Solved

Public WiFi sharing corporate broadband

Posted on 2013-06-12
4
595 Views
1 Endorsement
Last Modified: 2013-09-28
I have a TP-Link Router which I wish to use to provide Internet Access to the public on its own LAN. (192.168.0.x). The WAN side of it is connected to the LAN (192.168.4.x) provided by our main Draytek router which in turn is connected to our only broadband enabled telephone cable (ADSL) .  This gives anyone connecting to the TP-Link router Internet access but it also seems to allow them access to our corporate 192.168.4.x network which is a serious problem. How can I give members of the public (our clients) access to the Internet with out giving them any access to the 192.168.4.x network.  Do I need to configure VLANs on the Draytek.  Sorry I'm a bit clueless about this stuff.
1
Comment
Question by:Alan Bateman
  • 3
4 Comments
 
LVL 22

Expert Comment

by:David Atkin
ID: 39241720
It isn't a good idea to have it setup like this really but...

Yes, you will need to configure VLANS on the Draytek router.  Be warned though, I have tried this before and it locked me out of the Draytek.  Take a good backup of the Draytek before you try it.

BTW, is this wireless access or wired?

Ideally you want to either get a separate internet connection or if on wireless, get something that you can segregate wired and wireless traffic to stop them from accessing your LAN.
0
 

Author Comment

by:Alan Bateman
ID: 39244010
Looks like I'll have to take a deep breath and try to configure a port based VLAN setup so the TP-Link router is plugged into port 4 on the draytek and port 4 and is mapped to LAN2 which gives the TP-Link router a different network address for its WAN connection. ??  Is there a better way to set this up given I only have one broadband ADSL line to the outside.?
0
 

Accepted Solution

by:
Alan Bateman earned 0 total points
ID: 39254466
Having real difficulty with this. If I check the box to enable VLAN I get a message "Please set one vlan group at least!  Please check port 5.  I have checked a box for each port P1 - P4 assigning P1 - P3 to LAN0  and P4 to LAN1.  But I can't enable it because of the above message.  And what does it mean port 5?  (There are only 4 Ethernet ports in this Draytek 2830Vn router. I just want port based LAN separation not tagged VLAN , but it doesn't seem to want to play ball. Can anyone help?
0
 

Author Closing Comment

by:Alan Bateman
ID: 39529819
Finally, fixed this myself with the help of Draytek tech support.  The router needed a firmware update.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

As companies replace their old PBX phone systems with Unified IP Communications, many are finding out that legacy applications such as fax do not work well with VoIP. Fortunately, Cloud Faxing provides a cost-effective alternative that works over an…
PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question