Public WiFi sharing corporate broadband

Posted on 2013-06-12
Medium Priority
1 Endorsement
Last Modified: 2013-09-28
I have a TP-Link Router which I wish to use to provide Internet Access to the public on its own LAN. (192.168.0.x). The WAN side of it is connected to the LAN (192.168.4.x) provided by our main Draytek router which in turn is connected to our only broadband enabled telephone cable (ADSL) .  This gives anyone connecting to the TP-Link router Internet access but it also seems to allow them access to our corporate 192.168.4.x network which is a serious problem. How can I give members of the public (our clients) access to the Internet with out giving them any access to the 192.168.4.x network.  Do I need to configure VLANs on the Draytek.  Sorry I'm a bit clueless about this stuff.
Question by:Alan Bateman
  • 3
LVL 22

Expert Comment

by:David Atkin
ID: 39241720
It isn't a good idea to have it setup like this really but...

Yes, you will need to configure VLANS on the Draytek router.  Be warned though, I have tried this before and it locked me out of the Draytek.  Take a good backup of the Draytek before you try it.

BTW, is this wireless access or wired?

Ideally you want to either get a separate internet connection or if on wireless, get something that you can segregate wired and wireless traffic to stop them from accessing your LAN.

Author Comment

by:Alan Bateman
ID: 39244010
Looks like I'll have to take a deep breath and try to configure a port based VLAN setup so the TP-Link router is plugged into port 4 on the draytek and port 4 and is mapped to LAN2 which gives the TP-Link router a different network address for its WAN connection. ??  Is there a better way to set this up given I only have one broadband ADSL line to the outside.?

Accepted Solution

Alan Bateman earned 0 total points
ID: 39254466
Having real difficulty with this. If I check the box to enable VLAN I get a message "Please set one vlan group at least!  Please check port 5.  I have checked a box for each port P1 - P4 assigning P1 - P3 to LAN0  and P4 to LAN1.  But I can't enable it because of the above message.  And what does it mean port 5?  (There are only 4 Ethernet ports in this Draytek 2830Vn router. I just want port based LAN separation not tagged VLAN , but it doesn't seem to want to play ball. Can anyone help?

Author Closing Comment

by:Alan Bateman
ID: 39529819
Finally, fixed this myself with the help of Draytek tech support.  The router needed a firmware update.

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
In this article, we’ll look at how to deploy ProxySQL.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question