Wireless LAN in Separate subnet

[binaghimire]

Wireless LAN in separate subnet

Hi all ,

I need help on figuring out how to do this ..

We have a site (lets say X) connected to site (lets say Y)through MPLS WAN ..In Site X, we have 5 pcs , 3 printers and 12 Access Points(Cisco 1231AG) all connected with non-managed netgear switch.I'm asked to separate Wireless APs to separate subnet so that wireless devices (scanning guns) will get different subnet when connected to wirelss and will be restricted to access application only they are required to access . Application they are required to access are based on site Y(telnet and DNS,Radius)

Since WAN (MPLS)between Site X and Y is managed by ISP, I dont want any change in WAN config.

IS it possible to have  wireless LAN  into separate subnet ? What i'm askign now is , can it be done purchasing one Firewall ASA 5505 or do we need Layer-3 cisco switch as well for may be routing purposes.

Currently

LAN devices(PCs,printers,APs)---------->Cheap Netgear Switch------->BT MPLS Router------WAN MPLS Cloud-------------Site Y(where application server is)

(10.76.x.0)

What we want it

LAN(PCs , Printers)-----------------------------

(10.76.x.0)                                         -

                                                         -----------------------Switch ----------->BT MPLS Router--------WAN Cloud----------Site Y

Access Points                                    -

(192.168.2.0)-----------------Firewall ASA-----

Please help me with Scenarios and Config .

Thanks in Advance.

[Nathan Spitzer]

Depending on your CE router why not just hang the wireless off of a seperate ethernet interface cheap netgear POE to power the wireless? Depending on how tight your security requirements are you could use the firewall code built into the router IOS (with upgrade depending on your feature set). That would be quick and no at all kludgy at least for a small site. Alternatively if you have a 2800/2900/3800/3900 CE you can get a 12-port POE switching module,

Nathan Spitzer

Sr. Network Communications Analyst

Lockheed Martin

[binaghimire]

hi nathan ,

thanks for reply.

We dont have access to CE router , whole MPLS infrastructure in provider managed and my management doesnt want to involve MPLS provider on this change . ..Thats why i want to acheive result of seprating wirelss subnet only making change in LAN .

Regards