Offering public WLAN access

[rednotdead]

Interesting one here - got a client who wants to be able to offer site visitors internet access via wireless AP's but at the same time preventing them from 'seeing' the internal LAN. We've worked in the past with the higher end solutions such as Vernier and Bluesocket which tunnel the wireless traffic through the LAN to the internet gateway but has anyone got any ideas how to do this with the miminal of expense.

VLANing springs to mind but even the cost of manged switches is a stumbling block for the client. Anyone got any ideas or done something similar?

TIA

[greenlandy]

I'm not really a networking type but I thought you could create VLANS on some access points.

[ThePassenger]

VLANS sound like the best bet. Drop the whole Wireless system on it's own one.
Alternatively, get an ADSL line in and a generic SoHo peice of kit. It won't 'see' the wired LAN as well, it's not actually connected to anything.

[agent006]

Just run the WLAN on a different IP subnet to the existing LAN. Won't be able to see each other, but will need a router capable of dual IP, or a secondary router between the net router and the AP.

[fieldl]

How about a small Juniper Netscreen device ?
These can host 2 SSID's one with different security profiles IIRC. Actually it's four more info here:
www.juniper.net/products/integrated/ns_5series.html

Oh just seen that they won't stretch to managed switches. Small Netscreen will be around £500

Edited by fieldl on Sunday 10th December 21:38

If you want one drop me a mail through my profile and I'll put you in touch with a reseller who is decent

Edited by fieldl on Sunday 10th December 21:40

[sneakyneil]

I dunno what kind of gateway/router they've got but if they've got DMZ functionality how practical would it be to use WDS to distribute the visitors network from there rather than using the companies wires?

[agent006]

fieldl said:

These can host 2 SSID's

Netgear APs will do this for £70.