Add wireless router for internet access only

Posted on 2009-02-17
Last Modified: 2013-11-09
I have an existing LAN setup with a Linksys BEFSR81 router.  I would like to add a Netgear WGR614 router for wireless access only to the internet.   I'd like the existing users on the Linksys router to maintain internet and LAN access.   Simply put, I want to segregate wireless users and only give them the ability to access the internet.

Currently have the Linksys router plugged into the Business Gateway from our ISP.  The Netgear router is plugged from Netgear WAN port to Linksys LAN port.  I do not want to reconfigure existing LAN nor do I want to place the Netgear router in between the ISP gateway and the Linksys router even though I'm sure this would solve the problem.

Existing Linksys router LAN settings:
router IP:
Subnet mask:

The Netgear WAN settings are set to the same subnet but outside the range of the Linksys DHCP server.  I've set the Netgear LAN to a different subnet but it still has access to Linksys LAN.
Question by:gcpllc
    LVL 87

    Expert Comment

    Just connect the router to your LAN through it's WAN port and enable it's internal DHCP server. This should prevent access to the LAN itself but it'll work as gateway to the internet.
    LVL 8

    Expert Comment

    If you place the Netgear behind the Linksys, then no matter what, any crafty user will be able to access the LAN of the Linksys.  You see, the Netgear will have a 192.168.1.x ip address, which places it on the same subnet as your Linksys LAN.  Of course. you will have to turn on DHCP on the Netgear in order for wireless users to get ip and gateway information.  Anyone can do a traceroute and see what the next hop ip address is.  They can then start port scanning away.
    So, based on the equipment that you have, you will need to place the Netgear in front of the Linksys.  This will solve the issue of preventing the wireless users from accessing your LAN.
    Now with regard to the ip address scheme, there is no big deal there.  Just make sure that the Netgear LAN addressing is something else, like 192.168.25.x.  The Netgear will get the public ip address from your cable modem, and the Linksys will now get a 192.168.25.x ip for its WAN address.  The LAN of the Linksys remains unchanged.

    Author Comment

    rindi:  When the WAN port of the Netgear is plugged into an available LAN port, users still can see the LAN.  But I agree, that I originally thought that this would work.

    API NOC:  your comments about visitbility with a tracert are well taken.   I was hoping there was way to manually set the Netgear as 'private' allowing internet only, but these off the shelf routers don't allow enough in the way of rules settings.  

    If I do put the Netgear in front of the Linksys, I will have to set the Netgear with my static IP settings from my ISP, but what will this do to my port forwarding?  Can I port forward from my Netgear to a computer connected to my Linksys and therefore on a different subnet?
    LVL 8

    Accepted Solution

    Yes, this is possible.  You can put the Linksys in the DMZ of the Netgear and do the port forwarding.  Another way, which will double the effort is to put port forwarding on the Netgear to the 192.168.25.x ip of the Linksys, and then again do the port forward to the LAN side of the Linksys 192.168.1.x

    Author Comment

    Ahh, yes, I should have thought about setting the 2nd router on the DMZ.  Thanks for the help.  I'll bite the bultet and put the wireless router in front of the wired router.  

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Suggested Solutions

    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    DECT technology has become a popular standard for wireless voice communication. DECT devices are not likely to be affected by other electronic devices and signals because they operate in a separate frequency-band.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now