How to setup second wifi with no LAN access

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › How to setup second wifi with no LAN access

martyyn

1971 posts

Uber Geek
+1 received by user: 772

ID Verified

#153925 13-Oct-2014 09:53

I have wifi in the house as you would expect and would like to install wifi in my garage and limit it to internet access only with no access to any devices in the house. I'm trying to find instructions on Google but they are all for just adding second wifi's with full LAN access, so am I right in thinking it's the following....

1. Add wifi router in garage via ethernet to a LAN port from the house router handling the DHCP (house is on 192.168.1.*).
2. Assign an IP to the garage router within house router address range.
3. Assign IP of 192.168.2.* to the garage router.

Does this mean nothing can be seen/shared between 192.126.1.* and 192.168.2.* ? Do I need to disable DHCP in the garage router ?

I'm pretty sure I'm missing something.

Cheers

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1152573 13-Oct-2014 10:01

If you want isolation you're going to need hardware that supports this.

martyyn

1971 posts

Uber Geek
+1 received by user: 772

ID Verified

#1152575 13-Oct-2014 10:04

That's what I'm starting to find, are we talking about hardware having 'guest mode with wireless isolation' ?

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1152582 13-Oct-2014 10:25

martyyn: That's what I'm starting to find, are we talking about hardware having 'guest mode with wireless isolation' ?

That's not going to work if you have multiple access points. Wireless isolation allows you to create a 2nd SSID on a device that has no access to the LAN of the primary SSID.

If you need two access points you're going to need to have a device that supports assigning a new VLAN/DHCP range on a specific Ethernet port, plugging the other AP into this and then adding VLAN or layer3 isolation between the different ranges.

martyyn

1971 posts

Uber Geek
+1 received by user: 772

ID Verified

#1152583 13-Oct-2014 10:28

I get you, thanks for that. If I google for 'isolate wifi from lan' I get much better information than 'second wifi no lan access' !!

linw

2893 posts

Uber Geek
+1 received by user: 1205

#1152779 13-Oct-2014 12:56

Take a look here. http://blog.danjoannis.com/?p=1362

I successfully set up guest login on a TP-Link WR841ND following the instructions on the above blog site.

hashbrown

463 posts

Ultimate Geek
+1 received by user: 131

#1153181 13-Oct-2014 21:59

If the router in the garage has a decent firewall on it, you could potentially block access to the private LAN using that. You'd connect the second routers WAN port to the primary routers LAN port. Not the prettiest solution (double NAT for the guests), but functional. Requires a granular firewall configuration on the second router.

Lego

Shop now for Lego sets and other gifts (affiliate link).

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#1153192 13-Oct-2014 22:27

Gargoyle might be a good place to start - it is third party firmware that you could load on to a TP-Link router. It will give you a relatively familiar web GUI and will use terms similar to those you are using.

OR.....

You could get a Mikrotik router and do it really properly with multiple VLAN's and SSID's but be prepared to do some serious learning about subnets and firewalls.

raytaylor

4076 posts

Uber Geek
+1 received by user: 1296

Trusted

#1153828 14-Oct-2014 18:09

You would either use a router with a "guest ssid mode"
Or
Use a ethernet (not dsl) router and double nat by plugging a router into a router.
The firewall in the garage router could be configured as suggested above to drop or deny traffic to the ip address range in its "wan"

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here