Wireless Laptops on their own subnet... is this secure?

[ame540]

Hello fellow techies!

We had an issue with some sales reps that came to our building over the weekend. Of course I was away on vaction and our IT director was responsible for getting people onto our little Linksys network. The problem is, that everyone had different client software running their wireless NIC's and some people were not able to get a WEP key entered or passphrase.

This was embarassing for the IT group. Had i been around we might have been ok, but i want to work on a more simple solution for users.

I am thinking i want to create a seperare subnet for DHCP wireless users. Our gateway is a Cisco 1720 and has plenty of bandwidth for people that visit to browse the web, etc.
However i am concerned in keeping people on this wireless subenet off of our 10.x.x.x subnet (were our file servers and other goodies are). By creating a route in the cisco to allow people on the wireless subenet out, are they essentially blocked from the 10.x.x.x subnet???

Thanks guys (and gals)

 

[bpinning]

Hey,

Not a bad idea,

Can you create a separate VLAN for them to use?

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

http://www.eyetstore.com

NSW, Australia
(Unless you want to pay for our trip?)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[ame540]

Creating a seperate VLAN would probably work, i just have little experience in doing it.

Would i just have a few ports on our switch configured to a different VLAN and connect the accesspoints to those ports?

 

[bpinning]

Yep,

Make sure that you VLAN has a different IP range and you done.

Brett

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

http://www.eyetstore.com

NSW, Australia
(Unless you want to pay for our trip?)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~