up vote 0 down vote favorite
share [g+] share [fb]

We have a very standard setup with a Windows Server 2003 domain controller issuing IP addresses using DHCP. This works fine.

Internet access is managed via Microsoft ISA Server 2006 Standard. Clients are required to authenticate and this works fine.

We now need to provide wireless internet access to visitors for laptops, iPhones etc.

We've bought a couple of Netgear access points so I was thinking we might be able to issue wireless clients connected to it with an IP address on a different subnet and then allow non-authenticated Internet access via the ISA Server for that IP range.

Does that sound plausible? I'm not even sure if I can issue a different subnet to wireless clients.

link|improve this question
50% accept rate
feedback

1 Answer

up vote 0 down vote

Well I'm not entirely sure how the ISA works in this scenario. So we might need more info about your typology.

We did something similar on my network once, with an ASA and Cisco Wireless Controller sitting in the DMZ, so it sounds plausible atleast :)

But as far as DHCP goes ...

But I think you could set the Netgear access points to a different subnet then create a different DHCP scope on our Server 2003 box. You'd have to make sure you setup routing between the Netgear subnet and your internet edge (presumably your ISA).

Directions to add a DHCP scope found here.

link|improve this answer
How would I configure Windows DHCP to issue IP's from a different subnet? Alternatively, if the wireless clients never needed access to LAN resources could I put the AP in the DMZ on my firewall? – Beanz Jun 3 '11 at 13:25
It depends if we are talking a web or application server, or if you want them to authenticate against AD. IF they needed to access LAN resources they should be inside the LAN. The DMZ is not used for that, there are too many ports required for windows networking you'd turn your DMZ into swiss cheese. – JamesBarnett Jun 3 '11 at 14:25
@Beanz see updated my answer with link to step-by-step directions on how to add a new DHCP Scope of Server 2003. – JamesBarnett Jun 3 '11 at 14:29
thanks for the link. The issue I have is having the new subnet only available to the wireless clients rather than all clients. – Beanz Jun 4 '11 at 14:47
The wireless clients would not need access to LAN resources so the DMZ is a potential option I suppose? – Beanz Jun 4 '11 at 14:49
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.