[Cialug] public/private wifi

[L. V. Lammert]

At 03:58 PM 12/30/2009 -0600, you wrote:
>What's the ideal way to set up a public/private wifi network? Picture this 
>scenario:
>
>You have a network that you want to allow people to access publicly. There 
>is a shared wep key that you can tell people to use when they're connected 
>to your network. Devices may be a PC or could be a phone, an iPod, a wii 
>or whatever. However you don't want these people to use your printer or 
>access your network shares. Being able to limit the bandwidth used by 
>these devices is nice.

 > Don't use WEP, .. for a public AP no encryption needed. Connect the 
public AP to your main router on the outbound connection, ..

 > Use a 2nd AP/Router for your internal machines; as this would be a 
separate subnet, there's no way for someone on the public AP to access 
machines on the LAN side of AP2 unless you create specific port forwards. 
For the private side, don't broadcast SSID & use WPA2.

         Lee