We know how difficult it can be to evaluate Wi-Fi vendors, so we created this helpful Wi-Fi Buyer's Guide to help you find the Wi-Fi vendor that's right for your business! Download the guide and get started on our checklist today!
Solved
Safe WIFI sharing
Posted on 2011-03-16
We have a few small business clients that want to offer their clients free wifi access in their waiting rooms.
They do not want 2 ISPs.
Is there a cost effective router that will allow secure wifi access to the clients, that will prevent them from browsing or in any way jumping to the LAN, and ensure no trojans or viruses can jump to the LAN subnet as well where sensitive business data resides?
They do not want 2 ISPs.
Is there a cost effective router that will allow secure wifi access to the clients, that will prevent them from browsing or in any way jumping to the LAN, and ensure no trojans or viruses can jump to the LAN subnet as well where sensitive business data resides?
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3-
2
- +3
9 Comments
The proper way to do it is get a firewall that supports a DMZ. Plug the wireless into the port set to be the DMZ and it will only have access to the internet.
The cheap way to do it is put the wireless router on internet directly then put a firewall behind it and not allow traffic to pass from the routers IP's. This is not as secure but would work.. but you can pick up a router with DMZ appliance for fairly cheap and do it right...
Look at Sonicwall, ASA 5505 and Juniper all should do what you want.
The cheap way to do it is put the wireless router on internet directly then put a firewall behind it and not allow traffic to pass from the routers IP's. This is not as secure but would work.. but you can pick up a router with DMZ appliance for fairly cheap and do it right...
Look at Sonicwall, ASA 5505 and Juniper all should do what you want.
Hi j-teksolutions,
You need access point that support user isolation
http://www.dlink.com/products/?pid=683
The DAP-2590 includes support for up to 8 VLANs for implementing multiple SSIDs to further help segment users on the network. It also includes a wireless client isolation mechanism, which limits direct client-to-client communication.
You need access point that support user isolation
http://www.dlink.com/products/?pid=683
The DAP-2590 includes support for up to 8 VLANs for implementing multiple SSIDs to further help segment users on the network. It also includes a wireless client isolation mechanism, which limits direct client-to-client communication.
A simpler option is to purchase a Linksys E-Series router that offers a "guest access" mode that establishes two independent networks, one for internal use and the other for guest-only Internet access. This tends to be fine for smaller businesses that don't want to put the money down on more high end solutions, like the concepts outlined by CHutchins above.
Choose any router which has DHCP enabled.
Mostly all routers have DHCP but not all configurable.
DLINK and linksys are best.
Now in router configuration--
In DHCP settings---
you need set a DHCP scope.
Choose a class of IP address which is different from you LAN network.
Make sure you have set password for WIFI.
Save the settings
and restart the router.
What equipment are you using?? You can make a different VLAN for the clients and them on the router make an ACL to permit only access to internet and not your LAN.
Active 7 days ago
needleboy that router isnt too bad at $410
I like the idea of a separate SID for say "public" then isolation that is perfect
Is config difficult or not too bad?
I like the idea of a separate SID for say "public" then isolation that is perfect
Is config difficult or not too bad?
Hi j-teksolutions,
D-link Routers are user friendly and verry easy to configure.
All changes are made in simplified Web interface.
D-link Routers are user friendly and verry easy to configure.
All changes are made in simplified Web interface.
Hi j-teksolutions,
You can find Product manual on this link, and see how easy is to configure isolation (page 47, WLAN partition)
http://www.dlink.com/products/default.aspx?pid=DAP-2590&tab=3
You can find Product manual on this link, and see how easy is to configure isolation (page 47, WLAN partition)
http://www.dlink.com/products/default.aspx?pid=DAP-2590&tab=3
Featured Post
The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
What we learned in Webroot's webinar on multi-vector protection.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses
Course of the Month6 days, 16 hours left to enroll
705 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.