Koozali.org: home of the SME Server

Obsolete Releases => SME Server 8.x => Topic started by: jekal on May 31, 2015, 07:04:37 PM

Title: Guest LAN
Post by: jekal on May 31, 2015, 07:04:37 PM

Hi,

I am using a v8.1 in Gateway Mode and 2 WLAN Access Points. One  of them I want to use as a "guest WLAN" With internet access only for guests. The other one is secured with MAC access filter.

Any idea how to configure this w/o proxy ?

Thx
jens

Title: Re: Guest LAN
Post by: mmccarn on June 01, 2015, 12:04:14 AM

CoovaChilli (http://wiki.contribs.org/CoovaChilli) does what you want; I don't know if it still works...

Title: Re: Guest LAN
Post by: jekal on June 01, 2015, 07:48:31 AM

Quote from: mmccarn on June 01, 2015, 12:04:14 AM

CoovaChilli (http://wiki.contribs.org/CoovaChilli) does what you want; I don't know if it still works...

Hi,
It comes very close to it.  But instead of using a third NIC I am looking more for a software solution. Maybe based on a separate address range?

Regards
Jens

Title: Re: Guest LAN
Post by: Stefano on June 01, 2015, 11:29:00 AM

SME is linux, so you can always find a solution.. in your case you'd use an alias.. but you'll be on your own, since it is not supported..

Title: Re: Guest LAN
Post by: mmccarn on June 01, 2015, 01:39:01 PM

Quote from: jekal on June 01, 2015, 07:48:31 AM

Hi,
It comes very close to it.  ...

OK - my next idea would be to use use a wifi router as your internet gateway *outside* the SME server, with the router's wifi configured for guest users.

Or, use a router instead of an access point for guests, set the WAN IP on the router to a fixed IP on your SME LAN, then create custom settings to deny access from that IP to anything on the SME server, and (if possible) rules on the router to deny access to anything on the WAN subnet except the SME server.

Title: Re: Guest LAN
Post by: TerryF on June 02, 2015, 06:42:56 AM

I use this http://coova.org/CoovaAP on a Linksys WRT54GL, this provides a guest wifi network.  This is simply networked via cable to a Billion modem/router for internet access.

All works fine, local lan etc isolated from guest network.