how do I set up free wifi while keeping my network secure?

[drebo]

Originally posted by: VirtualLarry

Originally posted by: drebo
There are many services that do not work inside of a double NAT, even though you've set your second router in the DMZ of the first. Anything that uses RTP, for instance. This includes VoIP, IPTV, and any number of other protocols.

I haven't seen any problems from my end. And yes, I do run VoIP, I have a MagicJack, which uses a variant of SIP as I understand it.

Of course you're not going to have a problem with ONE device. You'd have to understand how SIP works (which you clearly don't) in order to recognize the issues you'll have with more than one device. Take my Hosted PBX customer with 29 IP phones. Double-NAT would render all of them inoperable.

 

[VirtualLarry]

Then just get a Zyzel wireless router, the one that supports a Guest WLAN as well as a private WLAN. No double-NAT, problem solved.

Edit: Such as this one.

 

[RebateMonger]

Originally posted by: VirtualLarry
Why? Unless you're running servers, it doesn't matter.

A big problem with double-NAT is outbound connections. SSL web sites often won't work correctly.

 

[Modelworks]

I would get a spare pc, doesn't need to be high end, and run pfsense on it. You can then use captive portal to block access to the LAN as well as log all traffic through the system . It also makes it where when they connect the first thing they see is a page that you set up explaining your rules for their connection . They have to click accept to use the internet there.
http://www.pfsense.org/index.p...k=view&id=40&Itemid=43

 

[JackMDS]

One thing that I learn from my life time involvement with medicine is to concentrate on provide Functional solutions.

You do not treat a person with a specific condition out of ideological or general broad medical field consideration. You treat him/her for his/her specific problems.

Similarly, in computers, there are issues that are related to broader considerations, and there is a place for a functional focused solution concerning individual situations.

The OP stated clearly, "I have a small medical office and most of my patients have iphones or blackberries".

What that means? Small office problem around 10 people waiting and few of them can use Internet connection. Actually, a very good idea to provide a connection, since it helps to reduce the patients (and waiting family members) anxieties and concerns about the medical reasons that brought them.

A small office probably cannot entail big expense on something like this and keep an outside IT to keep it going.

I have a good friend who has a Chemotherapy practice in midtown Manhattan, and like me he is also a computer enthusiasts.

So what he did?

He configured (as I suggested above) a simple two Routers segregated system on the public side he put a Wireless Router configured to work as 802.11b only, the router is in a closet to reduce the signal even further.

Perimeter checking with good laptop and High power Wireless card shows that NO functional signal is available outside the Office suite.
In the waiting room, there is a signal of about 1Mb/sec. enough for few people to do normal surfing chores. No one sits in this office for more than an hour so given the limited bandwidth and time available there is No issue of Illegal massive Downloads etc.

This system works already for few years and there are No issues of the kind that discussed early in this thread.

At the time that was done (years ago) not too much else was available. Currently, given the availability and low prices there is talking about installing a separate Verizon DSL for $19.99, and a Router with log on screen just to be more on the safe side.