Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Need to add wireless access point, but keep it locked down - best options?


  • Please log in to reply
1 reply to this topic

#1 jdlev

jdlev

  •  Avatar image
  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:12:52 AM

Posted 04 March 2022 - 11:57 AM

Hi Guys, 

I wanted to know the most secure way I can offer wireless access to my smart phone and office TV without giving outside access via wireless (if someone manages to hack our wifi) to our internal office computers. My initial thought is to place the wifi devices on their own subnet, connected to a 2nd router on our LAN, that bridges the connection to our 1st router on the LAN? I presently have the wireless devices on the same subnet as all other network devices...

Here's a quick summary of our current config (I've also changed the IPs I use to refer to the routers for security):

Current LAN Configuration:
*Router 1 (192.168.0.254): Primary router - wifi is turned off and only allows wired connections for our office network - so all connections go thru a switch and then to client computers over ethernet

*Router 2 (192.168.0.250): Secondary router - wifi is turned on w/ strong pwd using WPA2 - Personal. It is setup in 'Bridge Mode' and statically connects to router 1 as it's gateway. 
 

To complicate matters, here are the 3 devices I have to connect:
1) Office desktop, which I also log in to using logmein - I believe since Router 2 is in bridge mode - it should basically leave this connection to my desktop computer unchanged. My original wired path out was Static IP -> Switch -> Router 1 -> ISP. My new wired path is Static IP (unchanged) -> Router 2 -> Switch -> Router 1 -> ISP. If I did it correctly, I believe this shouldn't affect the log me in router because Router 2 effectively acts as a 2nd switch in 'Bridge Mode'? However, if I change the subnet mask on router 2, I believe it would break the logmein connection or create problems w/ casting my screen to my smart TV. 
2) Smart Phone - general connection
3) Smart TV - needs to be reachable for casting purposes from Office Desktop and I'm worried if I switch the subnet of router 2, this will either not allow casting from my Office Desktop or not allow me to remote into Office Desktop via logmein?

Thanks for any advice!

 



BC AdBot (Login to Remove)

 


#2 greg18

greg18

  •  Avatar image
  • Members
  • 1,701 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Los Angeles, CA
  • Local time:10:52 PM

Posted 05 March 2022 - 08:51 PM

Do not give out the Passphrase for the connection, simple enough.




1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users