network map-

Default/Private interface group (192.168.1.x):

• P1
• P2
• P3
• P5/EWAN
• Private-WiFi-AC
• Private-WiFi

Guest interface group(192.168.2.x):

Client isolation. Internet access only. LAN side firewall.

• Guest-WiFi
• Guest-WiFi-AC

Devices group (192.168.3.x):

Used by phones, tablets and anything they need to talk to directly (e.g. Chromecasts, satellite box, Roku etc.). LAN side firewall.

• P4
• Wireless
• Wireless-AC

Isolated network (192.168.4.x):

Strong password and used for owned devices that only need internet access. Client isolation. Internet access only. LAN side firewall.

• Isolated-WiFi
• Isolated-WiFi-AC

Attempting to connect to any of the AC networks in an isolated group will fail with a DHCP error if "Groups Isolation" is enabled. I have also been able to get in the state where items on the devices group are able to obtain IP addresses from the private network (192.168.1.x), connect to the internet and the router configuration page, but not other devices on the wired network port (P4) or wireless N access point. This persists until a router reboot when the DHCP error starts.

Is this a known issue? Can I group N and AC networks in this way? Is there a bug with AC networks and network grouping?

DHCP vendor IDs are blank for all interface groups.

[pstonethompson]

Model is BiPAC 8900AX2400 and firmware version is 2.52.d27.

[billion_fan]

I have attempted several times to set up network segmentation and isolation and been frustrated by an apparent bug with DHCP on the AC networks.

Here's a network map-

Default/Private interface group (192.168.1.x):

• P1
• P2
• P3
• P5/EWAN
• Private-WiFi-AC
• Private-WiFi

Guest interface group(192.168.2.x):

Client isolation. Internet access only. LAN side firewall.

• Guest-WiFi
• Guest-WiFi-AC

Devices group (192.168.3.x):

Used by phones, tablets and anything they need to talk to directly (e.g. Chromecasts, satellite box, Roku etc.). LAN side firewall.

• P4
• Wireless
• Wireless-AC

Isolated network (192.168.4.x):

Strong password and used for owned devices that only need internet access. Client isolation. Internet access only. LAN side firewall.

• Isolated-WiFi
• Isolated-WiFi-AC

Attempting to connect to any of the AC networks in an isolated group will fail with a DHCP error if "Groups Isolation" is enabled. I have also been able to get in the state where items on the devices group are able to obtain IP addresses from the private network (192.168.1.x), connect to the internet and the router configuration page, but not other devices on the wired network port (P4) or wireless N access point. This persists until a router reboot when the DHCP error starts.

Is this a known issue? Can I group N and AC networks in this way? Is there a bug with AC networks and network grouping?

DHCP vendor IDs are blank for all interface groups.

Please submit a ticket on the following link, providing a backup of your config with the admin password set back to admin, so we can load your settings here and investigate.

http://www.billion.uk.com/esupport/inde ... ets/Submit

[billion_fan]

Ticket received I will check the config once our test bench becomes free

[pstonethompson]

Is there any update on this? If I cannot resolve the issue by the end of November then I will have no choice but to return the router and replace it with equipment from someone other than Billion.

At present it is not fit for purpose as there is only IP/subnet separation between segments of the network that should be isolated from each other - I cannot get interface groups and groups isolation to work.

[billion_fan]

Is there any update on this? If I cannot resolve the issue by the end of November then I will have no choice but to return the router and replace it with equipment from someone other than Billion.

At present it is not fit for purpose as there is only IP/subnet separation between segments of the network that should be isolated from each other - I cannot get interface groups and groups isolation to work.

No update yet, still chasing our engineers