Solved

Wifi access

Posted on 2014-12-31
7
51 Views
Last Modified: 2015-03-12
Some advice/recommendation would be helpful.
We have a simple flat network  with 192.168.1.xxx, all are wired pc's. We need to give wifi access to maybe 15-20 users (personnel phones), but i want to have them on a different subnet..if i put them on the same subnet i may run out of IP's soon. what is the best way to achieve this. I have watchguard xtm530 firewall and also a watchguard access point AP200
0
Comment
Question by:jo1170
  • 2
  • 2
  • 2
  • +1
7 Comments
 
LVL 91

Expert Comment

by:John Hurst
ID: 40525530
Add a Wi-Fi router to the network, keep DHCP enabled, and connect the WAN port on the Wi-Fi router to a LAN port on the network. This will give it a different subnet and should serve your purpose just fine.
0
 
LVL 24

Expert Comment

by:DMTechGrooup
ID: 40525537
So all they need is internet access?  If you have any extra available IP's you could secure it further by going from the ISP to a switch then to the Watchguard for the network and the wifi router for internet and then there is no cross between the wifi and the local network.

Look into Ubiquiti http://www.ubnt.com/enterprise/ Unify stuff.. Not expensive and good commercial wifi.
0
 

Author Comment

by:jo1170
ID: 40525632
Yes all they need is just wifi access. John - did you mean to keep DHCP enabled on the wifi router? Any recommended business class Wi-Fi routers?
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 91

Expert Comment

by:John Hurst
ID: 40525662
A Cisco RV220W or equivalent will work. If you have a separate subnet then you need DHCP on for devices to get an address.
0
 
LVL 2

Accepted Solution

by:
Adam Resnick earned 500 total points
ID: 40525795
Make your life simple. Change the subnet mask from 255.255.255.0 to 255.255.252.0. You'll need to change the subnet for your DHCP server as well as all static IP addressed systems, but that will give you access to 192.168.0.x, 192.168.2.x, and 192.168.3.x all on the same network.

- or -

If that worries you, provision a second port on the XTM530 with the new IP range. Plug the AP in to that, and let the firewall give out DHCP addresses on that network. You'll also have to define the routes between the networks. Option 1 is probably the simplest since it sounds like there's no other reason to segregate the networks aside from IP availability.
0
 

Author Comment

by:jo1170
ID: 40525813
Thanks Adam - Think the second option you suggested is a better choice. Option 1 may not be good for me at the moment just the fact we have some huge printing systems with Static IP's and is going to be a pain to change all of them. I've done it in the past but kind of forgot how to configure a second port and policy rules on the xtm530.
0
 
LVL 2

Expert Comment

by:Adam Resnick
ID: 40525830
The most important bit is when you define the interface, mark it as 'Internal'. If memory serves, that should take care of the firewalling issues. The instructions vary between versions of the Watchguard management interface.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I was asked to look into SCCM 2007 by my employer, having a degree of experience of earlier versions of SMS and some previous SCCM knowledge I didn't expect the procedure to involve to much time. I read a number of guides concerning it…
Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now