• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Complicated Networking Advice.. Needed

O

Oblivion|MC

n00b
Joined
Jul 4, 2001
Messages
45
Im going to be networking an office...

This is really going to be two networks.

The cable internet will be coming in, and then I need to split it into two diffrent hubs.

From these 2 diffrent hubs, I will connect the computers.
They will be on two diffrent workgroups.

Each hub will be connecting about 16 computers....

What equipment do you recommend?

Also have a question on disabling internet access from specific computers on the network.

The computers need to be networked, but internet access should be disabled, any advice?

Thanks
 
For the computers that don't need access to the internet, you can either set up a filter on your firewall to block internet access for those comps or don't assign a gateway address to them.

For hubs and such, D-Link makes good high-performance switches. A 24-port D-Link 1024+ will set you back around $160 on zipzoomfly.com.
 
Why the need for two networks? Should these networks be seperate so one does not have access to the other?

As for filtering internet access, the easiet method using consumer routers would be to use MAC address filtering.
 
A rather expensive - but elegant solution:

Get a 48-port switch. Set VLAN1 to the first workgroup - the one with internet access. Set VLAN2 to the second workgroup. Plug the cable modem into the first VLAN as well, and that should be the basics.
 
i was about to say mac adressing. Just limit the users from the admin account and disable ability too access the internet as well. OK i'll admit i know nothing but the basics, but unless you are plannign anything more complicated than some on internet and some off, with 2 networks, it seems pretty basic.
 
yeah, do the VLAN option...you can prolly pick up a used Catalyst 2900 (or is it the 2600?) online for cheap and set it via that.

cheers,

dave
 
if the people on the second switch don't need internet access don't uplink the two switches. i guess we need more details. who and why would be starters.
 
or ... possibly the cheaper option ... lock down all the workstations and uninstall the web browser from the pcs you dont want to be able to access the internet! ;) this has other merits in that the users shouldnt be able to mess anything up!

i guess for the amount of users your going to have you are going to employ some fileserver? you could always implement a proxy on this and permit/deny access via that method. then at least if people move machines then their access goes with them!

LOADS of ways of doing what you want!
 
atomiser said:
or ... possibly the cheaper option ... lock down all the workstations and uninstall the web browser from the pcs you dont want to be able to access the internet! ;) this has other merits in that the users shouldnt be able to mess anything up!

i guess for the amount of users your going to have you are going to employ some fileserver? you could always implement a proxy on this and permit/deny access via that method. then at least if people move machines then their access goes with them!

LOADS of ways of doing what you want!
Click to expand...

not possible with windows. try uninstalling IE. then open windows explorer and try in a web address.
 
I would just use IPSEC to block ports used for web access. Quick and easy. The only way to get to a web site is to access one not using a standard port.
 
oakfan52 said:
not possible with windows. try uninstalling IE. then open windows explorer and try in a web address.
Click to expand...

yeah good point, i had forgotten about that. also forgot how sneaky some 'lusers' can be!
 
1. What is your budget.
2. How experienced is your IT support? (IE can you config cisco stuff, or should we stick with SOHO style web interface configed equipment?)
 
Thanks for all the input so far guys, greatly appreciated.

To go into more details.

There are two diffrent buisness in one small office space (about 5-6 rooms), both use diffrent servers for software and such.

Only reason I would want to connect them together is to share the internet connection.

So..

INTERNET goes into the office -> needs to be split into two hubs, in two diff locations. (opposite ends actually)

8 computers on buisness A - 3 pcs online
7 computers on buisness B - 5 pcs online

All need to be networked.

Buisness A will have networked drives for buisness A to see.. and same with buisness B.

As for budget, id like to keep it under about 500-600 for equipment. IT staff is non existent really..

to disable pcs from the net, maybe have like a control panel? and routers/hub with this feature? 3rd party firmware?


Best, and most affordable (as long as their good) suggestions are welcome!
 
I've done something similar to this using m0n0wall . Basically, I set up the m0n0wall with 3 interfaces, lan/wan/dmz and put one network in the lan interface and one in the dmz. That way, you can create firewall rules to pass or deny whatever traffic you want, including to/from each pc. Both between lan's and also to/from the internet.

M0n0wall is free too. You can load it on a older pc. I personally have been using the 4801 from soekris.com . That way, no worrying about a old pc crashing.
 
You must log in or register to reply here.
Back
Top