Selective Internet connection for LAN

I have a computer running SBS. Its serving primarily as an exchange
server/file server for a manufacturing company.

Previously the company network connected everything through a router
that acted as a DHCP/DNS server. When we made the switch to SBS2003 we
decided to use SBS as the only computer connected to that firewall
router and have SBS serve as the gateway to the internet.

There are two primary groups of computers connected to this network.
An office group and a factory floor group. In general, the office
group can have internet access while the factory is not allowed
internet.

Previously, the router was set up to assign addresses into two blocks
allowing the office to connect and the factory to not. This worked,
but that option is not available using SBS as the internet gateway.

My question is, does anybody have an idea on how to stop internet
access for some people and allow it for others? I would like to
allow/deny based on user name. I do not have ISA.

The only option I can think of would be to Dissable NAT across the
LAN-WAN connections and somehow enable VPN access so that anybody who
is allowed internet access can log into the VPN to connect.

Currently the VPN is serving remote clients and allowing users to
connect from the internet to the LAN. I have not had issues setting
that up, but would I be able to setup a 2nd VPN on the same computer to
connect LAN to WAN too?

.

Relevant Pages

  • Re: Urgent! New router and big disaster
    ... I checked the router, I am running a laptop off of it so I can post. ... Les Connor [SBS Community Member - SBS MVP] ... make sure the DHCP Client Service is running on the server. ... First Page of the Internet Connection Wizard, ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 IIS BASED SERVICES FAIL INTERMITTENTLY
    ... If I read your post correctly, you have a switch where the SBS ... Run DHCP server on your SBS, and set all client machine nics to dynamic. ... Once you have your nics configured, run the Connect to the Internet wizard, ... QUESTION1 - what is REFUSING CONNECTIONS? ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... First Page of the Internet Connection Wizard, ... Next I Select a local router device with an ip address. ... You should give your SBS a fixed external address so you can forward ports ...
    (microsoft.public.windows.server.sbs)
  • Re: Best way to connect via wireless in new SBS install?
    ... (192.168.16.x - your SBS DHCP scope). ... will get internet access through the SBS. ... wireless-capable router for that purpose. ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent! New router and big disaster
    ... Merv Porter [SBS MVP] ... dish that I have currently plugged into the router. ... IP it means that your problem is now DNS. ... I should have been more clear about internet connection.. ...
    (microsoft.public.windows.server.sbs)