SSID Configuration
SSID Configuration
Last Updated: 2025-12-26
Status: Production
Overview
The GL-BE3600 router provides multiple WiFi networks (SSIDs) for different purposes. This document details the configuration for each SSID.
SSID 1: BlueflySecure
Purpose: Computer/workstation network
Configuration
- SSID Name:
BlueflySecure - Security: WPA3
- Client Isolation: OFF
- Admin Access: Allowed
- Tailscale: Enabled
- Subnet: Uses router default (192.168.8.0/24)
Use Cases
- Primary development workstations
- General computer access
- Work-related devices
Security
- WPA3 encryption
- Devices can communicate with each other
- Router admin access allowed
- Tailscale enabled for secure remote access
SSID 2: Bluefly-Agents
Purpose: Agent network (dedicated agent infrastructure)
Configuration
- SSID Name:
Bluefly-Agents - Security: WPA3
- Client Isolation: OFF
- Admin Access: Allowed
- Tailscale: Enabled
- Subnet: 192.168.8.0/24
Use Cases
- Agent infrastructure devices
- Kubernetes nodes
- Development servers
- Services requiring agent network access
Security
- WPA3 encryption
- Devices can communicate with each other
- Router admin access allowed
- Tailscale enabled for secure remote access
- Dedicated subnet for agent infrastructure
SSID 3: Bluefly-Agent-Guest (Optional)
Purpose: Guest network for temporary access
Configuration
- SSID Name:
Bluefly-Agent-Guest - Security: WPA2/WPA3 mixed
- Client Isolation: ON
- Block Router Access: Enabled
- Tailscale: Disabled
Use Cases
- Temporary guest access
- Devices that don't need agent network access
- Isolated network for untrusted devices
Security
- WPA2/WPA3 mixed encryption
- Client isolation prevents device-to-device communication
- Router admin access blocked
- Tailscale disabled (no remote access)
Network Topology
GL-BE3600 Router (192.168.8.1)
† BlueflySecure (WPA3, Tailscale enabled)
‚ † Workstations, computers
‚
† Bluefly-Agents (WPA3, Tailscale enabled, 192.168.8.0/24)
‚ † Agent infrastructure, services
‚
† Bluefly-Agent-Guest (WPA2/WPA3, isolated, no Tailscale)
† Guest devices
Best Practices
- Use Appropriate SSID: Connect devices to the correct network based on purpose
- Agent Infrastructure: Use Bluefly-Agents for all agent-related devices
- Guest Access: Use Bluefly-Agent-Guest for untrusted devices
- Security: Always use WPA3 when available
- Isolation: Keep guest network isolated from agent network
Related Documentation
- GL-BE3600 Configuration - Complete router configuration
- Firewall Rules - Security configuration
- Network Overview - Complete network architecture