Re: Secure and unsecure install problem

Reall the best way to do this IMHO in the following (if you have more
than one ip address available on your DSL line):

	DSL-Modem
   	    |
 	 --Switch----
 	 |          |
    OpenAP/Router   WEP AP/Router

This makes the following assumptions:
1. You can get more than one ip on your DSL line (most commercial class
ones will, even some residential)

2. Both Access Points are routers/nat/firewall capable.

3. You have an extra switch or hub lying around.

Having your internal users router piggyback on the open router is not
really a best practice since ultimately all of your internal users
traffic is dependent on the security of the open router which is open
for anyone to connect to.

In regards to your intial proposed solution where each ap is plugged
into your "wired router", does your wired router support some sort of
access control list? Or were you planning on just having them use
different ip ranges, thinking that they would not see each other or be
able to connect to each other? 

-Ken


On Wed, 2005-03-02 at 14:13 -0800, Morgan Davis wrote:
> I would set up with two wireless routers back to back like this:
> 
> dsl --- open-router ---- wep router
> 
> The internet/wan port on the wep enabled router would plug into on of
> the switch ports of the unsecured (open) router. The office users
> would be protected from access by the open users, and all will able to
> access the internet. Routers seem to just as cheap as plain AP's
> nowadays. I wouldn't put them on top of each other, separate them by a
> few feet. Additionally setup the office users to have their AP listed
> first in preferred networks page of Windows.
> 
> 
> On Mon, 28 Feb 2005 13:07:25 -0600, Scott Bradford <[email protected]> wrote:
> > Hello all... need some suggestions
> > 
> > I have an office environment that I want to have a "closed" wireless system
> > for our laptops and an "open" wireless for guests.   I want them to be able
> > to associate into it without me going in and babysitting them all the time.
> > Only way I can think to do this is.....
> > 
> > dsl - wired router  -  ap1    secure
> >                           -  ap2   unsecure
> > 
> > Since I can set the IPs, the "wired"  router will "block" one AP from the
> > other.   Set one to channel 1, dhcp on full blast...  set the second to
> > channel 11, turn on web, and go on with my life
> > 
> > Comments or suggestions appreciated
> > 
> > _______________________________________________
> > Talk mailing list
> > [email protected]
> > http://seattlewireless.net/mailman/listinfo/talk
> >
> _______________________________________________
> Talk mailing list
> [email protected]
> http://seattlewireless.net/mailman/listinfo/talk

_______________________________________________
Talk mailing list
[email protected]
http://seattlewireless.net/mailman/listinfo/talk