WiFi VLANs?

Is there an easy way to have a number of different SSIDs on a single
AP, like "Public" and "Private"?

I'd like the "Public" SSID to have no security and allow open access,
but only allow Internet access.

I'd like a second SSID, "Private", to have WPA, and be able to talk to
LAN machines.

Is this something I need a WiFi AP with VLANs for? I'm sort of
imagining each SSID would become a VLAN, and some kind of managed
switch would allow everyone access to the broadband router (for DHCP
services, broadband access), but only secure clients would be able to
see the LAN machines (file and print servers, etc).

[Linksys WAP54GP has multiple SSIDs, but they'll only ever broadcast
the first one, none of the others can ever have SSID broadcast turned
on...]

I know how to do this with multiple routers, switches, and APs, but
that seems unnessesarily complex.

Any thoughts? Any tutorials on VLANs that anyone can reccomend, if
that's the solution I should be looking at?

Thanks!

On Sun, 05 Feb 2006 23:43:31 -0500, William P.N. Smith
<(E-Mail Removed)> wrote:

>Is there an easy way to have a number of different SSIDs on a single
>AP, like "Public" and "Private"?
>
>I'd like the "Public" SSID to have no security and allow open access,
>but only allow Internet access.
>
>I'd like a second SSID, "Private", to have WPA, and be able to talk to
>LAN machines.
>
>Is this something I need a WiFi AP with VLANs for? I'm sort of
>imagining each SSID would become a VLAN, and some kind of managed
>switch would allow everyone access to the broadband router (for DHCP
>services, broadband access), but only secure clients would be able to
>see the LAN machines (file and print servers, etc).
>
>[Linksys WAP54GP has multiple SSIDs, but they'll only ever broadcast
>the first one, none of the others can ever have SSID broadcast turned
>on...]
>
>I know how to do this with multiple routers, switches, and APs, but
>that seems unnessesarily complex.

Try cisco - their APs allow multiple SSIDs, and can connect them to
different VLANs on the Ethernet port. 1 common app is to have an
internal authenticated VLAN, and a "guest" VLAN.
>
>Any thoughts? Any tutorials on VLANs that anyone can reccomend, if
>that's the solution I should be looking at?

www.cisco.com/go/srnd
look for the ref design for wireless, or try here:
http://www.cisco.com/application/pdf...00800d67eb.pdf
>
>Thanks!
--
Regards

(E-Mail Removed) - replace xyz with ntl