I look after the network for a small educational establishment, and we wish to make wireless internet access available for teaching staff but not for students. We do, however, want to allow the students wireless access to our internal network so that they can download lecture notes, etc.
I have two wireless routers (both Netgear routers - a WGR614v9 and a WPN824) set up with different wireless keys: the students have the key for the first router and the teaching staff have the key for the second. Internet access itself comes from a third (non-wireless) Netgear router/modem which is connected to the ADSL line.
I've tried various DHCP configurations: having DHCP enabled only on the second router, only on the first, and enabled on both. In general, all computers (student or teacher) end up using the same router as their DHCP server, regardless of which wireless key/router they're using to connect. Right now they're always getting their details assigned by the teachers' router. When I set up port blocking on the students' router (to block HTTP/HTTPS/POP3/SMTP/IMAP/etc. ports) it doesn't seem to make any difference - the student computers still seem to be able to connect to the internet quite happily via the second router (the one that they have as their 'default gateway' because it's the DHCP server).
Does anybody know how I can set this up so that people who connect to our network via the first router won't have internet access but people who connect to our network via the second router will?