Re: Wireless Access Point Security and Network

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/24/05 

Date: Fri, 24 Jun 2005 11:40:59 -0500

One solution would be to configure the WAP so that it is isolated from the
rest of your network such as having a totally separate internet connection
with a different public IP address than what you use for your network. Some
switches like some HP Procurves can use what is called "port isolation" to
allow access to the port that goes to the default gateway but does not allow
the other port groups on the switch to access each other. Another concern is
that the lobby users probably would not be secure from each other. You may
want to post in the Microsoft wireless newsgroup for information on specific
wireless access points and their capabilities to isolate your network and
the users from each other. --- Steve

"S Lane" <SLane@discussions.microsoft.com> wrote in message
news:1C8C00B5-6F1B-4EF4-98AE-F7D597CA1BCA@microsoft.com...
> Sorry if I am posting this in the wrong area. I thought this would be the
> best place to ask. I have a Windows 2000 network. What I want to do is
> install a wireless access point in the lobby of our business for customers
> to
> use with there wireless devices. I don't want them to be able to see our
> network. What is the best way to give them internet access, but not
> access
> to our network? Hopefully there is a way to setup the access point and
> not
> see the network. Any suggestions would be appreciated.
>
> Thanks,
>
> Shawn

Relevant Pages

  • Re: how much safe if a network is separated?
    ... How safe is my network? ... It depends how you're asserting this isolation. ... This depends on your firewalling implementation. ... mit aequivalentem Meinungsinhalt betrachtest, ...
    (comp.security.misc)
  • Re: Is complete home security possible?
    ... A lot of *nix users are unaware they are running services too. ... network, BUT I also have a full WatchGuard Firebox II sitting between this ... behind the LAN side and 4 more on the DMZ size - all for isolation of ...
    (comp.security.firewalls)
  • Re: RFC: disablenetwork facility. (v4)
    ... "Adding *any* interesting isolation facility to the kernel breaks backwards ... setuid restores pre-isolation semantics ... capability is in pE, you can regain network. ... and, without the capability, could not regain network. ...
    (Linux-Kernel)
  • Re: VALN hopping
    ... A byproduct of this is that it is more ... for someone with much knowlegde to get from one VLAN ... > physical isolation; ... our network person doesn't feel there is a ...
    (Security-Basics)
  • Re: Wireless Access Point Security and Network
    ... > rest of your network such as having a totally separate internet connection ... > with a different public IP address than what you use for your network. ... > that the lobby users probably would not be secure from each other. ... >> install a wireless access point in the lobby of our business for customers ...
    (microsoft.public.security)