The wireless network is re-configured and running.
Finally I got the wireless network, IPsec and wi-fi security configured to let authorised laptops be part of the private backbone. No more uploading photos to the NAS server only when docked!
I had to swap out the old wireless router – an old Netgear – it would randomly drop DHCP offer packets from the backbone to the bridged wireless network. Even the online docs from Netgear say it’s problematic.
I upgraded to a new 802.11n router – works perfectly and gives great throughput.
The old Netgear is now the guest, non-backbone access network. Wireless access for guests and family without letting them loose on the backbone.