[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 620
  • Last Modified:

Public WiFi sharing corporate broadband

I have a TP-Link Router which I wish to use to provide Internet Access to the public on its own LAN. (192.168.0.x). The WAN side of it is connected to the LAN (192.168.4.x) provided by our main Draytek router which in turn is connected to our only broadband enabled telephone cable (ADSL) .  This gives anyone connecting to the TP-Link router Internet access but it also seems to allow them access to our corporate 192.168.4.x network which is a serious problem. How can I give members of the public (our clients) access to the Internet with out giving them any access to the 192.168.4.x network.  Do I need to configure VLANs on the Draytek.  Sorry I'm a bit clueless about this stuff.
1
Alan Bateman
Asked:
Alan Bateman
  • 3
1 Solution
 
David AtkinIT ProfessionalCommented:
It isn't a good idea to have it setup like this really but...

Yes, you will need to configure VLANS on the Draytek router.  Be warned though, I have tried this before and it locked me out of the Draytek.  Take a good backup of the Draytek before you try it.

BTW, is this wireless access or wired?

Ideally you want to either get a separate internet connection or if on wireless, get something that you can segregate wired and wireless traffic to stop them from accessing your LAN.
0
 
Alan BatemanAuthor Commented:
Looks like I'll have to take a deep breath and try to configure a port based VLAN setup so the TP-Link router is plugged into port 4 on the draytek and port 4 and is mapped to LAN2 which gives the TP-Link router a different network address for its WAN connection. ??  Is there a better way to set this up given I only have one broadband ADSL line to the outside.?
0
 
Alan BatemanAuthor Commented:
Having real difficulty with this. If I check the box to enable VLAN I get a message "Please set one vlan group at least!  Please check port 5.  I have checked a box for each port P1 - P4 assigning P1 - P3 to LAN0  and P4 to LAN1.  But I can't enable it because of the above message.  And what does it mean port 5?  (There are only 4 Ethernet ports in this Draytek 2830Vn router. I just want port based LAN separation not tagged VLAN , but it doesn't seem to want to play ball. Can anyone help?
0
 
Alan BatemanAuthor Commented:
Finally, fixed this myself with the help of Draytek tech support.  The router needed a firmware update.
0

Featured Post

Free Backup Tool for VMware and Hyper-V

Restore full virtual machine or individual guest files from 19 common file systems directly from the backup file. Schedule VM backups with PowerShell scripts. Set desired time, lean back and let the script to notify you via email upon completion.  

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now