Networking Forums

Networking Forums > Wireless Networking > Wireless Networks > How to set up a public acess point

Reply
Thread Tools Display Modes

How to set up a public acess point

 
 
yar
Guest
Posts: n/a

 
      11-17-2004, 11:37 AM
Hi

I have a small hotel, I want to give my guests access to the internet but I
do not want to compromise my own home network.

I currently have 4 pcs networked together with fixed IPs and a wireless
access point that my apple express connects to for music and my daughters
laptop, this has a key to access.

I have been told that I can fit another access point with a different range
of IP addresses and subnet mask that this would enable a connection but stop
people getting to my network.

I have also been told that if I attach another pc to my network fix the ip
and then firewall it from my pcs I could then fit a wireless card share the
connection and this would protect my network as well.

I do not know enough about this, could some one please point me in the right
direction.

Thanks


 
Reply With Quote
 
 
 
 
Dana Brash
Guest
Posts: n/a

 
      11-17-2004, 03:29 PM
Hi,

You could certainly route another subnet off using a wireless AP/router
combo.
You probably have DSL or a cable modem, right?
This would then lead into a router of some type, presumably your current
configuation.
From your current configuration, you could add the new router, and have the
'Public' side of the new router be on your current subnet.

Then you would have a new subnet behind the new router that your guests
could use.

However, I'd reverse it, and put guests in the front subnet, essentially
creating a DMZ.


/---------\
| Internet |
| |
\---------/
|
|
|
\/ PUBLIC IP
[ROUTER]--------------------------------------
| Private IP (192.168.0.1)
| \ \
| \ 192.168.0.x/24 \
| [Hotel Guests] \ DMZ
| /
| /
|192.168.0.2 /
[ROUTER 2] -------------------------------------
| 192.168.1.1
|
|
/----------\
| Home |
| Clients | 192.168.1.x/24
\----------/


This is NO replacement for proper anti-virus, malware/spyware, personal
firewall, good common-sense practices to protect yourself. Particularly if
you've got a lot of transient traffic in your DMZ, you'll want to make sure
both routers are working well as firewalls, and that all your computers are
running good AV and personal firewalls.

--
HTH,
=d=


Dana Brash
MCSE, MCDBA, MCSA

(E-Mail Removed)

"yar" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi
>
> I have a small hotel, I want to give my guests access to the internet but

I
> do not want to compromise my own home network.
>
> I currently have 4 pcs networked together with fixed IPs and a wireless
> access point that my apple express connects to for music and my daughters
> laptop, this has a key to access.
>
> I have been told that I can fit another access point with a different

range
> of IP addresses and subnet mask that this would enable a connection but

stop
> people getting to my network.
>
> I have also been told that if I attach another pc to my network fix the ip
> and then firewall it from my pcs I could then fit a wireless card share

the
> connection and this would protect my network as well.
>
> I do not know enough about this, could some one please point me in the

right
> direction.
>
> Thanks
>
>



 
Reply With Quote
 
yar
Guest
Posts: n/a

 
      11-17-2004, 06:06 PM
Hi

Thanks for the information.

But not know a lot about this, how do I connect another router to the main
router?.

Also what's a DMZ.

Thanks
"Dana Brash" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> You could certainly route another subnet off using a wireless AP/router
> combo.
> You probably have DSL or a cable modem, right?
> This would then lead into a router of some type, presumably your current
> configuation.
> From your current configuration, you could add the new router, and have
> the
> 'Public' side of the new router be on your current subnet.
>
> Then you would have a new subnet behind the new router that your guests
> could use.
>
> However, I'd reverse it, and put guests in the front subnet, essentially
> creating a DMZ.
>
>
> /---------\
> | Internet |
> | |
> \---------/
> |
> |
> |
> \/ PUBLIC IP
> [ROUTER]--------------------------------------
> | Private IP (192.168.0.1)
> | \ \
> | \ 192.168.0.x/24 \
> | [Hotel Guests] \ DMZ
> | /
> | /
> |192.168.0.2 /
> [ROUTER 2] -------------------------------------
> | 192.168.1.1
> |
> |
> /----------\
> | Home |
> | Clients | 192.168.1.x/24
> \----------/
>
>
> This is NO replacement for proper anti-virus, malware/spyware, personal
> firewall, good common-sense practices to protect yourself. Particularly
> if
> you've got a lot of transient traffic in your DMZ, you'll want to make
> sure
> both routers are working well as firewalls, and that all your computers
> are
> running good AV and personal firewalls.
>
> --
> HTH,
> =d=
>
>
> Dana Brash
> MCSE, MCDBA, MCSA
>
> (E-Mail Removed)
>
> "yar" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hi
>>
>> I have a small hotel, I want to give my guests access to the internet but

