Public wifi using HG533 wifi router

I want to setup a public wifi in my workshop so customers (and me) can get wifi internet but not be able to see any other devices on my internal network. I have a Hauwei HG533 (for example) connected by an ethernet cable (which supplies the internet from a main box) broadcasting a wifi signal for my customers. The trouble is, if I (a customer) connects to the router wifi, it can see other devices on the internal network and network shares (bad idea). So, I want to enable Wifi, but not expose my internal network devices and I am confused how to do this. I am a novice when it comes to networking stuff. How can I setup my HG533 (for example) to be a wifi hotspot without exposing my internal network stuff ?
 
Solution


Guest WIFI only works if it is the PRIMARY router. If it is a router acting as a WIFI access point (which is what is described), guest WIFI won't fully isolate.

A business class router (as the primary router) that provides two independent LAN outputs is...

BadAsAl

Distinguished
What you want is Guest access. Most modern routers have this functionality but I do not see this ability in the manual for the router you have. It creates another wireless network with a different name that customers can connect to and use the internet, but they don't get to see any other devices on the network.

The easiest way for you to do the same thing is get a second router. It can be a cheap one as all you are doing is using it to broadcast another wireless signal. What you do is setup the second router with any network name you wish and the customers connect to that. You can use a simple password or none at all if you aren't worried about people using it who are not your customers.

Follow the directions provided with the new router to access it's configuration page, but basically you connect to the new router with a computer using a LAN cable, setup the wireless network and password (if desired) and then you physically connect the new router to the main router. The key is you must connect an Ethernet cable from one of the LAN ports on your current router to the WAN (sometimes called Internet) port on the new router. Then you can connect to the new wireless network and get internet but you will not be able to see any other devices.
 

BadAsAl

Distinguished
Forgot to add that you need to change the LAN IP address of the new router if it is the same as the current one. Here is a good article on exactly what you want to do: http://www.linksys.com/ca/support-article?articleNum=132275
Scroll down to the section called "Cascading the Linksys router to another router (LAN-WAN)". Follow this step by step.

This is for Linksys but the principles are the same for all routers.
 

Yes, thats pretty much what i have done already, one router (in the main office) connected to 2nd router (in my workshop broadcasting wifi), but if I join the second router using wifi, clicking on "Network" in Windows Explorer exposes the other connected devices. I will have a read of the link you sent when im in the workshop tomorrow. thanks
 
Connecting a second router won't help as it's still on your local network, meaning that any clients that connect to it are also on your local network.

The easiest way to solve your problem is to buy a new router with a guest network capability to replace your HG533. There are plenty of inexpensive routers that can do this, including my TP-Link TD-W9980. It also allows you to control the upload and download speeds for the guest network, so your connection doesn't get swamped.
 

kanewolf

Titan
Moderator


Guest WIFI only works if it is the PRIMARY router. If it is a router acting as a WIFI access point (which is what is described), guest WIFI won't fully isolate.

A business class router (as the primary router) that provides two independent LAN outputs is the proper implementation. That way the cable to the WIFI access point is on a separate network all the way back to the primary router. Anything on the other router ports is isolated. You should be able to use a router that supports VLANs and a WIFI access point that provides multiple SSIDs for simultaneous guest and private access.
 
Solution