Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Isolating wireless access

Hi Guys,

We install point of sale terminals that authorize credit cards via the internet.

All of our terminals are on a static ip scheme 192.168.100.XXX. We are getting a lot of restuarants that want to provide internet access to guests. Most of these site are pppoe sites getting internet access through SBC. Can I make the 837 router have a separate subnet for the wirelss, say 192.168.200.XXX that has a DHCP pool.

Thanks for any feedback.

Sean

1 REPLY
New Member

Re: Isolating wireless access

You can't create vlans or separate broadcast domains on the 837. The best you would be able to do is a secondary network. The secondary network would allow you to assign addresses from that 192.168.200.0/24 subnet, but it wouldn't prevent someone from statically assigning an address from 192.168.100.0/24.

If you choose to do secondary addressing, I'd use QoS to prioritize the PoS traffic outbound and use WRED to throttle 'public internet access' TCP sessions to reduce the congestion for the PoS traffic.

93
Views
0
Helpful
1
Replies