Re: WLAN public access
From: fatpig (email@example.com)
From: "fatpig" <firstname.lastname@example.org> Date: Tue, 11 Mar 2003 21:44:35 -0000
Jim thanks for the interesting suggestion.
Could you also advise on what the best methods, in terms of simplicity, are
to actually secure a WLAN - above WEP.
"Jim Grimmett" <email@example.com> wrote in message
> "fatpig" <firstname.lastname@example.org> wrote:
> > I have been asked to configure a WLAN in a cafe. The cafe will have an
> > office which will require secure access, and the public area which
> > allow anyone with a WLAN card to gain access with no config involved. Is
> > this possible?
> > Your experienced opinions are welcome.
> Well, it depends what you want each area to be able to do.
> Assuming you want both the WLAN (call it public) and the office
> (call it private) to have internet access your best bet is to
> put a firewall in and create two network segments, one for private
> and one for public.
> On the private one give them lots of access out and on the
> public one only give them access out to things they're
> going to use.
> You may need to open ports _in_ for specific tasks (like SMTP
> for either side, or FTP to private or UDP ports for Unreal T, etc).
> Bascially PLAN IT OUT before you start and work out exactly
> how you want each segment to communicate with the rest of the
> world and each other.
> IMHO you shouldn't trust the public side of the network AT ALL
> as, even with 128bit WEP and limiting to MAC addresses it's
> trivial to gain access...