Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been asked to setup a public Wi-Fi point in a cafe. I've recommended they get two separate internet connections to ensure the two networks are separate however they haven't the budget for this setup.

I need a Public & Private WiFi networks on the same internet connection that can't talk to each other.

They have a Dreytec Vigour 2820n that supports VLAN's and multiple SSID's. Can I achieve what I want with this?

I have two access points to use as repeaters as the site is large.

Any help received gratefully!

share|improve this question
What 2 networks are you talking about? Their private network and the public one they want to offer? – squillman Mar 6 '12 at 21:33
Yes, sorry should have made that clearer – 0xFFFFFF Mar 6 '12 at 21:36

Well, according to the documentation, yes. Your device will do what you want, however setting up repeaters and such is always a pain (check your MAC addresses!). Basically, you just establish two SSID's (ClientPrivate and ClientPublic) then set additional security like client isolation on the public network. Also, make your private network password something really rediculous so that no one sitting at the cafe has enough time to get lucky.

share|improve this answer
+1 - I know from experience of these models you can have 4 seperate SSID's, and you can enable isolation on any of these 4 as you wish - if you enable isolation a device will only be able to access internet/router but nothing else on the LAN. The 2830 is more interesting as you can have two totally seperate LAN's, but unfortunately I don't know them well. However, the real question is whether your repeaters will repeat multiple SSID's.... – Robin Gill Mar 6 '12 at 22:18
For his setup, if I'm seeing it the way he is, it might be in his benefit to only try to repeat the public network, leaving the private one at standard range. – JohnThePro Mar 6 '12 at 22:25
JohnThePro read my mind. I only intend repeating the Public WiFi point, as the Private only needs a relitavly small working area. – 0xFFFFFF Mar 6 '12 at 23:37
Then hit the checkmark. ;) – JohnThePro Mar 6 '12 at 23:38

Short answer (since there isn't a lot of information), yes. With VLANs and multiple SSIDs you should be able to shield different networks from eachother. So you can create a guest/customer wlan and and employee wlan.

Normally with a VLAN you should not be able to reach the other subnet, but it may be a good idea to explicitly block connections from the guest wlan to anything but the internet.

Of course configure the employee wlan to use wpa2 pre-shared key or what have you, maybe hide the SSID (though, since that is security through obscurity it's not that effective).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.