Add Guests Wireless Internet Access

I have the following LAN configuration:
Internet ISP (1 - Static IP) Modem -> ZyXel ZyWall 10W Security Gateway (10.10.1.100) -> Ethernet Switches -> 2 - DLink Wireless Routers configured identically to allow for secure access to LAN and internet (10.10.1.201 and 10.10.1.202) and various workstations and printers.
DHCP provided by a 2003 Server (10.10.1.1) giving 10.10.1.20 - 70 IP addresses.
What detailed steps a needed to add a Linksys WRT160N wireless router to allow guests access to the internet without allowing them access to the LAN?
billfisherAsked:
Who is Participating?
 
AustinComputerLabsConnect With a Mentor Commented:
The PUBLIC wireless router has three, let's call them zones.
Zone 1 WAN connection.
Zone 2 LAN wired connections.
Zone 3 Wireless LAN connections.

Zone 1 connect to your Corp LAN, give it a static IP (10.10.0.x) with your ISP's DNS servers (not your internal DNS server's address).
Zone 2 nothing connected to it, but if you did connect you should just have internet access not corp access.
Zone 3 gives out DHCP addresses in the 192.168.1.x
0
 
AustinComputerLabsCommented:
Configure the LAN side of the router to a different segment than your corp LAN (such as 192.168.0.x)

set up the wireless on the new router however you wish (secure or not)

Connect a LAN cable from your corp network to the WAN or internet port on the WRT160N.

Guests can then connect to the router on their own IP segment and the router blocks traffic to your corp LAN.

0
 
billfisherAuthor Commented:
I performed the connections as reccommended. Not knowing if this was right, I set the Linksys router LAN side set for DHCP 10.10.0.10 - 60 and the WAN side to dynamically obtain ip. No joy. wireless systems get 10.10.0.x ips, but no connection to internet.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
AustinComputerLabsCommented:
What do the guests receive for DNS server(s)?
0
 
billfisherAuthor Commented:
I now have internet access after changing to 192.168.1.x on the Wireless side. Because this guest router is getting a LAN side 10.10.1.x IP, there is still access to the server and networked peripherals on the corporate LAN. How can I prevent this?
0
 
AustinComputerLabsCommented:
Is this router used to service corp clients on the LAN side and guests on the wireless side?
0
 
billfisherAuthor Commented:
This router is meant only to service guest on the wireless side. There are two other wireless routers used to service corp. clients on the LAN and wireless side.
0
 
billfisherAuthor Commented:
Thank you for providing the most complete and clear solution I have found.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.