Vigor Help

[DR]

So I need some help

I've a V2800 and an Apple Wireless Extreme Base Station.

I want to make it so that the Wireless whilst hidden isn't on WEP - so my friends and neighbours can jump on it if I want them to. However, I want to run them on a sep IP range to my main network

So my main network runs on 192.168.1.x and I want to run the other on 192.168.2.x so that they can't see each other.

Thing is - How can I do this? I need to have a differnet IP on the interface for one of the network ports on the Draytek - and sep one for the IP on the Apple module.

Obv the Apple can run it's own DHCP - but it would use the Draytek default gateway giving full access to the rest of the lan.

So - advice please gents? I want the Wireless people to have to VPN in to my LAN to get the full access (since I mostly connect via wired)..... Obv the Draytek can act as a VPN Tunnel termination point.

So what setting in the Draytek software do I hit to do this? It must be possible.

Cheers


DR

[DR]

To help explain more

I want 2 networks - Wireless and Wired, both totally seperate with the same gateway to the cloud or even better - the Wired can see all of the Wireless but not the other way round with the Wireless clients having to VPN to the wired network to hit cabled clients

[DR]

[Splash]

LAN>VLAN/Rate Control

Check the port you want to be segregated (ie that your WAP is connected to - youc an leave rate control unless you want to make use of that too)

Then LAN>Bind IP to MAC and set the ip address you want the WAP to have. That port should now be VLANed off from the rest, whilst still being able to allow internet access. Don't use Strict Bind To MAC or only the WAP will get internet access...

[aidanjt]

You'll need to setup a separate static route on the Vigor if you want the AP on a different subnet. e.g. LAN will need two routes to WAN, and WAN will need two routes to LAN. It really depends on how the Vigor is setup, it's easily done on a Linux router box.

[DR]

This Apple AP seems to not want to let me setup the DHCP on a different IP range from 192.168.1.x time to do a reset and try and force it to

[aidanjt]

Ouch, that's just nasty.

[DR]

Can someone explain the exact setup for the routes - so anyone on Wired can access all Wireless and all Wired units, and people on Wireless can just access the 'net...

Of course if I could raise the game and make it so people on certain MAC addresses auto had access to the entire network from Wireless that would rock.....

The Apple unit is having a stupid moment right now - it works perfect as a bridge, but getting it to work as a DHCP server on a different IP range is a total pain in the ass

[DR]

So the Apple unit - IP address of 10.0.1.2

the gateway on the network is 10.0.1.1 but they are not bound to each other via a VLAN - since I don't know how to force the pairing

[DR]

Hmm it's accepted the setup but for some reason my main router (the Draytek) is doing DHCP and giving IP's out to wireless clients...

[Splash]

Have you setup the WAP as a DHCP relay server for the second scope?

[DR]

I've set it up as it's own DHCP server but for some reason the Vigor is overwriting it