View Single Post
  #6   Report Post  
Posted to uk.d-i-y
John Rumm John Rumm is offline
external usenet poster
 
Posts: 25,191
Default Separating Wired and Wireless Networks

On 01/08/2013 09:10, thescullster wrote:
Hi all

OK so this is maybe a bit OT for the group, but here goes.

I've never been a fan of wireless, so cabled the house up with Cat 5 to
a number of rooms. There are clearly now numerous devices that will
only connect wirelessly and I am under pressure to add a WAP.

I've inherited a Netgear DG834G wireless router, our existing network
uses the wired version of this device. I have set up the wireless
router as a WAP OK, but wondered if it is possible to configure it as a
DHCP server with a different address range to the wired router.


No need. The DG834 supports a "wireless isolation" option if you want.
Turn that on, and wireless clients won't be able to communicate with
each other, or with devices on the wired section of the LAN.

This may do what you want, but may also prove a bit restrictive.

Not sure how much security this would add, but I'm inclined to do as
much as possible to separate the wireless network from certain wired
devices. The SSID of the WAP is hidden and MAC address filtering on
that router is in place.

Anyone setup a separate wired and wireless network?


Yup, however if you want more flexibility, then having a more
sophisticated router helps. Something like a Vigor 2830 will let you
configure up to 4 SSIDs on the same WAP, and each can have different
levels of access - and can be allocated to separate VLANs as well. So
you can have things like guest wifi that can see the internet - perhaps
with upload and download rate limits in place, and no access to LAN
machines, and then a more priviledged wifi that can see other machines
and has no limit etc.

(note that MAC address filtering does not really offer security as such
- since someone wanting access can simply sniff the MAC addresses that
are talking then clone one later. Hiding the SSID is also a fairly
feeble security measure in this day and age)


--
Cheers,

John.

/================================================== ===============\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\================================================= ================/