×

Switch Account

WPA & WEP on a Westell D90-327W15-06

WPA & WEP on a Westell D90-327W15-06

Reply
Contributor
Contributor
Posts: 1
Registered: ‎06-24-2010
Message 1 of 3
(5,882 Views)

I have a Westell D90-327W15-06 DSL Router that is currently running WPA for my wireless network w/ a shared secret, which offers me an acceptable level of wireless security.

 

However my son's Nintendo DS does not support WPA, it only supports WEP.

 

Currently I have the following configuraiton:

  • IP Segment 192.168.1.0/24
  • Wireless Encryption: WPA

I would like to

  • Create a 2nd segment, 192.168.100.0/24
  • Only allow this segment to route to the internet, and NOT route to 192.168.1.0/24
  • Put this segment on eth0/4 of the Westell
  • Plug in another wireless router into eth0/4 of the Westell that runs WEP

I believe the above would allow my son to connect his Nintendo DS to the Internet on 192.168.100.0/24 network without compromising the 192.168.1.0/24.

 

In short I need to run both WEP & WPA on the router on seperate network segments that cannot route to each other.

 

I would appreciate any recommendations/suggestions.

2 REPLIES 2
Highlighted
Nickel Contributor
Nickel Contributor
Posts: 30
Registered: ‎06-16-2010
Message 2 of 3
(5,850 Views)

Two possibilities come to mind ...

 

1.  Using your proposed approach, make sure that the router that you plan to get has outbound address filtering.  This can not simply be "port" filtering.   A quick spin thru Linksys, Belkin, and Netgear sites for a couple of routers all showed only "port" filtering, so I'm not certain what make/model to suggest -- perhaps someone here can suggest one.   With "address" filtering, simply block as a destination all addresses on your 192.168.1.x segment except for the router.  I'm not you'll find a cheap solution here since most residential routers are all based on pretty much the same underlying software.

 

2. Perhaps simpler, reverse your idea.   Make the router closest to the Internet the WEP network and put the DS and any "guests" on it.  Make the new router the WPA router. 

 

Now, you can reach the network where the DS is located from your "private" network behind the new router, but the DS can't reach back into your network.  Since the Westell is a "switch", the DS or anyone who gets on that network wouldn't be able to see your traffic.

 

A third idea just came to mind ... get a new router which supports a "guest" network concept (my Belkin Wireless N router does this).  Put both your networks behind this router -- yours on the primary network running WPA, and the DS on the guest network running WEP.

 

 

Highlighted
Platinum Contributor III Platinum Contributor III
Platinum Contributor III
Posts: 5,814
Registered: ‎09-24-2008
Message 3 of 3
(5,810 Views)

Perhaps this might help

 

http://www.grc.com/nat/nat.htm

If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.


 

How-To Videos
 
The following videos were produced by users like you!
   
Videos are subject to the Verizon Fios Community Terms of Service and User Guidelines and contains content that is not created by Verizon.
Covid19


Browse Categories
Categories:
Posts

Verizon Troubleshooters
Unable to find your answer here? Try searching Verizon Troubleshooters for more options.