And have a router that has the guest network feature. I'm done. I'm sure folk want to build their own so be sure to hit boards that get into Radius, OpenWRT and such.
Hello everyone,
I am a complete noob with networking stuff and just really got into it a few days ago. My parents own a small company where I am basically the IT - guy. At the moment the network is not structured/subnetted or anything. We currently have wifi that is connected to the whole network. I now need to find a solution so guests can have internet access only, over the wifi network. To accomplish this I played around with freeradius. I only got authentication to work, but nothing else. My problem is now that I am stuck with separating the currently non existing 'guest' network from a planned 'admin'-network. An admin account from the radius server should be allowed access to the whole network (admin –network) whereas the guest account should only be allowed to use the internet. I thought I could somehow use radius to automatically dhcp-assign Ip adresses for 'guest'-accounts so they end up in a guest subnet and ‘admin’ accounts will just use the dhcp-server from ipcop(linux-softfirewall) that the serves and business pcs’ use (yes I know that this is not professional in any way). I have spent countless hours following (the few guides that are available) configuring freeradius only to come to the conclusion that they changed the configuration-syntax between versions. My problem is that I have no idea where to start or if my problem really is related with free-radius or if I somehow have to configure the ipcop-firewall differently. I cannot buy any pre build ready to use network router/firewall and this solution does not have to conform to any security standards, the main purpose of this separation is that guests cannot just copy or delete files with a few clicks form a server and ransomware etc. cannot easily spread. Sorry for this long post but I could not find the solution to my problems online (and I really tried my best the last couple of days) and don’t know where to start.
tldr: want to seperate wifi into two network-sections: admin and guest with radius, currently use ipcop as router/firewall, I am a total noob, please point me into the right direction because I am lost 
Thanks,
peerfunk

Chowhound
Comic Vine
GameFAQs
GameSpot
Giant Bomb
TechRepublic