I'm looking to assist a (very) small college overseas. They would like to offer wireless access in two flavors: Guest access to do basic surfing and email access directly to the Web, and then Student access that might be able to connect to some rudimentary systems in the campus library.

There is no full-time IT person on staff, and therefore nobody to provide support -- especially to campus visitors. It would be acceptable to just create one login for each type of access, to simplify administration, yet change passwords regularly to keep "access now" from becoming "access forever."

If something like SSL VPN would be the easiest answer, I may be able to cobble a machine together for that. I have experience using such systems, yet none in setting them up. What would seem to be the best approach for absolutely minimal money, yet nearly no administration or support?