We help IT Professionals succeed at work.

setting up a wifi network with public access for a restaurant

Last Modified: 2018-08-24

I just walked into a bit of a mess of a networking closet.

Right now it goes like this

Comcast modem/router combo going into a netgear router (used as an access point) and into three other random branded routers set up as wifi APs.

So before me getting there, a company sold them and installed a HP Aruba 2530-24g-poe+ switch, and 3 Ruckus AP's.

My question is this, I have limited resources and limited hardware choices.

How do i set up the 3 APs with a guest SSID on a separate vlan so it doesn't have access to the internal network, and a private internal SSID.

I've only used Cisco Managed switches, never HP. What should host DHCP? How do i get two different pools, one for the internal and one for the guest? How do i set up the two vlans to be separate?

Preferably GUI instructions, not CLI if i could.

Watch Question

Unlock this solution and get a sample of our free trial.
(No credit card required)
Top Expert 2015

First you have to find routers that can translate each SID to different VLAN, those can be used with 2 security zones, all others with insufficient isolation can be used either as business network XOR guest network
Distinguished Expert 2019

You need to get the router or firewall of your choice that supports multiple VLANs. I prefer Sonicwalls, but there are many brands that will do the job.

Do they have a static IP? If so, then you can configure it directly into firewall. (Also be sure to make the Comcast unit act like a bridge (you really just turn off 2 features, there is no actual bridge mode).

If you only have a dynamic IP address, then just configure a LAN IP address into your router or firewall. You'll end up with double NAT, but that's okay. Otherwise, if you don't want double NAT, then order a static.

Configure your two VLANs on that router or VLAN that you have.

Unfortunately, you have to utilize the command line for that particular switch to configure the VLANs. Here's the manual to help: http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c03594944-1.pdf

Technically, there is another way to go about it: You could have the Comcast unit act as the "main" network, and connect your Netgear (as a router) and let it handle the guest network. Both the Comcast and the Netgear (with wifi disabled on both) would connect to the Aruba switch, and the VLANs could be handled purely by the switch.

I don't know Aruba units too well, so I don't know whether the third scenario in mind would work:
Another method would be to just have the switch handle the VLANs and entire guest network, in which case the switch would have to handle DHCP for the guest network.

To answer your DHCP question, I would not let the switch handle DHCP unless there is no other choice. So based on the three scenarios I'm giving, the first two would leave DHCP off of the switch, while the last scenario would have DHCP running on the switch solely for the guest network.


He ended up using buying the Ruckus controller, so i just enabled public wifi and segregated the network right in the ruckus interface. Was WAY easier than i thought it was going to be

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.