WSUG TechTips: Symbol Wireless Switch

[Bill Horne]

Bill Horne wrote:

> Cordeiro, Charles wrote:
>
>> I think the easiest solution is to have a second SSID for guests. You 
>> can then place wep encryption on this and just tell the guests what 
>> it is. If necessary, change this WEP key every once in a while. Yes, 
>> WEP encryption can be broken, but it takes a bit of work and probably 
>> enough deterrence for your neighbors… plus, it’s just the guest network.
>>
>> You could use MAC filtering as well, but there’s quite a bit more 
>> work involved with that.
>>
>> ------------------------------------------------------------------------
>>
>> *From:* TechTips-owner at windowsboston.com 
>> [mailto:TechTips-owner at windowsboston.com] *On Behalf Of 
>> *frank at lempitsky.com
>> *Sent:* Thursday, July 20, 2006 4:31 PM
>> *To:* Michael Webb; techtips at windowsboston.com
>> *Subject:* Re: WSUG TechTips: Symbol Wireless Switch
>>
>> Do use a VPN at all? Like a Cisco 3000 concentrator. You could create 
>> one VLAN and the only way a user could access your internal network 
>> is with the VPN client and appropriate access. As for guests you 
>> could use MAC filtering and add the guests MAC address to the table. 
>> Or you may want to eliminate wireless for guests all together.
>>
>> Frank
>>
>>     -------------- Original message --------------
>>     From: Michael Webb <mwebb at sdmc.com>
>>
>>>
>>> Message posted from the TechTips listserv at WindowsBoston.com.
>>> A "reply" will reply to the sender and not the listserv.
>>> Reply to the group at TechTips at WindowsBoston.com if desired and
>>
>>     appropriate.
>>
>>> ____________________________________________________________________________ 
>>>
>>
>>
>>>
>>>
>>>
>>> I just purchased a Symbol WS2000 wireless switch, setup IAS
>>
>>     authentication,
>>
>>> works great. I also setup a 2nd vlan for our guests, so right now
>>
>>     I have
>>
>>> two Vlans one that allows access to our internal Network using
>>
>>     the Radius
>>
>>> server, this is working great. 2nd Vlan does not allow access to our
>>> internal network and goes directly to the internet, only place
>>
>>     they can
>>
>>> get to.
>>>
>>> The question is how do I easily allow Guests to get to the 2nd
>>
>>     vlan without
>>
>>> allowing the building next door to access that 2nd vlan anytime
>>
>>     they want.
>>
>>> I don't want to put much security on the 2nd vlan, just some
>>
>>     simple way to
>>
>>> allow them through. Any ideas?
>>> Thanks,
>>> Michael
>>
>>
> Michael,
>
> I suggest you invest in a hotel/motel Access Point: there are a number 
> of vendors, and they all support verification by password. You can 
> leave the "public" wlan unencrypted, and just have the secretary hand 
> out the password to anyone who needs it.
>
> FWIW. YMMV.
>
> Bill Horne
>

Sorry, wrong list.

-- 
E. William Horne
William Warren Consulting
Computer and Network Installation & Service
http://www.billhorne.com/
Voice:	781 784-7287