Existing wired network adding wireless and secure the wired network

[scorney]

I have to put together a free wireless internet access at a Sports Complexe, but they just want to make sure the traffic from the wireless will not be able to access their network.

Their actual configuration is a Cable Modem with a Linksys 4 ports BEFSR41 the 4 ports are used... What should they purchase to offer the wireless and secure their existing network. I know that i could create 2 separate VLAN by using a switch (they would need to buy), but with the linksys wireless devices I don't know how or if I would be able to set it up... I think just to use the regular WEP encryption to give access...

Any direction would be much appreciated.

Thanks.

 

[SYQUEST]

One configuration that you might try is as follows:


-----[CABLE NIU]----[5 PORT SWITCH]
| |
(WAN Internet)| |(WAN Internet)
[BEFSR41] [WIRELESS ROUTER]

This method would work provided you are using static IP on the WAN side. You would need a minimum of two static IPs, one for each router. This way is simple and keeps your LANs separate. You would still need to turn on the firewall options to ensure security in that realm.

DHCP could work depending on the limitations of your ISP.

A small 4 or 5 port switch is less expensive than buying a Layer 2 or 3 switch, unless you have different requirements down the road.

....JIM....

 

[scorney]

Thanks for the info, This is what I was thinking.

But I got told by the Sports Complexe Manager, that he would like to the capability to use the Wireless network as well.
So the configuration would be:
Cable Modem - Switch - 1 wired Router (Private Network
- 1 wireless Router Private + Free internet access


So for example the wired network would be on a VLAN 1 and wireless would be on VLAN 2. But then the people connecting via the wireless connection will not have access to the private network, Is this is do-able ?
Or
Is it Possible to create different subnet ?
Like private network 192.168.2.0 255.255.255.224 this would provide them a total of 30 hosts and provide only 1 port available on the wireless with the 192.168.2.0 network. Put all the other wireless connection to 192.168.2.32 network /27 so that none of the wireless free internet connection would have access to the private network.
Is it going to be better just to setup his wireless device that has to connect to the private network with a static IP. and the rest DHCP...

I don't know if we can do this (split a router with a subnet using DHCP and the other Static...

Thanks

 

[SYQUEST]

The first configuration will work, but that hardware does not have or support VLANs. With this arrangement you have two LANs. Each router supports its own LAN, and each has its own subnet.

With the wireless router used as such you only get one wireless LAN per wireless router. You can use both static and DHCP IP addresses on the same subnet, but not in the same block, for example if you wanted only 30 dynamic IPs and you assigned 192.168.2.100 to .129, you could not assign any of those as static. The static ranges would be anything else: 192.168.2.1 thru .99 and .130 thru .254.

The BEFSR41 has no "splitting" capabilities whatsoever! It is just the "el cheapo" router and very basic.

....JIM....

 

[mofusjtf]

Why not just put a WAP on the internal network and then use a WRT in SyQuest's original network solution. Then your free wireless can be separate from your internal LAN and your internal users can have access to a secure wireless connection. Just a thought.