Isolating wireless access

[seangentry]

Hi Guys,

We install point of sale terminals that authorize credit cards via the internet.

All of our terminals are on a static ip scheme 192.168.100.XXX. We are getting a lot of restuarants that want to provide internet access to guests. Most of these site are pppoe sites getting internet access through SBC. Can I make the 837 router have a separate subnet for the wirelss, say 192.168.200.XXX that has a DHCP pool.

Thanks for any feedback.

Sean

[twojciac]

You can't create vlans or separate broadcast domains on the 837. The best you would be able to do is a secondary network. The secondary network would allow you to assign addresses from that 192.168.200.0/24 subnet, but it wouldn't prevent someone from statically assigning an address from 192.168.100.0/24.

If you choose to do secondary addressing, I'd use QoS to prioritize the PoS traffic outbound and use WRED to throttle 'public internet access' TCP sessions to reduce the congestion for the PoS traffic.