Separate WLAN
The separate WLAN provides internet access that is isolated from the local network (LAN). Users can browse the internet wirelessly but have no access to the corporate infrastructure (servers, printers, NAS, etc.).
Legal notice
Anyone providing third parties with internet access bears responsibility for any abusive activities carried out via that access (e.g. cybercrime). For professionally operated public WLAN access points, there is an obligation to identify users.
Typical use cases
- Guest WLAN in the office: Visitors and customers get internet access without access to internal resources
- Protection against malware: Unknown or insecure devices are isolated from the corporate network
- BYOD (Bring Your Own Device): Connect employees' personal devices to the separate network
- Maintenance technicians: Provide external service providers with temporary internet access
Configure separate WLAN
In the router portal under WLAN → Separate WLAN:
- Activate separate WLAN — Set the slider to ON
- Network name (SSID) — Assign a dedicated name for the guest network
- Password — Set a strong password (min. 16 characters on CB3.0)
- Encryption — WPA2/WPA3 recommended
- Frequency band — Combined (2.4 GHz + 5 GHz) or separated selectable
- Save
Use a different password for the separate WLAN than for the main WLAN. This way you can change the guest password at any time without having to reconfigure your own devices.
Limitations
- The separate WLAN cannot be extended with the Business WLAN-Box (no Mesh support)
- When the function "Public IP from all LAN ports" (Fix IP) is activated, the separate WLAN cannot be used
- With BNS/EC-S contract: Settings are managed centrally in the EC Dashboard
FAQ - Separate WLAN
What is the difference from the main WLAN?
The separate WLAN is completely isolated from the local network. Devices on the separate WLAN can only use the internet — no access to servers, printers or other LAN devices.
What to do if the signal doesn't reach everywhere?
Place the Centro Business centrally and freestanding. Since the separate WLAN cannot be extended via the Business WLAN-Box (Mesh), placement is particularly important.
Is providing a guest WLAN legally permissible?
Yes, but for professionally operated public WLAN access points, there is an obligation to identify users with appropriate means.
Can I restrict the separate WLAN by time?
A time restriction (e.g. only during opening hours) cannot be configured directly via the router portal. However, the separate WLAN can be manually deactivated at any time.
Is something missing here? Give us your feedback!
Help us improve the CB-Guide. Let us know what content you are missing or what we can optimise.
Send feedback