VLAN is mainly about implementing multiple networks on a single switch or trunking multiple networks through a single cable such as between buildings (switches) while keeping the traffic segregated (at layer 2 and 3).

That requires VLAN capable switches though so it depends what you have.

A firewall/router would still need to route between these networks where traffic flows only in the directions you wanted to allow so you could manage stuff (e.g. APs) in the public network with guests able to see out the internet but not seeing back in to your private network.

I don't know if your Tomato-ed box is doing that or if your double NAT setup is effectively doing it.

Initially it sounded like you were running off a single DHCP server with your only security from guests on wireless or in suites being the Windows usernames / passwords, but if there are firewall(s) between public and private parts of the network you are ok.

Text
1 23 45 67 89	Internet     ^    | (Router inc) __ Public in restaurant / suites( Firewall )    Guests     ^    | Private (Office, anything related to running the business,         stuff the public must not reach)

Edited by prlzx (Wed 07-Mar-12 11:01:30)

Hi there, thanks for your response.

I hope to move to a TT reseller within the next few weeks which should see my line speed increase by a few Mbps, possibly up to 11-12Mbps based on my attenuation.

I can't get fibre, simply because my line is too far away from the cabinet.

At the moment, my router is set for all traffic to be 'Low' priority, which basically means:

http://img842.imageshack.us/img842/7994/bydefault201...


For IP phones & devices which need priority, I've got their individual static IP addresses set to Medium-High priority. The security of the network is fine at the moment - all router pages are password protected & all computers haven't got sharing options enabled.

Double NAT - all depends on you set up the wireless access point (routers).

Some routers do not play well with XBox full stop, and UPnP is the usual solution, sometimes the cause of the problem.

if load on external link is an issue, then a load balancing router,and a second connection, or place the VoIP on their own dedicated network and internet connection.