Setting up a Guest Access Point in UTM

Question

I am running a setup with a bridged FioS modem giving me a single public IP, ESX host with internal/external vSwitches, and the Sophos UTM. I am currently running a wifi router through the UTM with all of my rules in place and it is working great. I would like to run an additional router as a guest network which is pretty much wide open. The main reason for this is easy usage for the girlfriend while I dork out and for guests who want to connect. My host has an open nic available to connect the additional router. Would I just add an additional outside nic to my UTM interfaces or would I need to run a separate UTM as a dmz in this case? Any help is greatly appreciated.

This thread was automatically locked due to age.

Jas Man · Accepted Answer

I've a physical UTM with only one LAN interface, and I've also a seperated guest WiFi. I'm using a VLAN to seperate it from my normal network. Therefore the guest WiFi router must support 802.1q, VLAN tagging. OpenWRT and DDWRT does this.

chipwade · Answer

This is the path I ended up going down. My ISP(Frontier FiOS) was able to switch my connection to ethernet directly from the junction box and skip their provided modem/router altogether. I was then able to run that connection to my HP managed switch and separate the traffic. Giving me the guest wifi without my UTM rules and filtering interfering and my public IP for the UTM through the VM host. I had to install DDWRT on my netgear router as well.