|
Re: Isolate WLAN from LAN
In truth, the way I recommend is with two routers.
Connect the primary router directly to the ISP modem, and use it's wireless to share the wireless to the public.
Configure the second router with a static WAN address outside the range of the DHCP server of the primary router, but in the same subnet. Configure this static address to be in the DMZ of the primary router. Make sure that the base address of the secondary router is in a different subnet than the primary router. If the primary router is 192.168.1.1, I'd make the secondary router 192.168.2.1 for instance.
Connect all your private connections, either wired or wireless, to the secondary router. This puts the router's NAT layer firewall between you and the public access, and none of your computers will be visible to them in any way.
|