If the standard toggles don’t fully isolate your guest network, the AX1800 runs a Linux-based OS. You can SSH into it (if developer mode is enabled) and add a manual iptables rule.
Warning: This voids some warranty protections and requires technical skill.
This manually blocks all traffic between the guest bridge and the LAN bridge.
Even after setup, you might face issues. Here are the fixed solutions. create guest network on xiaomi mi router ax1800 fixed
The Problem: Your guest device gets an IP address (e.g., 192.168.31.200) but cannot load web pages.
The Cause: The AX1800 sometimes fails to route Guest VLAN traffic to the WAN DNS. It tries to use the router’s own internal DNS (127.0.0.1), which guests cannot access.
The Fix (Manual DNS):
To make the guest network fixed (consistent, isolated, and stable):
| Setting | Recommended value |
|--------|------------------|
| SSID | Choose a fixed name (e.g., Guest_Network_Fixed) |
| Password | Set a permanent password |
| Encryption | WPA2-PSK (or WPA3 if supported) |
| Guest Access | Enable |
| Allow access to Intranet | DISABLE (keeps guests from seeing your main devices) |
| Band | 2.4 GHz only (for wider compatibility) OR both 2.4 + 5 GHz |
| Bandwidth limit | Optional – set a fixed max speed per client |
| Max connected clients | Fixed number (e.g., 10) |
| Hidden SSID | ❌ Disable (unless you want a hidden fixed network) |
💡 The key to “fixed” is disabling intranet access and using a permanent SSID/password. If the standard toggles don’t fully isolate your
The Fix:
This is a known bug on the AX1800. Go to Settings > Guest Wi-Fi and re-save the same settings (change nothing, just click Save). Then, go to System > Restore & Backup > Restore Router to Factory Defaults (only as last resort). After resetting, the first thing you configure must be the guest network before any other complex rules.
The Fix:
This usually means your guest network is stuck on 2.4 GHz interference.