I have a sprawling network in a factory with various IP cameras, PC's and other devices. The network is completely secure and controlled by static IP's, but now I have been asked to install an access point in the office area for visitors to access the internet.

This would just be plugged into a switch in the locality and I would use the 2920 to dish out DHCP addresses.

What I don't want is people being able to scan or snoop the local network.

As the AP will not be wired direct to a port on the 2920, I wont be able to VLAN that AP from the rest of the network.

Is there a way of getting the 2920 to issue DHCP addresses on a different range away from the normal 192.168.1.xxx? So that any device connection can see my network?