How does Guest Network not see devices "above" the eero?

I'm a bit surprised by the behavior I'm seeing and I'd like to understand why things work the way I'm seeing them.

For a variety of reasons, my Internet connection comes into a router/firewall.  One reason is that this provides me some logging of what's coming and and going out.  The internal interface for the router uses a /24 network in the 10.x.x.x space.  The head eero is connected to this router, as is a NAS unit and a Raspberry PI.  My computers are all connecting to the eero (wirelessly or one on a wired connection) and the eeros are set to do DHCP and NAT on a different /24 also in the 10.x.x.x space.  For devices that are on the primary eero network, they can see the NAS and the Raspberry PI just fine.  I can ssh into the pi, I can access the services on the NAS.  Accessing the internet is a double NAT, but I've not seen any issues.  I'm only slightly surprised that this works, and I'm quite happy.

The real surprise is that I turned on the guest network feature and when I'm attached to that network, I get a 192.168.x.x address and I can't see the Pi or the NAS.  In my case, this is exactly the behavior I want.  The stuff on the guest network can get to the internet just fine, but not to anything else on my network, even the stuff that's outside of the eero's sphere.  But, I don't understand what the eero is doing so that the main network can see what's in my DMZ zone, but the guest network cannot.

2replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
  • Hi usethedata – Thanks for joining the eero community, and for the great question!

    In short, the eero guest network is WAN-only by design. No devices connected to it can get access to anything on your main network, the guest network, or any other network. They have a completely isolated connection.

    The devices on your main network are able to access your Pi and NAS most likely because of the settings on your router/firewall. Without knowing what that device is, it's hard to say exactly what is going on there.

    If you'd like to chat more about it, feel free to write or call us and we can look into it with you. We are available at t 1-877-659-2347 or at support@eero.com.

    We look forward to hearing from you!

    Reply Like
  • Thanks for the reply, though it doesn't answer my question.  I'll send the question in by email to support and see if we can get to the relevant details.  

    Reply Like
reply to topic
Like Follow
  • Status Answered
  • 11 mths agoLast active
  • 2Replies
  • 769Views
  • 2 Following

Need Help? We're here for you!

We're big on support, and we want to make sure you always have the best eero experience possible. Here are several resources you can use if you ever need our help!


Quick links

Community Guidelines

Help Center

Contact eero support

@eerosupport

eero.com


Latest from the eero blog

eero, plus peace of mind

Learn more about eero Plus and how our security suite helps to keep both your devices and everyone in your home safe while online.