Networks

Ask something
Discussion Locked

Seperating Networks

0 helpful
4 replies

by gwejones

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have an internet cafe which I have recently upgraded to wireless. I have an ADSL router and a W-AP connected directly into the switch portion of it. This first AP is used to supply the shop with ADSL. I have recently purchased a second AP for which I have a largew aerial. I intend to use this to affer other bussinesses in the vicinity accces to the internet using my ADSL router. I have succesfully done this but all the bussinesses have access to my shops network, and can browse the pcs. I'm running XP homw so I cant use domains. can I use subnetting? How? Its class A (10.0.0.x)

4 replies

by cg it

First off a domain has nothing to do with physical layout. A domain is a logical structure not a physical one. I've recently seen people mention domains when talking about physical structure of networks and I think they hear a domain is a security boundry and think that applies to a physical structure. It does not.

To answer your question, yes you can and all you need to do is buy another wireless router. Put that router on a different subnet, uplink it to your network wireless [wired router to router link]. Users behind the second router can only see comps connected to it [different subnet] but can still access the internet via your network wireless.

Routers are used to segment networks [or you can use a managed switch and VLAN].

by techkid

Just a couple more tips: Don't worry about others being able to browse computers, tell your clients to use a firewall. Internet cafe's are very insecure anyways and should be used at your own risk.

Make sure to lock down the second wireless router though. Don't broadcast SSID, use strong encryption, dont use DHCP, use MAC Address filtering. Share needed info ONLY with the businesses that are paying you for internet.

And make sure your business workstations/servers cannot be accessed from either network.

This discussion is closed to new replies.