Wireless connection without access to server

hello,

i am in a organization that has 1 server and 20 workstations. my company
wants to have a wireless connection for costumers that are waiting without
passwords or security. the problem is that my company does not want a second
internet connection. i have a linksys wireless router butt don`t know how to
setup.

so i want a wireless connection without security or passwords that can not
connect to the server butt only can connect to the internet.

thanx in advance.

regards stefan

Hello S,

I strongly recommend to do it not. Anybody then can use the internet connection
and ofcourse search in your network with netwofk sniffers etc. Even if they
have no accounts for the server, this will not prevent anything. If someone
like to hack in your system you do him a real big favour.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> hello,
>
> i am in a organization that has 1 server and 20 workstations. my
> company wants to have a wireless connection for costumers that are
> waiting without passwords or security. the problem is that my company
> does not want a second internet connection. i have a linksys wireless
> router butt don`t know how to setup.
>
> so i want a wireless connection without security or passwords that can
> not connect to the server butt only can connect to the internet.
>
> thanx in advance.
>
> regards stefan
>

are there no other ways then to get a second internet connection for this?

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
news:(E-Mail Removed). com...
> Hello S,
>
> I strongly recommend to do it not. Anybody then can use the internet
> connection and ofcourse search in your network with netwofk sniffers etc.
> Even if they have no accounts for the server, this will not prevent
> anything. If someone like to hack in your system you do him a real big
> favour.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> hello,
>>
>> i am in a organization that has 1 server and 20 workstations. my
>> company wants to have a wireless connection for costumers that are
>> waiting without passwords or security. the problem is that my company
>> does not want a second internet connection. i have a linksys wireless
>> router butt don`t know how to setup.
>>
>> so i want a wireless connection without security or passwords that can
>> not connect to the server butt only can connect to the internet.
>>
>> thanx in advance.
>>
>> regards stefan
>>
>
>

S Reugebrink <(E-Mail Removed)> wrote:
> are there no other ways then to get a second internet connection for
> this?

Do you have multiple public IPs assigned by your ISP? You could attach a
wireless router to a small ethernet switch - at the same level as your
company's peripheral firewall/router. Then there would be no connectivity
between your LAN and the wireless LAN.
>
> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
> news:(E-Mail Removed). com...
>> Hello S,
>>
>> I strongly recommend to do it not. Anybody then can use the internet
>> connection and ofcourse search in your network with netwofk sniffers
>> etc. Even if they have no accounts for the server, this will not
>> prevent anything. If someone like to hack in your system you do him
>> a real big favour.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> hello,
>>>
>>> i am in a organization that has 1 server and 20 workstations. my
>>> company wants to have a wireless connection for costumers that are
>>> waiting without passwords or security. the problem is that my
>>> company does not want a second internet connection. i have a
>>> linksys wireless router butt don`t know how to setup.
>>>
>>> so i want a wireless connection without security or passwords that
>>> can not connect to the server butt only can connect to the internet.
>>>
>>> thanx in advance.
>>>
>>> regards stefan

hello,

no i don`t have multiple ip`s, butt are there no devices that are specialy
made for this?

something like a small printer, when you type 30 minits, you get a code and
after 30 minits the connection is gone...


"Lanwench [MVP - Exchange]"
<(E-Mail Removed) hoo.com> wrote in message
news:(E-Mail Removed)...
>S Reugebrink <(E-Mail Removed)> wrote:
>> are there no other ways then to get a second internet connection for
>> this?
>
> Do you have multiple public IPs assigned by your ISP? You could attach a
> wireless router to a small ethernet switch - at the same level as your
> company's peripheral firewall/router. Then there would be no connectivity
> between your LAN and the wireless LAN.
>>
>> "Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message
>> news:(E-Mail Removed). com...
>>> Hello S,
>>>
>>> I strongly recommend to do it not. Anybody then can use the internet
>>> connection and ofcourse search in your network with netwofk sniffers
>>> etc. Even if they have no accounts for the server, this will not
>>> prevent anything. If someone like to hack in your system you do him
>>> a real big favour.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>
>>>> hello,
>>>>
>>>> i am in a organization that has 1 server and 20 workstations. my
>>>> company wants to have a wireless connection for costumers that are
>>>> waiting without passwords or security. the problem is that my
>>>> company does not want a second internet connection. i have a
>>>> linksys wireless router butt don`t know how to setup.
>>>>
>>>> so i want a wireless connection without security or passwords that
>>>> can not connect to the server butt only can connect to the internet.
>>>>
>>>> thanx in advance.
>>>>
>>>> regards stefan
>
>
>

"S Reugebrink" <(E-Mail Removed)> wrote in message
news:00E4D37A-A4D5-4C53-B56E-(E-Mail Removed)...
> hello,
>
> no i don`t have multiple ip`s, butt are there no devices that are specialy
> made for this?

No IP# = No communication
You can't communicate with anything if there is no underling infrastructure
to carry the communication. It doesn't matter what kind of gizmo someone
invents,...an IP network is still and IP network.

Back to the original question,...with only one public IP# being the case....

First "wireless" is totally irrelevant and has nothing to do with how it is
done or not done. All "wireless" does is replace a few patch cables with a
radio signal,..it is not a "network" and does not change your network
structure in any way.

You have to *design* your network to do what you are wanting to do. This
means you might have to spend money. Since you can not do it on the Public
side due to having only a single Public IP# you will have to do in on the
Internal side. There are two approaches that I can think of:

1. If you firewall device has additional ports for the purpose of creating
perimeter or DMZ networks then you would use one of those. See your
firewall's documentation for how to deal with that.

2. If your firewall device is not capble of #1, then you will have to buy a
LAN Router ($$$) place it on the LAN and create an additional subnet. Use
ACLs on the router to restrict the new subnet from communicating in any way
with the original subnet with the exception of letting it communicate with
the Internl IP# of the firewall device. The firewall device then must have
a Static Route added to it that tells it to use the new LAN Router as the
"gateway" to the new subnet. Then plug a Wireless Access Point (WAP) [not
a wireless "router"] into the new subnet.

More details on #2. The LAN Router will become the logical "center" of the
LAN. It will be the Default Gateway of *all* the Hosts on the LAN (except
the firewall which continues to use what it uses). Then the firewall
becomes the Default Gateway of the LAN Router itself. The Static Route on
the firewall mentioned above will already finish up the rest of the details
of the LAN's over-all Routing Scheme.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

Ok,..there is a 3rd option if the firewall device can't do #1.

Option 3. Buy a firewall that can do #1

It maybe cheaper than buying the LAN Router for Option #2.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------