My wife has a small business that she wants to offer a free WiFi hotspot in. She suggested opening up our private 'net connection to the customers - T&Cs of our internet provider and thoughts of random people viewing kiddy porn floated through my mind.
So, first action will be to get a separate internet connection. But I have no experience of setting up a public WiFi connection. What considerations should I make with regards to:
- WAP
- Security
- Access logging?
I wouldn't worry too much about allowing use of your Internet connection. I would recommend segregating your internal network and creating a DMZ, which is where the hotspot would live.
Another thing to consider is if your Internet connection is shared between the hotspot and your production processes (such as Point of Sale) rely on it, you might risk affecting them if someone to saturate the link. Implementing a Quality of Service (QoS) protocol could help eliminate the risk here.
If my two earlier points are outside of your technical ability, it might make more sense to dedicate an Internet connection as opposed to risking exposure of your point of sale system.
Another item of note is that commercial or shared use of your Internet connection is likely against the Terms of Service of most DSL and cable connections. This is something to be aware of in regards to how you utilize your existing Internet connection.
In regards to implementation, if I were to do it, I would probably leave it open. I see no issue with making it public and free. If you are looking to capitalize on it, you will probably have some usage management.
The quickest and easily solution would be to use a router running DD-WRT, which is something I've had incredible successful with. It also comes with some hotspot solutions, which would address some of your questions automatically as well as make implemention of QoS simpler.
All in all, you'd benefit from a Google search. There is already loads of information available on this topic.
Chillispot on DD-WRT
There are dedicated products out there for just this thing. Otherwise you could just pick up a cheap router load it with something like dd-wrt and use OpenDNS for site logging and blocking. You could even turn on QoS on the router and use the same line as you are for business. Unless you are expecting quite a few people getting on then I would say get a second line.