Creating second public wifi network

[Mustangnaz]

Here is our setup:

att DSL using a 2wire modem/wireless router
output of 2wire goes to a 16 port switch
switch feeds all our current computers plus one line to the sanctuary

The network is secure and everything works correctly, but anyone that we give the access code to for the wifi has access to our NAS and public folders.

I want to hook up a Linksys WRT54GL to the sanctuary line. The Linksys needs the wifi to be a separate, open network with internet only access. I would like the wired ports on it to be on the original network but can put a switch in before the Linksys if I have to. I am open to installing dd-wrt or tomato if it will make things easier.

Thanks for any help or direction you can offer.

[Hutchfbcmurphy]

From what I understand your 2 wire is acting as your router. This means that you will have to double route the guest wifi. To make sure this works with out problems make sure that you don't use the same network rage that your current network is using ie. If you use the network 172.16.0.0/16 then use something like the 192.168.1.0/24. On the wording side of things run your Current network into the wrts wan port. Note that this is still not he most secure way of doing things since users on the wifi could still access the "staff" network If they knew the ips. The best way to do this would be to run a router that can do multiple LANs my church setup has a box running pfsense with our wan ip on on interface and our guest and staff on a clan interface this let's me firewall the two networks so that the guest network can only access port 80 on the web server and nothing else on the staff network. Sorry if I went over your head not sure what your network knowledge is like. If I need to I can focus on a specific part and explain it better. Also sorry for any typos I am on an iPod touch and it likes to change things on me. Hope I was of some help.

[dewknight]

that router makes it really easy to do this. Install the ddwrt firmware for the router and you can create one or multiple separate vlans. You can ratelimit them, and even install a pay per use program on one of them. You can use the ddwrt firewall to limit access between the networks.
I use a public and private one. public on 192.168.1.1 and private on 10.0.1.1. The firewall prevents either from accessing the other one. The public one is rate limited and only the basic http / email ports are open

This will probably help: http://www.dd-wrt.com/wiki/index.php...dependent_DHCP

[Hutchfbcmurphy]

The big problem here is the fact that he will have to go from the modem/router to that i am assuming is private wifi for the staff and approved computers. that then means you will have to not use it as a router making its wifi pointless. All in one combos are very annoying since they cause issues like this.