Hello,

I am re-networking my local library. It currently has 4 or 5 computers all on a wired network. I am planning on converting it into a wireless/wired network, with two of the computers wired and the rest wireless ( about 5 or 6). Also, I want people to be able to come in with their laptops and use the wireless Internet (public access point). This means that the library computers that are wireless and the people with their laptops will both be using the same wireless network. I plan on buying a Linksys 4 port router/AP combo, but will there be enough security if the public uses the access point part of the router? (will the wired nodes still be protected well enough)? Is there a better way to implement this network?

Thanks

If possible, I would leave as many of the pc as possible wired.

While wireless is really cool and handy, when you start adding several pc's...it starts getting flaky (or, the chances significantly increase that you will have network problems). I just finished installing a wired network in a 6 PC office (which had been wireless for convenience)
because the connectivity was becoming very unreliable. I left the wireless router attached (now as simply an access point) because they do occasionaly need it for a stray notbook or temporary workstation.

And considering that there will be different users every day...this only compounds the chance of problems occuring.

Add the wireless for walk-ins, but (again, if possible) reserve it for that.

As far as the security....I don't have in-depth knowledge about wireless security. I'm sure you are aware of the WEP options in most wireless routers....and the SSID. BUT, keep in mind, it will need to be pretty wide open for folks to just walk in, plop down, pull out their notebook and start browsing.

If you do add security, users will need assistence from library staff in order to configure their notebooks.

There are options/products out there that could be used to set up temp logins, etc (for secuity sake) but, again, staff support will be required if such things are used.

I agree with kev100, you should keep computers wired when possible. Wired network are more stable, and also much faster. Don't be fooled by thoses 11 and 54Mbps speed announced...

You should use a corporate firewall and access point instead of a linksys router if the security and efficiency are a must.

Each wlan user should be isolated from others for their security. Also, your office`s wired computers should be on a different segment.

Some options are availables:

You could use VLANs in order to group your computers (wired/wireless) in a same virtual broadcast domain.

Or you could install a vpnclient on all wireless computer in order to be allowed on the intranet. Professional equipment have built-in wifisec and ipsec vpn server, authentification system, and can manage multiple SSIDs with different security levels.

Finally, you will need a router with QOS/TOS function for the trafic management and packets priorities, or the first kazaa maniac will use all the bandwitdh!!!

Make sure to have a very detailed network plan before buying anything.