YqE41k24
Premium
join:2004-05-02
Tarrytown, NY
| reply to cleckjr
Re: Restaurant wifi sharing internet with wired POS equip
That setup isn't a secure network. The second setup (with [wired router] and [unsecure wireless router] sharing the same switch) does not have two independent networks. The [wired router] network is basically a client to the [unsecure wireless router] network, and a peer of the restaurant guests.
I would not worry about credit card data being seen over the network. It should be secured at each end via encryption. And the switch will not broadcast network traffic over both the wired network and wireless. Packets destined for the wireless router won't be seen by the wired router, for example.
However, people could jam the system. They could: play with MAC addresses (e.g. making their wireless network adapter have the same hardware MAC as the wired router, for instance); manually assign IP addresses to their machines which could conflict with your wired router; hog all of your DSL bandwidth; or hack your modem.
Your modem is probably also acting as a firewall and logged into your DSL provider. That means that the point of sale equipment would be behind two firewalls ([wired router] and [dsl modem]). This double-NAT can introduce problems.
Anav has the right advice. Use a device such as the ZyWall 2 Plus which is made for situations like this. Or really get two independent networks by setting up a separate DSL account. |
