Isolating part of a network
 

Hello all, just a (hopefully) quick network question (non-linux-specific). I am trying to set up a free wireless network for clients for a small business. I have a wireless router that I plan on hooking up to our main router. I want to keep all the computers that are associated with the wireless router from being able to access the rest of the network hooked up to our main router. I think one solution might be to put the wireless router in a DMZ. I think this should isolate it from the rest of the network (and have a side-effect of sending outside traffic to the wireless router, which shouldn't matter). Will this work? Also, if I just make both routers have the same subnet (e.g. 192.168.1.x), will my wireless router just filter out requests for computers on our main network as requests for (non-existent) computers on its local network? Any other ideas are welcome. Thanks.

Dont use a DMZ, you need to use a different subnet. So if your main is 192.168.1.1 and public router would be 192.168.5.1, main router out cat5 would goto public routers WAN input, so public router would have public IP of 192.168.1.x but all its connections would be on the 5.x network.

I tried that, and I thought it would work, but I can still access 192.168.5.x from inside the "public router". I think I have found a better solution though (dare I say the "right" solution). I've found a router that can separate ports into VLAN's and I think that will work perfectly. Thanks for your help.