One more idea worth looking into besides using two different IP subnets is to use MAC filtering to allow some nodes to see each other, and deny nodes not on the list from getting anywhere but out the gateway. MAC stands for Media Access Control, and there is a unique MAC number hard coded into every network adapter out there. If you can make the right filter in the access point, then you can trust certain MAC numbers and let them talk to each other, and not trust others. Depending on how sophisticated your router and access point are, you can get very specific in how you filter things. This filter system works below the level of TCP/IP, and can even deny complete access to your network, even if that node uses the proper WEP key. It's a bit tricky to set up, but can provide an extra layer of security to a network. -------- Original Message -------- Subject: Re: [PCBUILD] Allowing guest access to internet not lan From: Mark Rode <[log in to unmask]> Date: Thu, January 28, 2010 5:16 pm To: [log in to unmask] You will need more then a Workgroup name change to accomplish this. If you were to just change the Workgroup name, you would still see two Workgroups in Network neighborhood. You would have some control over user access by passwords, but the LAN would be visible and hackable. The correct way to isolate the LAN from the WAP is with three routers all using a different private IP number. The primary router could be 192.168.3.x. You would plug your WAN = Internet connection into this router, as well as the other two routers. Those two routers, one for the LAN, and one for the WAP would use two different IP addresses, for example the LAN would be 192.168.1.x, and the WAP 192.168.2.x Now your LAN won't even appear on the WAP, and is completely inaccessible, and vice versa. Mark Rode >If this is a standard Workgroup, it seems to me all you have to do is >make sure their Workgroup name is different from yours. >--------------------------------------------------------------------------------------- >- >Hi All, > What I want to do is set it up to allow a guest to be able >to access the internet without having lan access. >Thanks >Brad Feuerhelm Do you want to signoff PCBUILD or just change to Digest mode - visit our web site: http://freepctech.com/pcbuild.shtml Do you want to signoff PCBUILD or just change to Digest mode - visit our web site: http://freepctech.com/pcbuild.shtml