Wireless Networking Open access point for clients

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Open access point for clients NewsGroup 07-22-08
Posted by NewsGroup on July 22, 2008, 11:17 pm
Please log in for more thread options
We have a secure Wireless network using wep and mac filtering. My Boss
wants clients to have access to internet
fropm our office without having to add their mac address and enter a code on
their end. Is there a good procedure
for adding a WAP for internet only? I dont want this WAP to giver access to
anything except my router going out.
I would like it to disk out its own DHCP in a completely different network
but still give the users Internet access
Is there a whitepaper or howto>/??

Thanx

Carl




Posted by Bill Kearney on July 23, 2008, 10:11 am
Please log in for more thread options

> We have a secure Wireless network using wep and mac filtering. My Boss
> wants clients to have access to internet
> fropm our office without having to add their mac address and enter a code
> on their end. Is there a good procedure
> for adding a WAP for internet only? I dont want this WAP to giver access
> to anything except my router going out.
> I would like it to disk out its own DHCP in a completely different network
> but still give the users Internet access
> Is there a whitepaper or howto>/??

If you knew enough to get the network setup like it is already then you
ought to know how to do this. If not, call (and pay) the people that set it
up. Get this wrong and you run the risk of compromising the network
security quite badly.

You don't describe the coverage area needed. If it's just one room or small
area then one access point might cover it. But if it's a multi-room,
several floors or multiple buildings then it gets CONSIDERABLY more complex.
Which is it?

That's the first question. After that a whole bunch of others follow.
Mostly concerning the existing internet connection and type of firewall
being used.

-Bill Kearney


Posted by mike on July 23, 2008, 1:06 pm
Please log in for more thread options
Bill Kearney wrote:
>
>> We have a secure Wireless network using wep and mac filtering. My
>> Boss wants clients to have access to internet
>> fropm our office without having to add their mac address and enter a
>> code on their end. Is there a good procedure
>> for adding a WAP for internet only? I dont want this WAP to giver
>> access to anything except my router going out.
>> I would like it to disk out its own DHCP in a completely different
>> network but still give the users Internet access
>> Is there a whitepaper or howto>/??
>
> If you knew enough to get the network setup like it is already then you
> ought to know how to do this. If not, call (and pay) the people that
> set it up. Get this wrong and you run the risk of compromising the
> network security quite badly.

Nice attitude. We come here for help, not to hear that we should
already know how or to go hire someone. Grrrr!!!

I have the same problem. Westell 327w dsl modem on home network.
I'd like a separate unsecured network with internet access, but no
access to the primary network. I need 20 foot range. I have several
consumer-grade access points and routers. Can't figure how to set it up.

No, I don't want a lecture that I shouldn't. I want a tutorial on HOW.

Thanks, mike
>
> You don't describe the coverage area needed. If it's just one room or
> small area then one access point might cover it. But if it's a
> multi-room, several floors or multiple buildings then it gets
> CONSIDERABLY more complex. Which is it?
>
> That's the first question. After that a whole bunch of others follow.
> Mostly concerning the existing internet connection and type of firewall
> being used.
>
> -Bill Kearney

Posted by John Mason Jr on July 23, 2008, 2:20 pm
Please log in for more thread options
mike wrote:
> Bill Kearney wrote:
>>
>>> We have a secure Wireless network using wep and mac filtering. My
>>> Boss wants clients to have access to internet
>>> fropm our office without having to add their mac address and enter a
>>> code on their end. Is there a good procedure
>>> for adding a WAP for internet only? I dont want this WAP to giver
>>> access to anything except my router going out.
>>> I would like it to disk out its own DHCP in a completely different
>>> network but still give the users Internet access
>>> Is there a whitepaper or howto>/??
>>
>> If you knew enough to get the network setup like it is already then
>> you ought to know how to do this. If not, call (and pay) the people
>> that set it up. Get this wrong and you run the risk of compromising
>> the network security quite badly.
>
> Nice attitude. We come here for help, not to hear that we should
> already know how or to go hire someone. Grrrr!!!
>
> I have the same problem. Westell 327w dsl modem on home network.
> I'd like a separate unsecured network with internet access, but no
> access to the primary network. I need 20 foot range. I have several
> consumer-grade access points and routers. Can't figure how to set it up.
>
> No, I don't want a lecture that I shouldn't. I want a tutorial on HOW.
>


You might look at some of the info on
<http://www.smallnetbuilder.com/content/view/86/106/>

But what Bill is alluding too, is that if you are responsible for the
network security you need to know how risk adverse you or your business
is and make appropriate decisions.


If you can get a second ip address from your internet provider just set
up a separate network.

If you can't get a second ip then connect one router to your isp and
then connect wan ports of two additional routers to lan side of ISP
connected router.


There are some issues with double natting so you mileage may vary.

A different option would be to find a router with 1 wan port and the
ability to route between two diffrent internal networks


If you want to run two wireless networks in same proximity choose your
channels properly.


John

Posted by mike on July 23, 2008, 5:46 pm
Please log in for more thread options
John Mason Jr wrote:
> mike wrote:
>> Bill Kearney wrote:
>>>
>>>> We have a secure Wireless network using wep and mac filtering. My
>>>> Boss wants clients to have access to internet
>>>> fropm our office without having to add their mac address and enter a
>>>> code on their end. Is there a good procedure
>>>> for adding a WAP for internet only? I dont want this WAP to giver
>>>> access to anything except my router going out.
>>>> I would like it to disk out its own DHCP in a completely different
>>>> network but still give the users Internet access
>>>> Is there a whitepaper or howto>/??
>>>
>>> If you knew enough to get the network setup like it is already then
>>> you ought to know how to do this. If not, call (and pay) the people
>>> that set it up. Get this wrong and you run the risk of compromising
>>> the network security quite badly.
>>
>> Nice attitude. We come here for help, not to hear that we should
>> already know how or to go hire someone. Grrrr!!!
>>
>> I have the same problem. Westell 327w dsl modem on home network.
>> I'd like a separate unsecured network with internet access, but no
>> access to the primary network. I need 20 foot range. I have several
>> consumer-grade access points and routers. Can't figure how to set it up.
>>
>> No, I don't want a lecture that I shouldn't. I want a tutorial on HOW.
>>
>
>
> You might look at some of the info on
> <http://www.smallnetbuilder.com/content/view/86/106/>
>
> But what Bill is alluding too, is that if you are responsible for the
> network security you need to know how risk adverse you or your business
> is and make appropriate decisions.
>
>
> If you can get a second ip address from your internet provider just set
> up a separate network.
>
> If you can't get a second ip then connect one router to your isp and
> then connect wan ports of two additional routers to lan side of ISP
> connected router.
>
>
> There are some issues with double natting so you mileage may vary.
>
> A different option would be to find a router with 1 wan port and the
> ability to route between two diffrent internal networks
>
>
> If you want to run two wireless networks in same proximity choose your
> channels properly.
>
>
> John
Thanks for the link. Now, I gotta go searching for the
needle in that haystack.

I'm not overly concerned about highest security. Ain't nothing worth
having on the machine. Just like to try to keep out the pranksters
who like to trash your system. Spending money on the project is outa
the question.

Two issues I forgot to mention...
1) the router I want open is built into the dsl modem.
I want the high speed router to be the secure one.
2) I need to port forward to the net on the secondary router
for voip, vnc, etc.

I got the thing to work with two different nets...192.168.1.x and
192.168.2.x
but couldn't figure out how to port forward to the second router. I
tried subnetting one
address range with subnet mask and assigning two dhcp servers, one for
each half.
All that did was take the other half of the last octet
out of the list. Could still access the other half.
mike

Similar ThreadsPosted
Open access point for clients July 22, 2008, 11:17 pm
Is it legal to access an open wi-fi access point? January 11, 2005, 1:03 pm
How to connect to a nearby open access point. November 25, 2005, 9:42 pm
How to allow only internet access to wireless clients? April 23, 2007, 8:11 am
Repeater clients need direct access to router? March 18, 2005, 5:36 pm
point-to-point wireless pc connection without access point December 14, 2004, 1:33 pm
Firmware to encourage open access? November 23, 2006, 1:26 pm
Open wireless access but protect wired server and client? April 21, 2007, 7:30 am
Soft Access Point with Verizon Wireless Broadband Access??? February 21, 2006, 8:20 pm
Need an access point April 5, 2005, 1:25 pm
When to use an access point? May 31, 2005, 7:15 am
Access Point June 7, 2005, 1:17 am
Access Point August 11, 2005, 12:33 pm
Can't get into the access point March 27, 2006, 10:17 am
Need to add access point May 25, 2006, 10:45 am