On 9/12/05, Joao Alexandre <jalexandre1964 at yahoo dot com> wrote:
> I've also more or less the same doubts, as I have a
> place where I would like to portect a LAN and WAN (not
> Internet, just a Cisco router connecting to other
> offices) from a Wireless AP that will have a wireless
> camera (from LAN users connect and see whats
> happening) and some wireless notebooks (that sould
> access the LAN and WAN but in a protected way).
Disable NAT entirely (enable advanced outbound NAT without any NAT
rules to accomplish this), and put the WAN interface on your LAN.
As for anything more specific, depends on what you want to plug into
where, how everything is laid out, etc.