How to isolate the corporate network from the guest wi-fi?

Question

WiFi

We have:
- router1 (DIR-140) in the network 192.168.0.0. with the address 192.168.0.10
- computers in the same subnet (via ethernet) through a switch which is through a router)
- another router2 (DD-WRT dir300) connected to the local network via WAN (dynamical DHCP) and issuing ip wafers to clients from the category 192.168. 3.0
Problem:
Clients via wifi with addresses 192.168.3.* see the subnet 192.168.0.*
What is required:
So that clients do not see the subnet 192.168. locale)
Reflections:
This is what the route table looks like on router number 2 (dd-wrt) (see img1.jpg below). How to do everything correctly so that everything works out? Or is the routing option out of place at all?

Answer 1

Competently, this is VLAN and the corresponding switches, or a separate physical network. If not competently - you can try routing or network mask to restrict access, or a separate IP addressing.

Answer 2

How to divide the organization's network into private and guest (netmap under the cut)? not?

Answer 3

VLAN on the switch (or even better, plug DIR-300 directly into DIR-140) on DIR 140, disable incoming with a sender not 192.168.3.x on this port, prohibit incoming with a recipient 192.168.0.x

Answer 4

D-Links:

Answer 5

The correct option is a separate VLAN for the guest network.