As I said before, I have tried using an old unused router, (Netgear DG834G), as a second "guest" access point with its' own ssid, but I don't know how or if it's possible to set it up so a user cannot see the rest of the LAN that it is connected to. Just internet access.

In reply to a post by audiodud:

.... but I don't know how or if it's possible to set it up so a user cannot see the rest of the LAN that it is connected to...

Would you ever need that level of isolation? I thought that the idea here was to keep the laptops secure wireless wise and use the second WAP as a less secure access point for the PPC only.

Thinking about this, have you checked for firmware upgrades for the PPC's wireless card? There's a slim possibility that an upgrade would allow WPAx encrytion thereby eliminating the need for extra hardware.

Just to clarify, I have holiday apartment which I rent out and it is very close to my house. On occasion a guest has asked if we had any internet access in the apartment and just recently for the first time, I did give out the ssid & WPA password for my home wireless network which I know is in range of the apartment and usable.

At the time I was more worried about them taking liberties with my connection in terms of downloads, but then subsequently I realised I should turn off all the shares between my machines on the LAN and another wireless laptop at home because of course the guest user in the apartment would be able see all these machines and any files in the shared folders.

So that is the reason it would be useful to have a second wireless "guest" access point with its' own ssid that could only access the internet and would be blind to the rest of my LAN and other wireless devices.

Ah right........... Then encryption levels don't present a problem where you and your guests are concerned but LAN isolation does. For that, the Draytek is the way to go although they are expensive. I have a couple of now discontinued 2700v's that will do the job admirably. This particular model wouldn't suit your needs as it has no integral WAP but you may be able to grab something of that vintage at a reasonable cost.
What OS's are in use? It may be simpler to just lock down each machine tightly, particularly if you don't need LAN access between your machines.

On my LAN I have a Windows 7 and an XP desktop, a network drive, printer and a Vodafone Sure Signal. Wirelessly there are potentially two Windows 7 laptops, and a Wii, (usually used for iPlayer on the television).

Most of the time I could live without file sharing between all the machines and just activate it as and when, apart from the network drive which is accessed frequently.

So I think the Draytec solution is the simplest, albeit expensive option.