FRITZ!Box 4020 Service - Knowledge Base

FRITZ!Box 4020 Service

Setting up wireless guest access (private hotspot) in the FRITZ!Box

The FRITZ!Box's wireless guest access offers your guests a private hotspot and allows them to enjoy secure internet access. In this case, the FRITZ!Box provides an additional wireless network (WiFi) with separate security settings so that you do not need to disclose the network key for your private wireless network.

The wireless devices used by your guests (for example notebooks, smartphones) are completely isolated from your home network. They cannot access your devices or the FRITZ!Box user interface. You can have the FRITZ!Box display a personalized captive portal that greets your guests with your own image and text. In addition, you can opt to require guests to consent to terms of use before granting them internet access and then redirect them to a web page of your choice.

Requirements / Restrictions

  • The FRITZ!Box must establish its own connection to the internet via a modem (for example a DSL or cable modem). Guest access is not available if the FRITZ!Box uses the internet connection of another router ("IP client mode"). If the FRITZ!Box uses the internet connection of another FRITZ!Box, proceed as described in this guide.
  • The operating mode "Existing connection over wireless LAN" does not allow you to set up wireless guest access.
  • Devices in the guest network must be configured to automatically obtain IP settings (DHCP).
  • Telephony and other FRITZ!Box functions (such as the MAC address filter, port sharing) are not available when using guest access.

Note:The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS for your FRITZ!Box.

1 Configuring guest access

  1. Click "Wireless" ("WLAN") in the FRITZ!Box user interface.
  2. Click "Guest Access" in the "Wireless" ("WLAN") menu.
  3. Enable the guest access.
  4. For the "Name of the guest radio network (SSID)", enter the name that guests should see when they search for wireless networks.
  5. Select the encryption method from the drop-down list "Encryption". WPA2 encryption offers the best security.
  6. Enter a password of your choice that is between 8 and 63 characters long in the "Network key" field.

    Important:To ensure optimal security, the password should be at least 20 characters long and contain capital and lower-case letters (but not letters such as ä, ë, ö, ü, é, í), digits, and other characters.

  7. Disable the option "Restrict internet applications: Only surfing and mail allowed" if you would like to allow guests to use other forms of internet access.
  8. If necessary, enable the option "Display captive portal with information on the provider of the guest access" and customize the captive portal.

    Important:If you want to have an image on the captive portal, then a USB storage device must be connected to the FRITZ!Box.

  9. If wireless devices should be allowed to exchange data with each other, enable the option "The wireless devices connected with the guest access can communicate with each other".
  10. If you want guest access to be disabled automatically, enable the corresponding option and define when it should be disabled.
  11. Click "Apply" to save the settings.

Now guests who know the name of the guest wireless network (SSID) and the network key can use your private hotspot.

Note:You can use the Push Service (under "System > Push Service" in the user interface) if you would like to receive daily emails that tell you which wireless devices used your private hotspot.

2 Regulating internet use for the guest access

All devices in the guest network are assigned the "Guest" access profile in the FRITZ!Box parental controls. You can adjust the "Guest" access profile, for example if you would like to limit internet use in the guest network to certain times or block access to certain websites:

  1. Click "Internet" in the FRITZ!Box user interface.
  2. Click "Filters" in the "Internet" menu.
  3. Click on the "Access Profiles" tab and then the (edit) button for the "Guest" profile.
  4. Select the option "restricted" for the "Period".
  5. Click the "Internet use blocked" button and then hold down the left mouse button while you drag the mouse across the areas of the timetable when internet use should be blocked.

    Fig.: Internet access allowed at night and blocked in the morning

  6. If you want to block access to certain websites, enable the options "Filter websites" and "Block websites (blacklist)".

    Note:You can edit the blacklist on the "Lists" tab in the menu "Internet > Filters". It may contain up to 500 web addresses that must be separated by a space (for example "").

  7. Click "OK" to save the access profile.