For the mom who gives us everything - Mother's Day gifts that connects us.
jmann11's profile

Contributor

 • 

3 Messages

Saturday, January 5th, 2019 2:13 AM

What is the "Private LAN" option when setting up guest network?

On the 5268ac router, what is the "Private LAN" option when setting up guest network?  That is, what is the difference if it is enabled versus disabled?

Accepted Solution

Official Solution

Community Support

 • 

231.6K Messages

5 years ago

Hello @jmann11

 

On a private network, Windows enables network discovery features and allows other devices to see your computer on that network. On a public network, Windows would disable the discovery feature so that any and everyone can't see your device. Basically, a private LAN would keep your devices from being discovered by others.

 

If you have any other questions, let us know!

 

Aminah, AT&T Community Specialist

Contributor

 • 

3 Messages

5 years ago

Thanks for the info!  So it is more secure to keep private lan enabled, correct?

Community Support

 • 

231.6K Messages

5 years ago

Hi @jmann11,

The number one thing to avoid as the WiFi host is giving out your secure networkpassword. ... A good wireless access point can create a separate network for guest. And if your guests were clever enough to find your server, they wouldn't be able to access it from this connection.” The guest network should be locked down. 

Thank you for reaching out to AT&T's Community and Forums Team.

Lafayette, AT&T Community Specialist

 

Contributor

 • 

3 Messages

5 years ago

Sorry for my confusion.  For settings under Wifi -> Guest Network:

 

"Private Lan = Enabled" means guest computers can NOT see the other computers on the LAN

"Private Lan = Disabled" means guest computers CAN see the other computers on the Lan.

 

Is the correct?

 

Thanks!

Community Support

 • 

231.6K Messages

5 years ago

Hi @jmann11!

No worries, we've got you covered! To Enable private network allows you to add a second interface to your server with a private IP that is not publicly accessible.

Hope this helps!

Yetty, AT&T Community Specialist.

Tutor

 • 

7 Messages

5 years ago

Not going to answer, are they?

 

"Private" LAN enabled means that the device attaching will use network discovery (if it is set up to do so on private networks), and that your guest network will allow this to a point (printers, etc.)

 

Private LAN disabled means that no network discovery will occur, no matter how the attaching device is so configured.  And most are these days, especially business devices.

 

So from this standpoint, disabling the private LAN is most secure.  However, if the guest network is disabled then the whole thing is moot.  Current best practice is to have a separate WAP for guests to use, or do not allow guests you don't trust to attach to your network.  My $0.02, I have been wrong before even today, YMMV, etc.

New Member

 • 

1 Message

4 years ago

IT guy for 20 years and this is most confusing answers I've ever seen. So I downloaded a network device monitor app and scanned for other devices with my phone connected to the guest network for each value.

Private LAN: Enabled - Only 2 results. (My phone and guest gateway IP)

Private LAN: Disabled - I was able to see the IP's (and some hostnames) of all my devices connected to the regular network wired and wireless.

Answer - Enabled is more secure

New Member

 • 

4 Messages

100% ... An ATT Employee should have definitely chimed in order to provide an appropriate solution for these guys.  Jus signed up in order to be able to like this comment. Personally, in 2012 was the 1st time I decided to become a lil tech savvy bc I couldn't copy or paste; didn't even know how to power off a computer appropriately. Today, I'm fluent with Linux, Macos, Windows 7, 8 & 10 & their terminal/command line interfaces. Today one could classify me as a geek & what can I say?? One Geek loves another & we depend on each other immensely, especially when troubleshooting. It was forums like these & many others for which I depended on for the appropriate solutions...   

New Member

 • 

4 Messages

100% ... An ATT Employee should have definitely chimed in order to provide an appropriate solution for these guys.  Jus signed up in order to be able to like this comment. Personally, in 2012 was the 1st time I decided to become a lil tech savvy bc I couldn't copy or paste; didn't even know how to power off a computer appropriately. Today, I'm fluent with Linux, Macos, Windows 7, 8 & 10 & their terminal/command line interfaces. Today one could classify me as a geek & what can I say?? One Geek loves another & we depend on each other immensely, especially when troubleshooting. It was forums like these & many others for which I depended on for the appropriate solutions...   

 

New Member

 • 

1 Message

4 years ago

Jon_DotKom your answer was too cryptic.  By saying 100% are you attempting to agree with jb79. ??  Enabled = more secure.  Hope so, because he sounds the most intelligent on this, because he provides test data for his answer.  I notice that jmann11 is guessing that is correct also.

 

Not finding what you're looking for?
New to AT&T Community?
New to the AT&T Community? Start by visiting the Community How-To.
New to the AT&T Community?
Visit the Community How-To.