> I
>> do not want to compromise my own home network.
>>
>> I currently have 4 pcs networked together with fixed IPs and a wireless
>> access point that my apple express connects to for music and my daughters
>> laptop, this has a key to access.
>>
>> I have been told that I can fit another access point with a different

> range
>> of IP addresses and subnet mask that this would enable a connection but

> stop
>> people getting to my network.
>>
>> I have also been told that if I attach another pc to my network fix the
>> ip
>> and then firewall it from my pcs I could then fit a wireless card share

> the
>> connection and this would protect my network as well.
>>
>> I do not know enough about this, could some one please point me in the

> right
>> direction.
>>
>> Thanks
>>
>>

>
>



 
Reply With Quote
 
Dana Brash
Guest
Posts: n/a

 
      11-18-2004, 12:16 AM
Hi Yar,

Every router has (at least) two ports. Most home office equipment will
refer to these as WAN (Wide Area Network, aka Public) and LAN (Local Area
Network, aka Private). Each of these ports will be assigned an IP address.
In my diagram below, I show the IP addresses on routers on the side of the
router that that port should be plugged into.

To connect another router to the main router, you would simply plug in the
wires. You must then configure the router to use the right IP information.
Jack posted some very clear instructions on how to do this.

DMZ stands for De-Militarized Zone. The concept is that there is a 'safe
zone' that acts as a buffer between two areas. Generally companies will
build a DMZ to host servers that are exposed to the internet (for FTP or web
services for example). In this case, it is an extra layer between your
family's network and the internet, and it would be the place where you allow
your guests to access the internet from.

Without a basic understanding of networking and TCP/IP, this will be a
difficult task. There are plenty of materials out there to read, Google
would be a good place to start, followed by your local bookstore. Also try
this link: http://www.wown.com/

But it sounds to me like you're in the business of running a hotel, and
probably don't want to spend a couple weeks reading up on subnetting and
routing. So delegate.... I am SURE that you either know someone directly,
or someone you know knows someone, who has already done this reading. Find
this person, ask them for their help. Offer to buy them dinner or beers, or
pay them, or whatever they want, and ask them to set it up for you. It
should take them an hour or so if they fully test it. If you are interested
in learning, watch over their shoulder and get them to tell you what they're
doing.

--
HTH,
=d=


Dana Brash
MCSE, MCDBA, MCSA

(E-Mail Removed)

"yar" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi
>
> Thanks for the information.
>
> But not know a lot about this, how do I connect another router to the main
> router?.
>
> Also what's a DMZ.
>
> Thanks
> "Dana Brash" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > Hi,
> >
> > You could certainly route another subnet off using a wireless AP/router
> > combo.
> > You probably have DSL or a cable modem, right?
> > This would then lead into a router of some type, presumably your current
> > configuation.
> > From your current configuration, you could add the new router, and have
> > the
> > 'Public' side of the new router be on your current subnet.
> >
> > Then you would have a new subnet behind the new router that your guests
> > could use.
> >
> > However, I'd reverse it, and put guests in the front subnet, essentially
> > creating a DMZ.
> >
> >
> > /---------\
> > | Internet |
> > | |
> > \---------/
> > |
> > |
> > |
> > \/ PUBLIC IP
> > [ROUTER]--------------------------------------
> > | Private IP (192.168.0.1)
> > | \ \
> > | \ 192.168.0.x/24 \
> > | [Hotel Guests] \ DMZ
> > | /
> > | /
> > |192.168.0.2 /
> > [ROUTER 2] -------------------------------------
> > | 192.168.1.1
> > |
> > |
> > /----------\
> > | Home |
> > | Clients | 192.168.1.x/24
> > \----------/
> >
> >
> > This is NO replacement for proper anti-virus, malware/spyware, personal
> > firewall, good common-sense practices to protect yourself. Particularly
> > if
> > you've got a lot of transient traffic in your DMZ, you'll want to make
> > sure
> > both routers are working well as firewalls, and that all your computers
> > are
> > running good AV and personal firewalls.
> >
> > --
> > HTH,
> > =d=
> >
> >
> > Dana Brash
> > MCSE, MCDBA, MCSA
> >
> > (E-Mail Removed)
> >
> > "yar" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> >> Hi
> >>
> >> I have a small hotel, I want to give my guests access to the internet

