Open wireless access point

[dainthomas]

I'd like to set up a router to allow open access to the internet over the wireless connection, but to keep the wired computers secure. I've done some searching, and can't find a way to do this. Can anyone help?

Thanks

 

[n0cmonkey]

You want to keep the wired computers secure in what way? Totally seperated from the wireless clients?

 

[ktwebb]

Some Router/AP combos, my speedstream for instance, will have the ability to limit wireless traffic to internet hosts, while allowing LAN traffic over the wired machines. This would be the easiest solution, albeit not the most secure. Wireless clients would still be on the same physical network. Typically if you want to limit wireless clients to WAn traffic only you'd put the AP on the outside of your firewall.

 

[dainthomas]

Originally posted by: ktwebb
Some Router/AP combos, my speedstream for instance, will have the ability to limit wireless traffic to internet hosts, while allowing LAN traffic over the wired machines. This would be the easiest solution, albeit not the most secure. Wireless clients would still be on the same physical network. Typically if you want to limit wireless clients to WAn traffic only you'd put the AP on the outside of your firewall.

It's going to need to be pretty secure. The coffee shop my wife works at wants open wireless access, but the wired office computers are going to be sharing the same DSL connection.

I think one way to do it would be to connect a non-wireless router to the wireless router and put the office machines behind that, but I didn't know if there was a secure way to separate them using just one router.

 

[n0cmonkey]

Put a good firewall between the wired and wireless clients.

 

[dainthomas]

Originally posted by: n0cmonkey
Put a good firewall between the wired and wireless clients.

So a separate router like a mentioned in my last post? The coffee shop is right below a college dorm (chock full of CS majors) so it's gotta be like Pentagon level secure.

 

[n0cmonkey]

Originally posted by: dainthomas

Originally posted by: n0cmonkey
Put a good firewall between the wired and wireless clients.

So a separate router like a mentioned in my last post? The coffee shop is right below a college dorm (chock full of CS majors) so it's gotta be like Pentagon level secure.

2 internet connections would be even better. I wouldn't trust those little SOHO routers for this kind of thing.

 

[JackMDS]

Get a second Cable/DSL Router, and configured a segregated Network.

Wireless Segregation: - http://www.ezlan.net/shield.html


:sun:

 

[dainthomas]

Originally posted by: n0cmonkey

Originally posted by: dainthomas

Originally posted by: n0cmonkey
Put a good firewall between the wired and wireless clients.

So a separate router like a mentioned in my last post? The coffee shop is right below a college dorm (chock full of CS majors) so it's gotta be like Pentagon level secure.

2 internet connections would be even better. I wouldn't trust those little SOHO routers for this kind of thing.

Thanks for the info. I'll recommend they have two connections.

 

[Staz]

Don't cable/dsl modems have 2 connections, and if you get a seperate IP address for each, it would be like running two seperate systems/LAN's off of one cable/dsl model?

 

[Atheus]

You don't need 2 connections at all, that would be a waste of money. You don't even need 2 routers. Just use a single linux router (e.g. wrt54g with openwrt) with two seperate networks set up. You can then firewall them off from eachother but still allow routing out to the internet. I expect you can do the same thing with a cisco or something.