Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In our testing environnment, we use openwrt running wifidog client and gateway, we can not make the access point part of the DMZ nor use VLAN isolation on the productions sites.

Say the access point is and the gateway/dns is, does putting a /30 subnet mask to the wired interface of the AP would provide a secure isolation of the acess point (the AP does packet filtering as well)?

Any recommandations for this setup are welcome.
So by the way if you have deployed an opensource solution for a Hotspots network, what did you choose and why?


share|improve this question

You can look at for wifi management software.

Access points will vary very wildly, you will have to check for theri documents.

share|improve this answer
up vote 0 down vote accepted

I've tested coova but it doesn't suit our needs very well mainly for the Radius accounting part. Thanks for your answer.
We finally opted to wire the AP to the DMZ, but it seems that as long as no one breaks in the AP, the netmask isolation tip is ok. Thanks anyway.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.