We have a few retail locations that require us to separate WiFi access between employees and retail customers. I would like to have the employees access both the LAN and internet and customers access only the internet. We currently run Juniper SSG5 routers with EnGenius EAP350 wireless APs.
I know that VLAN tagging is the preferred method and the EnGenius supports multiple SSIDs with VLAN tagging, if someone can point me in the right direction on the Juniper setup to accomplish this I would appreciate it.
Current setup with SSG5 is