Re: How do I create/configure a secure wireless network for my office AND allow customers to connect wirelessly?
- From: neillmassello@xxxxxxxxxxxxx (Neill Massello)
- Date: Thu, 17 Aug 2006 23:52:56 GMT
Mark <in2unow@xxxxxxx> wrote:
I am setting up a small business. I have a DSL PPOE account and
purchased a wireless router. I have one laptop that is wireless, 2
computers and 1 LAN printer that have NICs for wired lines.
This network presently is working well for me; all my PC's can share
files from each other, etc..
Now the fun part (this is where I need your help): I want to allow my
customers to bring their laptops into my store and wirelessly surf the
web while service is being performed on their cars.
What can/should I do in order to maintain a secure LAN network for my
computers (which includes one wirelss laptop) yet enable public
wireless access for my customers? I'm not sure what to do.
The secure way to do this, often referred to as a coffee shop setup, is
to use two wireless base stations: one with encryption enabled for your
office LAN and the other without encryption for your customers. You'll
want to use the two routers' NAT functions to make the machines on your
office LAN effectively unreachable by anybody connected to the public
network. That means plugging the office router into one of the public
router's Ethernet LAN ports and then connecting the public router's WAN
port to the DSL modem. Your office machines will be on a different
subnet and the second (office) router will block unsolicited traffic to
them from the other (public) subnet.
This is described at
<http://www.tomsnetworking.com/2006/06/30/wireless_faq_security/page2.ht
ml#68>. (Ignore the advice about enabling MAC address association and
disabling ESSID broadcast.)
.
- References:
- Prev by Date: Re: How do I create/configure a secure wireless network for my office AND allow customers to connect wirelessly?
- Next by Date: Airport cards not working.
- Previous by thread: Re: How do I create/configure a secure wireless network for my office AND allow customers to connect wirelessly?
- Next by thread: long ssh connect-times on WLAN
- Index(es):
Relevant Pages
|
