Groups isolation query

[nightcustard]

I've set up three interface groups on my 8900AX2400 router. The default group is my private network (192.168.1.1/24), the other two groups are two wired networks for guests and testing (192.168.2.1/24 & 192.168.3.1/24). 'Groups Isolation' is ticked.

As expected, I can't ping from one group to any computer on other groups, but unexpectedly I can log into the router's admin page on 192.168.1.1 from a computer on the guest and test networks (eg) 192.168.2.12 or 192.168.3.12.

Is this correct behaviour or might I have some sort of set up error?

I'm running firmware version 2.52.d52

[billion_fan]

I've set up three interface groups on my 8900AX2400 router. The default group is my private network (192.168.1.1/24), the other two groups are two wired networks for guests and testing (192.168.2.1/24 & 192.168.3.1/24). 'Groups Isolation' is ticked.

As expected, I can't ping from one group to any computer on other groups, but unexpectedly I can log into the router's admin page on 192.168.1.1 from a computer on the guest and test networks (eg) 192.168.2.12 or 192.168.3.12.

Is this correct behaviour or might I have some sort of set up error?

I'm running firmware version 2.52.d52

You need to enable the LAN side firewall for the guest and test networks.

Attached is a screen shot example. But be careful, don't enable the LAN side firewall for the private network group, or you will be locked out of the web gui, from your private network.

I would suggest making a backup of your config first, then enable the LAN side firewall for the guest group and the test group.

[nightcustard]

Thanks again BF!

It's good to find a use for the LAN-side firewall setting other than to lock me out of my own router(!) - the functionality seems obvious now you've told me....

Cheers, Mike