On Wed, Aug 7, 2013 at 1:55 AM, lilit-aibolit <[email protected]> wrote: > Hello misc. > I'd like to setup guest Wi-Fi in my LAN to prevent access to local > resources. > I have OpenBSD gateway with em NIC connected to LAN. > LAN based on switches with VLAN support. > Suppose I have created two VLANs and added ports from my network > to vlan1 and wi-fi AP to vlan2. > What should I do on gateway to accept network from both vlans? > Should there be a different subnets in vlan1/2 or it can be the same? > You'll need to configure your switch to forward tagged vlan2 traffic to the port where your em NIC is connected, and create a vlan interface for it. man vlan.
Keep it simple; have them on separate subnets.
