Wifi – Setting up private and guest WiFi from Windows Server 2008 R2 for non profit (~20 users)

access-pointrepeaterwifiwindows-server-2008-r2wlan

I'm about to set up a wireless network with a Active Directory domain. The problem is that the desktops they have at the office should connect via AD so they get access to shared resources, gp etc. But they also have frequent guests that just need Internet access.

My idea is to connect the server to the Internet via ethernet and then have the clients connect to the server via a wireless access point.

Where do I setup these two WiFi-networks, in the access point? And how do I make the server give Internet connection to those that are not in the domain?

I have no experience with networks of this complexity. All help is appreciated but please keep that in mind.

Regards,
Gabriel

Best Answer

As the guest will bring their own machines then you can provide a second ‘guest’ SSID for WiFi access. I would avoid anything to do with Active Directory and the Domain in this case and solve this with pure networking technology.

This can be done with a single access point like the DrayTek AP-800 we use. It allows us to provide a private SSID that connects to the corporate network for business laptops and a Guest SSID for visitors that is on a different subnet and just uses the same gateway for Internet access so they can collect their mail etc.

Or you can just buy a second access point for the guest WiFi and configure it separately for just Internet access. Depending on your router you could possibly also set QoS limits on the guest port where the access point is connected to make sure the business users get priority.

Edit to answers comments

  • Yes there are wireless routers that have dual separate wireless capability, but you usually get more configuration options with a extra access point (In my personal experience the router is usually in a cupboard or server room and you don't really need wireless there; you want to be able to place the access point in the office / meeting room areas)

  • For wireless devices that offer multiple SSID networks like the DrayTek AP-800 the networks are totally separate, check out their product page for more info on that.

  • To counter dead spots if you buy a second Access Points and set it up in 'Repeater mode' you can extend the coverage of both the separate networks.

Related Topic