We have 2 wireless networks set up using vlans on a system of HP Wireless Access points.
The first is intended for staff, and uses WPA2+radius to authenticate to our AD server, and puts the user on vlan 1
The second is intended for guests, uses simple WEP encryption, and puts the user on vlan 2
Currently both wireless networks give full access to our internal network.
What is the best/easiest way to restrict the guest wireless network to outgoing internet access only?
(and what additional information do you need to provide a good answer?)
- Our network is co-located, with servers at our ISP, and internally to our office
- Our outside firewall is located at our ISP location, as all internet traffic flows through there. Cisco routers at both locations
- traffic between the two is sent over a Cisco
- Our wireless APs are all connected to HP or Cisco (vlan capable) switches in our internal network
- outgoing internet traffic flows through our border switches to the Cisco router in the office, to the Cisco router at our ISP, and then out to the world.