LAN/WLAN Architecture Advice

I have a wireless network on a hotel property where guest access the internet via hotspots throughout the property.  All of the corporate machines  are also reside on the same physical network via hard wire links.  What is the best way to completly separate the guest traffic from the rest of the network and make the corporate network inaccessible from guests?
 
andreacadiaAsked:
Who is Participating?
 
knightrider2k2Commented:
You need two networks. One for WiFi and one for corporate machines. Then on the router, using an access list deny traffic from one network to another.
0
 
m1crochipCommented:
Just put the wireless network in a different subnet.  The best way is to have a router/firewall appliance with at least two configurable interfaces.  The corporate network will be connected to a switch(s) running off the first interface and the wireless will be plugged into the next interface (probably with DHCP enabled handing out a different net range).  You can create rules to allow no interaction between the interfaces.
0
 
ASILVA0421Commented:
Andrea.

Here's an idea.

I assume you have wireless routers on your hot spots and not wireless access points, there is a big difference, in your case you want to make sure you have a wireless router so that you can segment or separate your network and not give your guests the ability to "see" your corporate LAN. the way this is done is by placing "ROUTERS" in between you and your guests, the router will have an "external" IP or other wise known as outside from your corporate IP stack however the internal IP or LAN as it's known will be a different IP stack from your corporate LAN making it impossible from the DHCP assigned IP from your wireless router to see the corporate network since they are on different subnets, un less of course you tell the router to give access from the guest network to the corporate one but of course that is what we wan to avoid, I have added a diagram to help you better understand this... hope this helps.

Well i can't seem to be able to post a diagram.... I try some other way.

AS
0
Network Scalability - Handle Complex Environments

Monitor your entire network from a single platform. Free 30 Day Trial Now!

 
FriarTukCommented:
try a router with a public/private gateway, like this one

http://www.dlink.com/products/?sec=2&pid=402
0
 
ASILVA0421Commented:

Well, there is no way I can post my diagram (with IP's) but I found this, it can give you some idea, just remember that the wireless device must be set up as a router translating between two subnets (private and public) or in other words NAT (Network Address Translation).

http://cttksystems.com/graphics/Wireless-Diagram.jpg


WAN Public IP ------ Private network 192.168.68.XXX-----Wireless router outside IP 192.168.68.2----Wireless router inside IP 192.168.168.1----- Wireless clients.

I don't know if this makes much sense to you, good luck any way.

AS.
0
 
FriarTukCommented:
hey andrea, what's your status?
0
 
FriarTukCommented:
hey andrea, did my link answer your question?

http://www.experts-exchange.com/help.jsp#hs5
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.