Dual wireless access - Customer & employees

[Su&Andy]

I want to allow my customers to use my wireless connection without any possibility of accessing my internal network.

For example, having one wireless router #A connected to my cable modem broadcasting it's own SSID on channel 1. Then a second wireless router #B connected to #A via wire, connected to my employees network - secured and and not broadcasting SSID, using channel 11. Would that work? Obviously would have assign a unique IP addr for each router

I've also heard that there are routers that allow a dual-connections like this, but I haven't been able to find any.

Andy

[ITAlaCarte]

Not sure why you would need two wireless routers. If you have a network, allow your Domain Controller to handle security and issuing the IP's. If you've set up security on the wireless router provide temp keys.

I may have missed the mark but I think you can get things done without extra routers.


Thanks
Eric

[jazzcat]

Not sure why you would need two wireless routers. If you have a network, allow your Domain Controller to handle security and issuing the IP's. If you've set up security on the wireless router provide temp keys.

Actually, the way Su&Andy has done this already is much more secure than having everything on one network, especially if they're running Windows. It's never, ever a good idea to mix customer network traffic and company network traffic on the same network, regardless of if you're a big guy like Verizon or a small guy like Joe's Coffee Shop and regardless of operating system. It's also easier to secure local services by IP segment. It looks like what they've done already is a good solution that creates a much more secure 'inner' network inside of their 'public' network... though if I were them I would also have all company services (i.e. accounting, point of sale, etc.) that require the network be wired instead of wireless unless there is a compelling business reason (and not just convenience) to do otherwise.

Cheers,
-JC

[Su&Andy]

Thanks for the affirmation, JC. I haven't actually done this yet, but I _think_ it should work as I outlined. I can't hardwire (at least cost effectively) due to the age & size of the structure