How can I provide for local networks segregation with WiFi router set up to use 2nd static IP ?

We have the DPC3939B with a comcast business account. Our local business LAN is using the DPC3939B for DHCP and for routing for our local business LAN. We'd like to attach a WiFi router and have a totally segregated WiFi access for customers, visitors and any other not fully trusted devices. This is just so there is no possibility of a customer accessing our business computers on the local business LAN. The Xfinity WiFI isn't what we had in mind for that as we'd like a simple connection with no limits for our approved customers.

I'm not clear about one point. If I put the Comcast 2nd usable Static IP into the WAN IP setting for the WiFi router we'd add and plug it into one of the ethernet ports on the back of the DPC3939B, will this separate the local business LAN from that WiFi router's users? If this isn't going to work for what I'm wanting, what method would you suggest to accomplish this network separation? Any explanation and/or keywords that I could google to understand what I'd have to do would be most helpful.

Thank you.

Responses

CC_John

Retired Employee

•

1.9K Messages

10 years ago

HI speedy_1. With the addition of a separate wireless hardware device and static IP addressing, the LAN network of your router/gateway will be on a diferent subnet and separate from the wireless LAN network.

0

speedy_1

Visitor

•

2 Messages

10 years ago

Thank you for the info. I was thinking that might be the case but wasn't sure. I tried it and so far it didn't do what I was hoping.

I entered the 2nd "usable" comcast static IP address in the WAN ip for the separate wireless hardware device. I put as the gateway for that separate wireless hardware device the other static IP which is what the install tech had written down as the gateway for using the 2nd IP. (That being the external static IP for the router/gateway I guess)

The LAN network of our router/gateway is on a different subnet (10.1.10.x) but from the 192.168.1.x lan wireless lan I added I can ping the 10.1.10.x lan and see those machines. Tracert from a 192.168.1.x machine says it goes:

>tracert 10.1.10.42

tracing route to 10.1.10.42 over a maximum of 30 hops

1 1 ms <1 ms <1 ms addedLAN [192.168.2.1]
2 3 ms 11 ms * xx-xxx-xxx-118-static.hfc.comcastbusiness.net [xx.xxx.xxx.118]
3 23 ms 8 ms 18 ms 10.1.10.42

trace complete.

0