Business Networking help

nicksource · 5 Feb 2016 at 08:27

We run a hotel network and we are wanting to setup a QoS to restrict bandwidth for certain IPs in the office to reduce abuse downloading that is effecting our guests. (OR, I need your suggestions on alternative methods)

We have a basic "home" router, a Huawei HG8245H from our ISP that brings the fiber connection in. This then goes to a Cisco 881 router, then to a Netgear 48port switch.

Because we don't have the original purchase details, we can't get the manager software (3.2.1) for the Cisco router. So it works but I cannot manage it.

Can we not just run the Netgear switch direct from the Huawei router?
Why do we need another Cisco router in between?
What alternative methods would you recommend?

Thanks in advance.

Quartz · 5 Feb 2016 at 11:05

nicksource said:
We run a hotel network and we are wanting to setup a QoS to restrict bandwidth for certain IPs in the office to reduce abuse downloading that is effecting our guests. (OR, I need your suggestions on alternative methods)

From a liability POV the two networks should be physically separate. Two separate lines. The ISP / telco may join them together upstream, but that's then their problem. You don't want Captain L33t Hacker accessing your network to download kiddie porn. Or finding out which rooms have young single female guests.

Beyond that, find the guilty party and issue her a formal warning.

Avalon · 5 Feb 2016 at 11:42

Your IT policy doens't preclude staff downloading non work related items on the company computers? Start with that as it's a zero cost option. Normally they'd be on a separate VLAN so guest's can't access your network, next up you need to look at getting access to the 881, have you tried the default u/p the device shipped with? Does it have something as daft as a sticker on it with the details? I've seen a few like this. If not you could factory re-set it but consider how comfortable you are going to be with reconfiguration.

nutcase · 5 Feb 2016 at 13:49

As above you need to separate them out, and also have an AUP for both staff and customers.

dschroedz · 8 Feb 2016 at 13:00

I currently work within the leisure industry...

We currently have seperate VLANs for staff and guests.

Using traffic management we can set a bandwidth limit for staff with a guaranteed connection same for guests..

For example - a 1GB leased line
30mbps for staff
970mbps for guests

Depending on what firewall you have, that's how we do it