Quote:
Originally Posted by Uncle Peter
As suggested above. Here it is in pretty pictures and some quick notes (I've populated the diagram with some IP addresses for illustrative purposes):
Reserve an address on your office LAN for the WAN interface on your cafe router
Plug the WAN interface of your cafe router into the office LAN (CAT5)
Configure your cafe router LAN with a different subnet or network block to your office LAN
Use the firewall rules on your cafe router to lock access down as you see fit (ie no SMB, NETBIOS or the usual suspects).
[img]Download Failed (1)[/img]
|
that will/would work OC and is fine for fully private (wireless)LANs , but without that 3rd router as per Graham's diagram, anyone on the open cafe LAN can just use a netmask of 255.255.0.0 and see all the data on the office wire without to much trouble.
wireshark and several others would even let you pull the packets and reassemble them to see the full data be it http pages or binary.