Router with Guest Zone?

[gerberdude]

Non-Sage question:

I have a client who owns a driving range wants to set up a separate wireless network on the tee box for customers. (I guess he thinks people will check their email in between swings)

Before you launch into the legalities of the issue, yes, he is fully aware that he may be violating his ISP TOS.

That being said, is there a way that I can expand his existing wired network with the addition of a wireless zone that is separate from his existing wired LAN? The goal being to keep wireless traffic off of his LAN and only allow wireless traffic to reach out to the internet.

I know that there are some wireless routers out there that offer a "guest zone" feature, but I am concerned that this might only be available on "N" routers, and not the more common "G".

Also, if it is only available as a wireless feature, and not a wired feature, how would I go about expanding the signal, if it turns out to be too weak? (as I suspect it might be once we start broadcasting)

[jpt1303]

You can do it with a wireless router that will work will DD-WRT firmware. Here is a link to get you started. http://www.wi-fiplanet.com/tutorials...0724_3714521_1 I haven't done this myself but doesn't look to bad to setup.

Jeff

[Djc208]

The router I just bought (the really fancy Netgear true dual band) has a guest zone and it's not isolated to "N" or "G", it's seperated by the frequency, 2.4 or 5 GHz. So there are two guest zones one for each band.

So I imagine you can find cheaper "N" routers that offer the same feature without the pricetag.

[petereader]

I guess it depends on how much they want to spend and what's on the wired end that they want to protect so much. If it's a business, and there is any kind of sensitive data, I would go with a business solution like:
http://www.watchguard.com/products/x...xtm22&p3=xtm23

This can cost them up to a grand or more, depending on options, but it's a business solution for a business.

Otherwise, I would think any router with configurable ports will get you what you want. Just subnet a port and attach another wifi router to that port. Maybe a wifi router that has vlan capabilities could accomplish what you want as well, but never tried that with a retail class router.

You may have to strategically position access points or signal boosters to cover the area that I would imagine is rather large, but that should get you what you want.

[MitchSchaft]

The DLink DIR-655 has it. Although I haven't used that feature, the router itself has been going strong for 2.5 years now.

[gerberdude]

Originally Posted by petereader

I guess it depends on how much they want to spend and what's on the wired end that they want to protect so much. If it's a business, and there is any kind of sensitive data, I would go with a business solution like:
http://www.watchguard.com/products/x...xtm22&p3=xtm23

This can cost them up to a grand or more, depending on options, but it's a business solution for a business.

Yeah, that's the kind of thing I was trying to stay away from. Just something simple to keep out snoopers, although admittedly, a dedicated hacker can always find a way in.

Otherwise, I would think any router with configurable ports will get you what you want. Just subnet a port and attach another wifi router to that port. Maybe a wifi router that has vlan capabilities could accomplish what you want as well, but never tried that with a retail class router.

So how do I "subnet" a port on a router?

Am I creating a VLAN and associating it with just one port?

[petereader]

Sorry, if you're trying to keep it simple, then neither of those suggestions are going to help. Besides, finding a router with configurable ports may get pricey too.

I guess the next step down is any of the previously mentioned routers with the guest zone feature. Just as long as you and your client recognize that this will offer some security, but is by no means great security.

[gerberdude]

Is there another way?

Maybe to put another router downstream from the first (just for the wireless) and not allow the subnets to mix? How would one do that, if it is possible?

*EDIT: Maybe instead of a second router downstream from the first, put a second router parallel to the first just down from the modem (with switch)?

Found this: http://forums.wi-fiplanet.com/showthread.php?t=7204

Sound like what I am doing.

[petereader]

I've actually done a setup like the one you mentioned first, setting up a wireless router downstream from the first. But again, only using business class routers where I could designate port 1 to be something like 192.168.100.x and the others to be 192.168.1.x, then the second router (wifi) would belong to the 192.168.100.x subnet.

Don't know if you could use a consumer grade switch to connect to 2 different subnets but if you can, that would obviously be the simplest solution. Could you please let me know whether that works out; I'm certainly curious.

Good luck!