Re: separating LANs?

I cannot provide an ACL. I do not know of a way to stop computers connected
to the same switch from seeing one another unless the client comps are
firewalled individually, as the switch is unable to stop any traffic between
computers on the same switch, but it can stop traffic between managed
switches, much the same way a firewall blocks ports, you stop traffic between
switches on ports 137, 138, and 139.

Chances are the OP doesn't have managed switches so this is all moot, but I
believe he can successfully acheive the end result by using a second
inexpensive router and some creative firewalling rules in the 2 routers.

"Neteng" wrote:

> Can you provide an example of a switch ACL that blocks file sharing and
> printing?
>
>
> "perfimage" <perfimage@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:3FBF1DE9-4B72-414A-BEC7-F8D26BC30F71@xxxxxxxxxxxxxxxx
> > What about adding another router to the mix?
> >
> > Keep the router you have connected but designate it for use by only the
> > resort computers. Add the second router, connecting it's WAN port to one
> of
> > the LAN ports of the first router, and designate it for use by only the
> > "neighbors" computers.
> >
> > Each router should be assigned a different subnet, and computers from each
> > subnet(resort and neighbors) will be prevented from seeing each other
> first
> > by the hardware then the subnets. Your first router will then route
> traffic
> > from the second router to the internet. The second router can get it's IP
> > address via DHCP or you can assign it an IP and create firewall rules on
> the
> > first router to make sure it's traffic is kept completely separate from
> the
> > first.
> >
> > AS far as keeping the neighbors (on teh second subnet) computers from
> seeing
> > one another, that is nearly impossible except at switch level, and only if
> > they are managed switches where you can stop certain communication between
> > them, such as windows printer and file sharing.
> >
> > This will require you to reroute some wiring in wiring closets and such to
> > pyhsically saparate the 2 LANs, but should be doable.
> >
> > Good Luck
> >
> > "gglave@xxxxxxxxxxxxxx" wrote:
> >
> > > Hi Everyone,
> > >
> > > I look after a small LAN on for a small rural resort. They've got a
> > > handful of computers plugged into a Linksys BEFSR41
> > > (http://tinyurl.com/a99bl) router for network & internet connectivity.
> > >
> > > I'm looking for some way to set things up so that if this resort
> > > "shares" its internet connection with a few neighbours they can't "see"
> > > the other computers on the LAN, nor can the neighbours see each other's
> > > computers. The computers at the resort should still be able to see
> > > each other.
> > >
> > > Can anyone recommend a (hopefully inexpensive) piece of hardware to
> > > accomplish this? I know I could probably research some kind of a Linux
> > > box to manage the traffic, but I'd prefer to have some kind of small
> > > dedicated piece of equipment that doesn't risk a hard disk failure,
> > > power supply failure etc. as I'm six hours away and the folks at the
> > > resort are computer illiterate.
> > >
> > > Thanks in advance.
> > >
> > > Cheers,
> > > Geoff Glave
> > > Vancouver, Canada
> > >
> > >
>
>
>
.

Relevant Pages

  • Re: using a switch rather than router
    ... forces you to keep that PC on all the time to service your other PCs when you can get a dedicated router for half the price or less to do the job that uses minuscule power and offloads your CPU and can even handle wireless for you and eliminate the need for another switch? ... Back in the early days of the mass Internet he gave us a way to share our dial up or broadband connection across multiple computers. ... And yes you could put a switch on a broadband modem and have a computer with a single Ethernet port act as a router. ... These are Mac products. ...
    (comp.dcom.modems.cable)
  • Re: sharing a wireless router- need suggestions
    ... computers are pretty locked down. ... I configured the router and I ... provides 5 IPs (DHCP, not static), and just between my stuff I'm ... Modem plugged into switch ...
    (microsoft.public.windowsxp.network_web)
  • Re: Ethernet network wiring ?s
    ... >>> ethernet switch in the basement to interconnect the different active ... and then just plug your other computers into the other ... >>> ports of the switch. ... The router can be in any of the rooms, ...
    (comp.sys.mac.hardware.misc)
  • Re: What is needed to network and share DSL with 2 or more computers?
    ... Do I need a router AND the ... computers together allowing each to access the others hard ... drives and to share the same single DSL connection. ... >What you have is an Ethernet switch, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Newbie... need basics
    ... I need to understand an existing small network that needs ... The expansion is to attach more computers and a printer. ... One way to protect a set of computer, not physical protection, but network protection, would be to install a second router, in series with the first router, and connect the "Sensitive" computer to that router. ...
    (comp.security.misc)