Guest network on corporate LAN - options for security

[Adam Vande More]

On Wed, Feb 6, 2013 at 1:29 PM, Kurt Buff <kurt.buff at gmail.com> wrote:

> All,
>
> If this isn't the right list for this, please let me know.
>
> Quite some time ago, I set up an unsecured guest VLAN in our network,
> providing wireless access to all of the sundry devices that staff and
> visitors carry. I set up a small FreeBSD machine to serve IP addresses
> via DHCP, and that was dead simple.
>
> However, there are now other tenants in our building, and the subnet
> is getting too much bandwidth and address consumption - the range I
> set up is completely filled, and the VLAN is consuming about half of
> our Internet pipe, which is far too much for my comfort.
>
> I suspect the other tenants are leeching.
>
> Does anyone have ideas on how I can leverage that FreeBSD box to control
> this?
>

If it were me, I would consider replacing the FreeBSD Box with PfSense.  It
has a lot of managment features built in so if you're looking to get those
without a big time sink otherwise, something like that is the way to go.

-- 
Adam Vande More