Isolate WIFI from wired clients

[Pete Moss]

At our local American Legion I have a DAP-2660 WAP connected to a LAN port of an RV042G router for WI-FI internet service. We also have several wired clients going into a switch or directly into the remaining 2 LAN ports. These include a PC, ATM, Jukebox, 2 VOIP ATAs, 2 Point of Sale cash registers, etc. I want to ensure that the WI-FI clients cannot "see" the wired LAN devices. I would imagine that a VLAN would do the trick but I am not a network guy so I'll need a lot of hand-holding to solve this issue. Obviously the PC, ATM, ATAs, and Jukebox also need internet access. Thanks.

 

[randing]

I'm not familiar with either device, but I think you're on the right track with setting up two VLANs. If you put the Cisco LAN port that the AP is plugged into on a different VLAN than the rest of the LAN ports, it should accomplish what you want. You'll also need to make sure the Cisco firewall is configured to block routing between VLANs.

 

[coxhaus]

Just make sure you test it. I would not trust any setup without testing. And test everytime there are firmware updates to the hardware. You just never know what will break.