I'm a developer and not a sysadmin, so I'm going to ask this question the best I can.
I am working on a web application for mobile devices. Since it is in development, it is only available on our internal network. The WiFi access points at my company are for "guest use" and get a connection that is outside the corporate firewall. Employees that use the WiFi need to use VPN in to access the corporate network.
I have mobile devices with WiFi that I want to connect to my internal network for testing my web application. Not all of them have VPN capability.
Here is my question: How can I set up a WiFi access point and only allow it to route traffic to a white list of the IP addresses of my web servers? Can this be an off the shelf wireless router or does it need to be a server with wifi card?
I don't want to set up a rogue endpoint and compromise corporate security, so I plan on going through my IT department, but I want to go to them informed of the possibilities.