Solved Split access to internet into two - staff & guests

This request keeps cropping up in the Priory ever since I extended the WiFi coverage to include the two halls as well as the church itself. This was done primarily to provide a WiFi link in the church for video streaming church services via Facebook & YouTube during Covid lockdown (and continued ever since), and in the halls to allow remote control of heating vie Hive. The halls are regularly hired out for community use and it is some of them who are asking for access.
The network comprises of a standard BT Modem/Hub, and two Access Points using Netgear AC1200 WiFi Range Extenders - Model EX6150
to extend coverage to halls. Access is controlled via one password for church coverage and two passwords (different one for each speed).
What I am now being asked to provide is two levels of access - effectively Staff and Guests. The need is not particularly to control data download, but to have some sort of record of who has been accessing the internet via the Priory internet connection in the unlikely event of problems.
Is it possible to do this using hardware we have and if not, what would I need.

We don't usually have a computer connected - only as and when needed, usually to connect for streaming of services. Only Hive heating control is connected 24/7.

I would leave it as is. You will get nothing in return and people will use your bandwidth. But if you wish you could enable guest mode on the BT Hub. Which hub do you have? Look on the label.

If record is what you'd need then might I suggest Mikrotik, you could go with this series or this series, even the less than $100 range works fine.
Then you'd use the hotspot feature and create 2 hotspot users.

If you want to maintain the record, you can have the log saved to a USB flash drive.

Holler when you need more help.

I think I will take Kelper's advice (hope you aren't freezing!) and leave things as they are until I am really pressured and then say it will cost them!

If you have a spare mobile phone or ask for one to be donated, you could turn off or remove its SIM card, connect to the church wifi and then create a wifi hotspot - this can have a name (SSID) and a password of your choice. Then connect a charger, but lock the phone in drawer or cupboard.
There will be no data charges as the phone is using wifi.

I'll bear that in mind - thanks.

@Sigurd​

I am converting to Full Fibre here shortly after Christmas, which requires new hardware so it's I'll likely have a spare Router here surplus to requirements - I also have an EE Broadband one here with an Disk extender which is Also surplus,

As soon as I know for sure I can post one of them out to you (with full setup manuals), as a charitable gift to you.

That's very kind of you - thanks. I'll send address once I figure out where private messages are in this forum!

has this been resolved?

Badrobot - sort off sorted. I'm not been pressured to do this at the moment so I am happy to let sleeping dogs lie. But i have a number of suggestions to follow if I do get pushed.

Sigurd said:

Badrobot - sort off sorted. I'm not been pressured to do this at the moment so I am happy to let sleeping dogs lie. But i have a number of suggestions to follow if I do get pushed.

Click to expand...

I see. I just want to add that modern routers have this feature built into the system. Just a matter of enabling Guest wifi, assigning a name (ex. ""<SSID>-Guest") and password and you are done.

Below is just a sample image. Your router admin browser may look different.

And also, don't forget to mark your thread as "Resolved" if you are satisfied with the replies you got.

But he wants a record of who has been accessing the internet, as he said in post 1, so we have not said how he could achieve that.

kelper said:

But he wants a record of who has been accessing the internet, as he said in post 1, so we have not said how he could achieve that.

Click to expand...

If you have a separate guest network, I don't think it matters who uses it. You don't have to worry about random people messing up with the main/private network and create problems. If you control who can access the main/private network and have a list of people using it, then it is easier to track who could have created any problem.
So basically, what needs to be done is only to control access to the main network to prevent potential problems that can cause by random guest users.

This all started because the vicar was concerned that people would use the church network for nefarious purposes. She certainly did not want access in the church itself but less worried about access in the church halls. My level of paranoia is not that high. I couldn't possibly comment on hers.
Which is why I said "Sort of solved" in my reply to badrobot's query above as far as guest access is concerned.

Incidentally, where is the Solved button. I can't see it on my screen?

Sigurd said:

Incidentally, where is the Solved button. I can't see it on my screen?

Click to expand...

just above post # 1

Thanks Kelper. Marked.