but
> > I
> >> do not want to compromise my own home network.
> >>
> >> I currently have 4 pcs networked together with fixed IPs and a wireless
> >> access point that my apple express connects to for music and my

daughters
> >> laptop, this has a key to access.
> >>
> >> I have been told that I can fit another access point with a different

> > range
> >> of IP addresses and subnet mask that this would enable a connection but

> > stop
> >> people getting to my network.
> >>
> >> I have also been told that if I attach another pc to my network fix the
> >> ip
> >> and then firewall it from my pcs I could then fit a wireless card share

> > the
> >> connection and this would protect my network as well.
> >>
> >> I do not know enough about this, could some one please point me in the

> > right
> >> direction.
> >>
> >> Thanks
> >>
> >>

> >
> >

>
>



 
Reply With Quote
 
yar
Guest
Posts: n/a

 
      11-18-2004, 08:58 AM
Okay thanks for all the help



"Jack" <www.ezlan.net> wrote in message
news:%(E-Mail Removed)...
> Hi
> A simple way to separate your Network from the guests is by creating two
> networks.
>
> First Network would be a Router with an Access Point and (or a Wireless
> Cable/DSL Router) for the guests Network.
>
> Then plug a second Router's WAN port into a regular port on the Guest's
> Router.
>
> Configure the LAN part of the second Router for your Network.
>
> Your Network will be able to access the Internet and the Guest Network,
> but
> the Guest Network will not be able to connect to your Network since the
> second Router Firewall (NAT) will block such attempts.
>
> Take into consideration that this does not solved general security
> problems
> that are involved in providing Public Internet access, unfortunately such
> issues are beyond the scope of Newsgroup medium.
>
> Jack (MVP-Networking).
>
> http://www.ezlan.net
>
>
>
>
>
>
>
> "yar" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>> Hi
>>
>> I have a small hotel, I want to give my guests access to the internet but

> I
>> do not want to compromise my own home network.
>>
>> I currently have 4 pcs networked together with fixed IPs and a wireless
>> access point that my apple express connects to for music and my daughters
>> laptop, this has a key to access.
>>
>> I have been told that I can fit another access point with a different

> range
>> of IP addresses and subnet mask that this would enable a connection but

> stop
>> people getting to my network.
>>
>> I have also been told that if I attach another pc to my network fix the
>> ip
>> and then firewall it from my pcs I could then fit a wireless card share

> the
>> connection and this would protect my network as well.
>>
>> I do not know enough about this, could some one please point me in the

> right
>> direction.
>>
>> Thanks
>>
>>

>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Netgear MA311: Cannot connect to Acess Point =?ISO-8859-15?Q?Daniel_B=F6hmer?= Linux Networking 2 02-22-2006 07:42 PM
Acess Point to Access Point? smither@c-c-i.com Linux Networking 4 12-01-2005 09:51 PM
Pheenet Wireless Acess point with bridging Chris p Wireless Internet 0 06-11-2004 08:08 AM
Using WRT54G as Wireless Acess Point Only? Paul B. Wireless Internet 4 06-10-2004 06:28 AM
Re: Replacing Atenna On Wirelless Acess Point Brenton Spear Home Networking 0 07-04-2003 12:40 PM



1 2 3 4 5 6 7 8 9 10 11