Rogue Leader :
bill001g :
Rogue Leader :
ahostmadsen :
Rogue Leader :
There are many ways to do this.
If you're sharing a connection there are many routers that offer a "Guest" network setup, that just basically gives them isolated internet access in a different IP scheme. Thats the simplest way.
If you want to give them more than that then you can get 2 routers. Leave your router exactly as is, and connect one of your LAN ports to the WAN port on the second router. The second router (and you may have to configure it disconnected from the first) should be set up to use a different DHCP (so for example if your first router assigns addresses in the 192.168.1.xxx range, set the second one up to do 192.168.2.xxx). This will provide them with their own network and because of the different IP range they cannot access yours.
Do I understand it correctly as follows. My primary router is an Apple Time Capsule. I connect an ethernet cable to a LAN port. My secondary router is a DLINK AC1000. I connect the cable to the the "internet port" (it doesn't have a WAN port, but I assume internet port means WAN port). Then I need to reconfigure the DLINK router to different IP addresses.
Correct the "Internet" port is the WAN port, and then you configure the DHCP on the DLINK AC1000 to use the different range I specified.
This will not work to isolate the networks. Actually have different IP addresses makes it so they CAN get to the main network although making them same ip range is not a allowed configuration. The second router thinks the first routers network is the internet and allows it. The traffic from the main network can not access the secondary because of the NAT but that is the reverse of the requirement.
You need the additional feature of a firewall to filter the traffic and prevent this access.
Thats not true, I have done this before, the different network range of the second router is prevented from accessing the first.
Even Linksys says this is how to do it:
http://www.linksys.com/us/support-article?articleNum=132275
The link you have in no way talks about security.
You are absolutely wrong no matter what you think you have done in the past.
How does the secondary router know that the network connected to the WAN port is some strange main network in your house and not the internet. Please explain how the router knows this to be true and does not allow traffic to pass to that network. I can guarantee the router does not have that magic function.