Why not have a guest network outside your normal LAN and DMZ, which only routes to the internet via a dedicated VPN?
Too much work :) Plus VPNs cost money which I'm not gonna spend for something I use so rarely...
But yeah mostly I just haven't had reason to bother yet, since I already consider my phone an unsecured network anyway...putting an additional guest network fully outside of my existing LAN/DMZ would be a lot more work than just plugging in an extra router, because I've got two LANs already, one for my personal systems and one for servers, and I've got multiple domain names that route to my home with a reverse proxy set up to route the incoming requests, and I usually block stuff off when I'm not using it so then I'd end up enabling/disabling everything two separate places and having to screw with triple NATing...easier to just use the phone :)
At some point I'll probably set up something like that...although more likely it'll just be public wifi on a parallel LAN with half the internet blocked anyway because screw anyone who wants Facebook ;) But I'm working on other parts of my network right now, I'll get around to that when I actually need it...
(Score: 2) by urza9814 on Friday November 10 2017, @08:17PM
Too much work :)
Plus VPNs cost money which I'm not gonna spend for something I use so rarely...
But yeah mostly I just haven't had reason to bother yet, since I already consider my phone an unsecured network anyway...putting an additional guest network fully outside of my existing LAN/DMZ would be a lot more work than just plugging in an extra router, because I've got two LANs already, one for my personal systems and one for servers, and I've got multiple domain names that route to my home with a reverse proxy set up to route the incoming requests, and I usually block stuff off when I'm not using it so then I'd end up enabling/disabling everything two separate places and having to screw with triple NATing...easier to just use the phone :)
At some point I'll probably set up something like that...although more likely it'll just be public wifi on a parallel LAN with half the internet blocked anyway because screw anyone who wants Facebook ;) But I'm working on other parts of my network right now, I'll get around to that when I actually need it...