+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 27
Wireless Networks Thread, Securing a New Wireless Setup!!! in Technical; Hello I have just purchased a HP ProCurve Access Point 10ag WW J9141A. I ran the setup fine its all ...
  1. #1

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15

    Securing a New Wireless Setup!!!

    Hello

    I have just purchased a HP ProCurve Access Point 10ag WW J9141A. I ran the setup fine its all working great, but I just want the Staff & Students to be able to use the Internet through the wireless setup. The problem is they can see the whole network even the servers!!! They still need to enter a user name and password to get in, but Is there any way to hide the network side of things from them all??? I have had a good look at all the setting within the Access Point couldn't see anything to do that job!!!
    The laptops that are going to use the wireless connection are not part of the domain at all!!!

    Any Ideas please???

    Thanks

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,952
    Thank Post
    886
    Thanked 1,700 Times in 1,477 Posts
    Blog Entries
    12
    Rep Power
    448
    You would need to put the AP on its own V-lan.

    You can do this with managed switches if you have them

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,611
    Thank Post
    647
    Thanked 1,617 Times in 1,447 Posts
    Rep Power
    421
    Using a vlan possibly.

    Ben

  4. #4

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    738
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    37
    Quote Originally Posted by Athlona View Post
    Hello

    I have just purchased a HP ProCurve Access Point 10ag WW J9141A. I ran the setup fine its all working great, but I just want the Staff & Students to be able to use the Internet through the wireless setup. The problem is they can see the whole network even the servers!!! They still need to enter a user name and password to get in, but Is there any way to hide the network side of things from them all??? I have had a good look at all the setting within the Access Point couldn't see anything to do that job!!!
    The laptops that are going to use the wireless connection are not part of the domain at all!!!

    Any Ideas please???

    Thanks
    Hi,

    You should be able to do this using radius and as others have said placing this network into its own vlan.

    If you access point supports vlan you can also have different ssids on different vlans to allow corporate access as well as guest access using the same APs.

    Ash.

  5. #5

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    I have a full HP ProCurve network and they are all managed switches Downloading the manuals for them now...
    Never setup a VLAN before any TIPS

    Thanks

  6. #6

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    Been reading up on VLANs most of today still can't understand how I can hide the network doing this method!!! Please can someone kindly explain it to poor me???

    Thanks

    Paul

  7. #7

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,952
    Thank Post
    886
    Thanked 1,700 Times in 1,477 Posts
    Blog Entries
    12
    Rep Power
    448
    Quote Originally Posted by Athlona View Post
    Been reading up on VLANs most of today still can't understand how I can hide the network doing this method!!! Please can someone kindly explain it to poor me???

    Thanks

    Paul
    Well they would be two seperate networks so they wont be able to be able to see each other.

  8. #8

    Join Date
    Sep 2008
    Location
    Dorset
    Posts
    129
    Thank Post
    11
    Thanked 5 Times in 4 Posts
    Rep Power
    13

    3 thoughts

    You can use a vlan as already suggested.

    Use a router and put the WAP on its own network.

    Depending on the kit you have in house you could create a subnet and use this for the WAP and use a "router on a stick config".

    WAPS often have options such as "see other devices", disable this and nothing using the WAP will be able to see anything else on the same network.

  9. #9

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    I have successfully setup a 2nd VLAN on my HP ProCurve 5406zl, I can't get the port that I have tagged with VLAN2 to work on the internet at all!!! I have even just plugged in a laptop straight into that port and still no internet!!! I have checked all the correct proxy information has been entered into the laptop fine!!! Any Idea's please? As If I can't get the laptop thats into that vlan port a access point has no change!!! I think I am missing something here!!!

    Thanks

  10. #10

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    You need to define an IP subnet on your new vlan and make sure there is a route defined for clients to access your proxy server and for the proxy to send replies back. Also, don't forget that while you're testing with a laptop its port will have to be an untagged access port.

  11. #11

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,153
    Thank Post
    215
    Thanked 1,259 Times in 790 Posts
    Blog Entries
    4
    Rep Power
    507
    If your vlan has no access to your normal lan, it won't be able to use your proxy.

  12. #12

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    Domino thanks for this info as I also didn't think setting up a second vlan would work, but all the peps I have phoned have said it would!!! So what defines a proxy to vlan1 ONLY? Is there any way to set it up so vlans2 see the proxy?

    All this stress has driven me to drink!!!

    Thanks

  13. #13

    Join Date
    Oct 2007
    Location
    Lincolnshire
    Posts
    133
    Thank Post
    0
    Thanked 22 Times in 22 Posts
    Rep Power
    17
    If you post your config file from the 5406 (cut and paste from the web interface) and some details of your current network (proxy IP in particular) we could probably get it going.

  14. #14

    Domino's Avatar
    Join Date
    Oct 2006
    Location
    Bromley
    Posts
    4,153
    Thank Post
    215
    Thanked 1,259 Times in 790 Posts
    Blog Entries
    4
    Rep Power
    507
    what proxy are you using? do you have an ISA server?

    Its possible to get it working, but we need details, just setting up the vlan isn't enough

  15. #15

    Join Date
    Nov 2007
    Location
    North Yorkshire
    Posts
    104
    Thank Post
    14
    Thanked 6 Times in 3 Posts
    Rep Power
    15
    The`Local Authority`supply our schools broadband by the mean of a netpilot and a cachepilot for caching websites!!!If a PC or Laptop is on the Domain group policy has the redirect to the cachepilots IP address to that is forwarded to the netpilot... But these laptops are not part of any Domain they are all standalone units...

    What other information have I missed out that you would like to know? Please ask away?

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Wireless setup
    By marvin in forum Wireless Networks
    Replies: 2
    Last Post: 17th January 2008, 04:22 PM
  2. Wired & Wireless Securing
    By Samson in forum Wireless Networks
    Replies: 6
    Last Post: 14th August 2007, 10:47 PM
  3. Securing Printers
    By Espada in forum Windows
    Replies: 4
    Last Post: 25th January 2007, 04:49 PM
  4. Securing macs
    By TechMonkey in forum Mac
    Replies: 10
    Last Post: 1st June 2006, 03:22 PM
  5. securing wireless network
    By adamyoung in forum Wireless Networks
    Replies: 22
    Last Post: 1st February 2006, 09:26 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •