How to implement a wifi router in an existing network of an organization?

Question

WiFi

Good afternoon! There is a task, it is necessary to add a wifi router to the existing network of the organization to distribute only the Internet. That is, purely guest, without access to internal network resources. As I understand it, you need to configure the router like any other home router, just use the internal network cable instead of the provider and insert it into the WAN port so that there is a separate subnet on the router. Interested in another point, what to prescribe in ip, mask and gateway? How to block the internal network? Do I need to leave DHCP enabled on the router?

Answer 1

There are two ways:
1. Call a technician.
2. Read and memorize Olifer's book, latest edition. And after it it will be clear what else to read.
Basically, I don't see any other options.

Answer 2

You understand
IP correctly, the mask and gateway should be wisely assigned from the main dhcp, or register any free address with the same mask and gateway from any machine.
The internal network will be blocked by default, because.
leave dhcp routes not configured

Answer 3

As a rule, any router has a guest wi-fi mode without access to the local network. If this is an advanced Mikrotik type router, we just cut access to the local ip range in the firewall and that's it.

Answer 4

If you are in the Russian Federation, then by law you are required to identify all your subscribers. To organize a guest network, the easiest way is to contact the telecom operator, they provide a turnkey service, which will allow you to fulfill the requirements of the law.

Answer 5

what to write in ip, mask and gateway

And you, sorry, who? Admin? Or an outsider? The administrator must know what to prescribe there. And outsiders shouldn't go there.