1 WAN 2 seperate Lan (Share the one lan possible)

baz_ · 9 Dec 2015 at 15:53

Hi guys, sorry to be a nuseince again, My ever ending job request by client is getting bigger and bigger. They want to split up there network one for staff and other other users. I know I can patch up to diferent switches etc but is it possible to have share the same inetrnet connection with 2 different networks?

On the other scale I was thinking of making the second network a Guest SSID an AP, Which i am under the impression that would bring them off the main network and just have access to the internet or am i wrong in thinking that?

The main aim is to have the office and staff network secure from others who would be using the internet connection. Or would i be easier to tell them to get an additonal line installed and have 2 seperate networks with two seperate internet connections?

joeyjojo · 9 Dec 2015 at 16:09

I could be wrong but I think this is exactly what subnets are for. This kind of thing: http://www.tomshardware.co.uk/forum/30503-42-seperate-subnet or search for subnet tutorials.

Or an apparently easier option is VLANs if your switch allows.

leigh_boy · 9 Dec 2015 at 16:11

vlan or some ap's have an option for guests and it deals with it all at the AP

leigh_boy · 9 Dec 2015 at 16:15

joeyjojo said:
I could be wrong but I think this is exactly what subnets are for. This kind of thing: http://www.tomshardware.co.uk/forum/30503-42-seperate-subnet or search for subnet tutorials.

Or an apparently easier option is VLANs if your switch allows.

subnets creates 2 different networks using ranges so 192.168.0.1 - 192.168.0.6 then 8 throught to 15 but they cant see each other, so you could not share the WAN with out giving it 2 ips

DJMK4 · 9 Dec 2015 at 16:19

kayomani · 9 Dec 2015 at 16:23

You would need an ip on each vlan to act as the gateway yep

DragonQ · 9 Dec 2015 at 16:25

We do this at work with VLANs.

joeyjojo · 9 Dec 2015 at 16:30

leigh_boy said:
subnets creates 2 different networks using ranges so 192.168.0.1 - 192.168.0.6 then 8 throught to 15 but they cant see each other, so you could not share the WAN with out giving it 2 ips

Edit: I see what you mean. Is there a workaround?

baz_ · 9 Dec 2015 at 16:39

Ah perfect, All look into see if the cisco router supports vlan and how difficult it will be to setup, They want to be using a mixture of AP to access there office network and AP and wire for there visitors, Seems a lot of work, Way out my depth, lol

Thanks gys

K.C. Leblanc · 9 Dec 2015 at 16:52

baz_ said:
Ah perfect, All look into see if the cisco router supports vlan and how difficult it will be to setup, They want to be using a mixture of AP to access there office network and AP and wire for there visitors, Seems a lot of work, Way out my depth, lol

Thanks gys

It shouldn't be too tricky to setup, if their existing router doesn't do vlans then look at the draytek range. I've got a similar setup using a Draytek 2860 and it's a fantastic piece of kit. I've also got a TP-Link 8 port smart switch which only cost £25 and has been much better then I was expecting. We also have deliberant APs which support vlans and work very well.

You will also need either vlan aware switches (ie managed ones) or dedicate each switch to either one network or the other. In this case the switches will also need saparate uplinks the the router.

If you're going ahead label switches. I implemented vlans on a fairly big site where the IT was managed by different teams. I found having 1st line staff making config changes on the switches lead to some interesting results. But they were able to get their heads round repatching something to different switch.

baz_ · 9 Dec 2015 at 16:58

Looking at this
https://www.tt-exchange.org/product...es-24-port-gigabit-power-over-ethernet-switch
Or even the 48port version , The X version allows stacking not sure if it would be worth it but also its POA for AP's
Or we can cut costs and use,
https://www.tt-exchange.org/product/7723/cisco-2960-plus-series-24-port-power-over-ethernet-switch

baz_ · 9 Dec 2015 at 17:08

Sorry guys this project is getting way over my heads, was supposed to be a simple setup lol, The are not using an DHCP server other than what there will come with there standard BT router etc? would that be a problem?

bremen1874 · 9 Dec 2015 at 17:14

The BT router is unlikely to have VLAN support.

baz_ · 9 Dec 2015 at 17:18

So Do I need a router that Supports Vlan or a Switch that supports Vlan?

baz_ · 9 Dec 2015 at 17:19

Or am I just going to be best going to AP with Guest network on, And that would mean no need for cables?

bremen1874 · 9 Dec 2015 at 17:23

How are you going to connect your APs if it isn't with a cable?

If you're going to offer guest Wi-Fi have you considered how access will be controlled, and also if content filtering needs to be in place?

Avalon · 9 Dec 2015 at 17:26

How many users, what sort of loads over what sort of area?

baz_ · 9 Dec 2015 at 17:27

No I can connect The AP with cable there is ethernet ports all around the building, But i am trying to work out how can I set it up to offer basically a Guest Wireless and a Guest Wired network, without anyone crossing over on to the main network, But all sharing the same internet connection.

baz_ · 9 Dec 2015 at 17:29

Avalon said:
How many users, what sort of loads over what sort of area?

Thats the thing. I have no idea, This is a new premisis for the charity, The Wireless will be used for visitors, teams etc. They where looking to have stations available around the building with computers available to the public to use for online use, where then can hire out the use of a computer for a few hours.

bremen1874 · 9 Dec 2015 at 17:47

baz_ said:
So Do I need a router that Supports Vlan or a Switch that supports Vlan?

I believe that if your router doesn't support VLANs then you'd need to implement port based VLANs at the switch level. Whether this is a problem or not will depend on how you want to do things.