looking to segregate home office from rest of the home

[JasonJ]

We have bedroom and livingroom TVs, Xbox, laptops, tablets, phones ect all discoverable within the same network. It's super handy, as it let's us cast to a TV, Echo, Chromecast from any device, however I'm looking to segregate devices in my home-office from the rest of the home.

I don't want my office devices (computer's network paths, printer/scanner/copier, etc) to be discoverable by the other devices in the home. Just thinking I could acomplish this by adding a router in the Office, this router would be discoverable by the house, but anything connected to it wouldn't be, because it would be on it's own subnet... does that sound about right?

Recently looked at a Linksys router, but was unsure if it could connected the Shaw BlueCurve WiFi, and rebroastcast a seperate/different SSID for the home-office devices. 

Any advice, looking for a setup that'll compartmentalize the home from the office, TIA!

[mdk]

> Just thinking I could acomplish this by adding a router in the Office,

Good idea.

> this router would be discoverable by the house.

This router would be a "client" device on your private network, i.e., discoverable by all your other devices, but the device(s) on the "LAN" side of your router would not be discoverable -- the router will block all "unsolicited" network-traffic from reaching your "home-office" device(s).

If your router has wireless capability, its SSID will be visible to any wireless device within your home. But, if you don't share the password for that SSID with any of your devices, other than those inside your home-office, those other devices will not be able to make a WiFi connection.

> anything connected to it wouldn't be, because it would be on its own subnet.

Correct, because the router will block all "unsolicited" incoming network traffic. Compare to having a security-guard at your front door. Any uninvited visitor will be refused entry into your home.  If you tell the security-guard to escort the visitor into only one room, that visitor will be restricted to access just that one room -- not all the rooms (and the computers in those rooms) inside your home.

[Extendio · Accepted solution]

You might look into to get a separate Internet / WiFi from Shaw Business.   If you have a separate office area in the house, then Shaw will install a Cisco Meraki Wireless Access point.  Upsides are WiFi quality is excellent and you can have 2 networks (private and guest) plus ShawGo WiFi (which you can asked to have this turned off) and Shaw will professionally install the WiFi access point.  Downside is that the Meraki service tracks a lot of data about users.  But then again in the age of Facebook we are all being surveyed.

If you want a truly separate service, then Shaw Business might be the way to go.  Or, maybe, overkill.  Good luck!

[rstra]

Your idea would work, you would need second ip from Shaw. 

[mdk]

> Monday

That is the day that the message was posted.

> Your idea would work; you would need second IP from Shaw.

No, you do not "need" to get that complicated.

Just use an Ethernet cable to connect one of the "LAN" ports on the Shaw device to the "Ethernet" ("up-link") port on the third-party router.

All "unsolicited" network traffic hitting the "uplink" port on the third-party router will be discarded, making "invisible" all the devices (wired or wireless) that connect to the third-party router. All the "home-office" devices connected to the third-party router will have full Internet access.

QED

[TastyChimera]

I know this is old but there is another solution to this setup that I feel anyone stumbling across this might be able to use. Shaw's XB6 modems have an option to place a home security network on Lan Port 2 and it will segregate all traffic on that port from the main network. You should be able to plug your router into that port and create a network easy peasy without worrying about configuring subnets.  

Came across this as a top result on a google search and didn't see this info anywhere here so I thought I'd throw my two cents in 🙂