Setting up Nerdminer V2 in Guest Wi-Fi — Secure Setup for IoT Devices
The Nerdminer V2 is an IoT device like any other — and just like smart lamps, robot vacuums, or smart speakers, it introduces risks to your home network. The firmware is open source, and the device connects to internet pools and exchanges data. From a security perspective, the Nerdminer V2 should not be in the same network as your main computers, where your banking apps, photos, and private documents are stored. The solution: a dedicated guest Wi-Fi, isolated from the main network. This guide shows you how to securely integrate the Nerdminer V2 into a guest Wi-Fi — and why this also has other advantages.
Why Guest Wi-Fi for the Nerdminer V2?
There are three good reasons to put the Nerdminer V2 in a separate network segment:
- Security: If the Nerdminer (or another IoT device on the same network) is compromised, an attacker will not have access to your PC, smartphone, or NAS drive. Guest Wi-Fi networks are isolated from the main network by default.
- 2.4 GHz Solution: Many routers automatically broadcast guest Wi-Fi on 2.4 GHz because it's more robust and requires less configuration. If your main network only uses 5 GHz, you can put the Nerdminer in the guest Wi-Fi without having to change your main network setup.
- Overview: If you have multiple mining devices, they are neatly grouped in the guest Wi-Fi and not mixed with private devices. This makes network diagnosis easier.
What is Guest Wi-Fi technically?
A guest Wi-Fi is a second Wi-Fi network on your router, configured separately in the browser interface. It has its own name (SSID), its own password, and — crucially — devices on the guest Wi-Fi usually cannot communicate with devices on the main network. They have internet access but no access to other devices on your home network.
This isolation is the most important security feature. It is referred to as "Client Isolation" or "AP Isolation" in router jargon and is active by default in guest Wi-Fi on most routers.
Step 1: Set up Guest Wi-Fi on the Router
Configuration varies by router model:
FritzBox
- Open
fretz.boxin your browser - WLAN → Guest Access
- Check "Enable guest access"
- Assign a Wi-Fi name (e.g.,
FRITZ!Box-Guest) - Set a WPA2 password (at least 12 characters)
- Important: Select "Radio channel in 2.4 GHz", not "auto" or "5 GHz"
- Save
Speedport (Telekom)
- Open
speedport.ipin your browser - Home Network → WLAN Guest Access
- Activate, assign name and password
- Set "Frequency band" to "2.4 GHz"
Vodafone EasyBox
- Open
easy.boxor192.168.2.1in your browser - WLAN → Guest Network
- Activate and configure
Google Nest WiFi / Eero / Deco (Mesh)
- In the respective app, look for "Guest Network"
- Activate — Mesh systems automatically set guest Wi-Fi to 2.4 GHz
UniFi / Ubiquiti
- In the Controller: Settings → Wi-Fi → Create New Wi-Fi Network
- Activate "Guest Network"
- Under "Wi-Fi Bands", select only "2.4 GHz"
- Activate "Client Isolation"
Step 2: Connect Nerdminer V2 to Guest Wi-Fi
Once the guest Wi-Fi is set up, the Nerdminer configuration is identical to the normal setup:
- Turn on Nerdminer V2
- Connect to the NerdMinerAP setup Wi-Fi with a smartphone or laptop
- Open
192.168.4.1in the browser - In the Wi-Fi list, select the guest Wi-Fi (not the main network)
- Enter the guest Wi-Fi password
- Enter Bitcoin address
- Save, Nerdminer restarts
Within 1-2 minutes, the display will show the hashrate. The Nerdminer is now completely isolated from the main network but can communicate with public-pool.io without problems.
What doesn't work in Guest Wi-Fi?
Most routers restrict certain functions in guest Wi-Fi for security reasons. For the Nerdminer V2, the following restrictions are relevant:
- No communication between devices in the guest Wi-Fi. If you operate multiple Nerdminers in the guest Wi-Fi, they cannot "see" each other. For pure mining function, this doesn't matter — each Nerdminer only communicates with the pool, not with other Nerdminers.
-
No access to the Nerdminer from the main network. You cannot access the Nerdminer's web dashboard (
http://192.168.x.x) from your PC on the main network. If you need to do this, you must first connect to the guest Wi-Fi. - Some routers restrict bandwidth in guest Wi-Fi. For the Nerdminer, with its tiny data volumes (~1 KB per minute), this is completely unproblematic.
Advantages of this setup at a glance
- Security guaranteed: In case of Nerdminer firmware bug or compromised pool connection — no access to your main network
- 2.4 GHz problem solved: Guest Wi-Fi almost always broadcasts 2.4 GHz
- Main network unchanged: You don't have to change anything in your main network setup
- Scalable: Place any number of Nerdminers (or other IoT devices) in the guest Wi-Fi
- Clear: Mining devices neatly grouped
Frequently Asked Questions about Nerdminer setup in Guest Wi-Fi
Can I restrict the guest Wi-Fi to 2.4 GHz if the router offers both bands?
Yes, with most routers. In the guest Wi-Fi settings, you'll typically find an option for the frequency band. Select 2.4 GHz specifically, not "auto" or "both".
Does guest Wi-Fi slow down my main network?
No, not noticeably. Both networks use the same hardware router, but the bandwidth of a Nerdminer V2 (around 1 KB per minute) is so low that it's negligible in the overall traffic.
Can I still access the Nerdminer if it's in guest Wi-Fi?
You need to temporarily connect yourself to the guest Wi-Fi (e.g., with your smartphone), then you can access the web dashboard via the guest Wi-Fi IP. Access from the main network is blocked — which is precisely the purpose of the security separation.
Does this also work with OpenWrt or pfSense?
Yes. With OpenWrt routers, you can create an additional wireless network, assign it its own VLAN ID, and isolate it from the main network using firewall rules. With pfSense, you create a separate interface with its own subnet and block inter-subnet communication via the firewall.
Do guest Wi-Fi networks slow down Wi-Fi performance?
Practically not. Modern routers treat guest Wi-Fi as an additional SSID on the same physical radio module, with minimal overhead. You won't notice a difference.
Share: