I have an Aironet 1232AG (AIR-AP1232AG-A-K9) and I have to confgure it for use by visitors using laptops for "Internet Only" access, meaning no access to anything on our LAN, and for staff to access Internet + have access to servers on our LAN. The staff and visitors will be using different machines. I was thinking of using a seperate SSID requiring MAC address security and WEP for visitors, and another SSID using RADIUS via MS IAS (PEAP) which would require membership of workstation and user account in a special group in order to have wireless access. I'm just not sure if MAC and WEP for visitors is the best/most flexible way, and I'm not sure how to isolate visitors from our LAN while giving employees access to LAN & Internet. Would I use a VLAN? Help!