Hi all, I'm planning to setup a hotspot to make our internet connection available to guests. There isn't any security (wep, wpa, mac-filtering, etc.) required for this wireless connection. There is one internet connection available that is being shared by a cisco router / pix-firewall. I would like to use this connection for the clients on my network as well for the wireless clients (guests). For security reasons, it's very important that the wireless clients can't access any resources on the network. About the network The network consists of 3 severs (Windows 2003 standard, Windows 2000 Server standard, Windows 2003 SBS) and approx. 50 clients (Win2000, WinXP, Vista). All network devices are being connected through a HP switch (that supports vlans). My goal As described above, the wireless clients should be able to access the internet. Preferable only on defined ports (i.E. http, https, pop3, smtp, imap). The wlan clients shouldn't have access to our regular network. The solution? What would be the best solution to achieve this? I was thinking about creating three separated network subnets (one for my network, one for the wireless clients, one for the router). I could configure one of the servers with 3 network cards (network, wlan, router) and put them in separated subnets. Using Routing & Remote Access on this server I could make sure that all clients can connect to the subnet in which the cisco router is, but the clients in one subnet can't connect to the clients in the other subnet (proper configuration assumed). In this case the wireless clients could still have access to the resources on the server running Routing & RemoteAccess. Using a dedicated server for this purpose isn't an option. A firewall on the server should do the job. Another solution would be creating 2 vlans on the switch. One containing all ports EXCEPT the accesspoint and another vlan containing only the accesspoint and the router. Please let me know your comments on the described "solutions" above. Thanks in advance!