Recommendations for AP with 2 SSIDs and separation of network traffic

[Ignatius]

Here's the scenario:

 

A small office of 16 PCs and one Windows 2003 "do-it-all" (DC, DHCP, DNS, file server). There's a Netgear ADSL router and a couple of switches into which all of the PCs and server are connected.

 

I've been asked to investigate installing an AP but have two SSIDs - one hidden for Staff that allows them to use a laptop on the domain and a second separate SSID for Visitors that goes straight to the switch --> router --> internet so they can't see or access domain resources.

 

I guess I could possibly recommend two APs (one for each SSID) and more hardware so I'd have two separate networks, but are there any APs that are sufficiently intelligent to do what I want? I guess it would involve VLANs (I'm happy configuring wired VLANs on Cisco kit but I figure that would be a very expensive route for such a small office).

 

Finally, I would envisage having up to 6 connected to the AP so hope that only one AP would be required at present. I don't really want to go down the infamous Ruckus (etc.) route as that would also be more expensive than the organisation would be able to stand.

 

Any suggestions for suitable kit?

[Guest Guest]

Enterprise class APs allow 2 or more SSIDs, our procurve kit certainly does. As you have correctly assumed you can point the SSIDs to different vlans. I havn't actually played with our APs beyond that so I can't tell you for sure but I would assume you can drop your staff SSID onto vlan 0 ie your main network (assuming your network isnt on vlan 1+, with vlan 0 being a holding pen).

 

I believe this is the model APs we have but I can't be sure without looking at them. PM me tomorrow if you want me to confirm it

HP ProCurve Wireless Access Point 10ag WW - Radio access point

 

//EDIT - OK i tell a lie, our HP kit allows seperate SSIDs but no vlans. My bad. Maybe its our netgear one, or maybe im making it up lol

Edited November 11, 2010 by Guest

[steve]

If you're going to use a single AP you're going to need VLANs.

 

Replacing your router might be another option: OpenWrt - Wikipedia, the free encyclopedia

[Ignatius]

I'm grateful for the comments. It seemed logical to have to use VLANs but I wasn't sure about this functionality in an AP. Even though the HP doesn't do exactly what I need, at least I know what I'm looking for!

[Poco]

in a recent wireless survey i did for a client the cisco specialist tackled this same question. the answer basically came that the Cisco gear would enable you to do this and they person connected would not be able to see any of the servers or network, just access the internet.

 

AIR-WLC4402-50-K9 (controller)

AIR-LAP1141N-x-K9 (AP)

 

now for your network the controller is serious overkill and expensive. the AP is pretty average on pricing for cisco but is a tad more because it is wireless N. if you speak with your preferred reseller, more the big boys that have a cisco specialist i am willing to bet they could offer a smaller solution similar to this which would provide what you need