NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Setting up wireless AP with guest / isolation
Hello, I'm going to explain what I want to do and hopefully someone can give me some insight on the best way/product to accomplish it. I have several small offices that I want to add wireless access to. I would like to set up both private and public SSIDs, in which the public wireless clients have no access to internal resources, only the internet. I am a little lost on the best way to do that (using either a dedicated AP, or a wireless router but essentially only using it as an AP). The hardware setup would be:
Internet --> Cisco Router/Firewall --> Switch
Connected to the switch would be servers, clients, and the AP. Because I don't want wireless clients accessing the servers, the AP would need to provide DHCP for the guest network, but the private network clients would be able to pull IP's from the server.
Is what I'm asking even possible the way I'm describing it? Or are we better off just adding another LAN port to the router, setting it as a DMZ, and buying 2 AP's, one for each wireless network?
Thanks!
Internet --> Cisco Router/Firewall --> Switch
Connected to the switch would be servers, clients, and the AP. Because I don't want wireless clients accessing the servers, the AP would need to provide DHCP for the guest network, but the private network clients would be able to pull IP's from the server.
Is what I'm asking even possible the way I'm describing it? Or are we better off just adding another LAN port to the router, setting it as a DMZ, and buying 2 AP's, one for each wireless network?
Thanks!
5 Replies
- Look at open-mesh.com. You may like the setup
- The price is definitely right on those! Thanks for your recommendation, I have a few questions though.
I see it offers public and private SSID, and just to confirm, the private SSID will be segregated not only from other wireless clients but also from any wired clients on the LAN?
Also do they do DHCP? And if not what do you suggest? I don't want public wireles users getting access to my server that provides DHCP if I can help it, unless these AP's have a way to allow only DHCP traffic to the server?
Thanks again. - Look their manual.
It runs vlan to isolate between private and public
Site has in depth knowledge base and contact them. The will answer pretty fast - In AP mode, things work better when you plug your primary router's ethernet cord into one of the 4 LAN ports instead of the WAN port. My hunch is that wireless isolation only allows communication with the WAN port, and since AP mode doesn't use the WAN port you end up having no access to the internet. jmizoguchi: Do you work for Netgear? I'm just wondering because you have commented on every aspect of the forum. I own the FVS336GV2, WNDR4500, WNDR3800, and R6200. I used to own a WNDR3700. You've got comments all over the place so I was wondering if you work at Netgear? With all due respect, sometimes I don't understand what you are trying to say. I don't find your feedback very helpful because it does not always make sense. I know you are trying, but it's got me a little confused as to what you are doing. I end up communicating on other public forums where I have gotten better help. I love Netgear's wireless range. This is why I keep buying Netgear products. I've tried various other routers and don't find the range is as good. With my latest router (R6200), I find it sometimes pauses before continuing. It's strange behaviour.
- AP mode in the router feature should only uses Internet port
No one here in Netgear work for Netgear and if did they will not disclose since they do visit on occasion
If you don't understand then maybe skill set is different
