Networking two different routers together

[teotl4]

Hi all. I have a business client that wants me to setup a 2nd wireless router so he can offer free internet to his customers (he owns a cafe). He wants a setup similar to the way McDonald's do their free internet where you sign on after reading and agreeing to some kind of disclaimer/rules page. Also, he wants his 2nd router connected to his first router so that it will add a layer of protection to his own personal network. How can I setup this wireless router to connect to the 1st router and broadcast a different ssid with it's own login procedures/password, etc?

Thank you all in advance.

[seawolf]

Hi all. I have a business client that wants me to setup a 2nd wireless router so he can offer free internet to his customers (he owns a cafe). He wants a setup similar to the way McDonald's do their free internet where you sign on after reading and agreeing to some kind of disclaimer/rules page. Also, he wants his 2nd router connected to his first router so that it will add a layer of protection to his own personal network. How can I setup this wireless router to connect to the 1st router and broadcast a different ssid with it's own login procedures/password, etc?

Thank you all in advance.

 

What additional "layer of protection" does your customer expect to be achieved by connecting WiFi APs (I assume that is what is meant)?

[teotl4]

I think he's just concerned that his business computer will be hacked if he allows connection through his first router. Thanks for responding, by the way.

[seawolf]

In that case, the best solution would be to use a secondary WAN connection (ADSL, Fibre, Cable) for the guest WiFi with its own router and AP (and subnet) so that it is totally isolated from the business network. This also simplifies many things and allows the owner to keep track of the bandwidth/download consumption over the guest WAN link.

[SYNACK]

You could look at a router you could upgrade with openwrt or something, this allows for multiple ssids, network separation and also captive portal (the second sign on thing) in some configurations.

 

Captive Portal - DD-WRT Wiki

https://forum.openwrt.org/viewtopic.php?id=11536

http://wiki.openwrt.org/doc/howto/wireless.hotspot.wifidog

[SYNACK]

Could also just get one of these which has it all built in to a nice interface and can be strung together with a bunch of others if needed:

Aruba Instant 105 Wireless Access Point

[teotl4]

Could also just get one of these which has it all built in to a nice interface and can be strung together with a bunch of others if needed:

Aruba Instant 105 Wireless Access Point

 

Nice router but expensive. Ouch! I doubt my client would spend that type of money.

[nicholab]

You need a router that supports two different vlans with ACL between them.

 

 

Sent from my iPhone using EduGeek

[MatthewL]

If he's not prepared to pay then he won't get. Make him realise the cost of IT and things cannot be done on the cheap for what he wants.

[seawolf]

If he's not prepared to pay then he won't get. Make him realise the cost of IT and things cannot be done on the cheap for what he wants.

 

True, so true. Better to say no than to be saddled with frequent calls from an unsatisfied customer who won't spend what's necessary to do the job right. Let it be someone else's problem...

[MatthewL]

Exactly. As long as when you say no give him a good enough reason why he should understand.

[mac_shinobi]

There is this guide I found using

 

1) A switch that supports VLAN's

2) A PC With PFSense installed

3) Presumably the relevant wireless access points etc

 

Not done this sort of thing before so am not sure if this would work out more expensive than the above aforementioned Aruba AP etc

 

Link : Creating a “Guest Wifi” with 802.1Q VLAN Tagging in pfSense and DD-WRT

[SYNACK]

How to set up public Wi-Fi at your business | PCWorld

[mac_shinobi]

Most likely better to go for the Aruba AP or similar as mentioned above as doing it the other way will take a lot more time and may well work out more expensive with a lot more to do to get it working as intended.

 

Better to just bite the bullet and do it using the correct tool(s) / equipment

[teotl4]

thank you guys for all your help. your suggestions were all great.