Wireless ISP

Archived from groups: alt.internet.wireless (More info?)

Hello..
I am contemplating setting up a wireless portal with Earthlink to provide a
full 1.544 Mbs T1 and act as the ISP. It is the intent to give high speed
access to an area
of about a ten mile radius . I've researched this quite extensively but one
can hardly know if they have all the info they need. Earthlink says they
will supply the router.
The first base station (access point) is to be mounted on a 100' tower using
a 1 watt amp and an omni-antenna. Clients will use high gain directional
antenna's. This is primarily a rural area with a spattering of small
communities scattered about. I built a model network with ten computers
within my own residence to get familiar with configurations etc.,etc., as
the intent is very low overhead using Linux boxes as network routers. All
boxes in my house are in the same workgroup which makes all boxes visible to
each other. This is not what I want for my clients.One client shouldn't be
able to see any others on the network but I need to be able to remote
administration if needed. So can I assign each client a different workgroup
to prevent this? Should I suggest clients install there own firewall or
would a firewall at the access point be better? Or would you have any
suggestions on the matter overall. I'm just trying to cover my a-- before
this thing actually goes online.
BTW...didn't mean to write a book here...lol.
Thanks..

Archived from groups: alt.internet.wireless (More info?)

Hi Gary,

One thing to think about is that the major broadband providors have created
the paradigm that each subscriber should not be able to see the other. This
is easily accomplished. However - think about this: Build a neighborhood
LAN, where your customers can share photos of the last little league game,
or thier favorite recipes. A network can be setup that would allow
customers/subscribers to share thier hard drives in a secure manner. If you
decide that you still want to maintain the seperation, then Workgroup
differentiation will not fix your problem. Not routing Netbios ports will.

Matt


"Gary Eden" <geden@tds.net> wrote in message
news:407ada15_1@newspeer2.tds.net...
> Hello..
> I am contemplating setting up a wireless portal with Earthlink to provide
a
> full 1.544 Mbs T1 and act as the ISP. It is the intent to give high speed
> access to an area
> of about a ten mile radius . I've researched this quite extensively but
one
> can hardly know if they have all the info they need. Earthlink says they
> will supply the router.
> The first base station (access point) is to be mounted on a 100' tower
using
> a 1 watt amp and an omni-antenna. Clients will use high gain directional
> antenna's. This is primarily a rural area with a spattering of small
> communities scattered about. I built a model network with ten computers
> within my own residence to get familiar with configurations etc.,etc., as
> the intent is very low overhead using Linux boxes as network routers. All
> boxes in my house are in the same workgroup which makes all boxes visible
to
> each other. This is not what I want for my clients.One client shouldn't be
> able to see any others on the network but I need to be able to remote
> administration if needed. So can I assign each client a different
workgroup
> to prevent this? Should I suggest clients install there own firewall or
> would a firewall at the access point be better? Or would you have any
> suggestions on the matter overall. I'm just trying to cover my a-- before
> this thing actually goes online.
> BTW...didn't mean to write a book here...lol.
> Thanks..
>
>

Archived from groups: alt.internet.wireless (More info?)

> What we did in our WISP was enable the default firewall on all Windows XP
> machines. This prevents them from seeing each other. If they wanted to
> they could put in a router and that allowed them to share internally with
> out getting into huge labour on how to configure stuff. For legacy machines
> we used to suggest some of the "free" firewall software and strongly urge
> them to install it. We also had a machine on the network that if we noticed
> on of the machines showed up we would arp it look up the MAC address and
> contact them on how to "secure" their Machine.
>
> Michael

Take a look at http://www.wispnotes.com