Guest Network with access to Photos App

Currently reading
Guest Network with access to Photos App

DS1618+ // DS1515+
I have a "weird" scenario that I'm wondering if it will work.

We have an iPad that only has access to the guest network so that it stays isolated from the rest of the network. BUT...with the new Photos App in DSM7, I would like to allow it to upload photos to the Synology which is on the main network....and isolated from the iPad.

Is there a way to only allow the photos app access from the iPad while still keeping the rest of the surfing etc isolated?

Thank you in advance.
Last edited:
First, get rid of the UniFi 'Guest Network' feature and set your own corporate VLAN for guest/untrusted devices:

Screenshot 2021-07-22 at 15.54.15.png

Set Static ip for the iPad, then firewall rule to allow the iPad ip access to lan...
...IP of the NAS only.

I do something similar to allow my guests access to the printer/scanner on my main network but deny everything else:

Screenshot 2021-07-22 at 15.31.48.png

If you want to use more Apple-like features on the iPad that use things like mDNS / Bonjour across VLANs then you will need to have suitable rules to cover that too:

Screenshot 2021-07-22 at 15.34.02.png


Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Welcome to! is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!