Setup Airport Express on a Separate Network

[bnga000]

The company I work for recently purchased an airport express. They want the network from the Airport Express separate from the internal LAN network. Basically, none of the networks should have access to each other and the Airport Express should be a different subnet than the LAN.

I set the configuration to Bridge Mode in the Airport Utility to bypass the DHCP and made sure I updated the settings. However when I do an ipconfig, I still notice the wireless network is in the same subnet as our LAN.

This is my first time setting this up so any help is appreciated. What's the best way to go about this? Is this even possible with the Airport Express?

Thanks

 

[RadiclDreamer]

What are they trying to accomplish? Maybe that will help us find a good solution for you.

 

[bnga000]

Sure. Basically to create a VLAN. We have some new recruits coming in and we want to make sure they do not have access to the employee network. The only thing they should have access to is the company printer. The service provided is Cogent and we are utilizing a meraki and some cisco aironets as access points. Do you think creating a VLAN is the way to go?

Thanks

 

[RadiclDreamer]

Is there a reason you couldnt use the built in "guest network" feature? This will give them internet access but no access to the local lan

 

[bnga000]

Is there a reason you couldnt use the built in "guest network" feature? This will give them internet access but no access to the local lan

Enabling the guest network through the cisco meraki mr18 or the guest network through the Airport Express?

 

[RadiclDreamer]

Enabling the guest network through the cisco meraki mr18 or the guest network through the Airport Express?

Airport

 

[bnga000]

Didn't work. I have one ethernet cable plugged into the WAN port of the APE and another to the wall port which is hooked up to a cisco 2960 switch. I have another cable going from the LAN port of the APE to my macbook pro. I enabled the guest network and enabled DHCP and NAT so that the device can assign i.p.s in a different range. However, I am still in the same subnet and I can still access company files in the LAN. Any thoughts?