Guest access to WI-FI
We are going to be useing a building on our site as a community area. This would be used as an internet cafe and a conference room with wi-fi access. How would I go about giving wi-fi access without allowing access to our network?
Our WI-FI system is just seperate WAPs using the same SSID and WPA. I am going to be running cable down to the building and it will have a network cabinet with a 3com 4226T switch and patch panel.
I have read about VLANs and this seems to be the way to go. Addtionally we run through a proxy, is there anyway to setup internet access for that area so that they dont need to enter proxy details?
Sorry for the all the questions, hope somebody can point me in the right direction.
What do you currently use for your internet connection/filtering/firewalling?
I would be treading very carefully with providing internet to the community.
Thanks for replying. We are currently using SWGFL for internet and filtering. With regards to internet to the community my plan was setup a WPA key that changes every day/week. Or the other plan was to only allow internet wi-fi to people who have booked the conference room and setup several PCs in the community building that people can use to access the internet.
First off check with SWGFL that you can offer out your connection, your T's and C's may not allow this.
Then look at captive portals ( we are using pFsense on an old watchguard firewall ) to provide the user access.
Then look at how you get that traffic to your router, which I am guessing is controlled by SWGFL, without it touching your network.
Ok thanks Rob. The other option was to get a seperate broadband service setup just for the building. Either from Virgin, BT or Sky etc.
Yes that's preferable in your situation,
However, what filtering are you going to put on and how are you going to prevent the service being abused and possibly used for Illegal activities that your institution may get questioned about.
Make sure all bases are covered.