Wifi access

Some advice/recommendation would be helpful.
We have a simple flat network  with 192.168.1.xxx, all are wired pc's. We need to give wifi access to maybe 15-20 users (personnel phones), but i want to have them on a different subnet..if i put them on the same subnet i may run out of IP's soon. what is the best way to achieve this. I have watchguard xtm530 firewall and also a watchguard access point AP200
jo1170Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Add a Wi-Fi router to the network, keep DHCP enabled, and connect the WAN port on the Wi-Fi router to a LAN port on the network. This will give it a different subnet and should serve your purpose just fine.
0
DMTechGrooupCommented:
So all they need is internet access?  If you have any extra available IP's you could secure it further by going from the ISP to a switch then to the Watchguard for the network and the wifi router for internet and then there is no cross between the wifi and the local network.

Look into Ubiquiti http://www.ubnt.com/enterprise/ Unify stuff.. Not expensive and good commercial wifi.
0
jo1170Author Commented:
Yes all they need is just wifi access. John - did you mean to keep DHCP enabled on the wifi router? Any recommended business class Wi-Fi routers?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

JohnBusiness Consultant (Owner)Commented:
A Cisco RV220W or equivalent will work. If you have a separate subnet then you need DHCP on for devices to get an address.
0
Adam ResnickGlobal IT ManagerCommented:
Make your life simple. Change the subnet mask from 255.255.255.0 to 255.255.252.0. You'll need to change the subnet for your DHCP server as well as all static IP addressed systems, but that will give you access to 192.168.0.x, 192.168.2.x, and 192.168.3.x all on the same network.

- or -

If that worries you, provision a second port on the XTM530 with the new IP range. Plug the AP in to that, and let the firewall give out DHCP addresses on that network. You'll also have to define the routes between the networks. Option 1 is probably the simplest since it sounds like there's no other reason to segregate the networks aside from IP availability.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jo1170Author Commented:
Thanks Adam - Think the second option you suggested is a better choice. Option 1 may not be good for me at the moment just the fact we have some huge printing systems with Static IP's and is going to be a pain to change all of them. I've done it in the past but kind of forgot how to configure a second port and policy rules on the xtm530.
0
Adam ResnickGlobal IT ManagerCommented:
The most important bit is when you define the interface, mark it as 'Internal'. If memory serves, that should take care of the firewalling issues. The instructions vary between versions of the Watchguard management interface.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.