 Reviews:
·Verizon Online DSL
| Correct setup for Guest Access in Office? Net Diagram |
I want to setup a wireless router with Guest access that prevents guests from accessing any of the other systems on the LAN. But there's a catch in that the wireless router will not be connected directly to the cable modem and there is a firewall device in the mix. With this setup, will it still be possible for the office folks to access their internal systems and for guest users to ONLY have access to the internet? I haven't setup a router with Guest access before so I don't yet have a full understanding of how the router separates the traffic. I would normally setup the router as an AP on the LAN, but that takes the WAN port out of the equation. Seems to me that this wouldn't work for the Guest account. Any ideas or good examples out there?
Thanks! |
|
 Bink join:2006-05-14 Denver, CO kudos:4 | If the AP, switch and WatchGuard support VLANs (AP puts the guest SSID on a separate VLAN), this would be simple to do and is the preferred method for doing this. |
|
 bdnhsv join:2012-01-20 Huntsville, AL | reply to HarryH3 I see you have a watchguard appliance in your diagram. I went to their website and they have models available that include wifi and guest access. If you haven't already purchased your watchguard that might be something to consider. |
|
 Reviews:
·Verizon Online DSL
| said by Bink:If the AP, switch and WatchGuard support VLANs (AP puts the guest SSID on a separate VLAN), this would be simple to do and is the preferred method for doing this. Only the Watchguard currently supports VLAN's, so that solution won't likely meet the budget. It seems that stepping up to that level of functionality raises the price considerably. (Unless there are low-budget switches and AP's with VLAN capability).
said by bdnhsv:I see you have a watchguard appliance in your diagram. I went to their website and they have models available that include wifi and guest access. If you haven't already purchased your watchguard that might be something to consider. This may be the way to go. I had looked at the wireless Watchguard boxes, but was leaning towards an AP that could be more easily relocated to maximize wireless coverage. This may be the best solution, given the budget, and I could add a cheap AP at the other end of the office if the signal is too weak. |
|