Routing across subnets

[tim55]

We have a small lan, with an adsl router, to which a wireless access point is attached, which gives network resource access to staff. However, we would like to provide wireless internet access to casual visitors.

The problem is that from a security point of view, allowing visitors to connect to the access point, puts them on the same subnet as the staff with potential access to files etc.

It would seem better to have a secondary access point, using a different subnet, for the visitors. However, this creates a problem with being able to use the same adsl router for internet access.

Assuming that my thoughts on security above are valid, what might be the best way to approach the problem? An additional bridging device?

Many thanks.

 

[CiscoGuy33]

tim55,

The way we do it at a large college is we have the A/P's connected to switches and we put them on a seperate VLAN.

We also have the students logon so it is not totally open to people in the parking lot etc. but that is just another step so that you "know" what visitors are using your A/P's. It would mean that "visitors" that want to use your A/P's would have to "register" some how to use "your" system! But that is just another "layer" of security!!!

Putting it in a seperate VLAN would be the same as a seperate subnet, the router and any access lists or other security you use will control what and where that and other VLANs can go!

Hope this helps!

E.A. Broda
CCNA, CCDA, CCAI, Network +

 

[tim55]

Thanks CiscoGuy,

I will look at the VLAN idea and see how it goes.