Isolate Guest Wireless network from Business Network

Trying to isolate Guest Wireless network from business network on a Cisco RV180W. I have configured the Guest network for VLAN 20 and VLAN 1 is the default and disabled Inter VLAN Routing but I can still access the business network from a wireless connection. Your help is appreciated.
David OAsked:
Who is Participating?
 
masnrockCommented:
I would disable the wireless on that router, get a VLAN-capable access point, connect it to a port that has VLAN 1 untagged and VLAN 20 tagged, and configure it with multiple SSIDs (one for guests, and another for corporate use if desired). Keeping the AP on VLAN 1 has the upside of allowing for configuring from the corporate network, and not letting guests have a way to access any of the admin features (provided you probably configure that SSID for VLAN 20).

Assuming you don't need wireless for the corporate network, another option would be to simply configure the existing SSID to use VLAN 20 (this builds on what Fred had mentioned). That way wireless clients go to the guest network like they are supposed to. If you need to have wireless clients on the corporate network in the future, you could either buy a separate wireless AP that's connected to VLAN 1, or reference what I mentioned in the first paragraph.
0
 
JohnBusiness Consultant (Owner)Commented:
I have not been able to manage secure VLAN on that class of router.

Easier I think to get a separate Wi-Fi router and put it on a completely different subnet. That will keep normal business users on the guest network from seeing your business LAN.
0
 
Fred MarshallPrincipalCommented:
Reference manual:
https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv180w/administration/guide/rv180w_admin.pdf

Do you have multiple VLAN subnets?  That's available and may be necessary.
What IP addresses are obtained on each wireless SSID?

RSTP isn't recommended for use when there are VLANS (p. 39).

The wireless default VLAN is 1 for all the wireless SSIDs it appears.  (p 64).  You will have to assign different VLANs for the wireless clients.

p. 65 d. Wireless Isolation within the SSID check box to separate ALL the clients on that SSID.

I'd also check the routing table to assure that inter-subnet routing isn't available.
0
 
David OAuthor Commented:
Thanks all, I will purchase another AP.
0
 
Fred MarshallPrincipalCommented:
So, the suggestions and questions I provided didn't help?  Just curious.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.