Pilot fish is the volunteer on-call IT department for a church where it's been decided that the congregation should be able to use the church's Wi-Fi.

"Easy enough," says fish. "The existing access points support a guest network.

"Another IT volunteer sets up the existing APs in bridge mode, adding SSIDs with the new guest network name. That works OK until a bored youth tries hacking into the server — and succeeds!"

Fish is called in and determines that for the guest network to work securely, the APs must be in Access Point mode, not bridge mode. Problem is, the network isn't set up to work that way.

The simplest solution is to buy a second set of access points, configure them in Access Point mode, connect them to the existing APs, and set their network services filter to block all the church's network devices and only access the internet.

To read this article in full, please click here